Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
File: ufdKR6bRoL9MIW5fq02R-xKd89Y.mft (raw, json)
Hash identifier: pJGD5A0Q829iwbF9HyBWKxdH1hhd/zIjcZm6PnhkwHw=
Subject key identifier: 43:CC:46:F6:D5:5E:8A:C6:78:14:23:38:1B:81:AC:F0:9B:9E:13:15
Authority key identifier: B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
Certificate issuer: /CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Certificate serial: 019659148A4942FF91C82AB2B3F8E17514B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
Manifest number: 0A36
Signing time: Mon 21 Apr 2025 16:00:40 +0000
Manifest this update: Mon 21 Apr 2025 16:00:40 +0000
Manifest next update: Tue 22 Apr 2025 16:00:40 +0000
Files and hashes: 1: 5AZ3tR0kmtggSX8GQL0nk_9vkNM.roa (hash: o7jn9b/bWLBA/ntIWwkYzFbMhpkdc8Mhco9rAn9gsO0=)
2: ufdKR6bRoL9MIW5fq02R-xKd89Y.crl (hash: tIDppI4wAplUwMS2jcjHxhubYqMGJPsslbGiLCaL/i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:8a:49:42:ff:91:c8:2a:b2:b3:f8:e1:75:14:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Validity
Not Before: Apr 21 16:00:40 2025 GMT
Not After : Apr 22 16:00:40 2025 GMT
Subject: CN=43cc46f6d55e8ac6781423381b81acf09b9e1315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:80:8a:a5:96:5a:8e:95:a3:3c:22:f4:69:2b:
83:30:57:6d:aa:aa:dd:00:ec:a9:14:e7:75:fe:58:
db:1d:78:dc:78:49:73:19:c6:d0:5f:6f:05:c3:d2:
d2:b3:e1:5d:a8:52:19:a5:80:05:60:93:49:f7:16:
eb:de:da:b6:8b:a5:cf:df:d0:30:76:0d:b1:9f:12:
90:4f:72:67:ca:0e:30:15:7e:d3:83:33:da:c3:85:
ac:83:1a:a3:6a:00:d8:91:91:c3:68:93:50:5a:9a:
99:f1:27:d1:ac:37:0d:f9:ab:c4:54:b6:ed:9b:66:
cb:fa:30:ce:44:ae:31:d4:16:95:d3:37:b8:fa:d4:
1c:dc:f9:4b:87:ab:04:a6:28:8c:28:5a:86:e3:81:
16:16:58:a3:13:e2:0a:b7:9d:aa:79:c4:d6:df:0c:
4f:8b:93:98:1f:5c:6a:1f:8a:4f:91:db:e6:7c:bb:
93:bd:45:d1:8c:c1:c7:92:50:65:57:ff:b6:84:a6:
c8:f9:3b:e7:ec:3f:5a:3e:a0:4e:52:31:2c:09:b2:
29:35:51:a1:66:93:70:f3:61:91:fc:8d:72:d1:06:
81:65:ed:20:71:28:4b:21:20:a6:5c:96:bc:1e:6e:
bf:0c:48:7d:10:f3:2d:9d:23:1d:6e:47:13:cd:75:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CC:46:F6:D5:5E:8A:C6:78:14:23:38:1B:81:AC:F0:9B:9E:13:15
X509v3 Authority Key Identifier:
keyid:B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ce:76:c0:39:18:c8:05:f5:e8:3d:49:8b:02:c4:85:b7:9e:
c1:d9:91:b2:7b:00:03:9e:9f:ba:dd:ff:af:5b:8d:01:b0:55:
8e:60:7d:32:e9:7c:e9:a4:32:ed:f1:ec:1f:4d:d2:85:55:f1:
fd:19:0d:f6:bc:28:ca:5e:0c:13:9b:6e:6b:db:01:70:99:c6:
a0:ad:95:50:18:2a:4f:73:d2:83:eb:94:72:b1:9e:05:00:04:
39:0d:a2:45:d9:30:7f:ae:99:7d:e4:c0:b0:96:81:af:0b:7b:
a9:67:ff:ff:46:98:25:a4:f8:1c:85:54:40:d9:f4:c3:21:ac:
4b:8f:b8:80:cf:90:30:b4:51:06:44:93:17:02:47:6c:87:20:
e5:5a:cc:85:10:0c:33:a4:03:0b:39:4e:4f:1e:74:56:42:14:
bd:7d:8e:6d:70:cd:24:57:43:1e:6b:43:fd:c9:8a:f4:70:71:
7a:7f:2d:ea:24:76:21:62:40:83:53:e4:71:40:0a:94:44:05:
fc:3f:34:49:d9:0e:64:2a:44:68:55:c0:ff:10:85:9e:5b:84:
11:75:57:a4:9c:d6:12:05:c6:8a:a4:1c:c4:c8:f5:39:e0:59:
b1:db:63:c2:a2:0f:c3:cb:75:86:ed:ac:0b:7f:a2:f7:e3:45:
83:c6:10:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFIpJQv+RyCqys/jhdRS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Zjc0YTQ3YTZkMWEwYmY0YzIxNmU1ZmFiNGQ5MWZiMTI5
ZGYzZDYwHhcNMjUwNDIxMTYwMDQwWhcNMjUwNDIyMTYwMDQwWjAzMTEwLwYDVQQD
Eyg0M2NjNDZmNmQ1NWU4YWM2NzgxNDIzMzgxYjgxYWNmMDliOWUxMzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9oCKpZZajpWjPCL0aSuDMFdtqqrd
AOypFOd1/ljbHXjceElzGcbQX28Fw9LSs+FdqFIZpYAFYJNJ9xbr3tq2i6XP39Aw
dg2xnxKQT3Jnyg4wFX7TgzPaw4WsgxqjagDYkZHDaJNQWpqZ8SfRrDcN+avEVLbt
m2bL+jDORK4x1BaV0ze4+tQc3PlLh6sEpiiMKFqG44EWFlijE+IKt52qecTW3wxP
i5OYH1xqH4pPkdvmfLuTvUXRjMHHklBlV/+2hKbI+Tvn7D9aPqBOUjEsCbIpNVGh
ZpNw82GR/I1y0QaBZe0gcShLISCmXJa8Hm6/DEh9EPMtnSMdbkcTzXWIewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPMRvbVXorGeBQjOBuBrPCbnhMVMB8GA1UdIwQY
MBaAFLn3Skem0aC/TCFuX6tNkfsSnfPWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZkS1I2YlJvTDlNSVc1ZnEwMlIteEtkODlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yNGEwYmQtMDgzOC00Yzk1LTljY2Qt
MzBmNjA4YWRlNDhkLzEvdWZkS1I2YlJvTDlNSVc1ZnEwMlIteEtkODlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yNGEwYmQtMDgzOC00Yzk1LTljY2QtMzBmNjA4YWRlNDhk
LzEvdWZkS1I2YlJvTDlNSVc1ZnEwMlIteEtkODlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL852wDkY
yAX16D1JiwLEhbeewdmRsnsAA56fut3/r1uNAbBVjmB9Mul86aQy7fHsH03ShVXx
/RkN9rwoyl4ME5tua9sBcJnGoK2VUBgqT3PSg+uUcrGeBQAEOQ2iRdkwf66ZfeTA
sJaBrwt7qWf//0aYJaT4HIVUQNn0wyGsS4+4gM+QMLRRBkSTFwJHbIcg5VrMhRAM
M6QDCzlOTx50VkIUvX2ObXDNJFdDHmtD/cmK9HBxen8t6iR2IWJAg1PkcUAKlEQF
/D80SdkOZCpEaFXA/xCFnluEEXVXpJzWEgXGiqQcxMj1OeBZsdtjwqIPw8t1hu2s
C3+i9+NFg8YQuA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:38 2025 by rpki-client