
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File: uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier: sDegl+D3KbXH4HLAvCPYUQxK07uni1HnV6tP08eQvvk=
Subject key identifier: D9:DF:F6:AA:D7:AC:C6:B0:66:59:77:CE:52:50:82:13:48:BD:43:37
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 01983CF3377EFA5239676364DC6326E29E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number: 128C
Signing time: Thu 24 Jul 2025 15:00:28 +0000
Manifest this update: Thu 24 Jul 2025 15:00:28 +0000
Manifest next update: Fri 25 Jul 2025 15:00:28 +0000
Files and hashes: 1: 6qEQVs9RJhELhTSt-yx6PdqTH4k.roa (hash: MJPHmKEomDKDrIf3X9T4A591PCDIN9biU5Xak896EvA=)
2: SWCjjUaxCAvLsIqlq6JIIAKsNyg.roa (hash: IheYNJ5DBR2ARWU4KPU8QmLGQuMxzruzWVG2AoLba3s=)
3: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
4: bBmwPBIN2Tw9ch2JTb-Jk1aFkow.roa (hash: JohsMKzc7NS3iKOPkRn0oanEwpp18WubB1nHsAAF+rk=)
5: cXoMl3h-VkR1RZL5L9dG__x60lI.roa (hash: yhbHE/DG8Vm5/MH05TukfdNIz60oJwR93PUKtDxAmrc=)
6: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
7: jOJMuOf3wW9QD0EWILNZcKmfsMY.roa (hash: IwHFADa8djjRXX5pH/rvBdr8XX2U2mjyDg3i8wc0tqI=)
8: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: EdVnv2a4Eq5ajRVu2NBiFWRfLyZagIcDObaBBgz22po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:f3:37:7e:fa:52:39:67:63:64:dc:63:26:e2:9e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jul 24 15:00:28 2025 GMT
Not After : Jul 25 15:00:28 2025 GMT
Subject: CN=d9dff6aad7acc6b0665977ce5250821348bd4337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:ea:b0:1b:bd:c1:a6:e5:cb:82:06:7e:a6:
7f:e5:59:50:7e:c9:90:11:91:04:4d:62:e8:96:8e:
e4:d9:28:c0:3d:4b:dd:39:36:ce:36:6f:c3:11:92:
57:ee:8c:3a:58:52:18:6a:67:15:f3:79:1e:88:0f:
d7:b6:b8:bc:fb:b9:f0:75:68:52:e9:4e:30:0b:4b:
bc:bc:d7:12:53:cd:fe:21:d5:3e:df:9b:d2:bd:18:
65:42:bf:69:c4:3f:c5:5d:66:d3:72:3c:e8:18:06:
c6:16:a3:26:27:7a:6c:66:ff:9c:bb:bc:5b:63:20:
31:6d:4f:96:c2:8a:ea:53:a6:09:07:3b:a3:cd:47:
dd:f0:c0:22:df:cf:6b:a7:26:f8:3c:8c:fa:47:b1:
5b:1d:07:8d:11:59:48:d2:b6:44:11:18:0d:ef:61:
b6:ff:25:af:b0:5d:32:17:1d:fc:e7:32:53:96:1e:
0a:52:aa:0a:cb:99:2a:05:19:31:c7:e6:02:c6:16:
f6:26:35:39:00:d0:e8:09:47:12:74:ac:61:e3:70:
75:c0:90:1f:41:d6:79:06:8f:4a:13:b9:4e:e4:02:
16:df:08:cf:10:ba:99:68:af:7f:fe:db:78:cd:6e:
bc:80:06:62:35:12:08:45:08:35:13:a7:1b:e4:49:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DF:F6:AA:D7:AC:C6:B0:66:59:77:CE:52:50:82:13:48:BD:43:37
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7f:ca:4d:08:75:e1:8a:3d:e2:ae:6d:0e:ae:39:7b:df:7c:
47:08:4a:4f:53:83:ed:f7:b9:7a:72:65:18:8d:be:53:4f:47:
1e:11:ad:e5:a4:c5:68:99:b2:ca:19:07:8f:41:0d:99:64:52:
b1:e4:16:b0:b9:aa:b0:50:f4:c5:24:75:5f:7e:2e:7c:4f:59:
a7:26:77:f9:b8:45:ad:3a:6f:1b:a2:ad:7f:44:fd:66:d5:ee:
f4:7d:b4:a6:2f:f8:28:fd:bd:e4:dd:78:40:a0:ed:96:e4:0a:
ac:1e:c5:ae:7f:3e:9b:7e:6f:f5:61:c8:fd:80:46:49:86:be:
b8:30:f6:b8:4f:e3:3d:1e:01:3d:31:4c:1f:8c:18:bc:f2:a5:
6a:ba:31:c4:bc:8c:29:a5:9d:de:49:af:ac:70:a6:cd:a9:ee:
09:b1:4d:91:80:c0:8b:05:fc:46:ef:9e:01:9f:f3:4b:f5:f3:
26:ab:49:85:1f:35:4f:d9:7b:ef:70:bf:85:90:5f:2b:37:1b:
e0:de:46:7b:e8:e3:08:05:f8:2a:be:88:76:fa:91:bd:6a:e2:
05:62:26:70:c7:b3:2c:c8:74:60:58:71:c8:01:e5:c0:9f:76:
85:d0:d5:c4:17:3d:1c:19:4e:4d:93:de:1e:9c:54:63:d5:9a:
5e:a2:cc:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg88zd++lI5Z2Nk3GMm4p6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MmU3YjgwNjhjNGFlOWFlNGNhNGMzYTZiMjA5NjE5OWE3
NDFmZjIwHhcNMjUwNzI0MTUwMDI4WhcNMjUwNzI1MTUwMDI4WjAzMTEwLwYDVQQD
EyhkOWRmZjZhYWQ3YWNjNmIwNjY1OTc3Y2U1MjUwODIxMzQ4YmQ0MzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkzqsBu9wably4IGfqZ/5VlQfsmQ
EZEETWLolo7k2SjAPUvdOTbONm/DEZJX7ow6WFIYamcV83keiA/Xtri8+7nwdWhS
6U4wC0u8vNcSU83+IdU+35vSvRhlQr9pxD/FXWbTcjzoGAbGFqMmJ3psZv+cu7xb
YyAxbU+WworqU6YJBzujzUfd8MAi389rpyb4PIz6R7FbHQeNEVlI0rZEERgN72G2
/yWvsF0yFx385zJTlh4KUqoKy5kqBRkxx+YCxhb2JjU5ANDoCUcSdKxh43B1wJAf
QdZ5Bo9KE7lO5AIW3wjPELqZaK9//tt4zW68gAZiNRIIRQg1E6cb5ElRTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnf9qrXrMawZll3zlJQghNIvUM3MB8GA1UdIwQY
MBaAFLgue4BoxK6a5MpMOmsglhmadB/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMt
YWFkZmE5YzA2NzQyLzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMtYWFkZmE5YzA2NzQy
LzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkX/KTQh1
4Yo94q5tDq45e998RwhKT1OD7fe5enJlGI2+U09HHhGt5aTFaJmyyhkHj0ENmWRS
seQWsLmqsFD0xSR1X34ufE9ZpyZ3+bhFrTpvG6Ktf0T9ZtXu9H20pi/4KP295N14
QKDtluQKrB7Frn8+m35v9WHI/YBGSYa+uDD2uE/jPR4BPTFMH4wYvPKlaroxxLyM
KaWd3kmvrHCmzanuCbFNkYDAiwX8Ru+eAZ/zS/XzJqtJhR81T9l773C/hZBfKzcb
4N5Ge+jjCAX4Kr6IdvqRvWriBWImcMezLMh0YFhxyAHlwJ92hdDVxBc9HBlOTZPe
HpxUY9WaXqLMEw==
-----END CERTIFICATE-----
Generated at Thu Jul 24 17:24:58 2025 by rpki-client