Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
File: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json)
Hash identifier: HwUVp2if+LOYqd9CO2RoN1+sWGfXUnJam8tRd5FclZA=
Subject key identifier: 17:6D:F4:BC:87:65:D8:80:EB:DD:D2:B3:37:A5:49:62:89:CC:FE:28
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Certificate issuer: /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial: 01963EE6B88649FAB813266A529CF8951B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
Manifest number: 149D
Signing time: Wed 16 Apr 2025 14:00:29 +0000
Manifest this update: Wed 16 Apr 2025 14:00:29 +0000
Manifest next update: Thu 17 Apr 2025 14:00:29 +0000
Files and hashes: 1: QPgFHQDlm_0exUYvdkepCU73o64.roa (hash: GOemFo+2yNdKq5tLB7uX1AqqukrqHbLBiUTqn2bm5uU=)
2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: vQd86rPP7e1c3PCOTb3hWqNRXy71ILgd/vEsZYOYSoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:b8:86:49:fa:b8:13:26:6a:52:9c:f8:95:1b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Validity
Not Before: Apr 16 14:00:29 2025 GMT
Not After : Apr 17 14:00:29 2025 GMT
Subject: CN=176df4bc8765d880ebddd2b337a5496289ccfe28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:ae:23:59:7b:ac:6d:2e:60:a2:4e:6b:eb:
b2:9b:08:22:16:ea:e1:67:10:14:76:d5:2e:07:99:
d4:2a:43:d3:91:57:7a:6e:05:da:0e:01:5c:2f:48:
c1:b0:45:0a:fd:c3:e1:e9:74:72:5e:be:85:b0:f5:
e3:e2:5c:0f:c0:27:ba:9a:39:d3:01:27:f4:59:b1:
25:6e:a9:4b:6e:28:39:e5:2c:f9:29:d7:ea:04:56:
22:2c:b8:c3:04:bf:dd:94:6c:33:b2:9f:8b:b1:f8:
90:fc:41:51:ee:70:c2:6a:72:6e:0e:69:f7:0b:96:
e6:30:ef:3f:b4:ae:a9:82:50:9c:49:b9:42:a6:5a:
62:f4:36:a8:22:06:3c:7a:65:1e:51:ae:61:a4:f9:
a3:d5:6c:f9:d3:f4:e1:4c:98:10:d2:23:0f:fa:06:
3a:33:1c:d6:07:b8:35:51:c1:4b:67:73:01:be:16:
44:19:30:60:90:67:a3:c5:6c:87:5c:71:fb:ff:7c:
2d:db:70:92:33:d6:bf:43:d5:99:ee:a6:1a:1e:4b:
14:70:4a:bf:cb:a6:18:b6:26:3f:88:5e:f7:f4:7a:
0a:fc:67:30:37:1e:3b:ed:7e:6c:91:5a:d3:49:4d:
b1:85:01:5a:76:d2:0d:c8:d9:36:29:3c:4a:2e:c2:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:F4:BC:87:65:D8:80:EB:DD:D2:B3:37:A5:49:62:89:CC:FE:28
X509v3 Authority Key Identifier:
keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0f:78:3a:47:23:7d:59:47:5f:43:53:2b:a2:8d:47:55:98:
53:77:e5:cd:cc:c8:69:ff:3d:b9:d6:88:ad:0e:04:7f:5b:71:
1b:c4:74:3b:fa:17:04:94:a9:f9:49:9a:c8:10:43:2e:81:c7:
3d:38:09:56:69:35:94:0c:7a:52:0f:72:41:87:ad:17:41:20:
53:d6:03:f0:aa:ff:65:b4:cc:87:71:2a:43:e5:f1:4f:a3:2e:
a9:d8:22:69:82:f6:1e:15:82:08:bf:8b:aa:93:60:33:d3:01:
39:a5:94:c5:e6:33:35:f4:90:41:41:b8:00:3a:45:af:5f:75:
36:15:15:00:fe:5a:ae:41:50:d0:b1:bf:01:28:70:23:dd:61:
9a:de:e4:79:91:2e:fc:06:cc:ba:93:c2:e5:59:3a:64:1c:8a:
57:e7:85:e8:d6:03:c4:1c:b5:5c:8f:3d:2a:c2:75:53:be:6b:
01:30:59:eb:25:93:49:8b:af:6d:cf:07:f7:41:07:5b:f6:a4:
b8:87:32:4d:96:7d:28:84:0e:b5:41:5b:0b:d5:e3:80:99:4e:
51:9f:b2:48:69:5e:64:08:f4:b2:84:14:3e:04:c2:48:87:1a:
48:38:81:da:56:7a:38:b9:8c:55:d5:84:a7:f6:f0:f1:ad:f8:
4c:1d:22:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+5riGSfq4EyZqUpz4lRsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhZTdmYTc3ZjcyNGJiNDY3MzI1YWQ1OWQ3ZGJmYzYzMzk5
YzZlNzkwHhcNMjUwNDE2MTQwMDI5WhcNMjUwNDE3MTQwMDI5WjAzMTEwLwYDVQQD
EygxNzZkZjRiYzg3NjVkODgwZWJkZGQyYjMzN2E1NDk2Mjg5Y2NmZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnICuI1l7rG0uYKJOa+uymwgiFurh
ZxAUdtUuB5nUKkPTkVd6bgXaDgFcL0jBsEUK/cPh6XRyXr6FsPXj4lwPwCe6mjnT
ASf0WbElbqlLbig55Sz5KdfqBFYiLLjDBL/dlGwzsp+LsfiQ/EFR7nDCanJuDmn3
C5bmMO8/tK6pglCcSblCplpi9DaoIgY8emUeUa5hpPmj1Wz50/ThTJgQ0iMP+gY6
MxzWB7g1UcFLZ3MBvhZEGTBgkGejxWyHXHH7/3wt23CSM9a/Q9WZ7qYaHksUcEq/
y6YYtiY/iF739HoK/GcwNx477X5skVrTSU2xhQFadtINyNk2KTxKLsLVLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdt9LyHZdiA693SszelSWKJzP4oMB8GA1UdIwQY
MBaAFLrn+nf3JLtGcyWtWdfb/GM5nG55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXVmNmRfY2t1MFp6SmExWjE5djhZem1jYm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi83Nzc3NGEtZmMwNy00MDAyLTk0Zjkt
MTJkYzk0ZGRlZGNkLzEvdXVmNmRfY2t1MFp6SmExWjE5djhZem1jYm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi83Nzc3NGEtZmMwNy00MDAyLTk0ZjktMTJkYzk0ZGRlZGNk
LzEvdXVmNmRfY2t1MFp6SmExWjE5djhZem1jYm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOw94Okcj
fVlHX0NTK6KNR1WYU3flzczIaf89udaIrQ4Ef1txG8R0O/oXBJSp+UmayBBDLoHH
PTgJVmk1lAx6Ug9yQYetF0EgU9YD8Kr/ZbTMh3EqQ+XxT6MuqdgiaYL2HhWCCL+L
qpNgM9MBOaWUxeYzNfSQQUG4ADpFr191NhUVAP5arkFQ0LG/AShwI91hmt7keZEu
/AbMupPC5Vk6ZByKV+eF6NYDxBy1XI89KsJ1U75rATBZ6yWTSYuvbc8H90EHW/ak
uIcyTZZ9KIQOtUFbC9XjgJlOUZ+ySGleZAj0soQUPgTCSIcaSDiB2lZ6OLmMVdWE
p/bw8a34TB0iWQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:20:39 2025 by rpki-client