Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
File: UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft (raw, json)
Hash identifier: kdztekT3Atda+LAdVdMlo0AzzCS26GCYVa4npGI49K8=
Subject key identifier: 8E:21:43:3A:C0:B4:19:B5:4E:33:61:AF:32:94:8D:2B:5D:F1:F6:1A
Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
Certificate issuer: /CN=52702cdee043094ac2f33170125f94f7034da8f0
Certificate serial: 0196C75F8A9C6C6D6F6B52BA1D806FCE660A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
Manifest number: 0ED4
Signing time: Tue 13 May 2025 02:00:49 +0000
Manifest this update: Tue 13 May 2025 02:00:49 +0000
Manifest next update: Wed 14 May 2025 02:00:49 +0000
Files and hashes: 1: UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl (hash: 4s2qZDS86tBiBvcRTsHi6GiJzAVGo50/PKmuk2Q6vlk=)
2: eZTqCsy1o9f-eq_FZSRPL4-aBD8.roa (hash: cQOdS5lB0S1LA9krJg3sdASUyUTn/NkoA0OQ3se0FuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:5f:8a:9c:6c:6d:6f:6b:52:ba:1d:80:6f:ce:66:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0
Validity
Not Before: May 13 02:00:49 2025 GMT
Not After : May 14 02:00:49 2025 GMT
Subject: CN=8e21433ac0b419b54e3361af32948d2b5df1f61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:ce:68:b3:0b:18:a6:26:53:0e:72:de:3d:
50:95:95:7a:6b:f2:87:50:6f:2a:6c:b1:15:ea:42:
e0:7c:bc:68:a4:03:8d:79:53:55:a9:85:0d:bd:60:
6f:25:b8:fc:85:4c:5e:fa:d7:e0:de:ea:75:63:f9:
8e:8c:c3:b0:16:75:c2:25:bb:06:94:9a:f0:ef:ad:
15:06:53:91:43:be:46:29:8f:33:7c:4c:22:27:24:
8d:a5:45:bb:48:bc:0f:74:49:4e:5a:4c:bf:ce:d7:
f3:9a:dc:62:58:23:a3:03:b3:f7:c5:96:ef:c5:46:
76:6b:74:42:67:2f:65:7a:dc:25:91:0e:fb:9f:d0:
ae:9e:c1:79:d1:5c:d3:26:ca:30:f7:85:4e:89:4a:
ce:cd:15:3a:f8:f3:75:9d:cb:25:8f:ba:42:2a:2b:
6f:e3:c9:70:39:04:9b:21:bc:22:2b:68:60:17:2f:
d4:b5:02:03:94:ae:21:c1:cf:2b:d2:ec:aa:24:ce:
60:1e:43:26:75:b3:70:14:61:8d:97:cc:69:da:c0:
cb:03:a6:48:2b:a7:10:66:aa:ef:36:12:f6:6d:ad:
18:37:24:c6:01:37:7b:2c:b4:9c:99:27:f7:79:d8:
5d:11:1d:29:57:4f:c9:e3:b3:d3:45:50:c7:9d:63:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:21:43:3A:C0:B4:19:B5:4E:33:61:AF:32:94:8D:2B:5D:F1:F6:1A
X509v3 Authority Key Identifier:
keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:54:f8:97:3d:0e:a3:d2:d4:52:02:d4:34:84:f9:27:83:30:
2b:20:27:f9:29:92:8d:b2:ea:7c:05:a6:32:96:9f:ad:a8:18:
8f:bf:0a:94:5e:d3:0d:28:74:9a:75:be:fc:fa:4a:30:fc:31:
8c:78:c1:5a:82:78:ac:94:f7:9e:8a:79:74:7e:bc:31:35:c5:
f6:4c:81:04:0d:18:a6:41:db:e9:d6:97:cd:c1:4a:54:15:0d:
71:48:1c:90:3e:f7:90:bd:bf:27:84:22:e3:1f:7b:6b:e2:51:
ef:81:15:9b:67:87:5e:eb:f6:75:1d:ad:05:4d:b6:c4:13:ad:
27:8d:ad:af:ea:ab:b0:88:d8:b1:98:a6:32:32:31:46:3a:90:
ba:2e:3b:60:84:0f:3a:0a:a4:7b:ad:c4:bb:d0:2e:6f:a0:ba:
4a:15:8a:57:d9:ef:1f:3a:be:e8:01:db:4b:ef:ae:62:b1:84:
53:0f:0a:60:3e:ea:10:60:61:f8:00:0d:8e:73:ba:a2:84:4b:
66:e1:20:85:83:fd:dd:04:4b:88:4c:98:5a:92:45:40:4e:27:
ae:29:f0:de:70:43:41:29:01:41:ce:08:e5:4c:19:ee:e9:ab:
92:18:3d:d8:50:7b:13:7e:ec:13:1b:09:3f:9c:97:f1:66:9d:
fc:0e:30:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHX4qcbG1va1K6HYBvzmYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNzAyY2RlZTA0MzA5NGFjMmYzMzE3MDEyNWY5NGY3MDM0
ZGE4ZjAwHhcNMjUwNTEzMDIwMDQ5WhcNMjUwNTE0MDIwMDQ5WjAzMTEwLwYDVQQD
Eyg4ZTIxNDMzYWMwYjQxOWI1NGUzMzYxYWYzMjk0OGQyYjVkZjFmNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8TOaLMLGKYmUw5y3j1QlZV6a/KH
UG8qbLEV6kLgfLxopAONeVNVqYUNvWBvJbj8hUxe+tfg3up1Y/mOjMOwFnXCJbsG
lJrw760VBlORQ75GKY8zfEwiJySNpUW7SLwPdElOWky/ztfzmtxiWCOjA7P3xZbv
xUZ2a3RCZy9letwlkQ77n9CunsF50VzTJsow94VOiUrOzRU6+PN1ncslj7pCKitv
48lwOQSbIbwiK2hgFy/UtQIDlK4hwc8r0uyqJM5gHkMmdbNwFGGNl8xp2sDLA6ZI
K6cQZqrvNhL2ba0YNyTGATd7LLScmSf3edhdER0pV0/J47PTRVDHnWMOxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4hQzrAtBm1TjNhrzKUjStd8fYaMB8GA1UdIwQY
MBaAFFJwLN7gQwlKwvMxcBJflPcDTajwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kOGM4NWUtNDE5OC00ODY5LWI5Y2Qt
ZTI4MGI2NTAxNzA0LzEvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kOGM4NWUtNDE5OC00ODY5LWI5Y2QtZTI4MGI2NTAxNzA0
LzEvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFT4lz0O
o9LUUgLUNIT5J4MwKyAn+SmSjbLqfAWmMpafragYj78KlF7TDSh0mnW+/PpKMPwx
jHjBWoJ4rJT3nop5dH68MTXF9kyBBA0YpkHb6daXzcFKVBUNcUgckD73kL2/J4Qi
4x97a+JR74EVm2eHXuv2dR2tBU22xBOtJ42tr+qrsIjYsZimMjIxRjqQui47YIQP
Ogqke63Eu9Aub6C6ShWKV9nvHzq+6AHbS++uYrGEUw8KYD7qEGBh+AANjnO6ooRL
ZuEghYP93QRLiEyYWpJFQE4nrinw3nBDQSkBQc4I5UwZ7umrkhg92FB7E37sExsJ
P5yX8Wad/A4wUA==
-----END CERTIFICATE-----
Generated at Tue May 13 06:26:16 2025 by rpki-client