Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: XW469FB/zGQj9RnCX1QAUsSIbf1C4NT7crNuS19JQ5U=
Subject key identifier: D4:88:A9:9A:68:E7:AA:D4:D6:AC:3B:C1:CC:D6:25:9D:BD:04:AA:F3
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 0196B522132E3C79C6F22DA5B85736A50771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0C8A
Signing time: Fri 09 May 2025 13:00:31 +0000
Manifest this update: Fri 09 May 2025 13:00:31 +0000
Manifest next update: Sat 10 May 2025 13:00:31 +0000
Files and hashes: 1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: LWwGFj26NMylBZ5X9LHGFQcXUYXZHzcuY/tY+J4KQ1o=)
3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:22:13:2e:3c:79:c6:f2:2d:a5:b8:57:36:a5:07:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: May 9 13:00:31 2025 GMT
Not After : May 10 13:00:31 2025 GMT
Subject: CN=d488a99a68e7aad4d6ac3bc1ccd6259dbd04aaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:f7:22:e7:4f:d3:6f:17:8a:39:fd:1b:f1:
f8:2f:e0:7c:21:83:64:e1:1c:0d:34:61:23:06:d4:
0d:81:1f:a9:8f:f3:ce:61:67:84:17:68:ad:fb:35:
11:95:f7:5a:c0:1b:be:d4:36:22:84:cd:6d:42:5c:
0a:7f:f9:1d:d2:9b:c1:f1:02:b7:32:6c:17:58:32:
fb:0f:53:95:e6:e4:89:1b:c8:42:77:62:b1:9e:9d:
ee:38:40:ad:64:9b:da:d9:3f:1d:a8:2a:33:aa:5c:
9b:60:32:7f:c3:5d:f7:87:d7:53:00:03:21:8f:8a:
ee:06:0c:e4:bb:e5:f2:fc:b1:f7:d8:71:7c:aa:5e:
46:40:79:96:84:de:fb:2a:8c:38:b7:d8:6b:f7:c4:
52:bd:d5:e1:4a:8f:0e:88:15:a0:9c:97:ff:a9:83:
19:3d:45:a8:bb:ac:6e:0f:3d:f5:eb:64:82:ec:b6:
38:c4:f4:a9:1a:e7:3a:6b:66:73:cc:ee:66:35:4a:
4b:1b:b1:d1:f9:14:54:fd:ca:05:29:4c:31:c8:96:
24:27:1f:40:aa:be:2c:32:7d:7f:ee:94:77:40:93:
6c:48:57:d6:64:d2:fa:c0:e3:8b:59:9a:b0:2e:46:
22:fe:11:bb:7e:22:3c:73:95:b3:c7:f4:f4:0f:ae:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:88:A9:9A:68:E7:AA:D4:D6:AC:3B:C1:CC:D6:25:9D:BD:04:AA:F3
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0b:55:f8:97:34:f5:59:b5:f1:53:69:2b:30:8b:54:15:a9:
d2:3d:b6:c3:81:04:5a:f8:7f:33:8e:38:eb:40:43:70:7b:6c:
7d:53:dd:15:1e:df:55:f0:2d:d6:23:66:0e:e4:1b:47:04:fb:
cf:c1:06:b0:b6:54:1e:d2:bc:d1:91:71:83:8c:23:15:1c:97:
c5:98:fc:cc:41:ef:d3:9e:a3:57:e1:bb:f6:8d:52:4e:1b:a7:
0e:4e:da:72:f2:58:fe:fa:df:f8:47:31:42:22:f7:ba:41:2c:
a6:3c:33:e6:68:eb:45:d1:63:17:96:1b:3c:ea:97:ed:fe:b6:
21:ac:d3:e4:f6:48:76:f1:7e:0e:08:cd:32:63:6a:47:59:3b:
8d:16:86:92:56:51:dd:53:cc:2e:1e:bc:98:d9:f7:24:f7:7d:
cf:17:e8:cc:94:a6:a2:02:fd:b5:e7:7d:3e:a2:a1:5c:4f:14:
1a:51:4a:bb:26:1e:89:05:af:01:89:df:c9:aa:d9:64:cf:3e:
3d:18:f0:73:98:24:59:a7:01:89:7c:75:4c:a3:70:b4:c6:17:
0f:5c:89:9d:aa:bf:56:81:71:a7:d6:c4:5e:7c:de:fe:2e:50:
58:57:9a:b3:eb:08:54:6a:5c:6f:67:bf:f7:b6:22:70:23:6e:
fa:2e:40:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1IhMuPHnG8i2luFc2pQdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTE0MDQ5NWJkMDZjMmU4ZWZhY2I3ZWQwYTMxNTE2ZGIx
ZjQwNWYwHhcNMjUwNTA5MTMwMDMxWhcNMjUwNTEwMTMwMDMxWjAzMTEwLwYDVQQD
EyhkNDg4YTk5YTY4ZTdhYWQ0ZDZhYzNiYzFjY2Q2MjU5ZGJkMDRhYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJj3IudP028Xijn9G/H4L+B8IYNk
4RwNNGEjBtQNgR+pj/POYWeEF2it+zURlfdawBu+1DYihM1tQlwKf/kd0pvB8QK3
MmwXWDL7D1OV5uSJG8hCd2Kxnp3uOECtZJva2T8dqCozqlybYDJ/w133h9dTAAMh
j4ruBgzku+Xy/LH32HF8ql5GQHmWhN77Kow4t9hr98RSvdXhSo8OiBWgnJf/qYMZ
PUWou6xuDz3162SC7LY4xPSpGuc6a2ZzzO5mNUpLG7HR+RRU/coFKUwxyJYkJx9A
qr4sMn1/7pR3QJNsSFfWZNL6wOOLWZqwLkYi/hG7fiI8c5Wzx/T0D642AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSIqZpo56rU1qw7wczWJZ29BKrzMB8GA1UdIwQY
MBaAFFHhQElb0GwujvrLftCjFRbbH0BfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUt
OTg2NzY0MmMyZjEwLzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUtOTg2NzY0MmMyZjEw
LzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAtV+Jc0
9Vm18VNpKzCLVBWp0j22w4EEWvh/M44460BDcHtsfVPdFR7fVfAt1iNmDuQbRwT7
z8EGsLZUHtK80ZFxg4wjFRyXxZj8zEHv056jV+G79o1SThunDk7acvJY/vrf+Ecx
QiL3ukEspjwz5mjrRdFjF5YbPOqX7f62IazT5PZIdvF+DgjNMmNqR1k7jRaGklZR
3VPMLh68mNn3JPd9zxfozJSmogL9ted9PqKhXE8UGlFKuyYeiQWvAYnfyarZZM8+
PRjwc5gkWacBiXx1TKNwtMYXD1yJnaq/VoFxp9bEXnze/i5QWFeas+sIVGpcb2e/
97YicCNu+i5AQw==
-----END CERTIFICATE-----
Generated at Fri May 9 20:46:01 2025 by rpki-client