Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: dxNvi0Hwo7slw6ccOcfZRchgfKhnsFl/qOtCFfkoJaQ=
Subject key identifier: 29:D6:7D:02:3B:C5:E6:E7:DC:C5:0D:C9:FF:87:10:6A:42:E0:1F:69
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 0196C193D0A9C869EB78490683E8E4B7EAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 1372
Signing time: Sun 11 May 2025 23:00:11 +0000
Manifest this update: Sun 11 May 2025 23:00:11 +0000
Manifest next update: Mon 12 May 2025 23:00:11 +0000
Files and hashes: 1: ChY1pYRmqo4gHf3bQwXo87kO4Nw.roa (hash: b4fVB4MFOUGQYpV3kbDWZEsf3wE2N+b11phHSCf2ye8=)
2: jt0l6f1HzdztQ5-9M9PF01o4QMM.roa (hash: bW5QIzkXWNE6wUtrANSwkopBsOcaGI07YMCfYlmNYuc=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: 9kM1nUcDCp6xQSosq95/NGL4QB2qHan+vX6Gy4dMAZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:93:d0:a9:c8:69:eb:78:49:06:83:e8:e4:b7:ea:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: May 11 23:00:11 2025 GMT
Not After : May 12 23:00:11 2025 GMT
Subject: CN=29d67d023bc5e6e7dcc50dc9ff87106a42e01f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:04:18:40:3e:76:06:a8:c0:a8:20:33:e1:
7f:aa:3a:cf:ac:66:24:ba:85:40:56:aa:dd:c0:d9:
0d:2f:f8:00:16:4e:89:04:53:f7:29:98:36:e9:b5:
af:da:bd:01:ff:d2:51:de:24:67:45:45:cd:6d:41:
7b:45:54:e7:c6:96:ab:bc:e8:ad:60:99:a6:a0:12:
39:23:5a:9c:ed:51:3c:82:96:83:5a:d9:9d:2e:8f:
e1:f8:8d:f6:ce:a5:53:ef:6d:04:9b:79:63:49:a5:
44:99:55:0d:70:57:df:50:55:f9:eb:8b:18:4e:5c:
b3:d5:5a:9a:6c:29:84:83:1c:28:ad:c1:8e:33:5a:
5f:50:7a:4f:cd:05:11:59:c6:80:b6:92:97:6a:cc:
64:f1:ea:15:6b:1e:79:bd:99:73:6c:73:88:14:f7:
c4:a4:a5:29:e9:2a:94:6e:87:9f:d4:88:42:33:ba:
bd:05:be:03:33:9b:4f:65:46:8b:d5:5e:ee:90:12:
62:d1:3b:9b:ec:cf:ae:bd:52:41:96:89:ca:1d:75:
1c:50:b1:80:55:f1:55:12:b7:37:e8:d2:2a:e3:e3:
b0:ea:dd:ec:74:7f:32:41:b5:a0:46:83:81:0c:3d:
95:16:68:78:b8:82:68:db:11:f5:02:4f:64:d0:80:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D6:7D:02:3B:C5:E6:E7:DC:C5:0D:C9:FF:87:10:6A:42:E0:1F:69
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a9:7f:8b:db:13:4f:6d:f9:90:f6:fb:73:a5:25:aa:cd:00:
ac:79:39:e1:a7:97:6d:2b:5b:d9:4e:15:60:91:2d:8c:6c:9a:
25:92:50:d2:58:8e:e9:b9:9d:80:c2:c6:e4:30:5f:67:b6:4a:
3a:11:c2:ac:90:fc:a5:c9:f3:5a:27:f8:c5:4e:79:0e:52:43:
d8:b4:09:24:e6:88:ba:82:67:af:70:c2:85:fe:f5:9c:96:72:
67:6b:17:33:bb:c0:12:78:72:4c:92:11:ac:fa:b0:6a:23:65:
e0:be:35:97:64:53:17:e5:61:ef:be:65:44:5b:e6:0f:e5:e3:
4e:3c:d4:f4:35:6f:a2:7a:8e:eb:23:6c:55:eb:b7:e3:d1:51:
46:84:fd:18:df:7e:f4:6e:a6:38:2c:5f:f5:0b:86:0f:fe:da:
30:52:97:5e:be:7c:0a:1c:6e:bf:d1:52:d0:4a:1d:cf:b4:1f:
db:93:19:58:7c:b9:b1:ea:5d:2f:dc:d4:44:c6:2d:98:d5:5a:
9a:4e:ce:b7:15:b1:7f:31:cb:b4:53:d0:ea:ad:bf:b2:ea:a7:
0a:10:09:e0:d0:4d:75:af:ae:a9:c1:70:49:dd:02:0c:4b:d3:
9b:6f:4b:41:cf:6e:dc:64:53:1d:46:d5:59:ff:0c:8b:10:27:
2e:f1:22:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBk9CpyGnreEkGg+jkt+rFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmZkMTIzY2I5M2UyNGUwMjVmOTUyODQyMTA4NDAyOTU4
ZDRhNGMwHhcNMjUwNTExMjMwMDExWhcNMjUwNTEyMjMwMDExWjAzMTEwLwYDVQQD
EygyOWQ2N2QwMjNiYzVlNmU3ZGNjNTBkYzlmZjg3MTA2YTQyZTAxZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlkEGEA+dgaowKggM+F/qjrPrGYk
uoVAVqrdwNkNL/gAFk6JBFP3KZg26bWv2r0B/9JR3iRnRUXNbUF7RVTnxparvOit
YJmmoBI5I1qc7VE8gpaDWtmdLo/h+I32zqVT720Em3ljSaVEmVUNcFffUFX564sY
Tlyz1VqabCmEgxworcGOM1pfUHpPzQURWcaAtpKXasxk8eoVax55vZlzbHOIFPfE
pKUp6SqUboef1IhCM7q9Bb4DM5tPZUaL1V7ukBJi0Tub7M+uvVJBlonKHXUcULGA
VfFVErc36NIq4+Ow6t3sdH8yQbWgRoOBDD2VFmh4uIJo2xH1Ak9k0IDBRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnWfQI7xebn3MUNyf+HEGpC4B9pMB8GA1UdIwQY
MBaAFLv/0SPLk+JOAl+VKEIQhAKVjUpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjIt
YWM0YTQwNjE3NDZkLzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjItYWM0YTQwNjE3NDZk
LzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAal/i9sT
T235kPb7c6Ulqs0ArHk54aeXbStb2U4VYJEtjGyaJZJQ0liO6bmdgMLG5DBfZ7ZK
OhHCrJD8pcnzWif4xU55DlJD2LQJJOaIuoJnr3DChf71nJZyZ2sXM7vAEnhyTJIR
rPqwaiNl4L41l2RTF+Vh775lRFvmD+XjTjzU9DVvonqO6yNsVeu349FRRoT9GN9+
9G6mOCxf9QuGD/7aMFKXXr58Chxuv9FS0Eodz7Qf25MZWHy5sepdL9zURMYtmNVa
mk7OtxWxfzHLtFPQ6q2/suqnChAJ4NBNda+uqcFwSd0CDEvTm29LQc9u3GRTHUbV
Wf8MixAnLvEiOw==
-----END CERTIFICATE-----
Generated at Mon May 12 04:40:19 2025 by rpki-client