Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
File: uRnpYSLyg4FcGlb-zDSUR6KInNk.mft (raw, json)
Hash identifier: MKWxPsFf1Zl++Hc24MMPr0S63o72ugK/Fox7EDvfU48=
Subject key identifier: 33:E7:BC:24:98:FC:CF:33:07:C8:4B:A2:B9:9F:F1:0E:33:CB:72:E8
Authority key identifier: B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
Certificate issuer: /CN=b919e96122f283815c1a56fecc349447a2889cd9
Certificate serial: 019846D2569810BD3D00937CE6FE95B46A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
Manifest number: 10B7
Signing time: Sat 26 Jul 2025 13:00:46 +0000
Manifest this update: Sat 26 Jul 2025 13:00:46 +0000
Manifest next update: Sun 27 Jul 2025 13:00:46 +0000
Files and hashes: 1: 1-MaedZu_m2J3pWIOqbXmZ-5pEX0.roa (hash: dPci77SNKVZK5CdTXGzc0O0bUg3hSGh13BoBG3kcUXI=)
2: uRnpYSLyg4FcGlb-zDSUR6KInNk.crl (hash: nFj8Wo3aL8B0utVh5U5oGvX81cC1kDnO/XxT+a5594k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:56:98:10:bd:3d:00:93:7c:e6:fe:95:b4:6a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b919e96122f283815c1a56fecc349447a2889cd9
Validity
Not Before: Jul 26 13:00:46 2025 GMT
Not After : Jul 27 13:00:46 2025 GMT
Subject: CN=33e7bc2498fccf3307c84ba2b99ff10e33cb72e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:18:29:97:58:20:e6:2a:f5:47:d8:9a:58:
2c:f7:7d:61:fd:99:95:3f:c2:83:7c:fa:28:b0:89:
b2:d6:2b:96:cd:d5:5c:d1:1b:fd:91:d2:3d:ce:dc:
7a:46:94:9d:17:38:b5:81:c7:1e:eb:fa:8c:65:9f:
aa:f0:4f:08:ce:e2:fa:03:16:cc:ae:d8:f9:ef:43:
7e:27:15:e7:00:6d:07:ba:67:37:4d:6b:6c:76:37:
e8:52:cb:cd:0d:a3:78:2b:37:4e:81:e5:a3:d6:20:
ee:39:d3:ac:71:b0:a3:d2:98:57:ab:11:2e:6c:85:
f5:d0:f7:8f:e2:b3:34:7b:93:63:3f:b2:f0:c1:35:
8e:f2:8c:a1:1c:24:32:d6:84:8a:8f:b9:12:e5:62:
9d:d9:5e:0e:e8:2a:84:b8:69:b9:33:7c:ab:27:d1:
00:34:c6:6c:86:a1:63:2a:5b:81:3a:fc:34:62:90:
b1:c1:9d:b9:91:3c:8f:f4:71:d2:31:c6:b3:e0:7e:
37:53:40:15:b3:7a:8f:32:52:1f:82:37:c4:f9:f2:
8e:60:75:da:9e:0e:aa:a4:19:5f:49:96:72:be:37:
19:88:63:69:31:11:26:28:ae:9a:17:6b:e8:1f:01:
13:20:d3:b0:67:ea:f6:9b:76:e7:fb:32:45:53:a5:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E7:BC:24:98:FC:CF:33:07:C8:4B:A2:B9:9F:F1:0E:33:CB:72:E8
X509v3 Authority Key Identifier:
keyid:B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:81:64:60:84:8a:4d:07:d8:03:da:da:fe:02:a1:6d:e0:92:
57:de:6c:21:1d:da:19:f6:93:b5:df:48:bb:86:e4:31:cf:ae:
8c:57:c6:40:87:12:f8:cd:23:c0:65:d6:ed:2c:39:19:b9:a3:
dd:95:8e:e2:a4:f1:50:a6:e3:a5:12:fe:57:97:5e:04:56:b3:
ae:a9:83:e0:37:a6:71:72:6d:a3:86:c7:cd:a4:30:55:4a:d4:
35:b1:b1:5b:ec:0a:5a:67:5a:0e:92:3f:13:9b:40:27:c3:b5:
07:0a:f6:fa:d9:55:11:89:c1:28:c9:dd:64:93:cd:3b:30:80:
cd:0d:8e:4d:eb:57:3d:e6:6b:44:f4:20:f2:3d:44:d0:d7:ff:
09:07:07:00:9b:30:4b:04:9e:c5:f8:9f:fc:c0:d6:7d:e0:65:
46:23:4b:9e:99:e4:f1:15:e1:0b:36:5c:dd:37:fe:c1:38:f1:
a3:46:81:f6:5f:8f:59:4d:80:d1:29:19:dc:17:9a:e1:ff:9b:
2e:5c:50:30:45:8a:4b:f8:42:cb:22:26:9f:23:b1:d8:a3:10:
b0:c0:da:e9:4e:59:07:33:4d:1b:ae:5c:a2:da:7f:f7:81:c2:
ea:2f:17:c8:5b:9c:12:70:b7:73:8d:bf:d3:f4:9a:be:42:1d:
58:2d:44:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0laYEL09AJN85v6VtGqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTllOTYxMjJmMjgzODE1YzFhNTZmZWNjMzQ5NDQ3YTI4
ODljZDkwHhcNMjUwNzI2MTMwMDQ2WhcNMjUwNzI3MTMwMDQ2WjAzMTEwLwYDVQQD
EygzM2U3YmMyNDk4ZmNjZjMzMDdjODRiYTJiOTlmZjEwZTMzY2I3MmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9QYKZdYIOYq9UfYmlgs931h/ZmV
P8KDfPoosImy1iuWzdVc0Rv9kdI9ztx6RpSdFzi1gcce6/qMZZ+q8E8IzuL6AxbM
rtj570N+JxXnAG0Humc3TWtsdjfoUsvNDaN4KzdOgeWj1iDuOdOscbCj0phXqxEu
bIX10PeP4rM0e5NjP7LwwTWO8oyhHCQy1oSKj7kS5WKd2V4O6CqEuGm5M3yrJ9EA
NMZshqFjKluBOvw0YpCxwZ25kTyP9HHSMcaz4H43U0AVs3qPMlIfgjfE+fKOYHXa
ng6qpBlfSZZyvjcZiGNpMREmKK6aF2voHwETINOwZ+r2m3bn+zJFU6VR7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPnvCSY/M8zB8hLormf8Q4zy3LoMB8GA1UdIwQY
MBaAFLkZ6WEi8oOBXBpW/sw0lEeiiJzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMGVmNTktMDhiOC00ZDZkLTg3Mzgt
NWNlYzM2ZmY4ZTczLzEvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lMGVmNTktMDhiOC00ZDZkLTg3MzgtNWNlYzM2ZmY4ZTcz
LzEvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIFkYISK
TQfYA9ra/gKhbeCSV95sIR3aGfaTtd9Iu4bkMc+ujFfGQIcS+M0jwGXW7Sw5Gbmj
3ZWO4qTxUKbjpRL+V5deBFazrqmD4DemcXJto4bHzaQwVUrUNbGxW+wKWmdaDpI/
E5tAJ8O1Bwr2+tlVEYnBKMndZJPNOzCAzQ2OTetXPeZrRPQg8j1E0Nf/CQcHAJsw
SwSexfif/MDWfeBlRiNLnpnk8RXhCzZc3Tf+wTjxo0aB9l+PWU2A0SkZ3Bea4f+b
LlxQMEWKS/hCyyImnyOx2KMQsMDa6U5ZBzNNG65cotp/94HC6i8XyFucEnC3c42/
0/SavkIdWC1EFw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:07:58 2025 by rpki-client