Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
File: uWtvuorLeLKHF9detqKSXktomhA.mft (raw, json)
Hash identifier: zD9b3nAl5iS7CJDZ6q2n7GO+Bcf3mfhgnqS7toSoLZ0=
Subject key identifier: 15:E4:D7:C5:91:BC:9B:22:9C:C9:41:DD:03:03:DF:5F:34:98:86:47
Authority key identifier: B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
Certificate issuer: /CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Certificate serial: 019648216292972921DA69F7E73AAAA1134A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
Manifest number: 04EA
Signing time: Fri 18 Apr 2025 09:01:09 +0000
Manifest this update: Fri 18 Apr 2025 09:01:09 +0000
Manifest next update: Sat 19 Apr 2025 09:01:09 +0000
Files and hashes: 1: b1dkMuscA36O0Qm_BgPxorZ-3GY.roa (hash: gIbSn6LNYULuz6h5L16Mv/n4jaeFLG8lgRqX0Hk7Yek=)
2: uWtvuorLeLKHF9detqKSXktomhA.crl (hash: DpxbRi+chD2jVTCN49WfJznmIsBDlzhkz+rbFJOIm0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:21:62:92:97:29:21:da:69:f7:e7:3a:aa:a1:13:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Validity
Not Before: Apr 18 09:01:09 2025 GMT
Not After : Apr 19 09:01:09 2025 GMT
Subject: CN=15e4d7c591bc9b229cc941dd0303df5f34988647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:ba:73:8a:9c:6c:c0:a2:0b:82:b2:d2:c2:
da:b8:27:9e:a1:dc:76:7a:4c:9b:08:cb:a4:62:d0:
13:18:af:b0:98:18:1e:ef:07:fc:d8:f7:04:c8:6f:
a1:95:0d:af:55:08:ac:d0:28:42:b6:36:34:6b:ec:
ed:87:d1:0a:42:77:91:bb:34:07:da:8d:e2:1b:fb:
11:53:7b:08:3b:45:7c:98:42:48:31:f2:ba:67:a2:
c8:5f:24:8f:0e:02:37:22:27:c8:45:10:c6:01:be:
76:0b:ce:0f:56:fd:c0:2d:bc:a0:f7:98:a6:74:b7:
ed:d4:f4:46:f3:30:4d:9b:b5:1e:e3:2a:a1:5d:cd:
ab:bc:8b:f5:38:ba:70:74:12:22:f7:9b:e8:b8:f7:
c8:c7:f3:05:8a:62:1f:67:2d:2c:12:58:d6:1e:16:
6f:e4:40:5a:77:a6:bd:21:11:53:7e:57:de:39:38:
5e:f6:3b:7c:d4:33:c2:77:f4:35:2f:b3:60:b0:e3:
ff:43:5a:69:e7:6b:1c:4b:e9:30:d7:0b:aa:2b:00:
e5:9c:0e:a2:89:93:f1:a7:e2:74:6d:4c:6c:4b:d1:
46:14:f9:b5:d1:32:8f:3e:69:d8:67:0e:f8:42:a8:
e8:68:6e:28:7a:13:7d:5a:2c:a1:c4:06:24:77:6f:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E4:D7:C5:91:BC:9B:22:9C:C9:41:DD:03:03:DF:5F:34:98:86:47
X509v3 Authority Key Identifier:
keyid:B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1b:b0:1f:b3:38:e3:84:2f:f9:df:ef:fd:f3:02:89:ce:71:
1b:ec:00:09:f6:d3:91:55:d1:03:5b:db:1e:d2:9d:1f:d1:99:
89:88:ea:7f:7a:d8:f9:c6:84:09:bd:30:c0:18:66:64:35:e0:
98:78:5c:95:fd:a4:1d:62:4b:a3:b0:bc:3d:a2:f4:28:4c:82:
59:39:cc:21:41:23:31:e7:7e:09:00:b8:59:de:c6:49:b3:27:
42:ed:06:11:3b:7d:13:46:a7:7d:18:6e:00:3e:d7:74:88:87:
8c:43:2b:0d:8f:fd:e0:3e:99:43:54:8d:01:f4:38:b3:95:36:
fc:18:d5:df:f8:fb:ea:da:94:ef:45:5b:33:9d:0b:2b:65:17:
76:aa:5e:d7:8e:7a:1b:38:62:02:7b:be:99:f1:2e:68:5b:ce:
c4:5a:b6:0f:96:94:83:97:00:22:1e:8b:fe:34:04:51:0d:d2:
3a:2d:1f:97:67:2b:f8:30:84:62:1b:c6:58:cd:39:06:00:62:
6e:95:66:23:a4:48:ba:3f:33:1e:30:91:e6:a8:dc:11:d6:3b:
dd:b3:b9:c2:90:ab:e3:f8:0e:97:26:95:86:6c:fa:f3:13:52:
7f:7c:11:45:5d:7e:4a:e7:73:82:35:60:f0:4f:b7:10:e6:44:
73:5f:25:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIIWKSlykh2mn35zqqoRNKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NmI2ZmJhOGFjYjc4YjI4NzE3ZDc1ZWI2YTI5MjVlNGI2
ODlhMTAwHhcNMjUwNDE4MDkwMTA5WhcNMjUwNDE5MDkwMTA5WjAzMTEwLwYDVQQD
EygxNWU0ZDdjNTkxYmM5YjIyOWNjOTQxZGQwMzAzZGY1ZjM0OTg4NjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a+6c4qcbMCiC4Ky0sLauCeeodx2
ekybCMukYtATGK+wmBge7wf82PcEyG+hlQ2vVQis0ChCtjY0a+zth9EKQneRuzQH
2o3iG/sRU3sIO0V8mEJIMfK6Z6LIXySPDgI3IifIRRDGAb52C84PVv3ALbyg95im
dLft1PRG8zBNm7Ue4yqhXc2rvIv1OLpwdBIi95vouPfIx/MFimIfZy0sEljWHhZv
5EBad6a9IRFTflfeOThe9jt81DPCd/Q1L7NgsOP/Q1pp52scS+kw1wuqKwDlnA6i
iZPxp+J0bUxsS9FGFPm10TKPPmnYZw74QqjoaG4oehN9WiyhxAYkd284ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXk18WRvJsinMlB3QMD3180mIZHMB8GA1UdIwQY
MBaAFLlrb7qKy3iyhxfXXraikl5LaJoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVd0dnVvckxlTEtIRjlkZXRxS1NYa3RvbWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jYjg3YjUtOTIzZi00ZjdmLWFiMzAt
MzQ3ZjE2ZGI2ZDkwLzEvdVd0dnVvckxlTEtIRjlkZXRxS1NYa3RvbWhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jYjg3YjUtOTIzZi00ZjdmLWFiMzAtMzQ3ZjE2ZGI2ZDkw
LzEvdVd0dnVvckxlTEtIRjlkZXRxS1NYa3RvbWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRuwH7M4
44Qv+d/v/fMCic5xG+wACfbTkVXRA1vbHtKdH9GZiYjqf3rY+caECb0wwBhmZDXg
mHhclf2kHWJLo7C8PaL0KEyCWTnMIUEjMed+CQC4Wd7GSbMnQu0GETt9E0anfRhu
AD7XdIiHjEMrDY/94D6ZQ1SNAfQ4s5U2/BjV3/j76tqU70VbM50LK2UXdqpe1456
GzhiAnu+mfEuaFvOxFq2D5aUg5cAIh6L/jQEUQ3SOi0fl2cr+DCEYhvGWM05BgBi
bpVmI6RIuj8zHjCR5qjcEdY73bO5wpCr4/gOlyaVhmz68xNSf3wRRV1+SudzgjVg
8E+3EOZEc18lCg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:11:02 2025 by rpki-client