Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier: tPUT3v6fqt33lzbnbTIWGADpb5AJPgUIdeW9jM5febQ=
Subject key identifier: A3:A0:21:99:47:91:F0:72:1A:48:B5:82:0E:A4:6E:13:0D:CF:AD:2B
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 0196C34B9B7EE25E5FDD5D99C6E5AD8D9891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number: 0E62
Signing time: Mon 12 May 2025 07:00:34 +0000
Manifest this update: Mon 12 May 2025 07:00:34 +0000
Manifest next update: Tue 13 May 2025 07:00:34 +0000
Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: 12CP4GI+OcofcGeg5B1N8CrvyZzgqDsVlDACpFJZ2O8=)
2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:9b:7e:e2:5e:5f:dd:5d:99:c6:e5:ad:8d:98:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: May 12 07:00:34 2025 GMT
Not After : May 13 07:00:34 2025 GMT
Subject: CN=a3a021994791f0721a48b5820ea46e130dcfad2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:af:01:76:2e:35:6b:31:e5:20:e1:13:8d:a8:
b1:3b:f8:47:b6:c4:70:e2:e4:60:af:fd:d1:43:5a:
19:ea:46:24:5e:22:63:1d:e5:0a:64:61:53:95:d5:
0c:a1:0f:4a:9f:b0:20:2a:46:1b:ea:6d:f3:20:f2:
e6:a5:d1:92:8d:de:db:09:21:8b:75:20:d1:28:43:
e8:0e:a4:5c:07:f6:36:c9:3e:b4:13:e5:d5:6f:b9:
1e:8a:86:74:35:e3:db:5c:b9:3a:28:18:84:1c:7f:
a5:e2:7d:2d:1f:67:c1:27:83:da:22:38:51:11:cf:
01:2c:38:40:7b:75:1a:00:bf:fd:34:81:47:d6:fa:
07:36:f3:6d:37:c4:a9:ed:28:69:b6:90:67:8e:89:
3b:2f:3d:ab:19:7c:65:05:c4:9e:e7:d3:ab:c5:87:
50:98:49:da:ff:6f:be:0a:dc:30:80:1b:20:3f:99:
1d:58:60:30:28:31:57:0f:35:5c:b0:b4:01:83:30:
b9:9d:52:c2:e6:7e:f6:b9:1f:89:f5:84:17:ea:20:
9f:cf:ed:84:9c:5f:fc:79:cf:db:9e:b8:83:fe:6f:
2e:66:03:10:aa:79:0c:a4:0d:fa:91:cc:83:de:cb:
54:44:a8:a0:8b:fd:98:6c:de:53:5c:9c:8d:7b:c8:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A0:21:99:47:91:F0:72:1A:48:B5:82:0E:A4:6E:13:0D:CF:AD:2B
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1f:9d:73:6a:3b:77:14:58:aa:5f:3b:58:5f:e5:dc:0a:1c:
13:fa:3a:a2:3e:1d:7b:41:ea:7f:53:07:da:d1:69:e5:a7:49:
c2:b8:3d:40:92:f2:b2:db:0e:f6:35:4d:db:ef:b6:aa:0d:ca:
63:65:b6:2b:6a:7e:37:0a:ff:8d:7f:2c:4f:5c:36:66:ab:0c:
7a:42:55:1a:82:6d:16:4e:69:9b:f2:d7:b3:9f:56:2e:c0:5e:
e4:f9:95:90:42:c2:68:40:47:af:68:04:2a:88:d4:c3:3d:df:
46:d9:97:e4:b1:d7:cc:a2:f2:df:ef:2b:34:0e:13:9f:38:b0:
57:95:92:87:f7:02:3d:08:25:c3:bf:61:49:57:63:08:9a:96:
bf:81:42:39:39:ba:7b:fd:74:33:f9:fb:b6:e1:98:69:13:df:
43:06:2d:6f:9e:81:50:b9:f8:a7:a1:f1:0c:9b:e1:38:ed:3b:
55:fc:55:b0:da:eb:70:ae:dc:3a:8e:e4:e3:e2:c5:0b:cc:0f:
fe:2e:82:b1:09:45:a8:1e:f4:d1:49:1f:ea:02:3d:23:96:da:
f1:dc:3f:35:17:30:d0:68:49:d3:56:83:4b:d8:d3:24:17:3d:
f8:7c:ef:a6:6d:d0:56:3f:e7:db:4e:6b:ce:47:e8:b2:b1:f6:
8f:2c:4c:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS5t+4l5f3V2ZxuWtjZiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWM3ZTMzNzQ0YzI0OGY4N2RlMmRjNjNhYWJmMTlmNmM4
NGIwMzIwHhcNMjUwNTEyMDcwMDM0WhcNMjUwNTEzMDcwMDM0WjAzMTEwLwYDVQQD
EyhhM2EwMjE5OTQ3OTFmMDcyMWE0OGI1ODIwZWE0NmUxMzBkY2ZhZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a8Bdi41azHlIOETjaixO/hHtsRw
4uRgr/3RQ1oZ6kYkXiJjHeUKZGFTldUMoQ9Kn7AgKkYb6m3zIPLmpdGSjd7bCSGL
dSDRKEPoDqRcB/Y2yT60E+XVb7keioZ0NePbXLk6KBiEHH+l4n0tH2fBJ4PaIjhR
Ec8BLDhAe3UaAL/9NIFH1voHNvNtN8Sp7ShptpBnjok7Lz2rGXxlBcSe59OrxYdQ
mEna/2++CtwwgBsgP5kdWGAwKDFXDzVcsLQBgzC5nVLC5n72uR+J9YQX6iCfz+2E
nF/8ec/bnriD/m8uZgMQqnkMpA36kcyD3stURKigi/2YbN5TXJyNe8h1xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOgIZlHkfByGki1gg6kbhMNz60rMB8GA1UdIwQY
MBaAFFGsfjN0TCSPh94txjqr8Z9shLAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYt
NjM0ODY0OTc3NGEyLzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYtNjM0ODY0OTc3NGEy
LzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjh+dc2o7
dxRYql87WF/l3AocE/o6oj4de0Hqf1MH2tFp5adJwrg9QJLystsO9jVN2++2qg3K
Y2W2K2p+Nwr/jX8sT1w2ZqsMekJVGoJtFk5pm/LXs59WLsBe5PmVkELCaEBHr2gE
KojUwz3fRtmX5LHXzKLy3+8rNA4TnziwV5WSh/cCPQglw79hSVdjCJqWv4FCOTm6
e/10M/n7tuGYaRPfQwYtb56BULn4p6HxDJvhOO07VfxVsNrrcK7cOo7k4+LFC8wP
/i6CsQlFqB700Ukf6gI9I5ba8dw/NRcw0GhJ01aDS9jTJBc9+Hzvpm3QVj/n205r
zkfosrH2jyxMcg==
-----END CERTIFICATE-----
Generated at Mon May 12 13:29:18 2025 by rpki-client