Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: zDtWNsN302rPdbloPdPdDU/TGXyz66oDeq/INsi1mO8=
Subject key identifier: A5:88:A0:B7:C4:56:BA:0E:55:83:4C:A5:C7:E6:2A:35:A7:58:4E:36
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 0194C3BE54961A741C51D6FD187F73A1295B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 12F8
Signing time: Sat 01 Feb 2025 23:00:17 +0000
Manifest this update: Sat 01 Feb 2025 23:00:17 +0000
Manifest next update: Sun 02 Feb 2025 23:00:17 +0000
Files and hashes: 1: 0fnHFCseCp-dowzjSO_W0ajo1TU.roa (hash: 6EWDnuvDaw8wNIkQ3MlMpyUilwRHG1UBmr10Bi9Kodc=)
2: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: YKBcghgnyOY8oWYKKQLNfoOZzIvKVtTgj5EAJpT/WzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:54:96:1a:74:1c:51:d6:fd:18:7f:73:a1:29:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Feb 1 23:00:17 2025 GMT
Not After : Feb 2 23:00:17 2025 GMT
Subject: CN=a588a0b7c456ba0e55834ca5c7e62a35a7584e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:3a:63:df:0e:92:f5:77:ef:20:34:aa:57:
f9:fa:1d:b6:30:5b:a7:e6:98:96:fd:7e:fe:15:c4:
c6:b1:3e:ac:62:e9:4a:ea:61:33:e8:d6:37:80:ea:
fd:69:5d:b0:04:42:94:d7:49:4e:65:24:ff:14:e4:
4b:52:6a:e6:3e:9e:78:a6:f7:20:c8:33:f4:15:90:
14:57:ef:a0:06:ee:e3:0f:3c:4b:d2:7e:8f:29:2f:
55:31:0b:06:09:a3:b0:27:27:40:f6:66:85:2c:65:
32:a4:78:60:fa:5f:7f:c3:c8:30:e5:e9:41:4d:27:
8a:fc:30:8d:b3:98:73:d8:4e:d3:53:c5:1d:f7:2a:
9e:a5:99:8e:ab:3d:68:58:0e:9f:8f:de:97:79:6f:
e0:0b:6a:ea:ed:d4:fc:0d:e9:1b:8e:0f:81:44:f5:
50:b2:77:26:7f:a2:6e:d9:f8:27:68:50:3f:56:99:
dc:79:6b:75:e3:54:b5:da:38:51:34:92:45:d4:49:
dc:1a:14:e2:88:ac:79:e5:b5:1c:98:e7:85:b3:1f:
b2:dd:59:8a:0f:c8:7d:d6:bb:4b:eb:98:b2:57:80:
08:95:89:88:49:a8:1c:df:91:94:4d:ef:d2:97:2d:
5c:f7:05:c8:5b:5d:69:7e:84:ab:7f:5c:fd:f5:f3:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:88:A0:B7:C4:56:BA:0E:55:83:4C:A5:C7:E6:2A:35:A7:58:4E:36
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:71:9b:76:31:75:f4:49:f5:3c:49:6c:cf:9c:af:9d:69:28:
05:b5:ae:87:f1:d3:fd:e3:73:71:ba:b2:c3:62:e3:94:ce:22:
93:41:a9:ab:ea:9b:66:c7:54:51:23:19:7f:97:99:e7:87:00:
ae:be:23:ef:60:33:a7:a7:0c:13:77:81:d2:f4:c9:f3:b7:1d:
f8:26:3f:55:75:92:71:7f:04:2a:38:a1:65:69:4e:9b:d4:b9:
0a:47:ee:69:cd:61:43:ec:a2:d1:c7:5e:9a:5e:e2:2f:c6:24:
9b:c3:ae:3d:c2:d1:5b:a0:14:e2:3b:e0:bd:8b:8c:5f:9e:dc:
8e:2e:4e:ce:b2:85:83:0d:79:50:ff:7d:cd:54:e4:d7:76:d4:
aa:f7:fe:b2:a5:6c:cd:8d:ca:d3:57:03:38:2b:5a:97:ea:b0:
9e:2f:96:6b:0d:19:bb:06:b5:39:5c:db:a5:e3:5a:4e:54:1e:
3b:88:63:80:0a:3e:65:0f:19:bd:5a:67:01:73:a0:1d:03:b3:
ea:11:e9:b2:30:13:0d:bc:11:c9:a6:c0:b7:83:df:95:e6:f2:
d0:37:aa:f0:e8:e1:6e:6f:e3:1c:9e:2b:78:c8:1f:b5:87:f3:
d7:07:ee:1d:bd:54:06:26:c8:58:f1:a8:e0:ce:dd:37:25:20:
3a:89:6c:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvlSWGnQcUdb9GH9zoSlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNmM2MThkMTViYjcxMmUzZWJhZTA2YThiMTgxNjk3YTVl
NDA3YjgwHhcNMjUwMjAxMjMwMDE3WhcNMjUwMjAyMjMwMDE3WjAzMTEwLwYDVQQD
EyhhNTg4YTBiN2M0NTZiYTBlNTU4MzRjYTVjN2U2MmEzNWE3NTg0ZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13o6Y98OkvV37yA0qlf5+h22MFun
5piW/X7+FcTGsT6sYulK6mEz6NY3gOr9aV2wBEKU10lOZST/FORLUmrmPp54pvcg
yDP0FZAUV++gBu7jDzxL0n6PKS9VMQsGCaOwJydA9maFLGUypHhg+l9/w8gw5elB
TSeK/DCNs5hz2E7TU8Ud9yqepZmOqz1oWA6fj96XeW/gC2rq7dT8Dekbjg+BRPVQ
sncmf6Ju2fgnaFA/VpnceWt141S12jhRNJJF1EncGhTiiKx55bUcmOeFsx+y3VmK
D8h91rtL65iyV4AIlYmISagc35GUTe/Sly1c9wXIW11pfoSrf1z99fNEsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWIoLfEVroOVYNMpcfmKjWnWE42MB8GA1UdIwQY
MBaAFFJsYY0Vu3EuPrrgaosYFpel5Ae4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW14aGpSVzdjUzQtdXVCcWl4Z1dsNlhrQjdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yNjBjZjItODg1MC00M2Y4LWE3ZjIt
OTI3M2ZjMDE2ZjdkLzEvVW14aGpSVzdjUzQtdXVCcWl4Z1dsNlhrQjdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yNjBjZjItODg1MC00M2Y4LWE3ZjItOTI3M2ZjMDE2Zjdk
LzEvVW14aGpSVzdjUzQtdXVCcWl4Z1dsNlhrQjdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3GbdjF1
9En1PElsz5yvnWkoBbWuh/HT/eNzcbqyw2LjlM4ik0Gpq+qbZsdUUSMZf5eZ54cA
rr4j72Azp6cME3eB0vTJ87cd+CY/VXWScX8EKjihZWlOm9S5Ckfuac1hQ+yi0cde
ml7iL8Ykm8OuPcLRW6AU4jvgvYuMX57cji5OzrKFgw15UP99zVTk13bUqvf+sqVs
zY3K01cDOCtal+qwni+Waw0Zuwa1OVzbpeNaTlQeO4hjgAo+ZQ8ZvVpnAXOgHQOz
6hHpsjATDbwRyabAt4Pfleby0Deq8Ojhbm/jHJ4reMgftYfz1wfuHb1UBibIWPGo
4M7dNyUgOolsjg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:17 2025 by rpki-client