Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
File: UvYp80zQg7xoBUBpscxe55cfi7s.mft (raw, json)
Hash identifier: KFbHTVgcV2vVq1OdIpHHIFRYHhmAlVd0lTKKgfO+ZWE=
Subject key identifier: 24:12:78:05:E3:CA:D8:D5:E1:11:7E:F2:BF:F7:8A:7E:3F:77:0A:A9
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial: 0196A79D4B956BCD951494DF358563C14A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 22:00:25 +0000
Manifest this update: Tue 06 May 2025 22:00:25 +0000
Manifest next update: Wed 07 May 2025 22:00:25 +0000
Files and hashes: 1: 9Ljs6ePMXf76Xf3jjnZS1_jYods.roa (hash: Vw9UmLxmNUyNOAabfPVlvcJQ3CkdXDMT04j3t1Hv0OU=)
2: UvYp80zQg7xoBUBpscxe55cfi7s.crl (hash: ikWYPzk3D7vN9eQoo4ETFAZK4cUc4byh7drK6EDrRkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:9d:4b:95:6b:cd:95:14:94:df:35:85:63:c1:4a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Validity
Not Before: May 6 22:00:25 2025 GMT
Not After : May 7 22:00:25 2025 GMT
Subject: CN=24127805e3cad8d5e1117ef2bff78a7e3f770aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:b4:e4:b2:98:8c:95:78:69:d6:5e:9a:36:
9b:ca:90:2a:38:e6:fb:29:7d:84:3d:d4:6e:79:ac:
06:0f:d8:5e:92:59:9e:44:06:18:cb:63:11:80:28:
f3:73:2c:8f:8f:a8:de:39:d6:8b:ca:02:3b:f2:58:
a8:84:f6:89:73:3e:fd:84:b6:30:80:f0:52:e6:52:
49:a1:5f:50:f2:24:81:2e:b1:63:23:46:07:a3:30:
cf:dd:7f:d1:60:e0:f5:b3:54:29:ce:a8:24:89:00:
4e:92:3e:e5:52:62:1b:8f:19:e4:42:fa:cd:d5:18:
58:b0:fb:80:77:a8:8b:bc:ce:2e:b2:df:93:95:2a:
a0:07:dc:15:12:9e:7d:fd:e4:b6:28:23:cc:e7:f0:
1e:fa:99:b5:35:67:ce:04:05:1c:88:28:28:ff:63:
a9:a9:3e:3a:45:e8:dd:74:44:ae:3d:d2:48:bb:6d:
a2:eb:76:bf:9e:90:c3:2a:7f:fc:7b:e2:ba:32:18:
81:64:12:7f:51:80:04:ef:08:5c:23:23:0d:27:54:
9c:e1:c3:f3:d7:0f:f7:17:c5:ff:4f:d3:b5:5e:7f:
bb:e5:47:53:78:f9:fd:02:4f:bc:e5:68:69:11:86:
5f:7e:9b:c6:8b:41:18:dc:51:5a:9e:ce:fd:e8:39:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:12:78:05:E3:CA:D8:D5:E1:11:7E:F2:BF:F7:8A:7E:3F:77:0A:A9
X509v3 Authority Key Identifier:
keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a7:2b:58:59:76:cf:c8:1e:cb:08:14:c0:6e:ac:ca:8c:ef:
fc:50:32:33:21:95:e8:75:8a:c6:27:91:54:ae:0a:b9:50:07:
9c:0f:96:01:9f:cf:15:0b:71:eb:60:6e:56:41:4e:b2:d5:e4:
32:85:58:5e:49:0f:53:09:0c:1d:ec:82:cd:0a:38:c6:6b:c0:
82:68:df:8d:9e:93:e0:87:fb:65:0c:6a:91:61:00:f9:78:16:
20:40:f2:27:64:66:6f:45:c6:0f:1a:fc:59:72:46:ee:e8:55:
94:39:6b:c4:92:da:aa:66:62:09:6c:63:8a:4e:b9:d2:af:2b:
23:6d:5f:d9:23:2a:eb:63:3b:06:79:35:31:ae:f2:45:4c:81:
7d:c0:af:38:89:10:f8:b3:18:15:de:d2:e4:b6:19:46:33:13:
59:cb:1c:d0:22:14:ce:d0:21:d9:45:c6:14:19:8d:73:fe:b6:
63:3e:d6:4a:43:67:90:37:27:b2:5e:e7:06:68:1f:f3:e9:e1:
de:b0:ae:d7:6b:8d:9a:d7:e5:ce:7a:d2:3e:ba:2d:56:a3:81:
1a:3b:ca:b3:e9:d1:62:87:27:06:95:70:7a:1b:f8:f0:3a:a1:
90:19:c7:ff:6f:1a:b3:37:49:9f:a9:27:1a:72:de:3a:db:ee:
b2:3a:2f:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZannUuVa82VFJTfNYVjwUp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZjYyOWYzNGNkMDgzYmM2ODA1NDA2OWIxY2M1ZWU3OTcx
ZjhiYmIwHhcNMjUwNTA2MjIwMDI1WhcNMjUwNTA3MjIwMDI1WjAzMTEwLwYDVQQD
EygyNDEyNzgwNWUzY2FkOGQ1ZTExMTdlZjJiZmY3OGE3ZTNmNzcwYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocm05LKYjJV4adZemjabypAqOOb7
KX2EPdRueawGD9heklmeRAYYy2MRgCjzcyyPj6jeOdaLygI78liohPaJcz79hLYw
gPBS5lJJoV9Q8iSBLrFjI0YHozDP3X/RYOD1s1QpzqgkiQBOkj7lUmIbjxnkQvrN
1RhYsPuAd6iLvM4ust+TlSqgB9wVEp59/eS2KCPM5/Ae+pm1NWfOBAUciCgo/2Op
qT46RejddESuPdJIu22i63a/npDDKn/8e+K6MhiBZBJ/UYAE7whcIyMNJ1Sc4cPz
1w/3F8X/T9O1Xn+75UdTePn9Ak+85WhpEYZffpvGi0EY3FFans796DmJuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQSeAXjytjV4RF+8r/3in4/dwqpMB8GA1UdIwQY
MBaAFFL2KfNM0IO8aAVAabHMXueXH4u7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85MzJmYjctZGIwNS00MDljLWExNmEt
OTdhNDI4M2I2MjkyLzEvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85MzJmYjctZGIwNS00MDljLWExNmEtOTdhNDI4M2I2Mjky
LzEvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6crWFl2
z8geywgUwG6syozv/FAyMyGV6HWKxieRVK4KuVAHnA+WAZ/PFQtx62BuVkFOstXk
MoVYXkkPUwkMHeyCzQo4xmvAgmjfjZ6T4If7ZQxqkWEA+XgWIEDyJ2Rmb0XGDxr8
WXJG7uhVlDlrxJLaqmZiCWxjik650q8rI21f2SMq62M7Bnk1Ma7yRUyBfcCvOIkQ
+LMYFd7S5LYZRjMTWcsc0CIUztAh2UXGFBmNc/62Yz7WSkNnkDcnsl7nBmgf8+nh
3rCu12uNmtflznrSProtVqOBGjvKs+nRYocnBpVwehv48DqhkBnH/28aszdJn6kn
GnLeOtvusjovKw==
-----END CERTIFICATE-----
Generated at Wed May 7 02:14:11 2025 by rpki-client