Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
File: UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json)
Hash identifier: y0+P6Y4IbfIeHZJLcA6YkZtjreWwOBgCeAwangk8Ba0=
Subject key identifier: B0:4A:DE:60:86:F3:DF:02:EA:5D:80:49:EB:27:D4:79:05:8B:F3:00
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 0196AEE966A87F872133D7ED54977CC9EF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
Manifest number: 038B
Signing time: Thu 08 May 2025 08:00:53 +0000
Manifest this update: Thu 08 May 2025 08:00:53 +0000
Manifest next update: Fri 09 May 2025 08:00:53 +0000
Files and hashes: 1: 38SRARiPlqZX0gFjhdztc5C7_lM.roa (hash: dkiUuBXjsldgNm4qMr8SQIBsw8iMYziR9AeYndQSEBg=)
2: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: RmdRTirHwS1hnLWCRIk/USU6gMM9Je7SXq2ViNTkDt4=)
3: VET9fIhBlbMTkKoXploMWOAPmAw.roa (hash: IZFEuAAvRivghgtvVt+QUqUo/tUxGCoadK0TgrUsiYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e9:66:a8:7f:87:21:33:d7:ed:54:97:7c:c9:ef:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: May 8 08:00:53 2025 GMT
Not After : May 9 08:00:53 2025 GMT
Subject: CN=b04ade6086f3df02ea5d8049eb27d479058bf300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:00:87:45:56:0e:1e:2c:86:d9:d1:7a:f3:
32:a5:62:19:3e:86:80:12:1a:e1:68:c7:fa:4a:4f:
58:91:fc:38:73:3b:d2:7e:42:7b:c1:0e:53:e7:19:
ee:54:5d:65:34:27:d8:c9:10:6b:80:e5:77:bb:7b:
db:03:d0:92:f9:ff:7e:f8:21:ec:9e:9f:db:76:82:
31:b8:c7:87:ec:4e:eb:2d:46:7b:90:66:c3:87:f7:
d9:17:a2:13:2f:ff:f0:4d:43:7e:c9:a8:c7:54:0c:
2c:e8:a6:60:7c:f6:88:08:d5:7a:8f:8e:27:ad:86:
66:18:23:b9:47:a9:18:f4:30:2f:d9:f0:21:81:a2:
e6:7e:5b:14:b5:04:28:3e:5d:b5:12:80:29:5c:8a:
ad:e1:c6:af:4f:c7:d1:ad:b7:5f:ef:95:23:83:d1:
6f:01:a5:28:3e:c6:21:0f:ea:b9:b5:4d:a9:7e:a4:
e6:bd:89:f5:31:85:6c:41:6f:bf:4a:8d:75:d4:7a:
90:cc:95:ca:ed:88:39:1f:8d:84:32:45:f5:38:2a:
ba:8c:c1:0e:60:2b:68:bd:61:5b:cd:65:62:7a:ec:
85:22:8c:ec:dd:08:d9:76:6e:45:3c:63:ba:4c:36:
c7:ab:41:06:23:b0:dd:a1:ce:94:27:08:75:e0:3f:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4A:DE:60:86:F3:DF:02:EA:5D:80:49:EB:27:D4:79:05:8B:F3:00
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e0:b5:9b:2f:b3:d7:cb:bd:be:3f:ca:dd:58:02:12:91:dd:
ae:6b:36:f4:6b:1c:88:29:f3:0f:c0:1f:0a:2f:d4:59:6a:68:
bc:a2:06:87:b4:13:31:5b:1b:e0:c3:0c:47:c2:68:db:9f:a4:
11:de:0c:21:ef:9d:c5:10:53:7a:02:21:38:74:6a:ea:7d:47:
43:cb:cb:15:63:0c:bb:80:7a:ca:c9:2c:b7:79:ed:88:73:eb:
59:22:7d:af:80:8f:15:82:80:1e:25:99:30:b0:48:b6:a4:ab:
bf:f3:aa:27:59:43:19:fe:66:b6:aa:a5:33:b7:4c:80:c3:81:
e1:fa:2c:00:a0:aa:90:53:8a:7f:49:f0:b0:b4:3a:a6:5e:4d:
fd:9b:a2:5c:c1:a5:5a:4a:19:26:2f:31:cd:d7:51:b9:30:26:
12:75:e8:d3:39:72:e1:eb:53:e0:cc:45:3e:d0:f8:47:81:aa:
5d:43:3f:d5:43:5a:0d:e8:42:a8:ac:d6:84:bd:37:26:b7:a9:
08:9a:28:65:cb:ac:32:87:92:4e:cc:35:e7:fe:21:11:27:78:
af:03:85:0a:ce:c9:51:d7:6e:b4:0c:00:5f:80:77:95:46:f1:
88:2f:5b:55:dd:43:3e:4b:a9:fd:11:29:cc:61:87:e2:aa:2f:
50:83:ef:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZau6Waof4chM9ftVJd8ye94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYTJjMmMwNmRkYjg0NjY5YTg5YTk5ZmI4NzU2MDk1MTM0
Yzg3NjYwHhcNMjUwNTA4MDgwMDUzWhcNMjUwNTA5MDgwMDUzWjAzMTEwLwYDVQQD
EyhiMDRhZGU2MDg2ZjNkZjAyZWE1ZDgwNDllYjI3ZDQ3OTA1OGJmMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JwAh0VWDh4shtnRevMypWIZPoaA
EhrhaMf6Sk9Ykfw4czvSfkJ7wQ5T5xnuVF1lNCfYyRBrgOV3u3vbA9CS+f9++CHs
np/bdoIxuMeH7E7rLUZ7kGbDh/fZF6ITL//wTUN+yajHVAws6KZgfPaICNV6j44n
rYZmGCO5R6kY9DAv2fAhgaLmflsUtQQoPl21EoApXIqt4cavT8fRrbdf75Ujg9Fv
AaUoPsYhD+q5tU2pfqTmvYn1MYVsQW+/So111HqQzJXK7Yg5H42EMkX1OCq6jMEO
YCtovWFbzWVieuyFIozs3QjZdm5FPGO6TDbHq0EGI7Ddoc6UJwh14D+8QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBK3mCG898C6l2ASesn1HkFi/MAMB8GA1UdIwQY
MBaAFFGiwsBt24Rmmompn7h1YJUTTIdmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YWYzMTktNWY5My00M2RiLThiMjct
NzA1NGVhNmE2MGQ2LzEvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82YWYzMTktNWY5My00M2RiLThiMjctNzA1NGVhNmE2MGQ2
LzEvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+C1my+z
18u9vj/K3VgCEpHdrms29GsciCnzD8AfCi/UWWpovKIGh7QTMVsb4MMMR8Jo25+k
Ed4MIe+dxRBTegIhOHRq6n1HQ8vLFWMMu4B6yskst3ntiHPrWSJ9r4CPFYKAHiWZ
MLBItqSrv/OqJ1lDGf5mtqqlM7dMgMOB4fosAKCqkFOKf0nwsLQ6pl5N/ZuiXMGl
WkoZJi8xzddRuTAmEnXo0zly4etT4MxFPtD4R4GqXUM/1UNaDehCqKzWhL03Jrep
CJooZcusMoeSTsw15/4hESd4rwOFCs7JUddutAwAX4B3lUbxiC9bVd1DPkup/REp
zGGH4qovUIPv4A==
-----END CERTIFICATE-----
Generated at Thu May 8 15:49:06 2025 by rpki-client