Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
File: UoG4QfEnaUidX9NDtyukT5DJbzI.mft (raw, json)
Hash identifier: BJtLaeZhSGM8ADNO+pDhll712O9utRm7kg7J2gPIibw=
Subject key identifier: 9B:7C:AC:2C:C4:17:48:BA:58:47:E3:36:2B:AC:6F:62:8D:16:56:DD
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Certificate issuer: /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial: 0196A2094131E4DECF4440B2718EDF77DF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 20:00:37 +0000
Manifest this update: Mon 05 May 2025 20:00:37 +0000
Manifest next update: Tue 06 May 2025 20:00:37 +0000
Files and hashes: 1: 5BpJC5kfYpwnpQHv48KWy-JUppU.roa (hash: CrCPGt1FnNwvHaRxzi66Coran28PbWoZQZiC83vw/u0=)
2: UoG4QfEnaUidX9NDtyukT5DJbzI.crl (hash: tlNVVv2cDwEEV51o64Dx6H7Tqj9PHK7SxANOedOuE48=)
3: fGMhxat_aWV3hx3-ZEsjMXX_eos.roa (hash: okji5lN0mnnP4DUHwDGGfA4mpjSl7H2/JOP5GvkdRJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:09:41:31:e4:de:cf:44:40:b2:71:8e:df:77:df:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
Validity
Not Before: May 5 20:00:37 2025 GMT
Not After : May 6 20:00:37 2025 GMT
Subject: CN=9b7cac2cc41748ba5847e3362bac6f628d1656dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:14:15:59:c5:18:cb:5d:d5:d0:93:fd:9a:
ef:4b:2a:f4:98:51:07:c8:f4:fd:bb:a9:ba:91:f0:
d8:19:46:fb:af:f6:17:da:93:09:72:e6:1c:6d:cb:
23:d1:40:b9:99:96:fd:c4:86:9b:5c:57:17:f9:5d:
77:e6:b4:4c:a6:05:48:91:8a:eb:2b:d6:48:c2:c6:
3e:e0:8e:a3:74:ec:2e:1b:cc:5d:ca:35:2f:c8:43:
07:96:f6:ac:9d:5f:64:d0:60:5a:95:2c:a5:0b:ff:
0f:5c:f2:65:b4:97:9f:f8:30:06:d1:c3:a4:6a:1d:
8c:e4:f3:c1:80:a8:a3:1b:be:da:df:09:54:3f:c5:
08:96:f1:87:1c:05:01:1d:b7:31:f5:ef:fe:cd:b4:
0a:cd:fe:e8:69:29:a0:88:d5:71:69:72:2b:be:db:
c8:2b:c3:b4:dc:be:7c:5e:15:ee:aa:ed:e1:34:af:
09:2c:0d:52:4c:67:68:8e:4a:2e:71:6e:12:37:65:
4b:92:79:b2:ed:5d:47:2c:3a:b5:47:c4:03:90:0c:
73:07:e2:02:5d:0b:66:62:86:64:7a:fd:61:e0:9c:
e2:8c:2f:cd:a5:06:55:64:3b:32:9e:35:f7:04:27:
1c:c9:34:e4:3a:23:75:64:7b:6b:09:2a:73:04:fb:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7C:AC:2C:C4:17:48:BA:58:47:E3:36:2B:AC:6F:62:8D:16:56:DD
X509v3 Authority Key Identifier:
keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:37:41:1c:f6:24:29:b7:ab:d2:77:56:f9:0c:84:f5:ab:b5:
18:f2:30:5c:3c:15:1e:90:41:13:9c:a0:00:8d:98:ae:91:c5:
54:08:b0:48:ee:c0:c9:a4:f2:86:68:9c:97:aa:d8:16:38:2e:
ab:a6:9c:39:8c:f7:31:7d:8f:59:be:46:bc:37:f6:a8:df:bf:
37:98:70:ca:53:49:48:f8:23:c9:84:c8:dc:6d:f7:4c:ed:a6:
f1:6c:24:b7:17:00:ce:e1:f2:22:03:af:70:df:c4:9f:e3:96:
fb:dc:d2:a3:bc:55:45:68:ed:95:f1:10:bb:a1:a1:97:18:db:
70:51:bd:f2:7c:e6:0a:00:07:2d:5d:c7:c9:29:90:ef:c6:08:
bb:bf:64:52:ed:5d:3b:33:a6:1b:a9:3c:a3:07:62:7d:5e:6a:
49:f0:08:73:8d:c9:45:dc:23:9e:65:f6:37:62:04:68:73:df:
1c:84:8c:23:85:9a:bb:33:ef:9d:2a:5e:c4:4b:5a:a7:81:94:
43:ab:e2:3b:3c:a8:bd:8f:a2:84:1f:52:8e:aa:4e:8d:a6:85:
85:d6:d5:a9:86:66:81:fd:37:5e:15:d9:f1:c9:76:ae:11:7c:
8e:63:67:2f:c1:f8:92:ba:61:6d:19:99:fe:1f:0a:0f:f8:89:
fe:2b:27:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaiCUEx5N7PRECycY7fd99iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODFiODQxZjEyNzY5NDg5ZDVmZDM0M2I3MmJhNDRmOTBj
OTZmMzIwHhcNMjUwNTA1MjAwMDM3WhcNMjUwNTA2MjAwMDM3WjAzMTEwLwYDVQQD
Eyg5YjdjYWMyY2M0MTc0OGJhNTg0N2UzMzYyYmFjNmY2MjhkMTY1NmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtukUFVnFGMtd1dCT/ZrvSyr0mFEH
yPT9u6m6kfDYGUb7r/YX2pMJcuYcbcsj0UC5mZb9xIabXFcX+V135rRMpgVIkYrr
K9ZIwsY+4I6jdOwuG8xdyjUvyEMHlvasnV9k0GBalSylC/8PXPJltJef+DAG0cOk
ah2M5PPBgKijG77a3wlUP8UIlvGHHAUBHbcx9e/+zbQKzf7oaSmgiNVxaXIrvtvI
K8O03L58XhXuqu3hNK8JLA1STGdojkoucW4SN2VLknmy7V1HLDq1R8QDkAxzB+IC
XQtmYoZkev1h4JzijC/NpQZVZDsynjX3BCccyTTkOiN1ZHtrCSpzBPsKZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt8rCzEF0i6WEfjNiusb2KNFlbdMB8GA1UdIwQY
MBaAFFKBuEHxJ2lInV/TQ7crpE+QyW8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9HNFFmRW5hVWlkWDlORHR5dWtUNURKYnpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xNDIyNWItYmY5NS00NWM5LThkN2It
ZmMyNWQ0NTVhZjg1LzEvVW9HNFFmRW5hVWlkWDlORHR5dWtUNURKYnpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xNDIyNWItYmY5NS00NWM5LThkN2ItZmMyNWQ0NTVhZjg1
LzEvVW9HNFFmRW5hVWlkWDlORHR5dWtUNURKYnpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjdBHPYk
Kber0ndW+QyE9au1GPIwXDwVHpBBE5ygAI2YrpHFVAiwSO7AyaTyhmicl6rYFjgu
q6acOYz3MX2PWb5GvDf2qN+/N5hwylNJSPgjyYTI3G33TO2m8WwktxcAzuHyIgOv
cN/En+OW+9zSo7xVRWjtlfEQu6GhlxjbcFG98nzmCgAHLV3HySmQ78YIu79kUu1d
OzOmG6k8owdifV5qSfAIc43JRdwjnmX2N2IEaHPfHISMI4WauzPvnSpexEtap4GU
Q6viOzyovY+ihB9SjqpOjaaFhdbVqYZmgf03XhXZ8cl2rhF8jmNnL8H4krphbRmZ
/h8KD/iJ/isn6w==
-----END CERTIFICATE-----
Generated at Tue May 6 00:23:13 2025 by rpki-client