Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
File: UfIEU4aWnRHHQcO1ReAqAMElL3E.mft (raw, json)
Hash identifier: ufn4AGrFj0N6+YnpqvG6NenO6wzPFydYmIDgEtPdRxU=
Subject key identifier: A5:E3:7B:92:2E:06:B5:C3:31:F7:8C:65:90:E2:1A:DB:5A:8D:AA:E2
Authority key identifier: 51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
Certificate issuer: /CN=51f2045386969d11c741c3b545e02a00c1252f71
Certificate serial: 0194C3F5E51BF338A8F28FA83DD34E08F6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
Manifest number: 0B11
Signing time: Sun 02 Feb 2025 00:00:59 +0000
Manifest this update: Sun 02 Feb 2025 00:00:59 +0000
Manifest next update: Mon 03 Feb 2025 00:00:59 +0000
Files and hashes: 1: 1YvZ3HmGUBflg7Tyw2cx-VayPcg.roa (hash: 0znicQ82KwpbqBMTtCi29xQu48z8jC+t2SYrc2cMr7Y=)
2: UfIEU4aWnRHHQcO1ReAqAMElL3E.crl (hash: 05xxoHVtbghXVXNEqrqzhm7aWPovG4s8C/DYTOy2UwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:e5:1b:f3:38:a8:f2:8f:a8:3d:d3:4e:08:f6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f2045386969d11c741c3b545e02a00c1252f71
Validity
Not Before: Feb 2 00:00:59 2025 GMT
Not After : Feb 3 00:00:59 2025 GMT
Subject: CN=a5e37b922e06b5c331f78c6590e21adb5a8daae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:78:5e:7f:49:c8:65:f7:ef:b7:b6:9e:c1:
41:d9:c0:53:4e:37:49:36:e3:31:5e:14:92:9a:7b:
3e:72:29:b8:6f:cc:b4:af:95:74:bc:2e:0d:8a:03:
12:10:6e:5a:9c:d7:b3:95:da:9a:4b:13:01:09:49:
91:82:86:a1:4b:c9:98:2b:c2:c4:f6:8a:b0:d9:90:
24:8e:2c:c0:af:8a:f8:43:3a:19:a0:f3:a0:9e:c8:
73:2d:6f:97:a3:c8:a5:13:5c:8e:9c:1c:ec:a8:4b:
9b:34:10:d8:61:58:5a:b5:94:23:ac:ba:f0:a5:9f:
4b:b1:9a:88:d4:84:bb:9e:0e:bf:92:16:36:ec:35:
3e:6a:cb:d0:a3:bc:30:be:fe:b3:e1:34:5d:32:59:
0d:74:f3:66:e7:2f:36:1e:b8:59:b4:2b:f0:54:df:
3a:e1:37:aa:90:0e:b2:9a:3e:f7:85:70:64:8a:82:
f7:83:36:d7:26:12:10:f0:2c:42:9c:14:1a:fc:55:
e4:8b:18:23:ab:0a:7c:5e:7c:8a:0f:c1:5e:0a:78:
39:5c:19:18:87:87:5b:78:45:ac:5b:62:81:f5:91:
2c:4b:95:da:7b:37:06:79:17:a3:2c:c2:8c:22:3a:
f4:aa:47:22:3b:07:9c:49:19:25:0a:63:dd:e0:15:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E3:7B:92:2E:06:B5:C3:31:F7:8C:65:90:E2:1A:DB:5A:8D:AA:E2
X509v3 Authority Key Identifier:
keyid:51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:94:de:05:23:89:0c:fa:16:f7:c9:46:76:45:7f:54:e4:25:
8a:0b:5e:97:0b:d9:9b:b9:aa:99:58:74:20:3b:84:e0:dc:13:
e6:08:22:d2:4b:17:6c:1d:8f:61:4a:00:b8:82:dc:45:f5:db:
48:13:3f:d8:e1:a2:1a:14:c5:eb:a5:de:7a:9d:39:19:f4:17:
6b:ef:fd:12:b4:a0:9b:77:8b:b6:56:d9:20:d1:6c:42:1f:48:
ca:f7:7c:ea:44:de:ff:9c:c2:8c:ea:60:e5:30:e8:ed:96:24:
62:74:61:e9:21:5a:0e:e2:67:f5:02:26:90:8a:ee:ca:1f:71:
d7:fa:58:35:55:af:a6:38:85:92:21:bf:6b:d3:d2:ea:58:15:
12:9a:c8:3b:cc:f5:16:f6:20:81:51:72:52:f1:9c:1c:98:46:
29:68:aa:95:dc:eb:f0:b8:87:4d:fd:23:5c:25:f7:cd:9c:a5:
47:4f:bf:ce:8a:6a:c5:31:f1:bb:79:93:27:48:b1:17:8d:ac:
7e:42:fc:43:c8:d4:73:be:05:da:12:0f:44:e5:d8:64:ae:53:
51:3f:1a:c1:ee:99:20:b3:7e:d5:60:07:b0:70:cf:3e:49:8c:
37:49:a8:cf:3c:03:0e:4b:47:03:4d:4b:2a:ca:ba:cd:0a:41:
2e:a9:e9:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9eUb8zio8o+oPdNOCPbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZjIwNDUzODY5NjlkMTFjNzQxYzNiNTQ1ZTAyYTAwYzEy
NTJmNzEwHhcNMjUwMjAyMDAwMDU5WhcNMjUwMjAzMDAwMDU5WjAzMTEwLwYDVQQD
EyhhNWUzN2I5MjJlMDZiNWMzMzFmNzhjNjU5MGUyMWFkYjVhOGRhYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvet4Xn9JyGX377e2nsFB2cBTTjdJ
NuMxXhSSmns+cim4b8y0r5V0vC4NigMSEG5anNezldqaSxMBCUmRgoahS8mYK8LE
9oqw2ZAkjizAr4r4QzoZoPOgnshzLW+Xo8ilE1yOnBzsqEubNBDYYVhatZQjrLrw
pZ9LsZqI1IS7ng6/khY27DU+asvQo7wwvv6z4TRdMlkNdPNm5y82HrhZtCvwVN86
4TeqkA6ymj73hXBkioL3gzbXJhIQ8CxCnBQa/FXkixgjqwp8XnyKD8FeCng5XBkY
h4dbeEWsW2KB9ZEsS5XaezcGeRejLMKMIjr0qkciOwecSRklCmPd4BU4pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXje5IuBrXDMfeMZZDiGttajariMB8GA1UdIwQY
MBaAFFHyBFOGlp0Rx0HDtUXgKgDBJS9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWZJRVU0YVduUkhIUWNPMVJlQXFBTUVsTDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83M2MxNWEtMzUyYi00YzA5LTlhZjEt
M2I4MmU0M2NmMjkzLzEvVWZJRVU0YVduUkhIUWNPMVJlQXFBTUVsTDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83M2MxNWEtMzUyYi00YzA5LTlhZjEtM2I4MmU0M2NmMjkz
LzEvVWZJRVU0YVduUkhIUWNPMVJlQXFBTUVsTDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpTeBSOJ
DPoW98lGdkV/VOQligtelwvZm7mqmVh0IDuE4NwT5ggi0ksXbB2PYUoAuILcRfXb
SBM/2OGiGhTF66Xeep05GfQXa+/9ErSgm3eLtlbZINFsQh9Iyvd86kTe/5zCjOpg
5TDo7ZYkYnRh6SFaDuJn9QImkIruyh9x1/pYNVWvpjiFkiG/a9PS6lgVEprIO8z1
FvYggVFyUvGcHJhGKWiqldzr8LiHTf0jXCX3zZylR0+/zopqxTHxu3mTJ0ixF42s
fkL8Q8jUc74F2hIPROXYZK5TUT8awe6ZILN+1WAHsHDPPkmMN0mozzwDDktHA01L
Ksq6zQpBLqnpWg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:32 2025 by rpki-client