Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier: hBLsdAJLT2DniVzXmLyM6pO129TOPwiovKY/4wxbo0Q=
Subject key identifier: 22:A0:58:81:A6:49:12:C6:A4:55:44:48:AA:80:96:44:00:78:1E:47
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 01984A09CA444209E6B8AB08AADA67F0C676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number: 121E
Signing time: Sun 27 Jul 2025 04:00:12 +0000
Manifest this update: Sun 27 Jul 2025 04:00:12 +0000
Manifest next update: Mon 28 Jul 2025 04:00:12 +0000
Files and hashes: 1: Dh_PGcah1amxFNaKHyr8GSWi0PM.roa (hash: aWuvVvbhf111USH5RwpYaeoTHWgggPXcMAanGVjaecw=)
2: DsXaN-JcB1la2CE31gfwERTXOWA.roa (hash: cvGbZhq10ZJuhtEt9TJhe7Mw/LDk0dS6Cxjwe9D+Wn8=)
3: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: RnFHnU7wmoaSvo24+f5RtHSN9+XZKx71nENZAxy0ldw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:ca:44:42:09:e6:b8:ab:08:aa:da:67:f0:c6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: Jul 27 04:00:12 2025 GMT
Not After : Jul 28 04:00:12 2025 GMT
Subject: CN=22a05881a64912c6a4554448aa80964400781e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:46:0c:55:23:76:fc:1a:7f:7f:fd:92:5e:
db:fb:f7:62:91:82:d6:59:58:ee:91:1e:89:8e:91:
b2:14:b2:8b:8c:37:fb:32:db:46:d3:dc:0f:5d:ab:
66:ea:e5:2f:97:3d:78:0d:11:1d:bd:59:2f:6f:19:
12:28:f2:0f:e2:0d:a2:0d:79:9d:0e:ce:cb:ca:d9:
f1:d8:b6:0e:2b:78:c3:1c:72:3b:07:5e:6c:f2:3b:
04:bd:6e:b3:95:a2:af:12:8f:f8:5c:ab:c2:54:72:
9a:64:8e:76:ad:05:59:51:3b:a2:08:25:77:c9:55:
c4:95:46:6c:bd:d1:d2:9f:81:75:71:da:34:92:dd:
75:a8:d2:48:23:8a:81:f3:a8:14:a8:c2:70:bb:24:
87:f0:6b:54:cc:35:61:4b:77:fd:0b:b4:58:73:06:
7e:28:fa:e0:15:49:ee:dd:1b:9b:a5:b4:b8:a6:d4:
95:57:ee:7d:5c:d6:ef:ea:59:bc:7c:06:27:54:4c:
a3:6f:86:22:ed:aa:5c:9d:da:d5:e3:23:ad:c6:e7:
c9:5f:7e:a4:3f:5e:36:60:59:d5:f7:e5:63:c6:47:
9b:5d:d6:2c:ae:e2:63:a4:c9:69:08:51:03:e0:c0:
4c:bb:84:1a:81:a5:26:4f:41:cb:5f:f4:53:8f:4d:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A0:58:81:A6:49:12:C6:A4:55:44:48:AA:80:96:44:00:78:1E:47
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6d:f9:a1:cf:2a:37:16:9d:01:c3:38:19:eb:c8:19:13:66:
5f:fd:80:1c:91:72:86:19:49:9a:be:06:58:79:d3:f5:4e:48:
9d:0a:a8:ed:95:da:0d:c1:69:d3:9f:9f:32:eb:f8:7b:09:e3:
ae:a2:2f:ec:c2:41:61:77:c2:bb:e9:15:0d:67:32:1e:fb:9c:
fc:13:0c:cf:c7:69:26:ca:84:2a:88:e8:2d:c2:7d:0e:ae:13:
9f:83:04:ba:ec:f3:3f:4f:29:ef:dc:0e:0b:a0:96:6b:54:72:
79:c3:e5:6c:a9:2e:2b:ea:bd:f7:1b:7a:f9:3f:1a:9b:61:9f:
6c:4d:f2:e2:0e:ea:8b:d0:c8:27:e6:35:f0:e6:8c:00:ac:7f:
90:55:4a:af:22:4f:7a:92:8b:8a:24:2e:46:68:92:20:f9:ee:
81:f4:85:20:44:03:b3:0c:f9:15:06:0d:ef:d8:e0:3b:64:34:
19:a1:d4:a9:32:63:80:1c:31:79:ec:1f:68:9c:32:02:95:43:
64:c5:81:38:b8:ea:b2:47:28:95:2c:e5:74:7c:c1:50:b6:ed:
e2:94:17:f9:09:c6:41:f9:6b:4a:08:35:e1:d8:c5:51:5e:78:
51:44:21:92:04:02:21:81:d2:52:66:e6:e7:58:63:08:d9:1f:
3c:4a:bc:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCcpEQgnmuKsIqtpn8MZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNzczMDFlMTRkNjViM2EzZDY4NmRhYWMxNmRmYzQ5YWM0
OGM3Y2QwHhcNMjUwNzI3MDQwMDEyWhcNMjUwNzI4MDQwMDEyWjAzMTEwLwYDVQQD
EygyMmEwNTg4MWE2NDkxMmM2YTQ1NTQ0NDhhYTgwOTY0NDAwNzgxZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIBGDFUjdvwaf3/9kl7b+/dikYLW
WVjukR6JjpGyFLKLjDf7MttG09wPXatm6uUvlz14DREdvVkvbxkSKPIP4g2iDXmd
Ds7Lytnx2LYOK3jDHHI7B15s8jsEvW6zlaKvEo/4XKvCVHKaZI52rQVZUTuiCCV3
yVXElUZsvdHSn4F1cdo0kt11qNJII4qB86gUqMJwuySH8GtUzDVhS3f9C7RYcwZ+
KPrgFUnu3RubpbS4ptSVV+59XNbv6lm8fAYnVEyjb4Yi7apcndrV4yOtxufJX36k
P142YFnV9+VjxkebXdYsruJjpMlpCFED4MBMu4QagaUmT0HLX/RTj02WWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKgWIGmSRLGpFVESKqAlkQAeB5HMB8GA1UdIwQY
MBaAFLp3MB4U1ls6PWhtqsFt/EmsSMfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEt
NWM2OGY2YjBiMmM3LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEtNWM2OGY2YjBiMmM3
LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZm35oc8q
NxadAcM4GevIGRNmX/2AHJFyhhlJmr4GWHnT9U5InQqo7ZXaDcFp05+fMuv4ewnj
rqIv7MJBYXfCu+kVDWcyHvuc/BMMz8dpJsqEKojoLcJ9Dq4Tn4MEuuzzP08p79wO
C6CWa1RyecPlbKkuK+q99xt6+T8am2GfbE3y4g7qi9DIJ+Y18OaMAKx/kFVKryJP
epKLiiQuRmiSIPnugfSFIEQDswz5FQYN79jgO2Q0GaHUqTJjgBwxeewfaJwyApVD
ZMWBOLjqskcolSzldHzBULbt4pQX+QnGQflrSgg14djFUV54UUQhkgQCIYHSUmbm
51hjCNkfPEq8kw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:22 2025 by rpki-client