Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: vYz91bJg9sF2PNmJqvVT+4fr7PIYyxcrRNGdrgPgws4=
Subject key identifier: 50:A3:4F:44:08:E6:2B:A4:B9:D4:C4:C6:F6:E9:51:45:16:77:0B:49
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 0196C9BBC8DA2E53A36BB797E9E2351E2459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 127D
Signing time: Tue 13 May 2025 13:00:49 +0000
Manifest this update: Tue 13 May 2025 13:00:49 +0000
Manifest next update: Wed 14 May 2025 13:00:49 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: vrVsLVRJzxLgvLPG+aZtxzm9u9hMH9ipmqEMJ6fVyOE=)
2: ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa (hash: xFEzrUJlVVBWEtFecNObcV0TMloS/XizxOFPtUYtswE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:c8:da:2e:53:a3:6b:b7:97:e9:e2:35:1e:24:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: May 13 13:00:49 2025 GMT
Not After : May 14 13:00:49 2025 GMT
Subject: CN=50a34f4408e62ba4b9d4c4c6f6e9514516770b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:ba:75:f6:fa:91:af:26:8c:e3:79:d6:3f:
24:97:00:59:04:46:18:7a:02:83:43:0a:c5:44:37:
37:cb:80:90:c9:35:8d:36:87:bc:b5:e2:de:3f:2a:
96:77:de:20:01:82:3b:16:b3:e1:c3:43:33:4b:ee:
c0:69:c1:df:6f:6a:07:67:b2:8c:23:27:bd:2b:ac:
ce:ec:3a:64:ec:d5:c3:8d:77:60:88:a3:fe:e2:ef:
ec:19:d5:a6:21:79:2c:67:49:b3:13:a9:ad:10:ea:
e4:cb:7b:26:d1:e3:05:0e:e9:93:e6:69:45:b2:b1:
d3:71:3b:cb:0b:90:16:c4:6e:77:a4:de:93:53:c1:
36:86:5a:9d:ab:b5:5f:1c:5a:60:0f:f6:7a:9e:5d:
53:6d:bb:80:71:9c:68:98:0a:2c:c6:66:b9:93:1b:
d7:a3:ca:24:d2:a4:c2:46:94:37:d4:d5:b6:b6:03:
36:ae:e5:bc:b8:5a:ba:76:e3:2f:c1:ef:d3:70:dc:
9c:68:dd:a0:05:2b:15:ed:54:0b:69:5f:bf:65:13:
07:b3:ab:a7:df:11:d8:59:d1:3c:6f:b3:b1:85:b4:
ec:0d:e6:0c:b4:8c:82:db:93:fb:75:c3:b5:f4:0e:
8a:3f:bf:fa:a2:9e:b5:ae:ca:45:ba:04:1b:8b:54:
8d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A3:4F:44:08:E6:2B:A4:B9:D4:C4:C6:F6:E9:51:45:16:77:0B:49
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:26:fe:73:a2:10:89:81:16:7c:4d:ef:fa:fe:a0:de:74:8d:
99:df:19:fb:96:60:49:9b:ac:ba:64:eb:48:07:d6:a6:84:96:
c7:a7:8e:93:85:35:2b:1e:cf:76:97:25:94:b5:c9:80:92:30:
7a:e8:a8:4b:92:33:2c:12:79:e7:e6:c4:6d:58:ae:d6:60:91:
45:d2:c7:af:38:b0:e4:7a:c0:35:d3:41:a3:66:22:c4:3c:24:
a1:01:73:d8:7f:57:26:d2:a7:49:b9:aa:93:86:b4:5b:82:f3:
8d:de:5d:34:37:fc:1d:1f:29:c7:19:da:24:5e:7d:94:58:fe:
e7:97:9b:83:2e:b6:5e:49:03:33:4a:9e:3f:b5:b5:59:fd:bf:
8a:7b:39:82:4e:53:23:e8:2e:cc:84:6d:61:c6:16:55:9a:f5:
4a:66:8d:fb:e4:99:55:66:ce:01:cf:26:ad:25:86:c6:cb:07:
17:68:be:42:a6:35:7a:56:13:62:4c:ed:0e:1f:dd:3c:0e:b5:
82:5b:fb:55:37:83:dd:a9:29:04:42:bb:36:07:b3:1d:f5:29:
54:6c:fd:e3:e2:21:33:a6:df:f7:59:fc:b6:8d:3a:a6:95:94:
b1:32:46:41:da:30:ca:2a:14:a3:d0:5d:0b:33:f5:9c:65:ab:
6e:02:c4:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJu8jaLlOja7eX6eI1HiRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDI4NGI5NDMyNWY1MDYwZjhhMGU4N2MxYmUyODI3Nzg4
ZjE4ZjkwHhcNMjUwNTEzMTMwMDQ5WhcNMjUwNTE0MTMwMDQ5WjAzMTEwLwYDVQQD
Eyg1MGEzNGY0NDA4ZTYyYmE0YjlkNGM0YzZmNmU5NTE0NTE2NzcwYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGW6dfb6ka8mjON51j8klwBZBEYY
egKDQwrFRDc3y4CQyTWNNoe8teLePyqWd94gAYI7FrPhw0MzS+7AacHfb2oHZ7KM
Iye9K6zO7Dpk7NXDjXdgiKP+4u/sGdWmIXksZ0mzE6mtEOrky3sm0eMFDumT5mlF
srHTcTvLC5AWxG53pN6TU8E2hlqdq7VfHFpgD/Z6nl1TbbuAcZxomAosxma5kxvX
o8ok0qTCRpQ31NW2tgM2ruW8uFq6duMvwe/TcNycaN2gBSsV7VQLaV+/ZRMHs6un
3xHYWdE8b7OxhbTsDeYMtIyC25P7dcO19A6KP7/6op61rspFugQbi1SNRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCjT0QI5iukudTExvbpUUUWdwtJMB8GA1UdIwQY
MBaAFNlChLlDJfUGD4oOh8G+KCd4jxj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQt
OTVkNTk0NjVlOWE4LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQtOTVkNTk0NjVlOWE4
LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCb+c6IQ
iYEWfE3v+v6g3nSNmd8Z+5ZgSZusumTrSAfWpoSWx6eOk4U1Kx7PdpcllLXJgJIw
euioS5IzLBJ55+bEbViu1mCRRdLHrziw5HrANdNBo2YixDwkoQFz2H9XJtKnSbmq
k4a0W4Lzjd5dNDf8HR8pxxnaJF59lFj+55ebgy62XkkDM0qeP7W1Wf2/ins5gk5T
I+guzIRtYcYWVZr1SmaN++SZVWbOAc8mrSWGxssHF2i+QqY1elYTYkztDh/dPA61
glv7VTeD3akpBEK7NgezHfUpVGz94+IhM6bf91n8to06ppWUsTJGQdowyioUo9Bd
CzP1nGWrbgLEbQ==
-----END CERTIFICATE-----
Generated at Tue May 13 15:00:43 2025 by rpki-client