Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File: UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier: dZ7Q/S7QaF9Kqj1K87rLC8lyfVw9feL9zw20CnoVoJw=
Subject key identifier: E2:80:E0:65:AC:A9:C0:8C:2C:3C:F7:9B:67:8F:8D:64:F2:13:D0:8B
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 0196BE257822B36B24E40C9931CA17F34A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number: 127F
Signing time: Sun 11 May 2025 07:00:48 +0000
Manifest this update: Sun 11 May 2025 07:00:48 +0000
Manifest next update: Mon 12 May 2025 07:00:48 +0000
Files and hashes: 1: 1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa (hash: 2k5Vbn4Uzj43wxo1XqMC5rFldjjQHil2kjWg9IIMQEQ=)
2: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: twAnat3bkrHR8i3U5+WIfm8oOdk9swRjbjUSqj5qI1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:78:22:b3:6b:24:e4:0c:99:31:ca:17:f3:4a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: May 11 07:00:48 2025 GMT
Not After : May 12 07:00:48 2025 GMT
Subject: CN=e280e065aca9c08c2c3cf79b678f8d64f213d08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:0f:51:55:63:45:a6:1f:db:a9:11:66:8c:
86:43:86:3d:80:96:9d:c3:fa:6c:b0:3a:58:bb:31:
9a:54:59:f1:77:39:b2:1a:03:4d:75:7f:b9:6c:24:
f1:8c:29:42:41:d9:b1:d7:c4:37:7a:61:e4:1b:55:
fa:88:89:ed:22:a1:88:6a:a2:f7:c0:5e:94:a9:9b:
55:a5:9e:99:7c:29:49:6f:e6:d8:8a:8f:49:c2:bf:
0f:c2:48:25:9b:45:60:e7:8c:75:8f:19:b8:27:26:
69:fd:c5:f9:57:5a:f3:59:05:e5:93:1a:44:ec:47:
0b:07:70:69:43:c5:73:6d:60:ed:8c:7e:4b:85:6a:
ba:03:41:da:03:e6:4d:94:e7:ac:b3:7e:fc:63:88:
42:ba:ae:88:f3:32:98:89:03:bb:af:e6:79:89:06:
82:3b:5e:c9:7e:ea:e3:8b:3d:a8:65:ba:41:0d:a5:
26:38:1b:ac:67:12:2e:fa:40:f5:dd:cd:09:ee:f8:
10:f0:38:cc:d1:f5:df:3c:d6:27:07:a6:83:03:b5:
77:2b:e0:68:df:27:a5:be:dc:3b:56:ae:25:7a:55:
9c:fa:80:a4:27:4b:c8:6e:e0:de:29:45:3f:0f:a8:
f6:94:e9:f5:fd:b8:03:c5:72:09:e4:3d:e8:a6:39:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:80:E0:65:AC:A9:C0:8C:2C:3C:F7:9B:67:8F:8D:64:F2:13:D0:8B
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9e:76:b7:0c:47:86:39:18:82:a3:92:41:34:07:27:1b:9d:
ee:1d:fa:d8:39:da:62:61:87:79:54:ea:b1:92:6c:53:54:83:
b4:e3:34:fe:28:9c:11:f9:68:3d:b0:9c:46:b8:f8:01:ca:d0:
df:a1:75:c1:6c:e7:46:14:f8:b8:07:63:6f:4c:b7:75:60:b4:
14:ca:7c:a5:c2:e0:a4:f4:6b:95:7c:88:a6:b9:c4:3c:bf:d0:
1c:a1:b1:73:df:64:56:4a:24:64:b9:f8:53:c2:f1:ec:e6:d1:
ad:4e:62:5d:71:ec:49:68:da:36:94:0c:c5:2d:6d:da:aa:6a:
27:94:4a:ae:a7:3c:b8:e8:bb:99:ba:73:ec:6f:8c:2b:27:7e:
40:11:2c:aa:28:fb:2f:9d:12:02:07:ea:ff:b2:f3:0f:8e:5f:
0c:71:d1:c1:72:28:40:7b:79:90:6b:ff:43:15:34:e5:0f:0c:
de:f8:a6:c9:e5:15:10:95:be:fc:7c:47:c2:9e:ed:76:0c:69:
b1:ab:0b:ac:c5:0d:bb:3d:50:81:ef:64:c7:96:e6:a4:b3:35:
9f:db:03:65:79:3a:de:60:ca:4b:0d:58:6b:aa:8b:24:51:56:
60:65:d7:04:53:b0:44:c8:c0:06:7b:fd:67:3c:e8:51:1d:37:
4f:ea:bd:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+JXgis2sk5AyZMcoX80onMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWE2YTliZWI1MmVmZjI5NjQ0NjU5Yjk0MzJhMGE1OTIz
NzMxNGMwHhcNMjUwNTExMDcwMDQ4WhcNMjUwNTEyMDcwMDQ4WjAzMTEwLwYDVQQD
EyhlMjgwZTA2NWFjYTljMDhjMmMzY2Y3OWI2NzhmOGQ2NGYyMTNkMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcAPUVVjRaYf26kRZoyGQ4Y9gJad
w/pssDpYuzGaVFnxdzmyGgNNdX+5bCTxjClCQdmx18Q3emHkG1X6iIntIqGIaqL3
wF6UqZtVpZ6ZfClJb+bYio9Jwr8Pwkglm0Vg54x1jxm4JyZp/cX5V1rzWQXlkxpE
7EcLB3BpQ8VzbWDtjH5LhWq6A0HaA+ZNlOess378Y4hCuq6I8zKYiQO7r+Z5iQaC
O17Jfurjiz2oZbpBDaUmOBusZxIu+kD13c0J7vgQ8DjM0fXfPNYnB6aDA7V3K+Bo
3yelvtw7Vq4lelWc+oCkJ0vIbuDeKUU/D6j2lOn1/bgDxXIJ5D3opjkNGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKA4GWsqcCMLDz3m2ePjWTyE9CLMB8GA1UdIwQY
MBaAFFGaapvrUu/ylkRlm5QyoKWSNzFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQt
OTA1ZDlkY2Y1MGFlLzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQtOTA1ZDlkY2Y1MGFl
LzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJ52twxH
hjkYgqOSQTQHJxud7h362DnaYmGHeVTqsZJsU1SDtOM0/iicEfloPbCcRrj4AcrQ
36F1wWznRhT4uAdjb0y3dWC0FMp8pcLgpPRrlXyIprnEPL/QHKGxc99kVkokZLn4
U8Lx7ObRrU5iXXHsSWjaNpQMxS1t2qpqJ5RKrqc8uOi7mbpz7G+MKyd+QBEsqij7
L50SAgfq/7LzD45fDHHRwXIoQHt5kGv/QxU05Q8M3vimyeUVEJW+/HxHwp7tdgxp
sasLrMUNuz1Qge9kx5bmpLM1n9sDZXk63mDKSw1Ya6qLJFFWYGXXBFOwRMjABnv9
ZzzoUR03T+q91Q==
-----END CERTIFICATE-----
Generated at Sun May 11 11:41:10 2025 by rpki-client