Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
File: uqpkzSnJTM3hREj2GhcsdjseQFA.mft (raw, json)
Hash identifier: EQRM2yFKDSztnIOOSYGqZtUw0dWshOwlof/4gMDldvw=
Subject key identifier: 8E:E6:4E:6E:E6:5D:A8:B5:B1:C2:04:3F:91:6D:10:66:6A:51:CA:B5
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial: 0196CA976635550234EC93C1CA83AE601384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
Manifest number: 0591
Signing time: Tue 13 May 2025 17:00:41 +0000
Manifest this update: Tue 13 May 2025 17:00:41 +0000
Manifest next update: Wed 14 May 2025 17:00:41 +0000
Files and hashes: 1: 78qzTXd1x9Fq51bVnqtwUpES8tE.roa (hash: cFYT5YQ4faJqGDT5XV6eOPdhzfgW7hK/0zl0h4kFiw8=)
2: uqpkzSnJTM3hREj2GhcsdjseQFA.crl (hash: 4anMaoi34O7H0xkL5CaqYGB471ianQ3nEyl2XZvCcAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:66:35:55:02:34:ec:93:c1:ca:83:ae:60:13:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Validity
Not Before: May 13 17:00:41 2025 GMT
Not After : May 14 17:00:41 2025 GMT
Subject: CN=8ee64e6ee65da8b5b1c2043f916d10666a51cab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d7:6e:9d:af:36:a4:ed:8e:07:15:2a:d2:89:
d0:1f:fb:dc:04:c7:f1:1e:61:c2:5b:0c:c8:11:6f:
e4:c6:df:14:ae:6e:1f:4e:09:80:61:b1:27:24:7a:
00:67:ae:66:3e:47:54:05:91:66:3d:96:0d:ad:88:
f9:5b:5a:66:65:2e:95:64:ff:33:29:c2:71:f2:18:
85:d5:f0:f7:88:9a:9f:8b:12:fd:d0:fd:15:b2:b1:
5e:1a:e2:8a:68:d9:50:29:ad:18:32:d6:ad:46:ff:
43:90:d4:3d:db:60:70:b6:e9:63:02:5f:dc:0e:c7:
d4:bc:19:cd:5f:22:ec:ee:a8:1b:b7:d6:16:02:07:
89:dc:73:30:88:96:89:37:57:84:db:4e:f3:63:cd:
78:7d:64:15:52:0c:d8:42:74:d3:f4:68:d8:e6:f4:
f5:15:80:92:e1:0f:27:3b:a3:62:16:63:2e:91:ab:
e7:df:c8:b3:0b:7e:86:55:dc:7d:a3:11:ae:ce:a0:
1e:eb:a3:9b:a6:17:e5:c1:47:5a:11:45:23:3f:c5:
9d:cd:2b:11:2a:bb:f9:54:79:f9:83:fd:58:16:a4:
df:c2:74:0e:f0:ae:30:d2:e5:98:99:2b:87:3b:f5:
aa:fe:c2:f8:32:e1:7f:03:4d:af:d7:6d:f4:d9:80:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E6:4E:6E:E6:5D:A8:B5:B1:C2:04:3F:91:6D:10:66:6A:51:CA:B5
X509v3 Authority Key Identifier:
keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:89:58:da:2b:36:a8:5d:af:c0:ab:f1:d4:37:e7:f5:20:06:
96:f4:e0:ad:84:8a:cd:b8:92:e4:f1:a5:92:ec:12:fd:c3:55:
aa:7e:e0:db:5b:8b:ca:b8:da:19:a4:dc:f7:00:d6:eb:e5:2c:
bc:61:61:06:fb:e3:6a:49:97:4f:d0:cd:8d:b1:36:8e:9f:b5:
5a:e9:b6:6c:d5:89:28:90:ab:4a:95:e3:4d:20:17:20:0b:ea:
e9:11:8b:57:2b:01:28:53:04:45:40:80:68:24:40:dd:d3:3d:
28:f8:b3:d3:59:33:a6:5e:34:f3:5d:1d:cc:37:ba:55:1d:42:
de:a5:c8:f2:22:3e:7e:b7:97:f9:44:c6:67:08:93:99:c9:7b:
5d:f0:6c:aa:f7:b2:7b:39:64:b8:2b:44:71:ff:3f:a9:a4:9e:
ed:0f:25:81:25:df:72:93:e6:70:cf:0c:43:0e:8f:88:30:59:
d1:b1:26:f4:af:ff:59:12:95:ac:6c:e2:b1:3f:99:a9:95:a7:
19:e3:d3:c0:3e:6b:29:e2:72:5d:fe:61:4b:64:a3:1a:ff:07:
14:66:10:d0:f1:71:a1:a5:3e:57:b7:dc:16:b9:16:5c:40:50:
b3:ed:cf:70:ae:27:21:2e:f1:24:95:69:94:db:b3:a2:c6:05:
dd:d4:f9:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKl2Y1VQI07JPByoOuYBOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWE2NGNkMjljOTRjY2RlMTQ0NDhmNjFhMTcyYzc2M2Ix
ZTQwNTAwHhcNMjUwNTEzMTcwMDQxWhcNMjUwNTE0MTcwMDQxWjAzMTEwLwYDVQQD
Eyg4ZWU2NGU2ZWU2NWRhOGI1YjFjMjA0M2Y5MTZkMTA2NjZhNTFjYWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdduna82pO2OBxUq0onQH/vcBMfx
HmHCWwzIEW/kxt8Urm4fTgmAYbEnJHoAZ65mPkdUBZFmPZYNrYj5W1pmZS6VZP8z
KcJx8hiF1fD3iJqfixL90P0VsrFeGuKKaNlQKa0YMtatRv9DkNQ922BwtuljAl/c
DsfUvBnNXyLs7qgbt9YWAgeJ3HMwiJaJN1eE207zY814fWQVUgzYQnTT9GjY5vT1
FYCS4Q8nO6NiFmMukavn38izC36GVdx9oxGuzqAe66ObphflwUdaEUUjP8WdzSsR
Krv5VHn5g/1YFqTfwnQO8K4w0uWYmSuHO/Wq/sL4MuF/A02v12302YBprQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7mTm7mXai1scIEP5FtEGZqUcq1MB8GA1UdIwQY
MBaAFLqqZM0pyUzN4URI9hoXLHY7HkBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFwa3pTbkpUTTNoUkVqMkdoY3NkanNlUUZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MWY0MzktMmIxYi00ZWYwLWI2YTUt
OGZjYWE2OTM2YzZjLzEvdXFwa3pTbkpUTTNoUkVqMkdoY3NkanNlUUZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83MWY0MzktMmIxYi00ZWYwLWI2YTUtOGZjYWE2OTM2YzZj
LzEvdXFwa3pTbkpUTTNoUkVqMkdoY3NkanNlUUZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPolY2is2
qF2vwKvx1Dfn9SAGlvTgrYSKzbiS5PGlkuwS/cNVqn7g21uLyrjaGaTc9wDW6+Us
vGFhBvvjakmXT9DNjbE2jp+1Wum2bNWJKJCrSpXjTSAXIAvq6RGLVysBKFMERUCA
aCRA3dM9KPiz01kzpl40810dzDe6VR1C3qXI8iI+freX+UTGZwiTmcl7XfBsqvey
ezlkuCtEcf8/qaSe7Q8lgSXfcpPmcM8MQw6PiDBZ0bEm9K//WRKVrGzisT+ZqZWn
GePTwD5rKeJyXf5hS2SjGv8HFGYQ0PFxoaU+V7fcFrkWXEBQs+3PcK4nIS7xJJVp
lNuzosYF3dT5WQ==
-----END CERTIFICATE-----
Generated at Wed May 14 00:19:22 2025 by rpki-client