Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
File: UrEszH6hBoww14yVXFa5djvPO00.mft (raw, json)
Hash identifier: JdtJlDzfuqhV3/HCp+TEaBubdLOnTGVCsZdnG8BTF6M=
Subject key identifier: D8:4D:C4:38:F5:30:AD:55:68:DF:08:0A:19:65:83:9A:33:16:18:BC
Authority key identifier: 52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
Certificate issuer: /CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Certificate serial: 0196B4EB20B115F97E3AF291B4BE39A391F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
Manifest number: 0876
Signing time: Fri 09 May 2025 12:00:30 +0000
Manifest this update: Fri 09 May 2025 12:00:30 +0000
Manifest next update: Sat 10 May 2025 12:00:30 +0000
Files and hashes: 1: DHimsh5cf4B1cEow5B0sOoa89ZU.roa (hash: 4QGyiwHML4yioXbByOLrPfTNUUAH8+dM2e00mLX0LYc=)
2: UrEszH6hBoww14yVXFa5djvPO00.crl (hash: GLfi8jBzumJukE1DSSVyON4Asmvet5BuX99U3GcGPP8=)
3: kZrHy6O_C92bogsRpN6C84e22aM.roa (hash: J0JdPtLBeCRlUbxJ0oXF2YO76tJDIcSvEt4BcuHJUL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:20:b1:15:f9:7e:3a:f2:91:b4:be:39:a3:91:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Validity
Not Before: May 9 12:00:30 2025 GMT
Not After : May 10 12:00:30 2025 GMT
Subject: CN=d84dc438f530ad5568df080a1965839a331618bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8a:f4:a8:57:c8:98:af:2c:c4:5a:b0:1d:15:
f3:ad:b4:78:97:23:6e:7a:86:88:ae:7c:e4:85:df:
7f:75:f2:53:5d:a5:76:ee:f6:75:fd:f6:2f:19:4c:
2f:f1:72:f8:1a:a2:4a:0b:ea:9d:eb:7d:48:d5:d8:
8a:7f:2d:15:56:e6:b4:1f:20:7b:72:63:5c:0d:12:
87:90:09:16:60:8f:cc:9b:7c:fd:c5:c3:f4:c8:da:
6a:eb:04:93:2a:6a:3f:68:d3:c8:0f:38:02:f3:8d:
fc:fb:72:7e:a9:ee:b2:e0:f1:15:3a:80:17:86:1e:
66:6c:a7:7c:78:ef:fc:7b:e8:cb:d0:e7:c0:12:83:
8b:94:24:0f:25:ac:58:7c:96:bf:0c:1a:21:d9:85:
d7:cf:3f:07:65:af:00:ac:84:14:a7:dc:4c:7f:23:
f7:d9:f7:08:d7:05:69:3d:f1:1e:86:7c:02:78:ba:
24:b2:d2:d5:da:47:da:1c:78:84:46:cb:6f:cd:1d:
14:8f:0f:6d:a4:54:18:95:ca:40:3c:3c:43:47:a9:
03:e1:f9:fb:e5:a6:79:c5:46:df:4e:91:38:4c:da:
3e:49:17:f1:a9:ae:25:f6:71:0d:35:9c:72:ff:f9:
85:b9:73:6e:54:2a:53:bb:3b:a4:ab:b4:fc:b1:10:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4D:C4:38:F5:30:AD:55:68:DF:08:0A:19:65:83:9A:33:16:18:BC
X509v3 Authority Key Identifier:
keyid:52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:68:d6:d1:86:5e:d4:4a:8b:bd:ec:b0:82:12:e6:ca:e8:29:
0c:86:6a:f0:27:46:02:9e:3b:70:b8:73:83:2e:33:dc:b5:1f:
53:21:ba:e2:33:88:18:1a:4e:e0:f2:eb:a4:c9:f5:36:6c:10:
b7:2e:49:70:60:71:ca:ac:2d:fe:df:b8:95:bb:24:64:4e:11:
d8:92:47:72:07:d7:e5:0f:6b:81:bd:d5:78:2c:b5:32:f2:4d:
0d:ea:64:13:bd:4e:d2:ff:91:b7:2d:1b:dc:4d:9d:28:8b:06:
38:96:42:44:d7:d9:b6:0d:f8:b6:44:4e:a2:55:6e:09:e1:74:
27:8f:db:80:4c:e5:6f:ed:7a:38:23:0b:7d:7e:0e:1c:ae:c1:
a8:eb:7b:57:d4:78:43:af:b8:80:0a:3f:34:5c:d0:53:2a:e8:
41:e1:d8:90:fa:71:22:e0:ea:ce:a0:e3:95:49:69:f6:7f:48:
f0:9a:57:cd:d9:0b:42:a3:99:af:b5:35:e9:09:d5:55:40:56:
89:fc:33:2c:cf:d8:f5:2d:ea:68:b3:92:64:d7:29:75:63:64:
64:ef:41:55:2a:8e:84:14:cc:d0:41:97:60:e9:4c:bf:93:02:
24:6d:21:b3:1a:03:f4:a0:5e:d4:41:13:14:c5:7e:44:46:5c:
d8:38:e7:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa06yCxFfl+OvKRtL45o5H0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjEyY2NjN2VhMTA2OGMzMGQ3OGM5NTVjNTZiOTc2M2Jj
ZjNiNGQwHhcNMjUwNTA5MTIwMDMwWhcNMjUwNTEwMTIwMDMwWjAzMTEwLwYDVQQD
EyhkODRkYzQzOGY1MzBhZDU1NjhkZjA4MGExOTY1ODM5YTMzMTYxOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Yr0qFfImK8sxFqwHRXzrbR4lyNu
eoaIrnzkhd9/dfJTXaV27vZ1/fYvGUwv8XL4GqJKC+qd631I1diKfy0VVua0HyB7
cmNcDRKHkAkWYI/Mm3z9xcP0yNpq6wSTKmo/aNPIDzgC8438+3J+qe6y4PEVOoAX
hh5mbKd8eO/8e+jL0OfAEoOLlCQPJaxYfJa/DBoh2YXXzz8HZa8ArIQUp9xMfyP3
2fcI1wVpPfEehnwCeLokstLV2kfaHHiERstvzR0Ujw9tpFQYlcpAPDxDR6kD4fn7
5aZ5xUbfTpE4TNo+SRfxqa4l9nENNZxy//mFuXNuVCpTuzukq7T8sRBg6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhNxDj1MK1VaN8IChllg5ozFhi8MB8GA1UdIwQY
MBaAFFKxLMx+oQaMMNeMlVxWuXY7zztNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJFc3pINmhCb3d3MTR5VlhGYTVkanZQTzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9mZWZiNDAtZDE0YS00YzU4LTg5OWIt
YTk1MmRlYTJhNjUxLzEvVXJFc3pINmhCb3d3MTR5VlhGYTVkanZQTzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9mZWZiNDAtZDE0YS00YzU4LTg5OWItYTk1MmRlYTJhNjUx
LzEvVXJFc3pINmhCb3d3MTR5VlhGYTVkanZQTzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGjW0YZe
1EqLveywghLmyugpDIZq8CdGAp47cLhzgy4z3LUfUyG64jOIGBpO4PLrpMn1NmwQ
ty5JcGBxyqwt/t+4lbskZE4R2JJHcgfX5Q9rgb3VeCy1MvJNDepkE71O0v+Rty0b
3E2dKIsGOJZCRNfZtg34tkROolVuCeF0J4/bgEzlb+16OCMLfX4OHK7BqOt7V9R4
Q6+4gAo/NFzQUyroQeHYkPpxIuDqzqDjlUlp9n9I8JpXzdkLQqOZr7U16QnVVUBW
ifwzLM/Y9S3qaLOSZNcpdWNkZO9BVSqOhBTM0EGXYOlMv5MCJG0hsxoD9KBe1EET
FMV+REZc2DjnQg==
-----END CERTIFICATE-----
Generated at Fri May 9 21:29:07 2025 by rpki-client