Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
File: UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json)
Hash identifier: Tsrmd0T6o7+P4qvyyXkgGd2tgoW12+G+lwKKMzdqMUc=
Subject key identifier: 37:55:6B:7C:34:83:D8:D0:CB:7F:B0:6E:94:50:77:BB:5A:3C:14:C7
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial: 0196D4765D7EC55F536736509453E6EAAD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
Manifest number: 153F
Signing time: Thu 15 May 2025 15:00:49 +0000
Manifest this update: Thu 15 May 2025 15:00:49 +0000
Manifest next update: Fri 16 May 2025 15:00:49 +0000
Files and hashes: 1: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: pGfYHBw8mP67JUAZeOW7HaDlGzFJY0WN2jHOpPTkWTA=)
2: VIK5LfegEju3TUqgukYni1TBj7k.roa (hash: FcCMQfjXZEhJ1ZtbvXFYBrE4X/DK9/KBh+K8ZP9nlZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:76:5d:7e:c5:5f:53:67:36:50:94:53:e6:ea:ad:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Validity
Not Before: May 15 15:00:49 2025 GMT
Not After : May 16 15:00:49 2025 GMT
Subject: CN=37556b7c3483d8d0cb7fb06e945077bb5a3c14c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:20:55:88:39:05:53:eb:4a:eb:34:85:bf:
82:24:7d:84:fc:11:da:f9:3f:06:09:f4:25:b7:bb:
ac:dd:7a:27:82:2e:38:64:18:a5:84:40:71:f7:b0:
f8:4d:5f:5f:31:e3:e1:b8:19:af:67:81:fb:c1:95:
c8:38:ee:69:0b:84:87:ee:51:a4:6f:34:ec:3f:ce:
70:ba:95:cf:6f:32:32:37:cc:8a:b3:0f:cf:dd:94:
ed:93:d1:4e:ab:46:99:b6:bc:3a:d7:ed:c9:9c:2c:
98:28:46:5d:78:d5:88:cd:39:87:ea:9e:99:85:59:
08:eb:12:f2:2c:43:e7:c8:d1:da:11:b8:a0:59:53:
3d:a1:ac:6d:52:02:47:b1:f6:08:0d:87:db:73:6a:
77:ba:0e:fe:cc:16:a2:4d:4f:a2:9d:69:63:c7:1d:
67:d6:fb:3c:cc:e5:69:5f:c8:6f:ec:1e:9c:be:77:
41:e2:17:b6:5d:4e:d5:6b:21:f5:e3:ca:45:9f:6d:
47:22:7a:3a:d3:3d:34:42:d3:d0:2e:da:49:c8:99:
f9:07:0c:61:32:e6:0f:62:f8:c8:37:57:f8:8e:bd:
43:55:eb:20:9e:d6:02:86:df:42:43:24:9a:d1:09:
9f:ba:d1:2a:d6:cc:ac:f5:c7:72:53:e3:6c:50:fa:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:6B:7C:34:83:D8:D0:CB:7F:B0:6E:94:50:77:BB:5A:3C:14:C7
X509v3 Authority Key Identifier:
keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:21:70:bf:6c:21:d9:3d:4d:a2:e8:d9:87:bc:bc:bb:56:23:
32:b2:19:d8:7e:84:e1:b6:3c:71:11:e5:7d:db:e7:fc:d4:63:
8b:4d:25:9f:bf:58:e0:3e:64:2b:6a:11:ef:ee:5f:76:0f:f3:
da:7e:0f:67:4a:93:a3:a7:7e:00:42:c6:b4:8c:6b:dc:ca:48:
10:e1:89:93:a6:4c:c3:a2:55:e0:c5:5e:a8:60:41:91:d5:3b:
95:0f:2b:c3:a1:ce:9b:d2:de:d1:fa:b5:ff:6d:4b:b4:c8:c5:
ed:a4:f0:06:27:76:d6:cb:cc:28:90:65:5f:63:67:23:c7:23:
4f:38:9b:f3:32:5b:46:47:d4:55:38:09:32:4f:ea:10:1c:e1:
af:54:b1:06:1c:f2:2c:6e:b4:93:7a:cb:41:94:c5:52:11:d0:
e1:6f:f3:dc:05:1b:3b:e2:b1:50:fb:a8:0f:26:f7:22:23:71:
0a:bf:3e:73:4a:92:a0:2b:94:2c:13:84:15:f7:7c:e7:94:96:
2a:bb:fd:22:92:41:2b:8d:e9:10:b5:a3:f8:48:a1:2a:f1:8d:
36:01:4f:d1:25:e4:ae:67:ca:2b:c2:cb:91:3a:86:76:b3:0d:
0b:a5:a3:4b:d7:ce:7b:7d:dd:40:ba:ef:e9:e5:5d:4f:5c:8e:
22:dd:b9:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbUdl1+xV9TZzZQlFPm6q1eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWYzOTFmMjlkOTIwNzhiYTZlMmM3NmZhYTJmOGFlOTQ3
MzQzZTYwHhcNMjUwNTE1MTUwMDQ5WhcNMjUwNTE2MTUwMDQ5WjAzMTEwLwYDVQQD
EygzNzU1NmI3YzM0ODNkOGQwY2I3ZmIwNmU5NDUwNzdiYjVhM2MxNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzYgVYg5BVPrSus0hb+CJH2E/BHa
+T8GCfQlt7us3Xongi44ZBilhEBx97D4TV9fMePhuBmvZ4H7wZXIOO5pC4SH7lGk
bzTsP85wupXPbzIyN8yKsw/P3ZTtk9FOq0aZtrw61+3JnCyYKEZdeNWIzTmH6p6Z
hVkI6xLyLEPnyNHaEbigWVM9oaxtUgJHsfYIDYfbc2p3ug7+zBaiTU+inWljxx1n
1vs8zOVpX8hv7B6cvndB4he2XU7VayH148pFn21HIno60z00QtPQLtpJyJn5Bwxh
MuYPYvjIN1f4jr1DVesgntYCht9CQySa0QmfutEq1sys9cdyU+NsUPqA4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdVa3w0g9jQy3+wbpRQd7taPBTHMB8GA1UdIwQY
MBaAFFCfOR8p2SB4um4sdvqi+K6Uc0PmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUo4NUh5blpJSGk2Yml4Mi1xTDRycFJ6US1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kNWRkMWEtN2I1OS00NDM1LWFiZGYt
MjhkMGYyMDJlMzZkLzEvVUo4NUh5blpJSGk2Yml4Mi1xTDRycFJ6US1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9kNWRkMWEtN2I1OS00NDM1LWFiZGYtMjhkMGYyMDJlMzZk
LzEvVUo4NUh5blpJSGk2Yml4Mi1xTDRycFJ6US1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyFwv2wh
2T1NoujZh7y8u1YjMrIZ2H6E4bY8cRHlfdvn/NRji00ln79Y4D5kK2oR7+5fdg/z
2n4PZ0qTo6d+AELGtIxr3MpIEOGJk6ZMw6JV4MVeqGBBkdU7lQ8rw6HOm9Le0fq1
/21LtMjF7aTwBid21svMKJBlX2NnI8cjTzib8zJbRkfUVTgJMk/qEBzhr1SxBhzy
LG60k3rLQZTFUhHQ4W/z3AUbO+KxUPuoDyb3IiNxCr8+c0qSoCuULBOEFfd855SW
Krv9IpJBK43pELWj+EihKvGNNgFP0SXkrmfKK8LLkTqGdrMNC6WjS9fOe33dQLrv
6eVdT1yOIt25ig==
-----END CERTIFICATE-----
Generated at Thu May 15 20:11:40 2025 by rpki-client