Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
File: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json)
Hash identifier: 8pCro/XQW0ZvKyH+kay7R8XpDuWMxKcyIHb3+LLQ8f4=
Subject key identifier: 45:46:01:61:0B:4A:4F:4F:79:AA:20:20:66:6D:4E:AA:D0:A4:DA:6F
Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
Certificate issuer: /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Certificate serial: 0196A1D25C435EBA4A75C797B734F1D3A850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
Manifest number: 0EC6
Signing time: Mon 05 May 2025 19:00:40 +0000
Manifest this update: Mon 05 May 2025 19:00:40 +0000
Manifest next update: Tue 06 May 2025 19:00:40 +0000
Files and hashes: 1: 5wn1MUshvBmc6ME2IzD6zIe1XZE.roa (hash: QLmy/h6humsEGtFs5Q8B+FIkOzKvZzOF/LsQEEuh7mQ=)
2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: SsDaYOXA2utDTm1miSQMWN52EnKaju4L4B9EiWtYmgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:5c:43:5e:ba:4a:75:c7:97:b7:34:f1:d3:a8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Validity
Not Before: May 5 19:00:40 2025 GMT
Not After : May 6 19:00:40 2025 GMT
Subject: CN=454601610b4a4f4f79aa2020666d4eaad0a4da6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:60:95:57:7d:7b:79:cc:78:16:ae:e0:7a:
9b:1b:fc:63:60:93:6b:60:3b:b3:2f:49:13:6d:bf:
27:c1:c3:05:0c:d5:fa:77:8f:44:f4:0d:62:c4:e7:
55:9e:99:e5:1a:65:45:c2:4b:1a:1c:38:c2:64:fc:
b6:d3:2a:1d:f8:dc:4d:95:43:12:ec:6f:2e:03:6f:
71:a3:56:46:8a:5c:f1:88:af:13:fa:15:97:19:02:
22:7a:d8:9e:28:df:94:11:2c:b8:31:d9:31:9f:5f:
71:3a:80:c8:96:4c:2d:7d:6a:d2:dd:05:fb:b4:b5:
1b:46:c4:41:ff:0c:8b:20:92:06:f3:02:7c:a5:d0:
0b:31:00:92:eb:1e:60:17:a9:43:c0:d1:4c:c8:1b:
7b:f8:bd:f5:c3:cb:29:19:68:9b:4c:93:b7:31:b0:
df:00:fc:bb:2a:64:a1:a5:ba:05:be:1f:5b:54:86:
13:ce:96:dd:d5:d3:9a:7b:e9:d8:1c:5f:98:52:c4:
cc:5f:3b:af:8f:59:b5:2b:a0:f1:d8:e6:56:da:27:
80:58:d5:13:c4:ff:e5:38:87:b6:58:53:b1:16:ee:
01:8e:99:8a:5e:3b:98:e3:72:da:df:53:dd:15:b0:
6a:c6:08:1e:5a:9c:95:83:5c:3d:51:08:d1:6a:b4:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:46:01:61:0B:4A:4F:4F:79:AA:20:20:66:6D:4E:AA:D0:A4:DA:6F
X509v3 Authority Key Identifier:
keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c9:b3:4b:9a:40:de:01:b4:b4:d3:f1:c5:21:55:bb:5f:39:
3b:99:a2:f4:80:d1:26:0c:a4:9d:45:e2:f9:d3:4d:20:c7:92:
c4:f1:82:24:a3:3a:d6:fe:2e:a8:7e:08:99:ea:19:4f:1c:5e:
7f:d5:4c:6a:ce:a0:94:48:d5:e7:92:c3:38:49:99:c1:50:9f:
73:85:3a:19:28:5d:23:dd:16:95:bf:7d:7a:cf:e8:73:14:49:
5a:75:7b:2e:74:31:3f:5a:28:e4:8f:e3:5e:f5:1a:25:7d:06:
d0:64:fc:57:1b:bc:11:0f:e3:91:d9:e4:28:99:89:43:07:b5:
15:cc:57:04:45:43:f4:a1:93:66:b5:6d:01:28:c1:2d:68:27:
e3:76:df:68:ce:db:15:d0:eb:d3:6b:6d:39:11:d8:99:54:a2:
aa:36:b7:fa:3b:74:4f:eb:92:03:a2:01:bf:64:c6:ff:4d:12:
60:f4:a5:4d:d9:46:a6:c0:4d:f3:dc:69:8b:13:ce:6d:1b:6f:
ab:d6:19:16:44:1c:a6:0e:6f:ef:ca:6c:01:e0:de:54:e8:69:
84:24:5b:90:e0:39:c9:bb:55:df:b8:09:0f:e8:2b:9f:c6:9e:
23:39:48:91:ca:57:3b:27:27:71:a2:28:37:7e:71:90:09:b3:
3a:55:2a:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZah0lxDXrpKdceXtzTx06hQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjJiODVhMWQyYzUxZDk5MDY5Y2EzYTVhZmY1MmVjYzZh
OWFhYjQwHhcNMjUwNTA1MTkwMDQwWhcNMjUwNTA2MTkwMDQwWjAzMTEwLwYDVQQD
Eyg0NTQ2MDE2MTBiNGE0ZjRmNzlhYTIwMjA2NjZkNGVhYWQwYTRkYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaBglVd9e3nMeBau4HqbG/xjYJNr
YDuzL0kTbb8nwcMFDNX6d49E9A1ixOdVnpnlGmVFwksaHDjCZPy20yod+NxNlUMS
7G8uA29xo1ZGilzxiK8T+hWXGQIietieKN+UESy4Mdkxn19xOoDIlkwtfWrS3QX7
tLUbRsRB/wyLIJIG8wJ8pdALMQCS6x5gF6lDwNFMyBt7+L31w8spGWibTJO3MbDf
APy7KmShpboFvh9bVIYTzpbd1dOae+nYHF+YUsTMXzuvj1m1K6Dx2OZW2ieAWNUT
xP/lOIe2WFOxFu4BjpmKXjuY43La31PdFbBqxggeWpyVg1w9UQjRarS9GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVGAWELSk9PeaogIGZtTqrQpNpvMB8GA1UdIwQY
MBaAFLhiuFodLFHZkGnKOlr/UuzGqaq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2Yt
Mjc4ZmQ0NzVmM2ZiLzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2YtMjc4ZmQ0NzVmM2Zi
LzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwcmzS5pA
3gG0tNPxxSFVu185O5mi9IDRJgyknUXi+dNNIMeSxPGCJKM61v4uqH4ImeoZTxxe
f9VMas6glEjV55LDOEmZwVCfc4U6GShdI90Wlb99es/ocxRJWnV7LnQxP1oo5I/j
XvUaJX0G0GT8Vxu8EQ/jkdnkKJmJQwe1FcxXBEVD9KGTZrVtASjBLWgn43bfaM7b
FdDr02ttORHYmVSiqja3+jt0T+uSA6IBv2TG/00SYPSlTdlGpsBN89xpixPObRtv
q9YZFkQcpg5v78psAeDeVOhphCRbkOA5ybtV37gJD+grn8aeIzlIkcpXOycncaIo
N35xkAmzOlUqFA==
-----END CERTIFICATE-----
Generated at Mon May 5 23:14:04 2025 by rpki-client