Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier: wNcBgeSwPY+mvPnD3BttB4zhQonElgZpb2IvbQRNemg=
Subject key identifier: 4A:C7:FE:B3:BC:08:6F:42:B0:77:E8:97:C8:87:F7:C2:B7:B3:4B:5C
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 0196C495418D588F8D422645ED7F6FB023ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 13:00:38 +0000
Manifest this update: Mon 12 May 2025 13:00:38 +0000
Manifest next update: Tue 13 May 2025 13:00:38 +0000
Files and hashes: 1: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: lUfG/DV9yvobQP2r2FXDx4P+wZXHZvRMMAxpN4aIDj0=)
2: dxBH4TV51cTFiAYXOVtwRqrZraY.roa (hash: kYpITsy+89G8dkg3+FaIKDSidYdWIry8+rbXb5yDBDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:41:8d:58:8f:8d:42:26:45:ed:7f:6f:b0:23:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: May 12 13:00:38 2025 GMT
Not After : May 13 13:00:38 2025 GMT
Subject: CN=4ac7feb3bc086f42b077e897c887f7c2b7b34b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:49:89:d9:c1:a2:65:8a:06:ca:cd:10:7d:84:
0c:91:f1:c1:e7:64:95:1d:87:59:d0:56:20:a9:2e:
94:e3:67:ee:41:00:cd:36:2f:5a:34:f6:b3:88:71:
8f:83:5c:cc:eb:d1:93:8e:6f:bc:0e:5d:1a:06:ef:
b0:b8:17:81:e0:de:c4:2a:15:7e:0e:55:49:eb:5b:
70:cc:01:f5:9e:8a:5a:10:4b:af:c2:f9:3b:c9:bb:
0d:4b:32:88:ce:71:8e:bf:a3:6b:8f:a8:5d:27:87:
30:59:c0:b9:f2:85:c6:26:76:78:d3:ff:1f:e5:ae:
1f:cd:27:64:46:4f:61:08:3e:df:91:1f:7a:9f:a4:
91:c8:75:ab:7e:fa:47:69:82:64:10:61:aa:94:07:
5e:39:6e:76:73:cb:63:27:c2:85:a1:a9:67:9f:46:
6e:6d:42:92:4b:f9:c4:b9:1b:98:67:18:05:1d:b8:
8d:0c:d7:2c:f6:a0:7e:82:4a:74:dd:8c:45:bd:57:
bd:56:ca:c7:bb:0b:95:49:d3:b4:91:8d:b4:68:16:
12:ab:b4:c5:21:0b:ac:c2:42:ea:04:09:81:87:e3:
70:d0:15:e0:49:2c:74:63:e8:e5:25:13:1e:63:da:
05:1d:8e:3f:89:4d:43:a1:be:54:ab:24:e6:d2:8f:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C7:FE:B3:BC:08:6F:42:B0:77:E8:97:C8:87:F7:C2:B7:B3:4B:5C
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d0:76:8f:26:6f:3f:c8:26:32:3b:6c:a0:07:44:2d:c1:b0:
13:bd:91:08:3d:8a:ab:da:56:1d:3c:8a:98:87:de:0b:2e:31:
cd:da:3f:89:58:c5:40:54:e0:d8:51:11:73:78:73:44:54:48:
63:0c:03:ae:73:80:eb:03:74:8f:c1:bd:b7:44:91:00:25:3c:
8e:92:9b:61:f8:07:02:be:d3:ec:ff:34:8c:98:3c:6e:b0:df:
1f:a0:58:d0:c6:31:e7:20:14:cb:d2:27:a1:67:85:d5:52:75:
c4:52:52:b3:2d:86:3d:ac:55:35:45:fc:af:97:fd:9f:57:3b:
58:49:75:38:cc:1a:84:ec:30:65:da:12:d4:91:14:9d:f6:92:
ae:06:1b:f4:ea:f3:7f:ee:8f:01:be:ff:42:5b:e2:e7:eb:dc:
89:1b:3e:a6:4b:cd:b6:6a:65:00:84:23:d2:71:ff:e2:ea:26:
4b:73:85:36:6e:3d:93:35:27:5f:71:37:cd:fa:d8:79:4b:26:
07:08:1e:f9:c3:eb:21:8a:fb:08:6d:c7:b5:00:3b:19:25:53:
7c:87:bc:70:cb:cf:5b:75:86:a7:8b:7d:b4:61:7c:c9:97:1f:
d2:ea:f6:a7:4e:ad:26:07:d0:8b:d6:79:c8:d3:b2:e8:48:79:
92:f9:ee:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbElUGNWI+NQiZF7X9vsCPtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDYzM2YxOWY2MWQ2NTQ2ZWJhYmY3ZGU5ZmI3YWE5ODdl
ZDViZjMwHhcNMjUwNTEyMTMwMDM4WhcNMjUwNTEzMTMwMDM4WjAzMTEwLwYDVQQD
Eyg0YWM3ZmViM2JjMDg2ZjQyYjA3N2U4OTdjODg3ZjdjMmI3YjM0YjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUmJ2cGiZYoGys0QfYQMkfHB52SV
HYdZ0FYgqS6U42fuQQDNNi9aNPaziHGPg1zM69GTjm+8Dl0aBu+wuBeB4N7EKhV+
DlVJ61twzAH1nopaEEuvwvk7ybsNSzKIznGOv6Nrj6hdJ4cwWcC58oXGJnZ40/8f
5a4fzSdkRk9hCD7fkR96n6SRyHWrfvpHaYJkEGGqlAdeOW52c8tjJ8KFoalnn0Zu
bUKSS/nEuRuYZxgFHbiNDNcs9qB+gkp03YxFvVe9VsrHuwuVSdO0kY20aBYSq7TF
IQuswkLqBAmBh+Nw0BXgSSx0Y+jlJRMeY9oFHY4/iU1Dob5UqyTm0o+QCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErH/rO8CG9CsHfol8iH98K3s0tcMB8GA1UdIwQY
MBaAFFNGM/GfYdZUbrq/fen7eqmH7VvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgt
ZjBjYWQ5ZmY2NWJlLzEvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgtZjBjYWQ5ZmY2NWJl
LzEvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtB2jyZv
P8gmMjtsoAdELcGwE72RCD2Kq9pWHTyKmIfeCy4xzdo/iVjFQFTg2FERc3hzRFRI
YwwDrnOA6wN0j8G9t0SRACU8jpKbYfgHAr7T7P80jJg8brDfH6BY0MYx5yAUy9In
oWeF1VJ1xFJSsy2GPaxVNUX8r5f9n1c7WEl1OMwahOwwZdoS1JEUnfaSrgYb9Orz
f+6PAb7/Qlvi5+vciRs+pkvNtmplAIQj0nH/4uomS3OFNm49kzUnX3E3zfrYeUsm
Bwge+cPrIYr7CG3HtQA7GSVTfIe8cMvPW3WGp4t9tGF8yZcf0ur2p06tJgfQi9Z5
yNOy6Eh5kvnuMw==
-----END CERTIFICATE-----
Generated at Mon May 12 19:01:56 2025 by rpki-client