Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier: t7L3yGvbdXpVUrBJPX2bchKvKfzKFTy05nklIj0z5wo=
Subject key identifier: 99:2E:90:BE:38:83:3A:CC:FA:E1:8D:CB:DB:6B:F7:33:EA:89:8D:8D
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 0196A277301BCC0E8BFDC969F282DA73C8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number: 152A
Signing time: Mon 05 May 2025 22:00:42 +0000
Manifest this update: Mon 05 May 2025 22:00:42 +0000
Manifest next update: Tue 06 May 2025 22:00:42 +0000
Files and hashes: 1: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: UuzXW+tYVGeh9AilRkYSze90wfG2REr4Yv6oCZjfUzc=)
2: zqm8sqmxX0F8ohqYYWfQXp8iRJ4.roa (hash: dDiUuU6g/ottfUPpI3HwKpho2gKA2x4esWjcJownMww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:30:1b:cc:0e:8b:fd:c9:69:f2:82:da:73:c8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: May 5 22:00:42 2025 GMT
Not After : May 6 22:00:42 2025 GMT
Subject: CN=992e90be38833accfae18dcbdb6bf733ea898d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:2d:5e:ad:1e:f4:e9:f4:e8:18:13:1f:7a:
1a:21:fa:8a:51:0a:c4:f0:81:e9:6d:c1:21:11:4e:
38:94:b7:8d:c6:43:b8:76:4c:94:4e:f5:6b:68:3b:
54:be:11:59:7b:d0:25:19:3a:b7:fb:12:88:5a:2c:
5c:a2:15:00:cc:f5:42:83:0a:f2:f2:f8:c4:ab:be:
a9:ec:83:b3:fd:a1:ed:aa:bb:b7:c2:ab:a5:4d:ba:
6f:a7:0b:db:df:63:3a:b2:74:fc:75:af:d0:49:23:
3b:0c:fc:ca:d5:ff:a3:73:9c:db:5c:4f:19:7a:1c:
e9:08:b6:1c:59:8a:71:2b:51:c3:82:73:ca:f9:77:
81:19:0c:5b:1d:98:2d:b7:fe:99:a9:e1:4a:1d:06:
e7:48:72:d2:ab:37:8b:4c:13:46:7c:c7:ec:5f:da:
7b:fc:8d:ef:62:f9:b2:0c:59:3e:ae:9c:94:75:aa:
2b:cf:a0:42:e4:4b:17:52:a9:25:e7:60:52:5f:6f:
28:28:1c:6d:41:ba:71:86:76:b2:72:00:58:88:3b:
b2:73:e6:69:59:e0:65:5c:e5:48:56:6e:f1:4d:8e:
92:0d:11:f0:60:00:26:03:54:84:d2:ba:bb:a0:87:
fc:41:62:aa:d7:b3:ff:bf:30:4f:64:7e:69:99:d6:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2E:90:BE:38:83:3A:CC:FA:E1:8D:CB:DB:6B:F7:33:EA:89:8D:8D
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:da:73:9c:15:8d:6f:65:ee:36:7b:69:08:ff:84:33:10:31:
62:67:6a:26:88:d8:11:ac:05:c3:b6:79:70:4d:80:ac:3f:89:
9d:a5:cc:4b:1c:52:6f:ce:0d:90:19:e0:ec:a3:97:d9:60:0a:
25:c3:bd:3b:04:6c:b4:d1:c9:14:ba:b7:e5:55:a5:e6:94:98:
a3:77:cd:a8:c7:52:7d:81:94:9e:93:fb:6b:09:32:b5:20:04:
ed:6f:ed:cc:b8:2f:d6:65:3b:5f:3d:a5:4d:39:20:01:78:0f:
d6:4c:b0:f3:3a:89:c3:bd:12:52:e6:57:ac:a1:ff:6f:91:f9:
2e:14:57:b1:6d:e2:08:ea:3c:a7:9d:01:a5:94:4d:60:04:e5:
c4:a3:19:89:36:cc:38:28:58:60:a0:1f:08:45:04:3e:ca:68:
bc:ef:8e:9d:fa:75:0f:ce:f2:84:4a:f3:0c:a2:08:bf:a9:76:
d0:8b:ba:be:bc:98:08:24:d6:36:71:14:03:bc:75:2d:fb:cf:
27:52:07:d1:a4:0f:e9:69:1b:d1:1e:d0:8a:4a:72:d2:61:38:
f8:c4:45:c1:8e:cf:75:e4:04:8a:43:61:94:15:06:9b:aa:da:
45:5c:36:cb:91:35:db:da:3d:0d:3b:2f:63:c2:3b:75:3a:df:
8f:e6:26:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaidzAbzA6L/clp8oLac8jnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNTc1NjFjYTJkYmY3NTBlOGY1ZTBiNzM4OWVmMDljZTli
NWJjZWEwHhcNMjUwNTA1MjIwMDQyWhcNMjUwNTA2MjIwMDQyWjAzMTEwLwYDVQQD
Eyg5OTJlOTBiZTM4ODMzYWNjZmFlMThkY2JkYjZiZjczM2VhODk4ZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyictXq0e9On06BgTH3oaIfqKUQrE
8IHpbcEhEU44lLeNxkO4dkyUTvVraDtUvhFZe9AlGTq3+xKIWixcohUAzPVCgwry
8vjEq76p7IOz/aHtqru3wqulTbpvpwvb32M6snT8da/QSSM7DPzK1f+jc5zbXE8Z
ehzpCLYcWYpxK1HDgnPK+XeBGQxbHZgtt/6ZqeFKHQbnSHLSqzeLTBNGfMfsX9p7
/I3vYvmyDFk+rpyUdaorz6BC5EsXUqkl52BSX28oKBxtQbpxhnaycgBYiDuyc+Zp
WeBlXOVIVm7xTY6SDRHwYAAmA1SE0rq7oIf8QWKq17P/vzBPZH5pmdYfawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkukL44gzrM+uGNy9tr9zPqiY2NMB8GA1UdIwQY
MBaAFLtXVhyi2/dQ6PXgtzie8JzptbzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUt
MDIxMjVlNDRlM2E4LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUtMDIxMjVlNDRlM2E4
LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdpznBWN
b2XuNntpCP+EMxAxYmdqJojYEawFw7Z5cE2ArD+JnaXMSxxSb84NkBng7KOX2WAK
JcO9OwRstNHJFLq35VWl5pSYo3fNqMdSfYGUnpP7awkytSAE7W/tzLgv1mU7Xz2l
TTkgAXgP1kyw8zqJw70SUuZXrKH/b5H5LhRXsW3iCOo8p50BpZRNYATlxKMZiTbM
OChYYKAfCEUEPspovO+Onfp1D87yhErzDKIIv6l20Iu6vryYCCTWNnEUA7x1LfvP
J1IH0aQP6Wkb0R7Qikpy0mE4+MRFwY7PdeQEikNhlBUGm6raRVw2y5E129o9DTsv
Y8I7dTrfj+Ymow==
-----END CERTIFICATE-----
Generated at Tue May 6 02:13:18 2025 by rpki-client