Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: D7bYqqtbIaxP/WjtcnZF8hb+GB9zGmlcAiKphd8hVhY=
Subject key identifier: 7C:9F:B7:19:DB:E2:A9:0E:5C:77:18:CB:4B:9A:D3:7A:8D:93:92:28
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 0196C013F331EBA243513F8599B229F2C651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 0D2B
Signing time: Sun 11 May 2025 16:00:54 +0000
Manifest this update: Sun 11 May 2025 16:00:54 +0000
Manifest next update: Mon 12 May 2025 16:00:54 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: WoUPdSIrzAZ5wYz1IReqBhVHKwB9KbTF+uf4LW6wyKw=)
2: vkVOKzv8_S2fkG1izpq7kTixdUE.roa (hash: piMEcgAOMMddSvNaBzKcgAojln/bHlikM4A3Z6HENXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:f3:31:eb:a2:43:51:3f:85:99:b2:29:f2:c6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: May 11 16:00:54 2025 GMT
Not After : May 12 16:00:54 2025 GMT
Subject: CN=7c9fb719dbe2a90e5c7718cb4b9ad37a8d939228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:30:ff:62:9b:bd:00:94:75:d6:53:fa:d2:
94:a2:9d:7a:50:24:3c:0a:4c:d7:da:f3:a4:c9:a3:
59:e8:b3:68:d1:9e:a9:30:2e:02:86:fa:ad:62:e2:
5a:13:10:08:4d:da:59:91:de:1d:2d:b3:c9:20:45:
6d:db:fb:74:8a:5a:d9:c0:6f:d6:92:e1:c8:aa:8b:
2e:ea:9a:89:a6:fe:08:a3:4b:47:a0:9e:73:cd:82:
0b:dd:93:79:f3:12:5d:f7:a3:ee:be:5c:58:02:91:
e9:e7:5f:01:d7:a5:16:8a:66:f0:32:8e:47:71:f7:
1c:aa:bf:4b:3e:bd:5d:b8:f8:fc:1a:04:9b:06:2d:
d8:88:00:5d:cb:76:d5:1f:34:e5:8d:92:fa:72:8a:
7d:43:30:b4:f4:57:05:f5:44:d7:0b:87:7a:1a:06:
f7:4e:8e:ce:f4:d9:c5:a0:f2:79:a5:96:94:a4:fb:
99:0d:0a:bc:31:3f:2c:71:6b:fa:9c:3b:49:ea:7e:
1f:d4:49:84:bd:c9:ea:88:02:61:3c:fa:b5:c1:83:
ac:04:3e:67:6e:c7:fc:1e:6d:7e:a7:f5:6f:6a:55:
18:84:56:b7:2e:9e:c6:f9:1e:f3:9f:d9:f8:23:16:
cf:31:36:20:52:27:b8:f4:43:61:3e:9f:25:a0:1d:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:B7:19:DB:E2:A9:0E:5C:77:18:CB:4B:9A:D3:7A:8D:93:92:28
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cf:23:05:59:5b:0c:91:7d:5a:d8:f1:5d:94:6d:9a:b2:c7:
fe:a4:68:d8:d1:da:bc:78:bc:df:ff:90:f5:c0:f0:fe:fc:b6:
af:11:c1:cc:49:a2:80:ab:8a:1a:52:eb:45:fa:0a:68:8d:65:
91:b5:3c:3d:71:68:05:71:e4:a8:05:e1:12:5e:80:55:a9:2f:
16:84:f4:05:bd:65:01:2e:65:ec:0f:b1:68:a3:98:fc:1d:f6:
d2:12:52:cb:3b:99:b9:b9:7c:7d:96:a2:a2:19:69:dc:77:d2:
86:95:7b:51:c9:d4:28:28:0b:84:ee:7b:c3:c7:d5:56:66:80:
89:a8:fc:ef:2a:4a:85:2b:03:00:8b:98:19:06:1e:2c:9f:e1:
04:3b:6a:f8:5f:9d:ab:fb:29:9b:ce:b1:f9:c3:14:f5:a4:c6:
46:e5:ac:c7:6c:d2:97:bf:c5:72:25:70:a9:68:9c:09:cf:26:
5a:92:b5:99:f6:54:a3:a7:48:d8:5e:03:27:d2:84:3d:c8:f7:
17:15:95:e4:b1:ec:59:7f:44:8c:98:46:ff:79:55:d9:61:6a:
db:12:06:b5:4e:d8:49:76:a0:f0:1e:df:f9:5b:78:2c:3c:9b:
b6:2f:bd:6e:60:bb:80:31:e9:49:b1:af:c5:49:1b:58:59:bd:
ed:62:55:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAE/Mx66JDUT+FmbIp8sZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNDExZTUyZGFiN2QwYmUyNjc0MzEzYjZiNWQyZTc0YmQx
MTM2MGUwHhcNMjUwNTExMTYwMDU0WhcNMjUwNTEyMTYwMDU0WjAzMTEwLwYDVQQD
Eyg3YzlmYjcxOWRiZTJhOTBlNWM3NzE4Y2I0YjlhZDM3YThkOTM5MjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwegw/2KbvQCUddZT+tKUop16UCQ8
CkzX2vOkyaNZ6LNo0Z6pMC4ChvqtYuJaExAITdpZkd4dLbPJIEVt2/t0ilrZwG/W
kuHIqosu6pqJpv4Io0tHoJ5zzYIL3ZN58xJd96PuvlxYApHp518B16UWimbwMo5H
cfccqr9LPr1duPj8GgSbBi3YiABdy3bVHzTljZL6cop9QzC09FcF9UTXC4d6Ggb3
To7O9NnFoPJ5pZaUpPuZDQq8MT8scWv6nDtJ6n4f1EmEvcnqiAJhPPq1wYOsBD5n
bsf8Hm1+p/VvalUYhFa3Lp7G+R7zn9n4IxbPMTYgUie49ENhPp8loB1pOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyftxnb4qkOXHcYy0ua03qNk5IoMB8GA1UdIwQY
MBaAFFJBHlLat9C+JnQxO2tdLnS9ETYOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85YjFkODUtNzE5OC00YWY2LWE2MzIt
ZDBjZmU0MzAxNmRlLzEvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85YjFkODUtNzE5OC00YWY2LWE2MzItZDBjZmU0MzAxNmRl
LzEvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKc8jBVlb
DJF9WtjxXZRtmrLH/qRo2NHavHi83/+Q9cDw/vy2rxHBzEmigKuKGlLrRfoKaI1l
kbU8PXFoBXHkqAXhEl6AVakvFoT0Bb1lAS5l7A+xaKOY/B320hJSyzuZubl8fZai
ohlp3HfShpV7UcnUKCgLhO57w8fVVmaAiaj87ypKhSsDAIuYGQYeLJ/hBDtq+F+d
q/spm86x+cMU9aTGRuWsx2zSl7/FciVwqWicCc8mWpK1mfZUo6dI2F4DJ9KEPcj3
FxWV5LHsWX9EjJhG/3lV2WFq2xIGtU7YSXag8B7f+Vt4LDybti+9bmC7gDHpSbGv
xUkbWFm97WJVDg==
-----END CERTIFICATE-----
Generated at Mon May 12 02:32:06 2025 by rpki-client