Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: gWk+0x2X3tVcy9EuxXv3FEtTXg5Qj/cM0UNjk+i3tlA=
Subject key identifier: E7:CF:50:87:DB:6D:12:1B:F4:63:1D:23:D0:8F:50:DC:79:19:8C:80
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 01969ED11376BE643B2062EF9DDC4A36787F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 05:00:24 +0000
Manifest this update: Mon 05 May 2025 05:00:24 +0000
Manifest next update: Tue 06 May 2025 05:00:24 +0000
Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=)
2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=)
3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: u9IRvoO4XIrQLnrfDcKmryL0xO8ZKrVKDXjUXemZxhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:13:76:be:64:3b:20:62:ef:9d:dc:4a:36:78:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: May 5 05:00:24 2025 GMT
Not After : May 6 05:00:24 2025 GMT
Subject: CN=e7cf5087db6d121bf4631d23d08f50dc79198c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:03:48:9c:fb:20:c7:39:91:43:a5:f4:31:
a9:f7:2a:f8:b4:4b:99:5d:a3:65:16:2c:06:f7:c9:
ba:d5:a4:f1:29:05:83:48:ff:cf:5a:3d:b8:84:1e:
00:25:b1:91:59:07:6c:37:61:57:17:e2:b4:90:65:
a2:cc:64:d2:da:49:b7:a7:72:7e:b2:c7:ff:49:b3:
26:60:d9:00:4b:fa:1c:e3:15:1c:64:1c:1a:ec:a8:
a7:e9:e6:2d:6f:c6:c6:90:60:6c:d3:d0:01:8f:d2:
bf:ff:3b:b2:77:9e:a5:80:9d:08:5a:a3:e7:69:14:
b9:6c:ad:d9:59:d0:10:b4:34:06:94:05:10:df:df:
3b:ab:48:7a:e6:e6:5b:7a:41:73:b7:94:88:79:dc:
bf:20:c0:b1:7e:4d:e9:eb:42:5e:52:4c:36:dd:7b:
94:49:60:73:70:79:ad:10:8c:ec:ba:92:57:94:7f:
32:d3:71:a2:d3:6d:da:f6:c6:c5:79:46:29:1e:69:
60:4a:02:a2:c5:72:82:a9:d9:e2:b2:40:19:d5:cb:
df:f7:56:80:12:0a:4a:18:3a:4e:b0:46:32:37:5e:
d4:d2:a1:62:08:ed:bf:bb:dd:c8:54:47:c1:48:f0:
e4:f2:ce:dc:d9:f2:52:99:bd:af:21:15:1e:1c:d5:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CF:50:87:DB:6D:12:1B:F4:63:1D:23:D0:8F:50:DC:79:19:8C:80
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a4:6d:fc:db:e4:77:01:e3:5f:a3:4d:a2:94:bb:1b:3c:e9:
7c:e0:d1:21:5d:0a:4a:e4:89:51:a4:34:e0:a3:bf:2f:d0:bd:
66:67:93:4e:0e:de:48:c1:d4:db:b8:27:96:b6:4f:70:20:bc:
f2:4a:e0:21:25:69:58:04:15:79:b8:f6:22:06:94:b7:d7:94:
3d:f2:09:3e:08:bd:01:6f:8c:e7:77:b3:df:d7:99:77:34:14:
2a:1f:75:c7:5e:f7:bb:a5:86:ff:48:43:a7:83:2e:46:fe:5c:
6a:76:15:38:33:98:f4:65:8c:1c:24:1e:56:ee:52:85:7b:72:
62:d0:48:56:fc:66:59:7c:01:f4:ad:b2:14:a8:a3:11:e6:8f:
b2:cc:9b:7f:a7:45:cb:50:96:58:77:1a:af:94:00:51:d9:c7:
06:e1:2e:56:1f:69:d2:2f:02:ae:90:66:e0:32:8f:0d:5c:d2:
a9:f9:a2:b2:45:e4:d7:ff:a8:a1:f7:3b:b0:60:5b:a2:9a:33:
f6:fb:68:e2:ba:b9:4e:12:54:1e:9f:27:d2:75:35:96:22:65:
ae:ba:ed:61:f4:92:ad:fd:ab:4a:e2:58:6e:16:f6:cd:2a:63:
69:d5:b7:e2:47:89:bb:39:7b:9c:14:ce:9e:cb:f2:b1:8c:e2:
9b:51:fc:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZae0RN2vmQ7IGLvndxKNnh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz
YjU3NjIwHhcNMjUwNTA1MDUwMDI0WhcNMjUwNTA2MDUwMDI0WjAzMTEwLwYDVQQD
EyhlN2NmNTA4N2RiNmQxMjFiZjQ2MzFkMjNkMDhmNTBkYzc5MTk4YzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk8DSJz7IMc5kUOl9DGp9yr4tEuZ
XaNlFiwG98m61aTxKQWDSP/PWj24hB4AJbGRWQdsN2FXF+K0kGWizGTS2km3p3J+
ssf/SbMmYNkAS/oc4xUcZBwa7Kin6eYtb8bGkGBs09ABj9K//zuyd56lgJ0IWqPn
aRS5bK3ZWdAQtDQGlAUQ3987q0h65uZbekFzt5SIedy/IMCxfk3p60JeUkw23XuU
SWBzcHmtEIzsupJXlH8y03Gi023a9sbFeUYpHmlgSgKixXKCqdniskAZ1cvf91aA
EgpKGDpOsEYyN17U0qFiCO2/u93IVEfBSPDk8s7c2fJSmb2vIRUeHNV+/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfPUIfbbRIb9GMdI9CPUNx5GYyAMB8GA1UdIwQY
MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt
ZGQzYjRmODM4MWM0LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0
LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqRt/Nvk
dwHjX6NNopS7GzzpfODRIV0KSuSJUaQ04KO/L9C9ZmeTTg7eSMHU27gnlrZPcCC8
8krgISVpWAQVebj2IgaUt9eUPfIJPgi9AW+M53ez39eZdzQUKh91x173u6WG/0hD
p4MuRv5canYVODOY9GWMHCQeVu5ShXtyYtBIVvxmWXwB9K2yFKijEeaPssybf6dF
y1CWWHcar5QAUdnHBuEuVh9p0i8CrpBm4DKPDVzSqfmiskXk1/+oofc7sGBbopoz
9vto4rq5ThJUHp8n0nU1liJlrrrtYfSSrf2rSuJYbhb2zSpjadW34keJuzl7nBTO
nsvysYzim1H8OQ==
-----END CERTIFICATE-----
Generated at Mon May 5 14:30:07 2025 by rpki-client