Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
File: uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json)
Hash identifier: i6valskukudj+4Z48j2JFFjXfTmqh+R5XlVh8fNl0dE=
Subject key identifier: 99:12:1D:1F:8C:5F:C0:C1:18:AF:38:2B:E3:7D:E5:27:36:EE:D7:D8
Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055
Certificate serial: 0196B8FE9B9FABA941C4E541D4898C4F3E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
Manifest number: 1025
Signing time: Sat 10 May 2025 07:00:15 +0000
Manifest this update: Sat 10 May 2025 07:00:15 +0000
Manifest next update: Sun 11 May 2025 07:00:15 +0000
Files and hashes: 1: M1itbXmnZylV5aQUWr69aXiCwXg.roa (hash: oXiWWV28pZSLXwASeR4LLqDCm3LTnJMuWV3NYCvwU8Q=)
2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: 8tHde3fdaWJaIuGmykEl5HWvTcZVHrizSJVNsml3hkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:9b:9f:ab:a9:41:c4:e5:41:d4:89:8c:4f:3e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055
Validity
Not Before: May 10 07:00:15 2025 GMT
Not After : May 11 07:00:15 2025 GMT
Subject: CN=99121d1f8c5fc0c118af382be37de52736eed7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:2c:15:79:05:0a:3c:31:18:09:63:c7:b4:
55:01:20:1e:12:9e:c8:71:16:15:59:5b:db:44:30:
3f:11:bc:8d:9e:be:30:eb:be:de:0b:8a:c5:e7:3b:
24:85:db:57:b2:e6:6c:d8:97:07:ac:92:73:81:4c:
6a:3d:78:11:4c:40:07:f8:0c:6f:f6:83:22:dc:db:
c8:8e:af:f0:00:91:5c:ce:91:bc:44:80:aa:5f:4a:
f8:61:5c:bc:6a:28:09:57:26:23:88:78:ce:51:0e:
78:6d:a2:c8:91:a7:16:90:fb:9d:bc:fb:e5:dd:7a:
7f:d0:a9:63:df:48:4e:f1:48:90:bf:67:f7:d5:d2:
0b:0f:67:49:50:83:5f:d2:a2:99:06:bc:df:d4:48:
9e:c9:7b:31:bd:a6:43:43:43:a5:58:6e:ac:04:56:
8f:f3:df:1b:a0:5a:cc:15:73:ef:21:71:28:7a:5a:
4e:e0:7d:9b:fd:50:41:ba:98:72:93:e1:71:cb:91:
bd:dd:88:1f:03:c7:42:3f:ea:5e:a3:7e:43:73:88:
7b:a3:30:1c:ed:7c:47:47:b3:0b:b7:db:23:d2:6a:
2b:d3:ef:f3:f4:b3:b0:6e:3e:82:90:ac:53:ee:e5:
91:30:b6:60:58:8d:0e:b0:fd:2c:d6:ac:dc:e1:f2:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:12:1D:1F:8C:5F:C0:C1:18:AF:38:2B:E3:7D:E5:27:36:EE:D7:D8
X509v3 Authority Key Identifier:
keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:f6:49:47:b1:cf:c3:bf:83:3f:6f:f7:95:17:af:70:26:
68:37:6a:ee:9e:2d:70:a2:7a:99:bb:bf:09:3d:e7:05:24:47:
87:99:73:58:59:39:49:fa:34:ce:f0:bc:97:85:6e:25:15:47:
6c:32:d6:64:03:79:9e:20:14:c3:96:90:76:9b:a6:81:b5:d1:
dd:04:aa:ce:5f:02:41:27:3e:27:bd:b5:45:a1:43:94:f4:95:
07:c0:e4:c0:a2:d0:59:cc:6b:47:dd:69:90:3e:99:89:32:86:
35:ff:80:37:c2:d6:bd:6c:9b:bd:45:fd:9a:38:84:9c:2b:6e:
c1:01:fc:47:e7:a7:f5:29:6d:9b:db:1e:2e:bf:8f:04:cd:7d:
68:fd:a3:fb:a1:3f:d8:80:f1:ac:3b:55:77:5d:71:2a:12:02:
ff:da:9d:a5:81:90:7b:8c:ff:29:a8:2a:55:69:1d:f9:75:c8:
ba:82:1b:fb:ba:25:08:5e:a3:0f:4f:06:1f:18:9c:e5:83:c4:
0f:81:47:d2:b3:45:46:ed:a3:1a:bf:87:17:cf:8f:af:e7:88:
6d:55:43:63:68:8e:1e:c7:a1:2c:71:26:12:ca:ab:16:cd:1c:
21:ef:1c:97:64:49:b0:cd:c7:81:c1:2a:82:94:38:bd:b7:09:
75:8d:63:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/pufq6lBxOVB1ImMTz4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YTg3OTUwMzdkZDQwZjAxODM3M2Y0N2M1OWUwNGEyMTJm
NWEwNTUwHhcNMjUwNTEwMDcwMDE1WhcNMjUwNTExMDcwMDE1WjAzMTEwLwYDVQQD
Eyg5OTEyMWQxZjhjNWZjMGMxMThhZjM4MmJlMzdkZTUyNzM2ZWVkN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAYsFXkFCjwxGAljx7RVASAeEp7I
cRYVWVvbRDA/EbyNnr4w677eC4rF5zskhdtXsuZs2JcHrJJzgUxqPXgRTEAH+Axv
9oMi3NvIjq/wAJFczpG8RICqX0r4YVy8aigJVyYjiHjOUQ54baLIkacWkPudvPvl
3Xp/0Klj30hO8UiQv2f31dILD2dJUINf0qKZBrzf1EieyXsxvaZDQ0OlWG6sBFaP
898boFrMFXPvIXEoelpO4H2b/VBBuphyk+Fxy5G93YgfA8dCP+peo35Dc4h7ozAc
7XxHR7MLt9sj0mor0+/z9LOwbj6CkKxT7uWRMLZgWI0OsP0s1qzc4fIA/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkSHR+MX8DBGK84K+N95Sc27tfYMB8GA1UdIwQY
MBaAFLmoeVA33UDwGDc/R8WeBKIS9aBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mM2QzMjYtMTU0ZS00MTJlLWIzNDQt
N2QyMmI3Njg0NDc5LzEvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mM2QzMjYtMTU0ZS00MTJlLWIzNDQtN2QyMmI3Njg0NDc5
LzEvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwH2SUex
z8O/gz9v95UXr3AmaDdq7p4tcKJ6mbu/CT3nBSRHh5lzWFk5Sfo0zvC8l4VuJRVH
bDLWZAN5niAUw5aQdpumgbXR3QSqzl8CQSc+J721RaFDlPSVB8DkwKLQWcxrR91p
kD6ZiTKGNf+AN8LWvWybvUX9mjiEnCtuwQH8R+en9Sltm9seLr+PBM19aP2j+6E/
2IDxrDtVd11xKhIC/9qdpYGQe4z/KagqVWkd+XXIuoIb+7olCF6jD08GHxic5YPE
D4FH0rNFRu2jGr+HF8+Pr+eIbVVDY2iOHsehLHEmEsqrFs0cIe8cl2RJsM3HgcEq
gpQ4vbcJdY1jog==
-----END CERTIFICATE-----
Generated at Sat May 10 12:37:26 2025 by rpki-client