Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
File: uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json)
Hash identifier: /22XiDYetKY0MrYMTdG+hqfntY4EMOMHzp+NX60n2Hg=
Subject key identifier: 92:9C:19:61:F7:86:46:41:D7:3A:96:56:13:F5:33:A2:43:2E:B3:D4
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Certificate issuer: /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial: 0196BA118685C6A497F989FC69078C81B9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
Manifest number: FD
Signing time: Sat 10 May 2025 12:00:32 +0000
Manifest this update: Sat 10 May 2025 12:00:32 +0000
Manifest next update: Sun 11 May 2025 12:00:32 +0000
Files and hashes: 1: lakVHG3W0xwUWB-wySLMgQJ_pvo.roa (hash: vGuvZzEzVEJozeZlKkwAw1MUHsR6k7X2w8QfYCIWc2E=)
2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: qOhhh9K2+K2SUY9EY+ZZxkoIj9dElSSE08H5Qxmr6Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:86:85:c6:a4:97:f9:89:fc:69:07:8c:81:b9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Validity
Not Before: May 10 12:00:32 2025 GMT
Not After : May 11 12:00:32 2025 GMT
Subject: CN=929c1961f7864641d73a965613f533a2432eb3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:f4:d8:b2:55:7f:22:63:b6:41:4b:25:15:
18:34:b7:e5:70:c9:f8:07:64:db:68:37:ad:fb:72:
83:c2:3e:45:61:16:42:ba:d5:c1:b1:d9:a1:f0:62:
0b:5f:b8:ba:76:5a:67:4f:af:76:0e:21:a4:df:c2:
18:56:a8:12:06:cb:e5:8a:f1:aa:7f:f5:7f:6f:18:
a7:31:cc:96:b7:e8:75:21:18:59:81:00:88:50:c5:
2f:6a:4f:75:ce:c5:02:69:4b:d9:26:30:b8:3a:06:
5c:df:94:68:cb:69:b5:66:00:8c:ec:6d:3f:9f:93:
cc:5d:48:ac:2c:cc:88:ef:f9:75:ce:54:bb:fe:5d:
91:29:26:39:26:5b:12:73:65:cc:26:07:db:ff:7b:
25:ec:92:60:24:3e:f2:60:91:a9:02:32:fb:ba:12:
31:4b:fb:ee:92:6b:a6:e3:3e:86:4b:fe:42:53:63:
cb:82:05:82:e3:06:15:01:93:ee:b9:36:69:5f:51:
b4:75:5a:c0:95:73:b6:4b:a7:39:fb:a2:8d:6d:e1:
58:1f:b5:67:6a:b6:5c:0e:37:9c:64:f8:ea:9a:b8:
69:f3:f8:bb:50:26:de:16:30:c4:f7:78:ac:51:76:
e2:42:2a:6e:2b:92:cf:d6:b9:eb:26:fc:b3:72:88:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:19:61:F7:86:46:41:D7:3A:96:56:13:F5:33:A2:43:2E:B3:D4
X509v3 Authority Key Identifier:
keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:11:1f:a5:37:21:82:de:a1:1b:9a:86:ae:05:98:54:47:46:
bd:76:2b:04:24:18:ca:1a:7f:75:74:55:6d:67:c2:68:06:9a:
a0:4e:6e:a3:76:7a:52:b6:05:67:82:0a:a0:a3:a7:01:10:3b:
d3:31:77:e2:ee:73:4e:f3:ba:53:24:a5:92:be:0e:8b:95:63:
97:e9:70:15:eb:13:3c:77:38:d3:f7:d0:b8:83:12:01:0f:46:
de:5b:d9:96:9b:3b:3b:9f:31:2d:c1:52:20:87:2f:8e:b4:62:
14:6c:7b:eb:55:d1:41:22:9b:35:bf:de:9f:25:90:33:43:5f:
bc:01:69:c2:71:c8:2b:d7:83:7c:22:00:9e:92:83:8a:16:1b:
9b:3c:a2:76:c8:6b:8e:27:55:3e:4f:c0:fa:2c:d7:3f:10:30:
e0:13:16:e2:07:59:b7:3c:61:46:c4:1e:d7:8c:a7:9d:58:b2:
29:77:c6:e5:31:cb:3d:9f:9a:f9:5a:85:47:59:6a:eb:b6:4f:
b0:71:81:c8:fb:99:c3:4b:3b:1e:25:0a:dd:ef:81:09:f9:4f:
a2:89:9d:db:84:95:cd:2c:4d:7c:75:6c:73:a3:bf:37:62:cd:
00:ef:05:48:a7:c6:4a:ae:18:5c:0f:74:e5:18:a7:60:8c:c3:
34:9d:37:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6EYaFxqSX+Yn8aQeMgbnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMjZjY2ZhMDcxN2RiOWY1NmFhMzhiODY5MmNlNWRjZmEy
ODI1ZTcwHhcNMjUwNTEwMTIwMDMyWhcNMjUwNTExMTIwMDMyWjAzMTEwLwYDVQQD
Eyg5MjljMTk2MWY3ODY0NjQxZDczYTk2NTYxM2Y1MzNhMjQzMmViM2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNn02LJVfyJjtkFLJRUYNLflcMn4
B2TbaDet+3KDwj5FYRZCutXBsdmh8GILX7i6dlpnT692DiGk38IYVqgSBsvlivGq
f/V/bxinMcyWt+h1IRhZgQCIUMUvak91zsUCaUvZJjC4OgZc35Roy2m1ZgCM7G0/
n5PMXUisLMyI7/l1zlS7/l2RKSY5JlsSc2XMJgfb/3sl7JJgJD7yYJGpAjL7uhIx
S/vukmum4z6GS/5CU2PLggWC4wYVAZPuuTZpX1G0dVrAlXO2S6c5+6KNbeFYH7Vn
arZcDjecZPjqmrhp8/i7UCbeFjDE93isUXbiQipuK5LP1rnrJvyzcojSmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKcGWH3hkZB1zqWVhP1M6JDLrPUMB8GA1UdIwQY
MBaAFLsmzPoHF9ufVqo4uGks5dz6KCXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2Qt
Y2NiZjBlNWIyYWRkLzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2QtY2NiZjBlNWIyYWRk
LzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhEfpTch
gt6hG5qGrgWYVEdGvXYrBCQYyhp/dXRVbWfCaAaaoE5uo3Z6UrYFZ4IKoKOnARA7
0zF34u5zTvO6UySlkr4Oi5Vjl+lwFesTPHc40/fQuIMSAQ9G3lvZlps7O58xLcFS
IIcvjrRiFGx761XRQSKbNb/enyWQM0NfvAFpwnHIK9eDfCIAnpKDihYbmzyidshr
jidVPk/A+izXPxAw4BMW4gdZtzxhRsQe14ynnViyKXfG5THLPZ+a+VqFR1lq67ZP
sHGByPuZw0s7HiUK3e+BCflPoomd24SVzSxNfHVsc6O/N2LNAO8FSKfGSq4YXA90
5RinYIzDNJ035w==
-----END CERTIFICATE-----
Generated at Sat May 10 13:59:13 2025 by rpki-client