Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: N2IkPefC0aaWlYKx94lfHvMFUjZJoVbMDnAoBVTg5KU=
Subject key identifier: 9E:C1:53:7A:BC:AE:78:F2:4F:FE:2F:43:9F:1E:13:E4:D2:3A:1D:8D
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 0196BF37C5AD977307D8EEFF082FC0FEF6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 12:00:25 +0000
Manifest this update: Sun 11 May 2025 12:00:25 +0000
Manifest next update: Mon 12 May 2025 12:00:25 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: pxJkFSldDTZav/07/g1nFzrPKMiDQeiVVFSVTW1wRJI=)
2: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (hash: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=)
3: fwxt0QHyh3ttD260VFCya7TU-1s.roa (hash: 9i1HvobHCHHVWkd92tpYtwhAF4c8uqpeWhFp9/w1WdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:c5:ad:97:73:07:d8:ee:ff:08:2f:c0:fe:f6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: May 11 12:00:25 2025 GMT
Not After : May 12 12:00:25 2025 GMT
Subject: CN=9ec1537abcae78f24ffe2f439f1e13e4d23a1d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8f:ab:c5:b1:bd:1b:a0:a4:02:62:9b:f3:6b:
23:87:20:e0:e0:78:14:02:24:e8:5e:b4:7c:01:bf:
c8:c1:69:85:e9:17:7f:04:1d:ac:2d:6c:f4:10:13:
14:91:b8:bf:87:3a:bf:a6:1d:f2:2c:0e:7b:34:7c:
aa:16:58:de:b3:90:78:a1:84:62:5a:a0:43:88:6d:
9f:8d:40:b2:d3:85:75:5c:a0:20:93:99:08:b6:ee:
49:c6:81:e9:65:96:82:36:7b:41:ab:90:c1:59:63:
69:e6:d0:d2:35:82:de:81:3f:81:d2:04:93:98:c2:
85:87:23:97:64:5c:82:a5:97:e5:64:ba:0a:0f:1d:
fa:6b:ca:02:8f:87:50:e4:0d:c5:ef:7c:26:b6:ca:
cf:ad:aa:00:96:fe:0f:ad:e1:e0:b9:50:7c:77:cc:
68:5c:0f:cd:7d:c1:11:29:6b:43:9b:5f:64:8b:b2:
84:93:3b:90:86:c3:bd:c8:49:4b:9f:eb:ea:49:e4:
21:17:96:d3:70:7c:bb:7c:b5:49:7a:7a:9b:2c:a4:
44:00:ed:a0:e2:b6:87:90:67:d9:9a:ce:41:79:17:
63:ac:92:b0:e0:f0:75:5d:6f:3b:f7:e8:30:78:43:
9b:be:30:42:e3:2f:c6:41:7a:0f:1c:5c:51:82:44:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C1:53:7A:BC:AE:78:F2:4F:FE:2F:43:9F:1E:13:E4:D2:3A:1D:8D
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1c:bd:13:07:fd:7c:b8:d2:d1:97:ce:26:88:f4:c4:b8:c0:
1e:c5:2b:c0:e7:24:e5:56:9e:b1:f6:36:fa:d9:4d:0c:2c:98:
6d:23:70:81:85:2f:d6:ae:b2:c6:e3:a3:fe:a7:97:97:3d:3a:
cf:bd:da:d7:9e:db:ec:8b:b0:33:dc:6e:31:65:6a:bd:10:f1:
dc:c2:04:f6:5b:97:23:65:0e:ce:aa:00:52:08:03:d9:2f:75:
d0:b9:4d:e9:92:ca:79:d7:73:f2:b9:b3:a7:f6:15:9d:bf:7d:
30:3b:18:a4:40:40:55:1d:89:59:21:ba:fe:f2:9a:11:11:c0:
97:1b:ed:d6:38:2e:9c:0b:64:fb:d2:03:fe:eb:1b:13:60:d0:
a9:68:13:3b:1c:f7:d4:5b:65:57:b6:70:85:28:3a:9f:08:c9:
33:c1:f9:f7:02:bf:b6:62:7f:09:47:2d:9f:70:88:89:7f:bc:
2d:e0:34:0d:fd:f9:14:76:81:d5:cd:48:81:ae:d0:47:0b:10:
0c:b6:de:0f:1d:7b:27:4d:d9:2f:0a:56:86:2c:e9:76:94:7d:
36:6f:c5:63:ba:9d:7d:38:6c:61:b4:a2:9c:26:c2:c9:01:0d:
96:37:98:31:c1:aa:ca:18:70:14:ed:28:9f:70:35:72:99:f3:
1e:2c:75:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/N8Wtl3MH2O7/CC/A/vbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZDRhYzMyMDk2NWFiNDk5MTEwODUwMWEwNjAyYTY4OTNl
NjNmZWMwHhcNMjUwNTExMTIwMDI1WhcNMjUwNTEyMTIwMDI1WjAzMTEwLwYDVQQD
Eyg5ZWMxNTM3YWJjYWU3OGYyNGZmZTJmNDM5ZjFlMTNlNGQyM2ExZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I+rxbG9G6CkAmKb82sjhyDg4HgU
AiToXrR8Ab/IwWmF6Rd/BB2sLWz0EBMUkbi/hzq/ph3yLA57NHyqFljes5B4oYRi
WqBDiG2fjUCy04V1XKAgk5kItu5JxoHpZZaCNntBq5DBWWNp5tDSNYLegT+B0gST
mMKFhyOXZFyCpZflZLoKDx36a8oCj4dQ5A3F73wmtsrPraoAlv4PreHguVB8d8xo
XA/NfcERKWtDm19ki7KEkzuQhsO9yElLn+vqSeQhF5bTcHy7fLVJenqbLKREAO2g
4raHkGfZms5BeRdjrJKw4PB1XW879+gweEObvjBC4y/GQXoPHFxRgkTpzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7BU3q8rnjyT/4vQ58eE+TSOh2NMB8GA1UdIwQY
MBaAFFDUrDIJZatJkRCFAaBgKmiT5j/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTkt
YmEwMzIzMjM3NDRjLzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTktYmEwMzIzMjM3NDRj
LzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRy9Ewf9
fLjS0ZfOJoj0xLjAHsUrwOck5VaesfY2+tlNDCyYbSNwgYUv1q6yxuOj/qeXlz06
z73a157b7IuwM9xuMWVqvRDx3MIE9luXI2UOzqoAUggD2S910LlN6ZLKeddz8rmz
p/YVnb99MDsYpEBAVR2JWSG6/vKaERHAlxvt1jgunAtk+9ID/usbE2DQqWgTOxz3
1FtlV7ZwhSg6nwjJM8H59wK/tmJ/CUctn3CIiX+8LeA0Df35FHaB1c1Iga7QRwsQ
DLbeDx17J03ZLwpWhizpdpR9Nm/FY7qdfThsYbSinCbCyQENljeYMcGqyhhwFO0o
n3A1cpnzHix1lA==
-----END CERTIFICATE-----
Generated at Sun May 11 15:17:26 2025 by rpki-client