Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: SOVVZ8E6xHIGufH76fL0hOyaQj7ezy+EYxdGnZ9LmJ8=
Subject key identifier: 6B:54:2E:8A:02:C5:BC:B4:33:43:52:3F:73:F2:F5:99:71:D9:48:18
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 0196C539D86C12811AE4A792E5854BD29041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 16:00:24 +0000
Manifest this update: Mon 12 May 2025 16:00:24 +0000
Manifest next update: Tue 13 May 2025 16:00:24 +0000
Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: 3qYInvDH/MzmxSDJnjQEL4RHyEh1abYS4ZRwWQu+ZA0=)
3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:d8:6c:12:81:1a:e4:a7:92:e5:85:4b:d2:90:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: May 12 16:00:24 2025 GMT
Not After : May 13 16:00:24 2025 GMT
Subject: CN=6b542e8a02c5bcb43343523f73f2f59971d94818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:fe:14:94:68:d9:19:13:1b:8f:41:f6:0a:
59:cb:6a:9c:7b:1c:28:f1:0b:f0:c5:2e:39:e3:bb:
bf:9a:99:a7:49:f8:c8:b8:22:70:66:87:21:e5:dd:
92:99:ce:f1:d7:82:c1:c5:73:37:f2:75:85:b8:42:
90:db:ad:f6:ef:3e:01:4e:cf:ac:e8:14:4e:a4:3f:
2d:b3:30:6f:8a:48:93:f8:2a:7a:ea:53:6c:2b:ea:
99:39:be:22:81:8d:c3:4d:89:08:f1:5f:23:6d:ac:
1b:cc:d5:be:5f:6c:5a:2a:92:0b:a5:e4:d7:4f:8d:
d9:2b:b8:79:87:5c:ad:8a:c8:b3:8b:89:b3:07:3f:
c1:0f:75:fc:2b:0a:33:86:2b:30:4b:e7:dd:06:ae:
95:0c:f8:f5:a8:0b:8d:da:8b:71:01:85:d8:99:4d:
06:2c:03:a4:3f:95:16:7c:35:10:e8:9a:8d:8b:4b:
1b:4e:50:e9:f3:9d:1c:88:2d:c5:65:e4:64:1f:f9:
e7:50:e4:f5:53:e9:eb:b3:86:55:7d:14:9e:71:2e:
16:de:3f:ea:54:63:b4:77:ea:8d:da:d8:17:ff:a0:
b6:f0:49:d5:e6:b2:d5:d7:f0:f7:26:43:94:19:08:
19:cb:e7:2e:8d:9e:cc:49:a2:7b:ed:6c:bb:f9:67:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:54:2E:8A:02:C5:BC:B4:33:43:52:3F:73:F2:F5:99:71:D9:48:18
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cc:ea:64:8b:d4:86:f8:8d:09:07:d8:45:eb:20:e1:74:0f:
0a:f1:ae:6e:f3:7d:52:f9:b2:42:75:1f:a4:b8:9d:bf:fc:94:
e4:58:17:17:b7:48:3f:be:57:59:f0:dc:c1:ec:6e:29:e1:7d:
fe:a1:69:83:fe:ce:1e:7d:83:75:e9:e2:64:c2:7f:2c:6f:16:
ce:7d:ae:bb:c9:27:ef:58:38:a0:c9:92:50:17:f2:ea:e4:a9:
eb:cc:7d:4d:9c:ba:ff:0d:93:e5:1d:27:08:22:d4:2c:b5:25:
8f:a3:b1:21:78:c6:a6:4d:d7:d5:39:69:d8:ed:1f:fd:fd:db:
98:b9:19:f3:f5:74:6b:ab:8c:64:96:df:8e:ed:d2:5e:6a:b8:
7a:f5:e0:69:22:0a:ea:da:95:7f:3e:03:98:b3:3e:21:67:a6:
be:5b:8e:2f:3d:22:1e:80:e1:ed:c9:35:ab:70:59:e7:24:7b:
05:2e:fb:5a:d6:28:3b:8c:f2:7d:9d:d2:7f:53:dd:83:d4:3b:
9f:c4:40:9f:09:19:9a:42:2a:a4:74:12:f3:0a:f6:23:c3:e2:
eb:61:0f:67:7c:a1:22:f4:de:fc:42:e7:a6:83:b1:3f:e3:6a:
ce:3d:52:67:41:2d:5f:13:81:1c:50:f4:00:71:fc:12:84:89:
83:8e:bb:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFOdhsEoEa5KeS5YVL0pBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTZjNzUwODQwZmU1YzAxMDNhN2Y1MTAyMmM3Y2VlYThm
ZTk2OWIwHhcNMjUwNTEyMTYwMDI0WhcNMjUwNTEzMTYwMDI0WjAzMTEwLwYDVQQD
Eyg2YjU0MmU4YTAyYzViY2I0MzM0MzUyM2Y3M2YyZjU5OTcxZDk0ODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KL+FJRo2RkTG49B9gpZy2qcexwo
8QvwxS4547u/mpmnSfjIuCJwZoch5d2Smc7x14LBxXM38nWFuEKQ26327z4BTs+s
6BROpD8tszBvikiT+Cp66lNsK+qZOb4igY3DTYkI8V8jbawbzNW+X2xaKpILpeTX
T43ZK7h5h1ytisizi4mzBz/BD3X8KwozhiswS+fdBq6VDPj1qAuN2otxAYXYmU0G
LAOkP5UWfDUQ6JqNi0sbTlDp850ciC3FZeRkH/nnUOT1U+nrs4ZVfRSecS4W3j/q
VGO0d+qN2tgX/6C28EnV5rLV1/D3JkOUGQgZy+cujZ7MSaJ77Wy7+WdK4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtULooCxby0M0NSP3Py9Zlx2UgYMB8GA1UdIwQY
MBaAFFBWx1CED+XAEDp/UQIsfO6o/pabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yNTI5NjgtYjhiYS00ZTE5LTg0ZDct
MzIyODI4NmRhNjAxLzEvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8yNTI5NjgtYjhiYS00ZTE5LTg0ZDctMzIyODI4NmRhNjAx
LzEvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARszqZIvU
hviNCQfYResg4XQPCvGubvN9UvmyQnUfpLidv/yU5FgXF7dIP75XWfDcwexuKeF9
/qFpg/7OHn2DdeniZMJ/LG8Wzn2uu8kn71g4oMmSUBfy6uSp68x9TZy6/w2T5R0n
CCLULLUlj6OxIXjGpk3X1Tlp2O0f/f3bmLkZ8/V0a6uMZJbfju3SXmq4evXgaSIK
6tqVfz4DmLM+IWemvluOLz0iHoDh7ck1q3BZ5yR7BS77WtYoO4zyfZ3Sf1Pdg9Q7
n8RAnwkZmkIqpHQS8wr2I8Pi62EPZ3yhIvTe/ELnpoOxP+Nqzj1SZ0EtXxOBHFD0
AHH8EoSJg467cw==
-----END CERTIFICATE-----
Generated at Tue May 13 01:38:53 2025 by rpki-client