Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: 4Aceqbr1fXcDxx2l8sNHmt/qfeqhj0uIUf/4EFL2aP8=
Subject key identifier: C1:44:22:09:B1:E7:AD:E1:32:BC:05:99:CE:7D:79:57:A8:99:5C:81
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 019847ADB8CE9CE257BF417186096421A88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 0225
Signing time: Sat 26 Jul 2025 17:00:24 +0000
Manifest this update: Sat 26 Jul 2025 17:00:24 +0000
Manifest next update: Sun 27 Jul 2025 17:00:24 +0000
Files and hashes: 1: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: gzV704C4BwcYNJUP+YeFh1dwQF3rmPK4qnQXyHVDkbM=)
2: tvk_TWflCJ8ZNrh2M-7M5_dNgEY.roa (hash: 4b/TkGaMkrVO4glHhMzqT0WO1c7HhD8mCemv7gvN81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:b8:ce:9c:e2:57:bf:41:71:86:09:64:21:a8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Jul 26 17:00:24 2025 GMT
Not After : Jul 27 17:00:24 2025 GMT
Subject: CN=c1442209b1e7ade132bc0599ce7d7957a8995c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:63:43:56:eb:19:49:c2:22:b6:7a:f5:81:
07:df:76:b1:07:b7:bc:9a:7e:8f:0f:d7:10:ca:9e:
03:19:36:6a:fe:a1:be:7d:df:f4:f2:93:8b:8f:e8:
69:ea:76:53:5b:e0:57:fd:f5:20:be:b9:43:d3:d7:
7a:8f:ba:ab:eb:98:84:69:d4:3a:70:23:14:8f:6d:
5e:03:d1:c4:a4:af:1a:d4:20:63:c5:03:e8:88:ff:
1d:61:1f:b3:2b:d7:b6:85:2b:f4:33:56:07:68:90:
2f:f8:94:47:a5:c0:d5:55:eb:cf:df:93:5a:17:ba:
17:0e:0d:96:cc:79:02:98:a0:5b:26:02:38:de:2f:
04:52:42:81:bb:14:c6:23:1d:ce:38:59:e3:1e:a1:
d1:9d:2b:d5:ae:7c:5b:b9:ce:6e:95:5a:c5:40:a0:
61:a2:dd:2f:ad:0c:be:08:6f:0a:e4:0e:62:64:be:
8d:d4:91:c0:95:ae:8e:6d:18:96:34:5b:76:5d:87:
6e:9b:c0:d4:7c:10:35:9c:32:2e:fa:e0:43:28:c3:
d3:cd:09:0f:d1:c6:af:d4:80:cf:45:db:50:12:fb:
be:64:0a:6e:dd:58:2f:45:27:32:4a:ad:00:98:6a:
3c:92:57:37:d0:36:d9:c3:7e:28:9f:27:68:2a:59:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:44:22:09:B1:E7:AD:E1:32:BC:05:99:CE:7D:79:57:A8:99:5C:81
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8e:e6:4a:db:33:17:4d:57:ad:47:f4:e3:54:88:ed:67:84:
f0:18:d3:67:0b:c0:7f:53:d9:64:b9:36:89:03:be:93:b8:79:
cc:44:13:6e:5f:53:a5:37:54:43:1b:18:3f:04:8a:78:59:a5:
11:c0:52:81:74:4d:c3:35:90:9d:51:24:b2:9e:29:f9:3f:38:
da:03:44:6e:57:be:96:5c:9c:3d:56:dc:e1:6f:d4:3b:15:f2:
40:fa:87:e7:0c:8c:35:7e:3e:7c:e2:d1:18:15:bd:18:8d:67:
72:04:e4:2f:0e:84:bc:45:3d:ca:ba:fc:27:58:97:3e:62:c9:
8d:6d:b2:07:e6:1d:8c:33:b8:08:15:b7:22:41:26:23:30:78:
dd:a6:e5:ce:0b:f1:20:88:52:e1:e7:56:77:ed:de:23:b3:ba:
c9:04:fa:f0:8c:54:aa:a0:50:37:d8:0e:b5:a3:62:19:f8:3f:
99:d4:e2:8c:70:3b:11:e4:18:68:23:24:8c:f5:51:7c:d4:b4:
d0:5f:3c:04:a6:85:f4:c6:e6:2d:6b:1c:81:1b:1c:a8:d9:41:
f7:74:0e:6d:eb:dc:a1:10:ae:f7:71:8a:e6:96:51:68:19:3b:
7d:8a:5c:55:52:ce:61:7e:23:7b:d0:50:98:c7:10:f0:a2:41:
62:b8:ae:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrbjOnOJXv0FxhglkIaiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNGY4NzlmM2Y5N2FkOGNkNzMxOTNkODA2OWU0OWIwMWI2
YmFkZGQwHhcNMjUwNzI2MTcwMDI0WhcNMjUwNzI3MTcwMDI0WjAzMTEwLwYDVQQD
EyhjMTQ0MjIwOWIxZTdhZGUxMzJiYzA1OTljZTdkNzk1N2E4OTk1YzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcRjQ1brGUnCIrZ69YEH33axB7e8
mn6PD9cQyp4DGTZq/qG+fd/08pOLj+hp6nZTW+BX/fUgvrlD09d6j7qr65iEadQ6
cCMUj21eA9HEpK8a1CBjxQPoiP8dYR+zK9e2hSv0M1YHaJAv+JRHpcDVVevP35Na
F7oXDg2WzHkCmKBbJgI43i8EUkKBuxTGIx3OOFnjHqHRnSvVrnxbuc5ulVrFQKBh
ot0vrQy+CG8K5A5iZL6N1JHAla6ObRiWNFt2XYdum8DUfBA1nDIu+uBDKMPTzQkP
0cav1IDPRdtQEvu+ZApu3VgvRScySq0AmGo8klc30DbZw34onydoKlkHywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFEIgmx563hMrwFmc59eVeomVyBMB8GA1UdIwQY
MBaAFK1Ph58/l62M1zGT2AaeSbAba63dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQt
OTRlZjE5NzA3MzgyLzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQtOTRlZjE5NzA3Mzgy
LzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAro7mStsz
F01XrUf041SI7WeE8BjTZwvAf1PZZLk2iQO+k7h5zEQTbl9TpTdUQxsYPwSKeFml
EcBSgXRNwzWQnVEksp4p+T842gNEble+llycPVbc4W/UOxXyQPqH5wyMNX4+fOLR
GBW9GI1ncgTkLw6EvEU9yrr8J1iXPmLJjW2yB+YdjDO4CBW3IkEmIzB43ablzgvx
IIhS4edWd+3eI7O6yQT68IxUqqBQN9gOtaNiGfg/mdTijHA7EeQYaCMkjPVRfNS0
0F88BKaF9MbmLWscgRscqNlB93QObevcoRCu93GK5pZRaBk7fYpcVVLOYX4je9BQ
mMcQ8KJBYriusA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:29 2025 by rpki-client