Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: xRNTbu+0H02lEYpZd6rg34TdQMAYNdx8EnfXjNYGYO4=
Subject key identifier: B0:C5:05:D8:B2:81:0C:10:55:2F:30:6C:EE:E9:B6:1B:B6:58:A5:20
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 0196BF379401BF8837D940401EF7EBED7134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 0DB8
Signing time: Sun 11 May 2025 12:00:12 +0000
Manifest this update: Sun 11 May 2025 12:00:12 +0000
Manifest next update: Mon 12 May 2025 12:00:12 +0000
Files and hashes: 1: PrJQJT3uctgSQDhbXg7t6tQ4QrM.roa (hash: gya9esJQBziUpHHO9F+UZbaGJJEGL38CeXZKg65ppYM=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: CnKCJvGQPYccOAU0foKkEMzczvBfCFzHR3ikHd1CsNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:94:01:bf:88:37:d9:40:40:1e:f7:eb:ed:71:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: May 11 12:00:12 2025 GMT
Not After : May 12 12:00:12 2025 GMT
Subject: CN=b0c505d8b2810c10552f306ceee9b61bb658a520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:7d:45:98:cd:06:cf:df:b6:4c:5f:ca:3b:
23:e0:b7:fb:5f:dc:75:3f:5f:c4:79:2f:e6:36:13:
a8:03:83:c7:5a:e6:1f:6a:17:d5:e8:0b:8c:69:fa:
8e:32:2a:4c:0e:a6:75:98:9e:59:00:f9:6e:50:79:
5b:c0:e4:14:9c:11:da:75:67:68:84:50:c2:e9:72:
b6:98:29:d4:3c:73:80:fe:13:9f:b7:77:8b:96:59:
1d:2a:df:31:44:35:41:4e:d9:1b:7c:3f:64:71:e2:
57:75:19:d2:c5:54:a1:6d:00:d8:7a:82:5c:b3:7a:
f8:25:7a:28:8d:ca:d3:e0:30:87:44:6c:d0:39:ff:
af:1b:5f:34:33:5e:9d:7e:95:33:0e:93:96:45:50:
d0:7b:73:ec:2f:0c:e3:27:6a:8b:61:35:26:cc:c0:
11:18:93:f9:ad:d9:5a:1a:83:95:15:0e:f2:08:6a:
1b:26:43:7f:bb:bc:34:72:6c:e5:85:e5:f7:e3:98:
1d:ae:3a:bb:c8:7c:c9:bd:31:3c:67:82:ca:e1:2c:
6f:91:48:96:37:43:ca:1a:83:3a:48:62:bf:0d:24:
d0:d6:74:83:a9:53:f1:44:12:0b:57:04:33:3d:b6:
68:2c:17:90:6a:e7:7b:1e:43:af:f0:16:0d:32:08:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C5:05:D8:B2:81:0C:10:55:2F:30:6C:EE:E9:B6:1B:B6:58:A5:20
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:95:30:81:d5:a2:6b:8b:2e:aa:34:1a:ab:fd:5f:ca:d6:83:
b0:f3:ab:2c:3b:c5:12:84:e4:f8:18:78:40:c9:cf:34:de:85:
da:f8:2c:54:26:54:b6:b0:d5:0f:0d:7c:fb:50:60:31:6c:09:
b1:24:84:5d:51:4b:31:bd:5f:13:9f:49:8f:e3:e2:19:e6:70:
d0:a3:75:9b:23:98:9b:b5:34:2e:26:79:1a:ef:09:bc:b2:90:
50:ed:49:1c:ae:d6:12:8d:a1:1b:49:48:aa:21:94:d5:30:7f:
80:bd:0b:2e:c0:56:b0:3e:39:c8:0a:59:7e:7c:89:88:4b:7f:
f0:f5:43:bd:99:14:84:10:b4:45:2c:83:19:b0:4e:ec:77:e7:
52:dc:38:c1:91:7d:97:3d:fb:90:fe:21:49:3d:ad:69:f2:72:
0e:da:bf:67:fc:e6:04:18:2e:ce:55:88:d2:ec:b0:9c:3b:83:
24:9b:e9:d1:ad:f5:45:95:66:08:b5:6e:74:57:10:c5:f4:97:
6b:91:68:a6:85:2a:28:d3:58:3a:6b:8b:12:e5:06:6e:f9:e1:
14:58:ab:cb:c5:d2:8b:25:34:f4:86:61:41:91:ae:78:4b:03:
1b:4a:2c:c7:5b:8d:e5:19:84:63:9d:f8:31:d7:51:a3:cc:37:
e1:67:58:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/N5QBv4g32UBAHvfr7XE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWZiYzE0NjI0NTVlOTg2OWQ0OGIyNTdiMThlMjNiZTc3
YWE2YzMwHhcNMjUwNTExMTIwMDEyWhcNMjUwNTEyMTIwMDEyWjAzMTEwLwYDVQQD
EyhiMGM1MDVkOGIyODEwYzEwNTUyZjMwNmNlZWU5YjYxYmI2NThhNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+99RZjNBs/ftkxfyjsj4Lf7X9x1
P1/EeS/mNhOoA4PHWuYfahfV6AuMafqOMipMDqZ1mJ5ZAPluUHlbwOQUnBHadWdo
hFDC6XK2mCnUPHOA/hOft3eLllkdKt8xRDVBTtkbfD9kceJXdRnSxVShbQDYeoJc
s3r4JXoojcrT4DCHRGzQOf+vG180M16dfpUzDpOWRVDQe3PsLwzjJ2qLYTUmzMAR
GJP5rdlaGoOVFQ7yCGobJkN/u7w0cmzlheX345gdrjq7yHzJvTE8Z4LK4SxvkUiW
N0PKGoM6SGK/DSTQ1nSDqVPxRBILVwQzPbZoLBeQaud7HkOv8BYNMgiN+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDFBdiygQwQVS8wbO7pthu2WKUgMB8GA1UdIwQY
MBaAFFGvvBRiRV6YadSLJXsY4jvneqbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMt
YTIwMWRmYWJkYWIxLzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMtYTIwMWRmYWJkYWIx
LzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAupUwgdWi
a4suqjQaq/1fytaDsPOrLDvFEoTk+Bh4QMnPNN6F2vgsVCZUtrDVDw18+1BgMWwJ
sSSEXVFLMb1fE59Jj+PiGeZw0KN1myOYm7U0LiZ5Gu8JvLKQUO1JHK7WEo2hG0lI
qiGU1TB/gL0LLsBWsD45yApZfnyJiEt/8PVDvZkUhBC0RSyDGbBO7HfnUtw4wZF9
lz37kP4hST2tafJyDtq/Z/zmBBguzlWI0uywnDuDJJvp0a31RZVmCLVudFcQxfSX
a5FopoUqKNNYOmuLEuUGbvnhFFiry8XSiyU09IZhQZGueEsDG0osx1uN5RmEY534
MddRo8w34WdY4A==
-----END CERTIFICATE-----
Generated at Sun May 11 17:14:20 2025 by rpki-client