Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: iPunHKwg/hPZu8kgDz5lk1ZUkGnSOFLA4IH5t/LGOPY=
Subject key identifier: D0:ED:BE:56:EC:31:07:3D:B3:05:D1:61:B4:33:82:3F:C0:F1:F6:71
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 01984B535D4FDF5CF5325B55BFB169ECFE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 0E85
Signing time: Sun 27 Jul 2025 10:00:11 +0000
Manifest this update: Sun 27 Jul 2025 10:00:11 +0000
Manifest next update: Mon 28 Jul 2025 10:00:11 +0000
Files and hashes: 1: PrJQJT3uctgSQDhbXg7t6tQ4QrM.roa (hash: gya9esJQBziUpHHO9F+UZbaGJJEGL38CeXZKg65ppYM=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: 3eQjYp10Hw+4/ajhsXl6ABmSkIh7H6CquugiFYtzUr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:5d:4f:df:5c:f5:32:5b:55:bf:b1:69:ec:fe:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Jul 27 10:00:11 2025 GMT
Not After : Jul 28 10:00:11 2025 GMT
Subject: CN=d0edbe56ec31073db305d161b433823fc0f1f671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:19:30:25:16:ff:c0:66:a8:4c:20:c1:dd:
83:03:b1:8f:f1:30:9d:ad:47:1f:1b:5e:bc:70:d7:
14:31:e8:1b:7d:a7:3b:42:4e:57:a5:c0:5f:0b:0b:
16:19:44:c4:44:ad:6f:40:e2:66:e1:7d:fd:03:59:
e2:11:94:6c:b2:fe:de:bb:52:b0:c2:9b:c9:66:c5:
b8:43:25:06:c4:5a:a2:91:4f:5f:e4:3e:52:58:c1:
9b:0e:f3:a9:78:02:b9:92:0d:b1:b9:cc:ca:c1:33:
b0:c2:90:b7:cb:da:3e:66:19:17:ba:44:11:6f:e6:
d1:ba:75:a0:8c:a8:9a:48:93:e1:6f:c7:ee:bc:ca:
f9:e9:fc:7a:71:02:75:34:58:c0:b7:45:bf:d6:5e:
36:c6:9a:37:8b:5d:27:84:b7:e3:08:b7:73:35:58:
e5:76:bf:f1:e1:04:47:55:ba:74:59:17:f7:f6:de:
55:59:27:5c:d6:6e:c3:55:28:b2:ac:fb:21:cd:b8:
2f:42:5d:0c:92:ec:40:5e:17:ca:46:3a:6f:ba:38:
f2:f1:ca:84:0a:9c:3d:a5:ba:b9:98:37:72:d1:f3:
95:f7:4e:28:ff:fc:da:35:45:af:48:e1:7f:73:64:
f4:20:4c:5f:65:99:da:48:39:0f:19:c4:5b:7e:60:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:ED:BE:56:EC:31:07:3D:B3:05:D1:61:B4:33:82:3F:C0:F1:F6:71
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:17:6e:d1:27:bd:fc:da:de:d2:b7:eb:0d:c0:59:c3:77:2d:
ea:ac:2d:b1:e1:a1:ef:6a:a3:0a:c5:da:ae:f9:27:e5:7a:7a:
d9:61:69:03:64:64:8c:b0:ff:3c:b4:0b:ac:e3:40:39:f2:7e:
e0:02:b7:c2:19:c2:72:3c:44:cb:82:09:1d:67:41:11:de:f3:
fa:9c:b6:4a:14:8e:c6:27:85:fa:2c:1a:d4:e0:98:d1:39:f2:
a7:8b:51:69:c6:10:7b:f9:d6:79:39:85:ae:19:89:42:a0:1b:
f0:4f:4c:cd:93:b1:c4:05:75:18:43:2f:65:c5:56:7c:fb:ab:
4a:36:ae:f5:c2:05:49:2f:e7:79:a5:e7:cb:84:f6:36:13:27:
13:34:9a:f8:a3:df:8e:d9:16:d7:1d:2a:dd:50:c6:cd:59:2e:
e4:37:4e:73:ca:ab:e2:67:c3:24:c0:51:4b:ce:69:7f:f2:33:
2e:e2:cb:e6:c0:58:97:36:8f:37:07:55:ba:2a:c7:f9:66:9e:
23:35:48:51:58:1a:f5:a8:4f:77:f6:d7:29:6a:90:32:06:04:
10:26:75:1c:83:61:72:a3:d4:54:3b:99:c0:b3:f5:70:8f:48:
1d:8c:78:a0:e5:0d:4a:50:06:a7:e9:0a:85:b1:c7:09:60:81:
c8:d4:14:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU11P31z1MltVv7Fp7P5EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWZiYzE0NjI0NTVlOTg2OWQ0OGIyNTdiMThlMjNiZTc3
YWE2YzMwHhcNMjUwNzI3MTAwMDExWhcNMjUwNzI4MTAwMDExWjAzMTEwLwYDVQQD
EyhkMGVkYmU1NmVjMzEwNzNkYjMwNWQxNjFiNDMzODIzZmMwZjFmNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzAZMCUW/8BmqEwgwd2DA7GP8TCd
rUcfG168cNcUMegbfac7Qk5XpcBfCwsWGUTERK1vQOJm4X39A1niEZRssv7eu1Kw
wpvJZsW4QyUGxFqikU9f5D5SWMGbDvOpeAK5kg2xuczKwTOwwpC3y9o+ZhkXukQR
b+bRunWgjKiaSJPhb8fuvMr56fx6cQJ1NFjAt0W/1l42xpo3i10nhLfjCLdzNVjl
dr/x4QRHVbp0WRf39t5VWSdc1m7DVSiyrPshzbgvQl0MkuxAXhfKRjpvujjy8cqE
Cpw9pbq5mDdy0fOV904o//zaNUWvSOF/c2T0IExfZZnaSDkPGcRbfmCEEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDtvlbsMQc9swXRYbQzgj/A8fZxMB8GA1UdIwQY
MBaAFFGvvBRiRV6YadSLJXsY4jvneqbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMt
YTIwMWRmYWJkYWIxLzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMtYTIwMWRmYWJkYWIx
LzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxdu0Se9
/Nre0rfrDcBZw3ct6qwtseGh72qjCsXarvkn5Xp62WFpA2RkjLD/PLQLrONAOfJ+
4AK3whnCcjxEy4IJHWdBEd7z+py2ShSOxieF+iwa1OCY0Tnyp4tRacYQe/nWeTmF
rhmJQqAb8E9MzZOxxAV1GEMvZcVWfPurSjau9cIFSS/neaXny4T2NhMnEzSa+KPf
jtkW1x0q3VDGzVku5DdOc8qr4mfDJMBRS85pf/IzLuLL5sBYlzaPNwdVuirH+Wae
IzVIUVga9ahPd/bXKWqQMgYEECZ1HINhcqPUVDuZwLP1cI9IHYx4oOUNSlAGp+kK
hbHHCWCByNQUew==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:52:25 2025 by rpki-client