Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File: 1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier: E4M6PfhzB7e1EVvRKQZr8X4cztlsVdlHFNsIZwJKf8I=
Subject key identifier: 71:AB:5B:F0:33:65:46:42:02:CF:58:5E:76:FD:B9:A9:8D:3A:17:26
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 0196B8FEDA72000073C236D36149A7870A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number: 1536
Signing time: Sat 10 May 2025 07:00:31 +0000
Manifest this update: Sat 10 May 2025 07:00:31 +0000
Manifest next update: Sun 11 May 2025 07:00:31 +0000
Files and hashes: 1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: Vi+/wY2libtLu3dJbuYUFfRHngRCa+LEhhTADLDyF0c=)
2: ZJcYJJAr2JA8zU4kwS_itD8HDqY.roa (hash: eMuwrfWnfxM1wbDxkNrz13AdocnFAytqpqdxZyIl058=)
3: ne7qsdOlLQR8_nG6p7MVEAshtxk.roa (hash: b2CjvPaYoVbJ4qHUSs8bzU5L8lkSjdW1w+FExaBaHqU=)
4: owuwWzW3ptzbUlMGr01FLYIGSSY.roa (hash: E0V5+KOpIdqo+plR/JmJS5ifpH340RwXyldBs+uj1oQ=)
5: z1ERBgPc796EUpstpTm_KKosGxs.roa (hash: 1uUH+Aes6TW/J4OIjEYgjpDXA6d37PjKx+xzTglktTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:da:72:00:00:73:c2:36:d3:61:49:a7:87:0a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: May 10 07:00:31 2025 GMT
Not After : May 11 07:00:31 2025 GMT
Subject: CN=71ab5bf03365464202cf585e76fdb9a98d3a1726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:8a:51:2d:a6:9e:7d:3f:37:40:f3:43:65:
68:7a:bc:cb:79:cc:77:af:a9:34:95:8d:c2:b7:ea:
e1:12:8e:7c:aa:12:6d:89:6e:47:2d:10:52:e2:2c:
c8:64:1f:58:43:b3:cf:61:57:c5:81:56:57:04:36:
7d:4a:ce:d8:54:f3:c3:ea:3f:80:0b:e0:4e:02:72:
ae:79:9f:ec:88:28:9d:c2:df:7f:5e:94:26:6b:49:
5a:d9:64:4b:48:3c:cf:29:4b:e3:d6:2c:c7:6b:96:
dd:8d:60:32:31:2a:21:92:bc:53:96:0a:58:f2:fc:
b9:18:26:21:ca:85:06:e3:b3:a4:43:0f:87:a6:06:
84:2e:21:0c:df:a6:95:46:b9:40:eb:f1:87:47:f7:
96:c8:ff:bc:74:60:35:77:68:1d:16:49:a9:2c:6b:
3f:35:86:56:e1:41:1d:ca:45:1e:43:81:9a:ea:c8:
fa:65:9d:f6:34:b1:ac:b6:4f:34:fa:78:08:2a:9a:
64:25:52:eb:8f:92:3f:40:91:3e:52:66:44:5b:5a:
c0:21:a1:49:52:25:f9:02:0e:b9:16:f9:d2:d5:7f:
6a:b7:55:b2:66:60:ad:0b:50:f2:ec:85:e2:a7:98:
2b:36:b3:e6:07:fd:e1:fa:9e:aa:7a:9b:5d:32:83:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:5B:F0:33:65:46:42:02:CF:58:5E:76:FD:B9:A9:8D:3A:17:26
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b3:3a:6c:fd:3f:ff:9a:b6:42:a7:0b:0c:91:45:62:68:4f:
33:a4:08:d2:74:5d:c4:8f:12:da:dd:7a:36:4a:5b:34:48:fd:
40:3c:c1:cc:24:b1:ca:b7:b9:b4:c7:b4:45:bf:70:45:f8:32:
65:69:b6:6e:de:d7:14:67:9b:59:3e:08:e0:e4:82:ee:49:6a:
3d:52:81:53:5d:7e:3a:64:12:17:72:27:a5:e9:38:6f:62:b6:
d0:f8:23:ba:88:3c:26:f5:fc:d6:f7:50:01:ca:22:70:96:5a:
c1:77:9a:ae:0f:47:d7:f3:cc:92:8d:2e:01:49:68:cf:86:41:
24:dd:78:15:3d:b3:5d:ab:c9:e6:22:51:9f:71:10:ad:4f:fc:
48:e7:23:42:ed:0a:f7:b1:e4:8b:96:ae:52:fe:69:b9:f1:e1:
5f:90:04:cd:82:f7:26:ec:c0:cd:3f:90:08:b8:1a:73:5a:ff:
2e:ee:6e:3b:61:fe:a4:06:6d:c4:2c:0f:80:44:91:b8:cb:23:
84:82:7d:8b:71:c6:b7:1e:1e:57:b7:66:4a:b7:b6:f4:6d:6b:
e8:e4:da:53:1a:e7:ed:f2:44:f9:e2:8d:cd:0c:a1:0a:7b:05:
da:ba:7b:ac:3b:63:58:f6:ec:59:ed:aa:eb:08:c1:3d:19:bb:
d2:de:dd:c6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZa4/tpyAABzwjbTYUmnhwqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTE2YjQ5M2QyYTEyODk3Y2FmNDc1N2JiMThhMDJlZWMy
Y2RlMTcwHhcNMjUwNTEwMDcwMDMxWhcNMjUwNTExMDcwMDMxWjAzMTEwLwYDVQQD
Eyg3MWFiNWJmMDMzNjU0NjQyMDJjZjU4NWU3NmZkYjlhOThkM2ExNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBCKUS2mnn0/N0DzQ2VoerzLecx3
r6k0lY3Ct+rhEo58qhJtiW5HLRBS4izIZB9YQ7PPYVfFgVZXBDZ9Ss7YVPPD6j+A
C+BOAnKueZ/siCidwt9/XpQma0la2WRLSDzPKUvj1izHa5bdjWAyMSohkrxTlgpY
8vy5GCYhyoUG47OkQw+HpgaELiEM36aVRrlA6/GHR/eWyP+8dGA1d2gdFkmpLGs/
NYZW4UEdykUeQ4Ga6sj6ZZ32NLGstk80+ngIKppkJVLrj5I/QJE+UmZEW1rAIaFJ
UiX5Ag65FvnS1X9qt1WyZmCtC1Dy7IXip5grNrPmB/3h+p6qeptdMoNlcQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHGrW/AzZUZCAs9YXnb9uamNOhcmMB8GA1UdIwQY
MBaAFPrha0k9KhKJfK9HV7sYoC7sLN4XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11RnJTVDBxRW9sOHIwZFh1eGlnTHV3czNoYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMjkzZDM2LTlkYTItNDQwNS04ZGUz
LTRhZmQ4MjU0YWU0My8xLzEtdUZyU1QwcUVvbDhyMGRYdXhpZ0x1d3MzaGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UzLzI5M2QzNi05ZGEyLTQ0MDUtOGRlMy00YWZkODI1NGFl
NDMvMS8xLXVGclNUMHFFb2w4cjBkWHV4aWdMdXdzM2hjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbM6
bP0//5q2QqcLDJFFYmhPM6QI0nRdxI8S2t16NkpbNEj9QDzBzCSxyre5tMe0Rb9w
RfgyZWm2bt7XFGebWT4I4OSC7klqPVKBU11+OmQSF3Inpek4b2K20Pgjuog8JvX8
1vdQAcoicJZawXearg9H1/PMko0uAUloz4ZBJN14FT2zXavJ5iJRn3EQrU/8SOcj
Qu0K97Hki5auUv5pufHhX5AEzYL3JuzAzT+QCLgac1r/Lu5uO2H+pAZtxCwPgESR
uMsjhIJ9i3HGtx4eV7dmSre29G1r6OTaUxrn7fJE+eKNzQyhCnsF2rp7rDtjWPbs
We2q6wjBPRm70t7dxg==
-----END CERTIFICATE-----
Generated at Sat May 10 09:57:24 2025 by rpki-client