Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: OSyGveRbeOdOllpVB3TiSX5WFOnG5qHqiD2srlyS1M4=
Subject key identifier: 6D:59:DC:03:3C:F7:39:EF:A4:45:89:40:D9:4C:78:F3:18:64:CA:E0
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 01984AAF07D285BE400DEF8FC03A4D6FBAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 15D4
Signing time: Sun 27 Jul 2025 07:00:41 +0000
Manifest this update: Sun 27 Jul 2025 07:00:41 +0000
Manifest next update: Mon 28 Jul 2025 07:00:41 +0000
Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: FBaCcC2adlheOdaRH5PjyaocVxtRbzDdera2Hk+fSuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:07:d2:85:be:40:0d:ef:8f:c0:3a:4d:6f:ba:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Jul 27 07:00:41 2025 GMT
Not After : Jul 28 07:00:41 2025 GMT
Subject: CN=6d59dc033cf739efa4458940d94c78f31864cae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:f0:9f:f2:66:f8:7d:1a:3c:b8:14:c6:4b:
84:01:00:ac:fa:08:99:d0:a9:07:7a:b9:57:61:61:
08:92:77:c5:75:2e:02:dc:34:0d:22:44:8a:2a:a4:
23:20:2c:a2:bc:71:f6:42:46:94:f4:c9:af:32:ba:
b4:4a:e5:aa:41:cb:2e:13:ca:59:7d:c2:3c:c9:45:
4f:37:b9:b7:1e:f2:86:2f:0e:08:32:e5:fb:d1:9a:
e9:fa:54:1c:9d:15:b3:30:ad:5b:f8:f1:4d:da:43:
18:e2:bc:cb:08:c9:cb:10:86:d1:09:23:a4:d0:a3:
05:42:a3:f8:1f:f9:ff:d2:da:b1:a3:da:88:d2:1c:
15:f8:20:76:ee:36:71:c0:32:99:ea:bb:30:34:74:
a9:03:f4:d8:8c:1f:a9:b5:84:8a:1d:ee:5a:52:1f:
b2:6d:b3:2d:91:7c:cd:98:59:43:ad:55:90:c6:75:
1a:83:91:c3:97:06:a6:5e:c9:09:88:f6:d1:f2:f3:
05:2c:34:2c:14:4b:18:e6:ec:42:19:0c:e0:c2:77:
ca:b8:40:6a:29:43:53:1c:6f:e1:b1:2c:d6:f2:30:
11:a1:c8:5f:3c:22:07:74:14:85:57:f2:7c:02:e0:
d5:bf:e4:ab:45:9d:57:50:10:d4:0b:5d:bb:08:1b:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:59:DC:03:3C:F7:39:EF:A4:45:89:40:D9:4C:78:F3:18:64:CA:E0
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:80:69:51:2c:64:41:19:03:34:65:54:1a:6b:e5:46:a3:a3:
a9:a9:f5:4e:3a:de:40:22:56:0f:ce:6e:7d:ba:de:51:24:a6:
c8:f1:d3:e6:1d:7b:e5:72:58:b2:12:d4:d4:35:b7:81:6e:77:
60:63:5a:31:33:0c:d2:31:8b:82:06:ea:3e:63:7a:56:dc:f5:
92:a7:a6:82:78:77:74:ec:85:68:f3:75:a2:32:fc:71:42:00:
a1:b1:6f:84:e9:08:8a:5c:46:31:56:2f:09:5a:79:f9:84:81:
d7:3f:4a:8f:31:05:e4:bc:1b:03:c7:34:71:a9:35:c1:29:aa:
63:0d:a1:8b:a1:89:01:e9:b8:cb:db:ea:87:a2:c0:3f:8b:31:
56:9e:e7:46:85:01:13:37:01:e6:c3:1b:79:c3:e9:b8:e0:5a:
03:89:52:0a:e3:46:d1:dc:67:9b:2b:9b:2a:33:e0:da:12:e5:
98:db:30:8e:9f:d4:3c:9d:97:c3:cf:53:ae:c5:1d:88:87:10:
bf:ef:a8:8e:53:c4:a8:6c:76:94:4d:e5:df:5d:77:94:99:32:
93:7d:38:6f:b7:f6:b0:91:5b:24:3c:31:a0:e8:53:0e:3b:91:
1b:92:cf:b8:c1:bd:04:79:34:39:a3:da:7e:5d:ff:4c:5e:ad:
ea:ac:94:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrwfShb5ADe+PwDpNb7r9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzkwYjEzYzllZjRhZmNmZDA4MTI0MTExZTZmNjNkYzMw
MTY1YWEwHhcNMjUwNzI3MDcwMDQxWhcNMjUwNzI4MDcwMDQxWjAzMTEwLwYDVQQD
Eyg2ZDU5ZGMwMzNjZjczOWVmYTQ0NTg5NDBkOTRjNzhmMzE4NjRjYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1Dwn/Jm+H0aPLgUxkuEAQCs+giZ
0KkHerlXYWEIknfFdS4C3DQNIkSKKqQjICyivHH2QkaU9MmvMrq0SuWqQcsuE8pZ
fcI8yUVPN7m3HvKGLw4IMuX70Zrp+lQcnRWzMK1b+PFN2kMY4rzLCMnLEIbRCSOk
0KMFQqP4H/n/0tqxo9qI0hwV+CB27jZxwDKZ6rswNHSpA/TYjB+ptYSKHe5aUh+y
bbMtkXzNmFlDrVWQxnUag5HDlwamXskJiPbR8vMFLDQsFEsY5uxCGQzgwnfKuEBq
KUNTHG/hsSzW8jARochfPCIHdBSFV/J8AuDVv+SrRZ1XUBDUC127CBtADwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1Z3AM89znvpEWJQNlMePMYZMrgMB8GA1UdIwQY
MBaAFFM5CxPJ70r8/QgSQRHm9j3DAWWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAt
MzNkN2FjMzcwOTc5LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAtMzNkN2FjMzcwOTc5
LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYBpUSxk
QRkDNGVUGmvlRqOjqan1TjreQCJWD85ufbreUSSmyPHT5h175XJYshLU1DW3gW53
YGNaMTMM0jGLggbqPmN6Vtz1kqemgnh3dOyFaPN1ojL8cUIAobFvhOkIilxGMVYv
CVp5+YSB1z9KjzEF5LwbA8c0cak1wSmqYw2hi6GJAem4y9vqh6LAP4sxVp7nRoUB
EzcB5sMbecPpuOBaA4lSCuNG0dxnmyubKjPg2hLlmNswjp/UPJ2Xw89TrsUdiIcQ
v++ojlPEqGx2lE3l3113lJkyk304b7f2sJFbJDwxoOhTDjuRG5LPuMG9BHk0OaPa
fl3/TF6t6qyU9w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:26:25 2025 by rpki-client