Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: UBkM8q4VIsPNHooNwLXqaT2Hil6C9Ux1nbLNXMAOJMk=
Subject key identifier: 09:E8:CE:67:2A:BD:86:F0:BC:58:2F:7C:B1:28:D2:5A:2A:5A:3C:D0
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 0196BBC8EA3E2D670E0A306495B1ADF0DF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 09DD
Signing time: Sat 10 May 2025 20:00:28 +0000
Manifest this update: Sat 10 May 2025 20:00:28 +0000
Manifest next update: Sun 11 May 2025 20:00:28 +0000
Files and hashes: 1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: sXLpF7ak/mnp7yZ0aSxUOJMjE9xeI5a+crw1w8ZG6mg=)
6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:ea:3e:2d:67:0e:0a:30:64:95:b1:ad:f0:df:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: May 10 20:00:28 2025 GMT
Not After : May 11 20:00:28 2025 GMT
Subject: CN=09e8ce672abd86f0bc582f7cb128d25a2a5a3cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:18:16:64:5f:ba:95:ae:48:e6:1f:3d:1c:
09:70:7f:ba:94:68:fb:68:f7:43:46:a6:4c:d0:e8:
f4:bb:56:ef:54:e9:78:36:d3:5e:b3:89:17:6c:74:
c7:c3:48:22:b3:87:c0:13:f3:99:6f:69:25:c0:e9:
22:78:fa:fd:1d:92:b2:c1:47:41:df:cf:d6:66:2f:
48:1f:f7:89:d7:d2:75:0d:a3:74:88:05:c4:d1:47:
39:87:2e:5e:ec:d2:e8:0a:5b:6d:7f:5c:cb:9d:2d:
60:ed:bc:15:93:56:4d:2d:fa:d8:d8:e0:f0:71:d2:
4e:32:72:dd:c4:92:1d:8d:95:62:f5:af:3f:1b:04:
62:51:e2:50:5d:da:c4:a3:37:f2:ce:bb:c6:33:16:
b7:90:be:11:88:ce:27:86:c5:54:30:f2:b3:15:88:
bf:1b:de:34:a4:23:a5:d1:ff:00:33:09:ae:70:79:
f9:97:cb:46:9c:78:cd:df:69:64:f4:d0:b2:c2:42:
42:83:d9:3d:df:45:e2:c7:03:21:87:f4:75:5d:d3:
54:af:52:87:da:b8:c1:a8:75:aa:1f:31:b5:0b:61:
9b:0d:19:b7:4f:11:a8:2f:e1:70:80:4f:7a:f1:01:
06:e9:4e:0c:07:95:c4:d0:69:5a:9a:67:19:d0:8c:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E8:CE:67:2A:BD:86:F0:BC:58:2F:7C:B1:28:D2:5A:2A:5A:3C:D0
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9d:ad:5a:a9:53:5e:f0:91:3c:c1:7d:d9:f2:84:30:13:80:
d8:4b:38:ff:d3:c8:1c:7d:30:f9:3f:92:59:dc:20:be:32:99:
09:66:dd:21:30:71:8a:ca:80:66:6d:42:0e:26:75:99:46:19:
fa:b0:a3:cc:44:cb:08:5f:6d:78:a6:7b:17:03:7e:90:ec:59:
ac:be:55:97:66:cf:64:9b:2f:7e:69:bc:1b:6b:3f:aa:4d:26:
e7:19:e7:e3:ac:ff:d9:92:ae:a8:9b:92:a9:35:17:56:c3:8b:
a6:46:a0:d9:57:a5:8b:0d:fd:d2:38:67:4c:90:6c:29:57:95:
fa:1b:62:07:d0:cd:14:70:aa:df:f1:64:7e:a8:56:d4:a9:68:
e4:da:bc:48:66:08:f7:6f:f2:b3:54:e5:0f:af:40:1f:12:0b:
05:76:f6:e6:07:f7:ca:22:1e:46:59:11:a4:05:67:92:e0:c3:
60:31:a7:6f:c1:40:97:60:5d:cf:4a:ea:d5:f4:7a:36:1f:58:
68:d7:7b:c7:a1:65:a4:ac:08:1d:30:30:3f:8f:94:ed:fd:79:
14:d2:5d:48:40:5e:34:67:09:39:89:1f:d8:0a:92:80:58:cd:
b7:60:d0:72:5e:09:5c:57:38:8b:30:da:b8:94:a0:eb:c1:a4:
e0:96:dd:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7yOo+LWcOCjBklbGt8N+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3
NGM2MmIwHhcNMjUwNTEwMjAwMDI4WhcNMjUwNTExMjAwMDI4WjAzMTEwLwYDVQQD
EygwOWU4Y2U2NzJhYmQ4NmYwYmM1ODJmN2NiMTI4ZDI1YTJhNWEzY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplQYFmRfupWuSOYfPRwJcH+6lGj7
aPdDRqZM0Oj0u1bvVOl4NtNes4kXbHTHw0gis4fAE/OZb2klwOkiePr9HZKywUdB
38/WZi9IH/eJ19J1DaN0iAXE0Uc5hy5e7NLoClttf1zLnS1g7bwVk1ZNLfrY2ODw
cdJOMnLdxJIdjZVi9a8/GwRiUeJQXdrEozfyzrvGMxa3kL4RiM4nhsVUMPKzFYi/
G940pCOl0f8AMwmucHn5l8tGnHjN32lk9NCywkJCg9k930XixwMhh/R1XdNUr1KH
2rjBqHWqHzG1C2GbDRm3TxGoL+FwgE968QEG6U4MB5XE0GlammcZ0IzvfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnozmcqvYbwvFgvfLEo0loqWjzQMB8GA1UdIwQY
MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt
ZGQ4MDNjNWI4NWRiLzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi
LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJ2tWqlT
XvCRPMF92fKEMBOA2Es4/9PIHH0w+T+SWdwgvjKZCWbdITBxisqAZm1CDiZ1mUYZ
+rCjzETLCF9teKZ7FwN+kOxZrL5Vl2bPZJsvfmm8G2s/qk0m5xnn46z/2ZKuqJuS
qTUXVsOLpkag2Veliw390jhnTJBsKVeV+htiB9DNFHCq3/FkfqhW1Klo5Nq8SGYI
92/ys1TlD69AHxILBXb25gf3yiIeRlkRpAVnkuDDYDGnb8FAl2Bdz0rq1fR6Nh9Y
aNd7x6FlpKwIHTAwP4+U7f15FNJdSEBeNGcJOYkf2AqSgFjNt2DQcl4JXFc4izDa
uJSg68Gk4JbdTQ==
-----END CERTIFICATE-----
Generated at Sat May 10 21:59:02 2025 by rpki-client