Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
File: UFzWGp9t6drMDTySFwbffVCvvW8.mft (raw, json)
Hash identifier: KlBnbDtSQAxiSoEJ315Ws4HcMrSPx4pUSnAP3lggdoQ=
Subject key identifier: 96:2A:09:8C:58:07:43:D2:80:00:E2:7A:52:6C:1B:32:43:54:EC:05
Authority key identifier: 50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
Certificate issuer: /CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f
Certificate serial: 01984A0A0250B5DACF99EC935383DF22128B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
Manifest number: 0C55
Signing time: Sun 27 Jul 2025 04:00:26 +0000
Manifest this update: Sun 27 Jul 2025 04:00:26 +0000
Manifest next update: Mon 28 Jul 2025 04:00:26 +0000
Files and hashes: 1: 02fZd277xqKcuTMYmhFfbwx9HwA.roa (hash: bemKy7xu5/Ii5zazW11+IHavu8JMVH9QIzpKn7l6Pf4=)
2: UFzWGp9t6drMDTySFwbffVCvvW8.crl (hash: PYzvlZPNo6g4YZSWDytDh3Z1wZCgYhQqr+1dabGwFkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:02:50:b5:da:cf:99:ec:93:53:83:df:22:12:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f
Validity
Not Before: Jul 27 04:00:26 2025 GMT
Not After : Jul 28 04:00:26 2025 GMT
Subject: CN=962a098c580743d28000e27a526c1b324354ec05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:27:87:61:ab:56:ba:35:ce:45:17:0a:6d:
fe:71:b4:b6:46:af:42:b7:a4:00:3b:dd:ee:8b:d0:
8a:a5:14:04:47:5d:af:ec:49:c5:57:75:d8:eb:12:
0b:3d:c5:e7:a9:e0:ac:cf:70:5e:c8:ed:d7:07:8b:
69:a8:da:f7:0d:e0:66:3f:f1:16:b1:69:73:7c:e0:
40:3a:fb:39:67:9b:1a:6b:b9:76:1c:43:47:1f:15:
6e:e5:9d:23:99:ac:f8:7a:01:df:88:50:5f:b0:65:
af:1d:60:5f:a2:0b:9b:03:14:66:d0:8e:83:6d:5f:
40:1e:24:1c:e4:a6:74:7d:32:d4:e8:5f:11:af:60:
5b:8c:15:94:4c:ef:d7:ca:5e:a6:cb:d9:af:ad:7a:
35:9a:c3:ac:ae:38:4e:1e:b4:84:1a:2b:db:f8:a6:
e9:37:cb:c1:fa:fb:b5:53:43:e4:e2:73:d3:96:ed:
13:f5:31:e9:c6:46:20:32:d2:a1:c1:19:bd:de:81:
f1:13:d6:21:29:38:b8:47:1c:2e:aa:1e:35:36:ad:
7e:37:44:0c:ce:ba:c3:fa:c6:ca:5c:71:5c:7b:1a:
43:5e:76:d9:e3:94:6a:ad:a7:68:a7:94:33:de:f7:
c0:cf:b3:f9:dd:1b:a5:49:1c:2c:b0:8a:80:ef:bb:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:09:8C:58:07:43:D2:80:00:E2:7A:52:6C:1B:32:43:54:EC:05
X509v3 Authority Key Identifier:
keyid:50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c7:24:c4:cd:4d:ef:8b:81:55:d1:60:d0:be:55:2a:d2:d5:
ea:93:e8:c9:1c:66:dd:5e:cc:2e:3b:6e:c2:29:ef:cf:c1:ea:
22:2b:3f:3d:26:ba:86:08:2b:40:f2:9e:8c:7d:f5:3a:cf:a9:
35:8b:a3:82:85:0e:4f:c5:62:a1:d4:01:b6:56:5c:0d:f0:f2:
06:74:29:2d:89:8b:6b:68:e7:c9:cb:bd:62:b5:41:bb:0e:f2:
f3:01:2d:e7:a6:95:66:4b:3b:db:16:a6:6e:be:bb:5f:e1:e2:
ee:7f:e9:da:c7:74:12:87:1c:70:a8:5c:a8:76:35:da:63:4d:
5c:9a:1b:1e:92:73:b2:ff:eb:ee:f8:83:20:b1:10:7d:d8:3e:
17:af:7e:63:e3:5c:32:0a:43:58:8a:56:12:3f:3b:1b:cf:cd:
c2:52:d7:38:ab:75:82:c2:5a:59:9c:be:6e:a6:11:0a:ad:dc:
a0:2a:cc:96:8b:28:26:96:8e:a7:5e:10:ad:13:03:15:a5:ea:
25:7f:d8:d3:5e:bb:0d:40:73:7b:ea:eb:31:fd:b4:26:5e:9d:
15:fa:4b:cc:13:45:96:13:01:7b:06:9e:4d:22:5f:10:3f:f6:
9d:79:5c:f1:43:9c:ff:dc:19:61:c1:a8:bc:4a:bc:e0:35:6d:
a6:f5:a8:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCgJQtdrPmeyTU4PfIhKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNWNkNjFhOWY2ZGU5ZGFjYzBkM2M5MjE3MDZkZjdkNTBh
ZmJkNmYwHhcNMjUwNzI3MDQwMDI2WhcNMjUwNzI4MDQwMDI2WjAzMTEwLwYDVQQD
Eyg5NjJhMDk4YzU4MDc0M2QyODAwMGUyN2E1MjZjMWIzMjQzNTRlYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbEnh2GrVro1zkUXCm3+cbS2Rq9C
t6QAO93ui9CKpRQER12v7EnFV3XY6xILPcXnqeCsz3BeyO3XB4tpqNr3DeBmP/EW
sWlzfOBAOvs5Z5saa7l2HENHHxVu5Z0jmaz4egHfiFBfsGWvHWBfogubAxRm0I6D
bV9AHiQc5KZ0fTLU6F8Rr2BbjBWUTO/Xyl6my9mvrXo1msOsrjhOHrSEGivb+Kbp
N8vB+vu1U0Pk4nPTlu0T9THpxkYgMtKhwRm93oHxE9YhKTi4Rxwuqh41Nq1+N0QM
zrrD+sbKXHFcexpDXnbZ45Rqradop5Qz3vfAz7P53RulSRwssIqA77vRuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYqCYxYB0PSgADielJsGzJDVOwFMB8GA1UdIwQY
MBaAFFBc1hqfbenazA08khcG331Qr71vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hMzczNWEtZWNjYy00MWQ3LWI3MjMt
ZTAxMjM3YjVmYzEwLzEvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9hMzczNWEtZWNjYy00MWQ3LWI3MjMtZTAxMjM3YjVmYzEw
LzEvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcckxM1N
74uBVdFg0L5VKtLV6pPoyRxm3V7MLjtuwinvz8HqIis/PSa6hggrQPKejH31Os+p
NYujgoUOT8ViodQBtlZcDfDyBnQpLYmLa2jnycu9YrVBuw7y8wEt56aVZks72xam
br67X+Hi7n/p2sd0EocccKhcqHY12mNNXJobHpJzsv/r7viDILEQfdg+F69+Y+Nc
MgpDWIpWEj87G8/NwlLXOKt1gsJaWZy+bqYRCq3coCrMlosoJpaOp14QrRMDFaXq
JX/Y0167DUBze+rrMf20Jl6dFfpLzBNFlhMBewaeTSJfED/2nXlc8UOc/9wZYcGo
vEq84DVtpvWohw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:38 2025 by rpki-client