Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
File: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft (raw, json)
Hash identifier: tgCOCdHPmap+lcHqK9ozCzaPxX6/RgQMckDGRHWCC8U=
Subject key identifier: B2:A9:B4:1C:49:BB:C1:8A:4C:29:21:51:10:7E:F3:F3:0A:00:BC:CB
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial: 0196B8239C569977BFBB52A63624921ADAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
Manifest number: 11F3
Signing time: Sat 10 May 2025 03:01:03 +0000
Manifest this update: Sat 10 May 2025 03:01:03 +0000
Manifest next update: Sun 11 May 2025 03:01:03 +0000
Files and hashes: 1: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl (hash: tthxRFET8o0o/Lj7jkMlrYqoncOQztfS3rNlBc0RcvU=)
2: RCgFf0XiItPjSlxmmEgqaSoxxs0.roa (hash: 2UGMZ2yZeYOIM9kVwRezFG9Ou19OaN3jo1kdBDera9U=)
3: y1bjq6t2wUukz9W6C_N_eJWE5pQ.roa (hash: rbXidQhk2TpaZB/G3C+NahAJvD9lrvrxNyxSFhR0BVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:9c:56:99:77:bf:bb:52:a6:36:24:92:1a:da:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Validity
Not Before: May 10 03:01:03 2025 GMT
Not After : May 11 03:01:03 2025 GMT
Subject: CN=b2a9b41c49bbc18a4c292151107ef3f30a00bccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:b1:6e:bb:35:0b:e2:fc:5c:81:94:c3:a3:
38:30:15:4a:ea:44:00:37:70:fb:86:ba:fe:96:a8:
62:63:a6:3e:8c:da:3c:f8:ed:db:6c:e2:ad:e2:08:
b9:89:eb:b6:f5:eb:bf:fd:33:36:f4:1f:94:4b:9c:
26:cb:cb:e1:69:5c:c9:eb:01:23:0a:6c:a3:0f:3f:
39:95:4f:d4:46:89:11:17:60:d7:f3:18:99:9d:9f:
75:27:2b:99:0c:c1:2f:8d:c3:23:f3:fa:1f:12:8c:
b5:35:00:fa:a7:81:23:35:5b:a8:5e:bd:0a:4f:ab:
c1:88:85:16:c2:e6:e9:87:ee:79:de:d1:14:f2:35:
19:5b:87:39:31:ca:94:99:f5:ff:27:2f:22:17:93:
a6:46:e6:91:27:08:94:39:ad:24:bb:c0:75:d6:36:
0e:34:ab:ba:6b:6b:0f:22:a5:18:31:12:f7:3f:57:
3a:bc:45:f4:5d:42:b5:4c:f2:86:9b:8f:25:7d:e4:
43:c5:d5:4a:96:b7:cc:57:cc:3e:be:56:2f:f7:4e:
a4:ff:be:2e:4d:dc:88:c9:69:90:42:f9:25:72:f2:
dd:83:eb:e1:fb:5e:5f:1f:31:24:6d:7d:0b:b2:d8:
5b:9a:5e:0e:e2:8c:7d:6d:1c:33:e3:2d:3b:5a:4a:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A9:B4:1C:49:BB:C1:8A:4C:29:21:51:10:7E:F3:F3:0A:00:BC:CB
X509v3 Authority Key Identifier:
keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a9:e6:04:32:ff:2c:eb:ba:a5:45:3b:3b:5d:31:52:29:fc:
ec:77:5d:52:e0:aa:07:e1:4c:27:23:ee:b5:da:50:a6:7d:19:
d6:3c:ec:48:4a:d1:71:04:f8:ea:50:e4:42:7b:fe:9b:58:3d:
0a:32:c5:39:6a:52:df:a8:4c:f6:01:a1:c9:c6:bd:1f:3d:1a:
b4:97:5d:53:fb:e8:ba:ec:27:ec:ef:1d:04:90:33:99:30:64:
40:4b:5a:15:56:85:76:70:4d:69:7d:95:ab:13:a2:ea:00:9c:
1a:62:bd:fe:a6:ba:8d:73:50:f8:c1:40:f7:b6:cc:45:3f:93:
8a:09:d7:53:7e:56:f4:3f:bf:7f:45:48:92:76:52:9e:61:20:
a9:94:90:10:63:4f:73:e5:3d:2a:f3:91:b6:79:19:bf:66:42:
be:db:69:cf:ff:47:d2:7f:90:7b:2c:75:4b:49:c7:b1:59:48:
82:df:49:66:60:8e:94:ac:1f:48:17:9a:c4:88:ac:6a:0e:33:
bf:8b:ac:ac:6a:0b:6f:c0:40:92:b4:09:e1:d5:bc:a6:cd:91:
de:72:ee:7e:1c:4c:4d:4a:c0:1b:f5:e9:bf:95:ae:12:1a:ed:
28:1c:d8:b9:c1:04:d7:98:92:31:50:68:ef:de:31:bf:75:9e:
c1:1e:ad:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4I5xWmXe/u1KmNiSSGtr+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NGJkZGFmYjVkZjA5ODQxOTAyMGE4ZmJjN2E5MGIxNmUz
NDFkNjMwHhcNMjUwNTEwMDMwMTAzWhcNMjUwNTExMDMwMTAzWjAzMTEwLwYDVQQD
EyhiMmE5YjQxYzQ5YmJjMThhNGMyOTIxNTExMDdlZjNmMzBhMDBiY2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4Wxbrs1C+L8XIGUw6M4MBVK6kQA
N3D7hrr+lqhiY6Y+jNo8+O3bbOKt4gi5ieu29eu//TM29B+US5wmy8vhaVzJ6wEj
CmyjDz85lU/URokRF2DX8xiZnZ91JyuZDMEvjcMj8/ofEoy1NQD6p4EjNVuoXr0K
T6vBiIUWwubph+553tEU8jUZW4c5McqUmfX/Jy8iF5OmRuaRJwiUOa0ku8B11jYO
NKu6a2sPIqUYMRL3P1c6vEX0XUK1TPKGm48lfeRDxdVKlrfMV8w+vlYv906k/74u
TdyIyWmQQvklcvLdg+vh+15fHzEkbX0Lsthbml4O4ox9bRwz4y07WkryVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKptBxJu8GKTCkhURB+8/MKALzLMB8GA1UdIwQY
MBaAFNlL3a+13wmEGQIKj7x6kLFuNB1jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZGU3NTctNzY3Mi00NzIwLThjZTEt
NmUyNmI5MWY2OTEwLzEvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jZGU3NTctNzY3Mi00NzIwLThjZTEtNmUyNmI5MWY2OTEw
LzEvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGanmBDL/
LOu6pUU7O10xUin87HddUuCqB+FMJyPutdpQpn0Z1jzsSErRcQT46lDkQnv+m1g9
CjLFOWpS36hM9gGhyca9Hz0atJddU/vouuwn7O8dBJAzmTBkQEtaFVaFdnBNaX2V
qxOi6gCcGmK9/qa6jXNQ+MFA97bMRT+TignXU35W9D+/f0VIknZSnmEgqZSQEGNP
c+U9KvORtnkZv2ZCvttpz/9H0n+Qeyx1S0nHsVlIgt9JZmCOlKwfSBeaxIisag4z
v4usrGoLb8BAkrQJ4dW8ps2R3nLufhxMTUrAG/Xpv5WuEhrtKBzYucEE15iSMVBo
794xv3WewR6tlA==
-----END CERTIFICATE-----
Generated at Sat May 10 11:57:52 2025 by rpki-client