Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: UfhhNkPrnFolUS01MM51phGQ1c8PCuJUs5slaM3Qgdo=
Subject key identifier: A2:44:B3:8D:1A:7A:DF:CE:B1:A4:B2:D5:03:B1:81:4A:77:67:8A:4D
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 01964B8FD5D2A8A4C44E9408DB4798A037AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 042C
Signing time: Sat 19 Apr 2025 01:00:39 +0000
Manifest this update: Sat 19 Apr 2025 01:00:39 +0000
Manifest next update: Sun 20 Apr 2025 01:00:39 +0000
Files and hashes: 1: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (hash: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: HOSSUE0KJJOxt6WVeack4wEHeF7iLm+Fsx4iBZ0xuWk=)
3: mqm7Jg5-zPabxGFXHWcZsQaK2dY.roa (hash: /oBnHrhig1strh5pSaVLSZyr3E+b/5bhNvAnJC6HiAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:d5:d2:a8:a4:c4:4e:94:08:db:47:98:a0:37:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Apr 19 01:00:39 2025 GMT
Not After : Apr 20 01:00:39 2025 GMT
Subject: CN=a244b38d1a7adfceb1a4b2d503b1814a77678a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:60:c3:e8:70:95:c2:23:4a:9d:a8:79:55:
2a:e8:82:9d:ba:9d:51:7d:51:54:cf:f5:fa:1d:56:
63:54:9c:b3:46:bd:19:38:5f:54:88:3b:54:77:5b:
c6:e2:b1:b9:3c:19:d7:82:eb:b6:2a:59:87:7a:03:
60:ba:e6:d3:16:b1:de:5f:8e:34:00:4e:dd:53:50:
dd:e7:6f:48:5b:f1:b9:34:74:48:78:8a:26:4d:34:
bb:51:9f:f2:42:f7:04:ea:89:77:ea:c7:06:2f:ab:
3b:4a:f3:5c:22:64:83:bd:db:92:06:24:de:8d:84:
fa:18:35:f2:8d:b6:a9:66:86:93:20:e3:19:75:00:
04:f9:ab:ee:8a:88:63:12:f3:c7:ac:fe:02:26:d6:
81:48:b8:d0:d5:b6:e1:97:f2:ea:77:90:40:74:e0:
ec:57:61:9d:c0:1b:b8:d7:d4:b4:a0:1f:bd:c3:5b:
17:fe:ff:47:16:6d:d4:99:82:99:7d:8f:ea:52:29:
4a:c4:1c:d9:6e:1e:30:a1:34:3a:ab:01:ea:04:48:
8e:d1:c1:56:46:00:e3:00:20:06:c5:c2:30:a7:ef:
28:ac:01:d8:c0:ea:c9:4e:ae:09:a7:0a:2a:91:46:
36:05:da:6b:5e:2f:25:62:9e:ab:4d:ec:5b:21:b9:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:44:B3:8D:1A:7A:DF:CE:B1:A4:B2:D5:03:B1:81:4A:77:67:8A:4D
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0d:ed:c2:92:08:2e:ef:a2:fd:9c:0a:e1:eb:db:20:ac:56:
bf:3d:d7:d7:a1:1e:e7:f3:6e:df:c2:51:53:3e:24:a3:7a:c9:
42:c5:d2:7d:3c:14:67:4c:f9:6f:ef:3e:25:cf:ed:7b:1c:9f:
26:af:b5:1f:77:c3:90:9d:7e:d6:98:74:2e:85:24:91:73:19:
69:0a:cc:cf:6a:0f:cf:e9:16:10:a0:3e:70:17:02:17:fb:0d:
23:1b:1f:44:e2:a0:c3:34:ee:64:37:b0:9e:28:14:31:7d:bb:
ba:6c:83:cc:25:23:25:b6:81:d8:32:58:64:be:39:09:ba:35:
50:ac:3d:a3:a7:c4:e0:cf:15:b7:fa:84:4d:f4:a0:48:25:41:
dd:a6:ac:b8:a8:e9:ff:01:01:07:db:a5:8a:1e:bf:f0:dc:5f:
4d:ee:ac:a2:3a:08:5e:9d:17:99:94:92:89:49:5d:da:d0:f7:
e1:fe:b0:6a:83:e5:e1:e3:3a:6b:a9:2e:34:8b:2e:85:b9:26:
e8:ae:f6:5f:e6:24:9d:73:b9:c5:a1:93:af:b4:f9:82:a6:d5:
81:c8:76:59:a5:9c:2c:2b:9f:f2:ca:fa:58:87:ae:45:79:64:
24:a5:d5:8a:08:af:fd:90:fc:45:00:95:01:b1:20:6d:2e:54:
e0:c7:36:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLj9XSqKTETpQI20eYoDetMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOTYzZjBlNjdmNGQ4OTNjZjNkNzAxYTIzNjEwZTZmMzg5
NTkyNjAwHhcNMjUwNDE5MDEwMDM5WhcNMjUwNDIwMDEwMDM5WjAzMTEwLwYDVQQD
EyhhMjQ0YjM4ZDFhN2FkZmNlYjFhNGIyZDUwM2IxODE0YTc3Njc4YTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKRgw+hwlcIjSp2oeVUq6IKdup1R
fVFUz/X6HVZjVJyzRr0ZOF9UiDtUd1vG4rG5PBnXguu2KlmHegNguubTFrHeX440
AE7dU1Dd529IW/G5NHRIeIomTTS7UZ/yQvcE6ol36scGL6s7SvNcImSDvduSBiTe
jYT6GDXyjbapZoaTIOMZdQAE+avuiohjEvPHrP4CJtaBSLjQ1bbhl/Lqd5BAdODs
V2GdwBu419S0oB+9w1sX/v9HFm3UmYKZfY/qUilKxBzZbh4woTQ6qwHqBEiO0cFW
RgDjACAGxcIwp+8orAHYwOrJTq4JpwoqkUY2BdprXi8lYp6rTexbIblp9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJEs40aet/OsaSy1QOxgUp3Z4pNMB8GA1UdIwQY
MBaAFFCWPw5n9NiTzz1wGiNhDm84lZJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgt
MGYzYzE2NThkMGI3LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgtMGYzYzE2NThkMGI3
LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQ3twpII
Lu+i/ZwK4evbIKxWvz3X16Ee5/Nu38JRUz4ko3rJQsXSfTwUZ0z5b+8+Jc/texyf
Jq+1H3fDkJ1+1ph0LoUkkXMZaQrMz2oPz+kWEKA+cBcCF/sNIxsfROKgwzTuZDew
nigUMX27umyDzCUjJbaB2DJYZL45Cbo1UKw9o6fE4M8Vt/qETfSgSCVB3aasuKjp
/wEBB9ulih6/8NxfTe6sojoIXp0XmZSSiUld2tD34f6waoPl4eM6a6kuNIsuhbkm
6K72X+YknXO5xaGTr7T5gqbVgch2WaWcLCuf8sr6WIeuRXlkJKXVigiv/ZD8RQCV
AbEgbS5U4Mc2qA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:37:08 2025 by rpki-client