Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: 9WxAKKggRdGOADva5W0KBWwgxQi4T7tJni1J4urpUcM=
Subject key identifier: E1:01:4D:34:85:50:AF:E9:EF:AF:D7:5A:32:8A:9C:35:3F:40:10:A6
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 01984F31A61611A46DB5A85DF105895B9087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 02D1
Signing time: Mon 28 Jul 2025 04:01:50 +0000
Manifest this update: Mon 28 Jul 2025 04:01:50 +0000
Manifest next update: Tue 29 Jul 2025 04:01:50 +0000
Files and hashes: 1: cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa (hash: 9vivL0YwWhsXGDyDf4zb5XsV5Wh0saDdZDc2eObdPvk=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: AtthS7Vhz3lVatUupdIuC3m522jSwrM4iA5F9bJWOXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:31:a6:16:11:a4:6d:b5:a8:5d:f1:05:89:5b:90:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Jul 28 04:01:50 2025 GMT
Not After : Jul 29 04:01:50 2025 GMT
Subject: CN=e1014d348550afe9efafd75a328a9c353f4010a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:5d:2b:e7:b6:b8:10:fa:81:d8:2c:83:94:
75:b0:0d:78:d5:78:da:c7:da:bb:37:a8:2d:b2:4f:
cf:92:a5:f5:3e:a4:ab:29:8f:39:f9:03:59:bc:cd:
7e:0f:34:20:bb:8c:d9:60:5a:2e:5c:6b:ac:ad:39:
68:55:ec:01:81:3f:48:09:47:c5:ff:d5:55:75:3d:
de:68:e5:49:11:2b:9b:c8:41:f2:c1:a2:33:37:81:
92:6b:59:26:06:f7:11:b4:01:a2:11:aa:08:75:9a:
5c:25:c7:c2:d3:b6:98:20:da:00:ca:f7:56:62:55:
ab:af:bf:d5:f0:e1:41:a7:87:b4:76:f8:0f:43:93:
c4:cc:87:fe:b9:39:73:a5:42:7a:15:30:eb:e0:0b:
5a:f2:ee:99:08:56:21:44:3a:94:e9:0a:1d:42:d9:
e1:c4:89:4f:6f:ed:51:19:f0:ee:a7:04:b6:05:f6:
d7:d3:28:ba:6d:50:41:95:e3:79:a4:5e:5e:b9:b5:
6f:f3:63:84:69:ed:74:ab:88:28:aa:82:a4:df:a8:
39:9a:09:55:cd:ff:4e:b4:26:41:7b:a5:31:c3:ea:
c3:d1:58:78:78:5a:c7:63:80:20:25:87:07:94:23:
69:92:da:90:02:18:bd:92:a2:5b:8d:b8:13:d4:1d:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:01:4D:34:85:50:AF:E9:EF:AF:D7:5A:32:8A:9C:35:3F:40:10:A6
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f1:3d:6d:6d:f9:c0:cd:fd:84:dc:09:0c:8c:05:4f:10:35:
d0:d8:36:b6:99:61:03:0b:8c:33:25:22:e9:c7:33:d0:d4:df:
2d:1c:dd:16:03:cb:f5:92:96:49:51:72:7f:a7:5e:ea:77:06:
a4:95:d5:69:a8:df:47:10:b3:9e:00:07:51:ea:81:a8:56:d1:
38:b3:e2:be:71:94:7d:c4:25:6d:b8:b6:68:aa:53:48:6d:c9:
47:bd:eb:28:80:75:cd:78:0e:e3:d9:84:1b:da:f6:9c:df:75:
6b:72:28:c3:ec:52:50:8f:72:c2:e6:bd:b3:cc:f6:93:b3:1e:
86:63:66:2f:74:5f:14:05:cf:e6:63:ef:22:1e:2b:c4:8c:37:
22:6e:f1:0f:7b:c5:bd:b4:39:d9:b6:43:3f:0e:71:7b:f2:b8:
9c:1b:6c:49:29:1a:a9:fb:f9:02:b0:d4:b4:0e:19:b6:32:79:
4f:a3:0c:34:d1:c4:c6:47:46:27:4f:ce:12:1f:04:3e:bd:0a:
c3:81:dd:25:76:91:7b:2c:54:3a:51:8b:3c:48:43:53:d1:3c:
9c:5a:ae:0e:f2:b7:3c:a4:cb:76:41:83:a1:37:1e:97:d4:9f:
b8:a2:f8:f5:1f:af:56:a3:52:71:49:09:8a:5b:11:57:41:b0:
bd:7b:d2:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhPMaYWEaRttahd8QWJW5CHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTMwMzU5YjU0NjkxMTJlNmUyYmZhZTg1OTViMDU0ODU1
NTFkMzcwHhcNMjUwNzI4MDQwMTUwWhcNMjUwNzI5MDQwMTUwWjAzMTEwLwYDVQQD
EyhlMTAxNGQzNDg1NTBhZmU5ZWZhZmQ3NWEzMjhhOWMzNTNmNDAxMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKtdK+e2uBD6gdgsg5R1sA141Xja
x9q7N6gtsk/PkqX1PqSrKY85+QNZvM1+DzQgu4zZYFouXGusrTloVewBgT9ICUfF
/9VVdT3eaOVJESubyEHywaIzN4GSa1kmBvcRtAGiEaoIdZpcJcfC07aYINoAyvdW
YlWrr7/V8OFBp4e0dvgPQ5PEzIf+uTlzpUJ6FTDr4Ata8u6ZCFYhRDqU6QodQtnh
xIlPb+1RGfDupwS2BfbX0yi6bVBBleN5pF5eubVv82OEae10q4goqoKk36g5mglV
zf9OtCZBe6Uxw+rD0Vh4eFrHY4AgJYcHlCNpktqQAhi9kqJbjbgT1B1SzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEBTTSFUK/p76/XWjKKnDU/QBCmMB8GA1UdIwQY
MBaAFLmTA1m1RpES5uK/roWVsFSFVR03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTIt
YmU1ZjEyOWVhODFhLzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTItYmU1ZjEyOWVhODFh
LzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfE9bW35
wM39hNwJDIwFTxA10Ng2tplhAwuMMyUi6ccz0NTfLRzdFgPL9ZKWSVFyf6de6ncG
pJXVaajfRxCzngAHUeqBqFbROLPivnGUfcQlbbi2aKpTSG3JR73rKIB1zXgO49mE
G9r2nN91a3Iow+xSUI9ywua9s8z2k7MehmNmL3RfFAXP5mPvIh4rxIw3Im7xD3vF
vbQ52bZDPw5xe/K4nBtsSSkaqfv5ArDUtA4ZtjJ5T6MMNNHExkdGJ0/OEh8EPr0K
w4HdJXaReyxUOlGLPEhDU9E8nFquDvK3PKTLdkGDoTcel9SfuKL49R+vVqNScUkJ
ilsRV0GwvXvSiA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 11:50:56 2025 by rpki-client