Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier: Bit7aoW213JKmquB6b2ieGa+3SEHnimPHKZGMAogbN4=
Subject key identifier: 3F:01:D2:24:E5:2A:A8:D5:B8:A4:C1:7F:26:8E:F0:7F:04:DE:0C:03
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 0196BA11EB34EC10FFB1C80B735B78399570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 12:00:58 +0000
Manifest this update: Sat 10 May 2025 12:00:58 +0000
Manifest next update: Sun 11 May 2025 12:00:58 +0000
Files and hashes: 1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=)
2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: yivA3Abiy3OoGUAS0NT4S0SjHfuF31VD6iEZlQSP4pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:eb:34:ec:10:ff:b1:c8:0b:73:5b:78:39:95:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: May 10 12:00:58 2025 GMT
Not After : May 11 12:00:58 2025 GMT
Subject: CN=3f01d224e52aa8d5b8a4c17f268ef07f04de0c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:6f:75:83:ec:12:07:86:92:2b:21:58:bf:
eb:69:91:4a:66:f9:10:4f:91:60:3a:19:80:2f:6a:
10:5a:30:8f:3d:97:d8:d2:da:6e:87:8c:b5:f3:ee:
d8:1d:a0:33:3c:aa:e8:f3:f4:4d:5a:bb:1d:b6:9f:
0a:f9:ce:6e:c5:9d:a3:ee:7e:fd:01:f0:d1:08:60:
43:33:57:96:5f:dd:42:6d:1b:19:83:84:cc:3f:64:
63:ff:3f:6c:42:7d:b5:ef:95:80:0a:e6:06:b2:33:
83:83:8f:cb:88:cf:8c:27:6f:98:e6:51:21:a4:07:
17:ba:22:ad:1c:d8:52:ca:6f:3a:77:c5:ee:9a:24:
74:91:ae:4f:04:92:c5:4d:b5:51:b1:4c:50:7f:fd:
f5:33:ac:69:dd:94:47:85:cf:d6:b7:d0:81:fc:de:
6b:90:c4:4b:4a:23:50:f6:e4:43:5d:72:aa:06:07:
7a:4f:5d:88:69:5f:a6:bf:1b:80:ae:9c:9e:cf:82:
0e:56:bd:41:8c:7f:a2:a9:22:3d:2b:3d:07:c0:ba:
eb:79:0d:a5:d7:80:bb:c0:ed:7e:f8:5b:55:d8:14:
98:46:6b:b7:cc:38:a3:13:4d:bb:2e:60:16:e0:70:
f9:0e:29:1b:70:7d:0e:ab:81:36:44:3d:22:79:61:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:01:D2:24:E5:2A:A8:D5:B8:A4:C1:7F:26:8E:F0:7F:04:DE:0C:03
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f1:4a:fc:69:61:54:4c:ad:23:ff:e4:d1:ac:c7:15:ae:67:
23:cc:4e:ff:73:b1:90:c5:d4:44:23:9c:86:f4:99:6e:7e:d2:
b9:e0:86:a0:4e:97:b9:6b:f0:7f:e4:1f:c2:e5:79:e6:0d:bf:
5b:9c:d6:03:de:c1:f5:43:05:1d:db:58:f4:85:6f:41:45:63:
6b:16:09:18:f2:26:4b:c1:c1:72:61:6a:87:51:f9:36:9c:1f:
5b:5f:ae:ba:58:a9:e7:f5:9e:b6:c8:a7:28:31:45:fd:c4:23:
04:60:82:3d:c2:0d:ea:17:84:81:f6:24:6c:19:68:4e:4c:35:
f6:2f:1f:96:1c:9d:b8:0d:c8:62:93:be:08:80:e0:d7:64:72:
4c:3d:0f:7d:82:3e:48:b1:e4:6c:7c:61:dd:c9:2e:e8:70:dc:
5d:57:b7:9d:67:9a:fa:78:a6:6e:da:65:5f:0f:66:ee:72:b0:
b0:e5:13:78:cf:e3:f1:60:e5:ad:66:b2:ac:b1:d4:43:3f:d7:
d6:34:fc:2e:61:c4:5e:5b:7d:50:58:dd:0e:f4:41:6b:e6:2a:
b6:bc:be:5d:7b:41:69:cb:4f:72:b5:5e:7f:08:8c:ff:94:57:
d5:3f:c5:b6:38:dc:d4:4c:46:6a:b7:bb:6f:37:72:95:6f:8c:
8e:27:e1:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6Ees07BD/scgLc1t4OZVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh
YzJiZmMwHhcNMjUwNTEwMTIwMDU4WhcNMjUwNTExMTIwMDU4WjAzMTEwLwYDVQQD
EygzZjAxZDIyNGU1MmFhOGQ1YjhhNGMxN2YyNjhlZjA3ZjA0ZGUwYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzpvdYPsEgeGkishWL/raZFKZvkQ
T5FgOhmAL2oQWjCPPZfY0tpuh4y18+7YHaAzPKro8/RNWrsdtp8K+c5uxZ2j7n79
AfDRCGBDM1eWX91CbRsZg4TMP2Rj/z9sQn2175WACuYGsjODg4/LiM+MJ2+Y5lEh
pAcXuiKtHNhSym86d8XumiR0ka5PBJLFTbVRsUxQf/31M6xp3ZRHhc/Wt9CB/N5r
kMRLSiNQ9uRDXXKqBgd6T12IaV+mvxuArpyez4IOVr1BjH+iqSI9Kz0HwLrreQ2l
14C7wO1++FtV2BSYRmu3zDijE027LmAW4HD5DikbcH0Oq4E2RD0ieWEOMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8B0iTlKqjVuKTBfyaO8H8E3gwDMB8GA1UdIwQY
MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt
YTEyZGUzYTMzNTUzLzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz
LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPFK/Glh
VEytI//k0azHFa5nI8xO/3OxkMXURCOchvSZbn7SueCGoE6XuWvwf+QfwuV55g2/
W5zWA97B9UMFHdtY9IVvQUVjaxYJGPImS8HBcmFqh1H5NpwfW1+uulip5/Wetsin
KDFF/cQjBGCCPcIN6heEgfYkbBloTkw19i8flhyduA3IYpO+CIDg12RyTD0PfYI+
SLHkbHxh3cku6HDcXVe3nWea+nimbtplXw9m7nKwsOUTeM/j8WDlrWayrLHUQz/X
1jT8LmHEXlt9UFjdDvRBa+Yqtry+XXtBactPcrVefwiM/5RX1T/Ftjjc1ExGare7
bzdylW+Mjifhhw==
-----END CERTIFICATE-----
Generated at Sat May 10 13:58:27 2025 by rpki-client