Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier: V4sRdwq0hG8kxStl46KiMySntUmltjWVW/rhkdYNmGw=
Subject key identifier: 71:2D:62:C5:77:BD:D0:A4:63:B5:27:58:01:87:92:E1:54:1B:5E:F2
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer: /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial: 0196C0819BDBD7F01338F05813EAE63B5B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number: 14F2
Signing time: Sun 11 May 2025 18:00:41 +0000
Manifest this update: Sun 11 May 2025 18:00:41 +0000
Manifest next update: Mon 12 May 2025 18:00:41 +0000
Files and hashes: 1: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: WE57qKxFWEAl2dNzGaD9IcjMlN4Abbh9lgFBR4MgGIA=)
2: As_EZ-RvP3qi1sws1jil8dnna6k.roa (hash: OtrJo+OCLnikRPWLn5xnNsduIJXUQk6NGSjartknylA=)
3: MSgwMQBVeKrb-aSmClVXWXeIrYA.roa (hash: QNReZgAEU8FQp9RxZ7cqr3S4KzJDn6XR61dqK9DUir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:9b:db:d7:f0:13:38:f0:58:13:ea:e6:3b:5b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Validity
Not Before: May 11 18:00:41 2025 GMT
Not After : May 12 18:00:41 2025 GMT
Subject: CN=712d62c577bdd0a463b52758018792e1541b5ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:16:95:de:d2:69:12:1b:63:62:cb:c1:48:
31:2d:23:92:3a:a2:b2:d0:bc:38:4b:02:30:7d:ec:
c5:5a:34:6b:b9:13:8f:25:70:91:03:e0:d1:36:e7:
a2:19:b4:5f:0d:df:02:5f:d7:72:18:83:68:11:45:
4a:87:e6:a4:69:bd:bb:32:68:3c:32:d6:46:d2:e8:
34:a9:3d:0c:88:d0:77:a8:a0:9e:2f:02:ae:0f:f3:
59:e6:6c:3b:20:50:ce:39:e4:5b:0c:77:94:2e:51:
75:6f:ff:0a:9a:1f:b1:f7:ca:a6:70:21:6b:c0:60:
0d:46:2a:a5:8f:0b:f6:41:12:c3:a0:af:16:2d:86:
46:0a:61:a9:ee:bf:48:c6:39:61:ed:51:78:71:63:
b2:e7:ea:1d:d4:0a:a7:84:29:7c:b3:10:1e:0c:15:
e5:25:d0:20:41:b3:aa:72:a6:0f:73:11:0a:de:45:
d9:69:1c:18:1f:1e:a0:c6:4c:d2:21:33:0c:f9:3a:
bf:ff:12:46:15:08:8d:1d:26:eb:e7:47:79:3d:91:
a5:da:a0:2a:ac:82:ea:25:c3:3b:fb:52:29:d0:7f:
8e:0f:96:76:f8:07:f9:64:c9:db:45:03:28:04:67:
e3:5c:19:41:21:ee:a2:f0:36:ea:45:ce:ca:7b:ca:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2D:62:C5:77:BD:D0:A4:63:B5:27:58:01:87:92:E1:54:1B:5E:F2
X509v3 Authority Key Identifier:
keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:77:ec:4c:7a:9c:97:34:19:62:e7:93:03:f8:7a:04:45:03:
97:11:11:0e:9c:23:11:8f:64:44:16:73:a2:39:87:ff:ba:36:
09:df:5f:1b:49:a0:73:7d:ee:21:bf:6b:95:9f:f9:d2:fb:74:
f0:7c:4e:bf:32:6c:92:e6:62:46:4b:1f:1d:25:a6:f0:5e:0d:
31:d2:4c:c5:ed:d9:a7:10:41:02:e6:46:40:8b:93:9f:1c:d4:
fd:5d:4b:c9:28:3b:a6:1f:5a:67:1b:9b:36:f5:f3:fe:7a:65:
ad:07:55:f4:19:93:10:02:49:13:e2:c0:f7:fb:f2:ff:3c:2f:
7a:4b:14:e7:f1:18:79:af:46:ec:26:68:7c:30:9c:41:cb:dc:
e9:86:45:92:63:19:8e:33:3a:06:7f:7b:7b:56:a5:8e:f4:b0:
5b:a6:98:26:be:fc:b9:41:32:74:d2:73:c4:5e:87:c5:58:45:
0b:42:d9:e6:4d:c3:37:52:81:3c:48:78:91:30:81:8a:37:34:
2e:84:c0:64:e2:df:9c:9f:e1:75:f4:1f:00:43:68:bd:f9:b1:
3b:c4:e8:84:17:08:63:df:11:ca:31:c5:83:87:f2:08:fa:4f:
52:c8:93:34:9e:04:ad:17:bf:86:07:30:80:0a:64:b7:f8:34:
65:96:35:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAgZvb1/ATOPBYE+rmO1sWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDUwYzYzNzY2NTVlZWMxZGQyZGE0YmQyMWQ1ZjEwNGE5
NmQ5MDQwHhcNMjUwNTExMTgwMDQxWhcNMjUwNTEyMTgwMDQxWjAzMTEwLwYDVQQD
Eyg3MTJkNjJjNTc3YmRkMGE0NjNiNTI3NTgwMTg3OTJlMTU0MWI1ZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvUWld7SaRIbY2LLwUgxLSOSOqKy
0Lw4SwIwfezFWjRruROPJXCRA+DRNueiGbRfDd8CX9dyGINoEUVKh+akab27Mmg8
MtZG0ug0qT0MiNB3qKCeLwKuD/NZ5mw7IFDOOeRbDHeULlF1b/8Kmh+x98qmcCFr
wGANRiqljwv2QRLDoK8WLYZGCmGp7r9Ixjlh7VF4cWOy5+od1AqnhCl8sxAeDBXl
JdAgQbOqcqYPcxEK3kXZaRwYHx6gxkzSITMM+Tq//xJGFQiNHSbr50d5PZGl2qAq
rILqJcM7+1Ip0H+OD5Z2+Af5ZMnbRQMoBGfjXBlBIe6i8DbqRc7Ke8pcCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEtYsV3vdCkY7UnWAGHkuFUG17yMB8GA1UdIwQY
MBaAFPVFDGN2ZV7sHdLaS9IdXxBKltkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVVTVkzWmxYdXdkMHRwTDBoMWZFRXFXMlFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iMTIyYjAtZDQ2MS00MDlkLWJiZDgt
NmQxZjYwNTQzZTljLzEvOVVVTVkzWmxYdXdkMHRwTDBoMWZFRXFXMlFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9iMTIyYjAtZDQ2MS00MDlkLWJiZDgtNmQxZjYwNTQzZTlj
LzEvOVVVTVkzWmxYdXdkMHRwTDBoMWZFRXFXMlFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3fsTHqc
lzQZYueTA/h6BEUDlxERDpwjEY9kRBZzojmH/7o2Cd9fG0mgc33uIb9rlZ/50vt0
8HxOvzJskuZiRksfHSWm8F4NMdJMxe3ZpxBBAuZGQIuTnxzU/V1LySg7ph9aZxub
NvXz/nplrQdV9BmTEAJJE+LA9/vy/zwveksU5/EYea9G7CZofDCcQcvc6YZFkmMZ
jjM6Bn97e1aljvSwW6aYJr78uUEydNJzxF6HxVhFC0LZ5k3DN1KBPEh4kTCBijc0
LoTAZOLfnJ/hdfQfAENovfmxO8TohBcIY98RyjHFg4fyCPpPUsiTNJ4ErRe/hgcw
gApkt/g0ZZY1PQ==
-----END CERTIFICATE-----
Generated at Mon May 12 04:18:52 2025 by rpki-client