Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: B9sqbxNfxFE0mQRPCXqIf/uQdW5pdQOgUCaujxz2bBk=
Subject key identifier: 35:8B:E9:E9:AF:A1:ED:95:C2:B2:90:D2:9E:01:6C:12:F5:6D:F0:28
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 019648C54984AA567A9BBAB048B933339222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0BFE
Signing time: Fri 18 Apr 2025 12:00:11 +0000
Manifest this update: Fri 18 Apr 2025 12:00:11 +0000
Manifest next update: Sat 19 Apr 2025 12:00:11 +0000
Files and hashes: 1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: VCrLmZAJL4SNTIp9rvXmdmwWv9VsEbbBVW7ztIuoMlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:49:84:aa:56:7a:9b:ba:b0:48:b9:33:33:92:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Apr 18 12:00:11 2025 GMT
Not After : Apr 19 12:00:11 2025 GMT
Subject: CN=358be9e9afa1ed95c2b290d29e016c12f56df028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:32:ae:27:50:5c:bf:43:8b:cb:74:d9:eb:
ec:30:a6:48:05:c2:74:00:21:8d:39:79:73:d0:03:
1c:41:8d:d6:20:96:87:17:6a:3e:de:bc:35:93:56:
48:76:60:e4:26:b9:f6:9e:3d:86:95:37:09:20:31:
36:f9:d8:99:7f:6f:48:3e:a0:e7:1a:c0:8b:e3:44:
b6:46:de:ad:d3:48:fe:d7:4f:09:87:cb:9d:f9:24:
ba:82:71:2d:1d:a7:87:c8:27:aa:5d:84:34:7d:92:
77:6e:eb:63:4a:73:77:9a:c4:5d:2a:fd:d3:9c:4e:
78:ee:be:95:b0:28:93:78:89:ee:41:e2:87:43:2c:
ed:83:f2:0c:4e:43:8e:71:7f:9d:4d:f9:8e:16:27:
e4:9c:12:cd:6a:c4:3a:11:a1:d9:1a:f2:1d:7a:85:
78:2d:15:09:94:df:e6:e3:c6:12:bc:00:b9:0a:9a:
0b:25:0e:7a:8c:9a:e6:82:68:5f:73:0a:62:3d:fd:
1e:c4:a0:be:06:1d:63:d7:53:d7:95:c0:98:fe:fc:
16:a1:50:1a:c8:23:4c:c5:36:17:c0:79:8a:4e:84:
c3:e3:a1:a0:61:9d:35:91:db:f1:bd:9b:59:0f:65:
54:bf:29:07:cb:be:bd:6c:99:d8:44:8a:18:ae:6f:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8B:E9:E9:AF:A1:ED:95:C2:B2:90:D2:9E:01:6C:12:F5:6D:F0:28
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a7:cd:37:f8:c4:e7:90:d4:b7:7e:c9:7c:d3:fa:87:82:46:
bf:65:e1:c2:5b:4d:82:d8:f2:25:3a:41:86:4f:85:dc:26:6d:
48:60:e6:c0:b2:0f:ec:77:71:82:43:d4:bd:ea:de:2c:11:d0:
e3:98:7f:a3:ef:25:1c:e5:ec:b7:6a:d0:cc:b7:b2:6d:27:a8:
63:35:14:cf:53:ef:34:cc:5a:90:d0:d8:26:7b:21:39:d1:59:
34:0a:c4:b0:5a:70:e8:b1:aa:e7:1f:fa:e6:fa:39:fc:70:e9:
d9:8e:03:3d:33:51:7c:22:e0:3d:b9:59:8e:bc:76:92:1f:33:
6c:12:dd:9f:02:53:4d:e0:67:2d:a8:01:24:02:07:fc:10:46:
f1:12:45:ed:9b:64:5b:7b:58:b3:10:e6:ba:d9:cd:5e:85:ba:
f9:74:f5:fb:7f:d6:95:0a:e4:98:32:63:41:7f:0a:81:8f:25:
29:11:4f:7a:92:5f:1f:62:8c:e4:98:9d:08:61:59:1d:17:0f:
31:ed:14:80:c5:e6:7e:1c:52:4a:ce:70:af:c3:9e:ba:3f:29:
68:7c:f2:4f:1c:f5:4e:3a:ef:68:d9:cb:cf:34:1c:c9:8b:a7:
2a:c0:3b:3e:8d:ff:1e:11:6e:1e:9d:9e:fd:b8:1c:d8:65:04:
7c:af:35:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIxUmEqlZ6m7qwSLkzM5IiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYWE5OWViOGMxYjE4YjFhYTdkNDI0NWNlNDgxZmI4ODhm
YmYyNTQwHhcNMjUwNDE4MTIwMDExWhcNMjUwNDE5MTIwMDExWjAzMTEwLwYDVQQD
EygzNThiZTllOWFmYTFlZDk1YzJiMjkwZDI5ZTAxNmMxMmY1NmRmMDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTMyridQXL9Di8t02evsMKZIBcJ0
ACGNOXlz0AMcQY3WIJaHF2o+3rw1k1ZIdmDkJrn2nj2GlTcJIDE2+diZf29IPqDn
GsCL40S2Rt6t00j+108Jh8ud+SS6gnEtHaeHyCeqXYQ0fZJ3butjSnN3msRdKv3T
nE547r6VsCiTeInuQeKHQyztg/IMTkOOcX+dTfmOFifknBLNasQ6EaHZGvIdeoV4
LRUJlN/m48YSvAC5CpoLJQ56jJrmgmhfcwpiPf0exKC+Bh1j11PXlcCY/vwWoVAa
yCNMxTYXwHmKToTD46GgYZ01kdvxvZtZD2VUvykHy769bJnYRIoYrm97BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWL6emvoe2VwrKQ0p4BbBL1bfAoMB8GA1UdIwQY
MBaAFFCqmeuMGxixqn1CRc5IH7iI+/JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAt
MWNmNmZkOWY4MGZhLzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAtMWNmNmZkOWY4MGZh
LzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6fNN/jE
55DUt37JfNP6h4JGv2XhwltNgtjyJTpBhk+F3CZtSGDmwLIP7HdxgkPUvereLBHQ
45h/o+8lHOXst2rQzLeybSeoYzUUz1PvNMxakNDYJnshOdFZNArEsFpw6LGq5x/6
5vo5/HDp2Y4DPTNRfCLgPblZjrx2kh8zbBLdnwJTTeBnLagBJAIH/BBG8RJF7Ztk
W3tYsxDmutnNXoW6+XT1+3/WlQrkmDJjQX8KgY8lKRFPepJfH2KM5JidCGFZHRcP
Me0UgMXmfhxSSs5wr8Oeuj8paHzyTxz1TjrvaNnLzzQcyYunKsA7Po3/HhFuHp2e
/bgc2GUEfK81zg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:05 2025 by rpki-client