Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File: uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier: yqUdgTf/QDqLPyJ+xHGl6WKWl3Zy7E1Md/ysP8fjxlw=
Subject key identifier: AA:57:F2:92:0F:FE:AC:91:81:D4:E8:86:A3:27:40:FE:2C:43:AC:60
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial: 019856457FF189726C02EF3986550562F75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number: 08BD
Signing time: Tue 29 Jul 2025 13:00:51 +0000
Manifest this update: Tue 29 Jul 2025 13:00:51 +0000
Manifest next update: Wed 30 Jul 2025 13:00:51 +0000
Files and hashes: 1: prumtdRguLUWgSqqHbzk8jBqloQ.roa (hash: xMMK2x/LYfV9Soh0v548c3TFIIdeHQqfXsiwhf98SBU=)
2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: Opv33QyllIL7I9Hcg4aVy4Z6sTyME9XHhrhGxw/gzPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:45:7f:f1:89:72:6c:02:ef:39:86:55:05:62:f7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Validity
Not Before: Jul 29 13:00:51 2025 GMT
Not After : Jul 30 13:00:51 2025 GMT
Subject: CN=aa57f2920ffeac9181d4e886a32740fe2c43ac60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:5e:82:d2:46:5a:d1:3d:ce:32:43:48:49:
1e:af:62:37:cb:01:e4:60:7d:05:fb:4a:04:54:46:
5f:3c:32:ae:ab:01:f6:7b:7b:45:80:31:cb:69:2d:
8d:35:05:29:1e:32:17:6a:b7:6f:51:73:ee:24:cf:
08:53:92:d8:01:c8:e9:1e:ae:a1:c3:50:e4:df:83:
a9:b9:91:0e:df:32:0b:85:0b:28:66:2e:cd:c5:9d:
2b:a3:e7:db:2e:86:38:5b:b5:64:ba:68:0a:0d:32:
d0:5c:91:6d:74:68:63:b4:f0:fe:ce:2d:b5:8b:ba:
7b:ee:ea:4a:68:19:b9:8d:3e:90:a2:93:19:6b:1c:
e1:ec:26:4c:22:35:b6:e7:13:fb:26:2a:1d:c5:99:
53:ef:0b:f2:24:87:d8:36:d7:67:4c:19:58:45:a3:
44:3a:2d:56:e7:ee:4d:49:b4:ed:69:2e:a0:25:19:
e0:d4:6d:33:6a:e0:db:bb:63:3f:44:de:f1:ca:39:
0b:09:48:c0:fe:36:d0:cb:d5:db:a0:77:d4:d2:02:
7f:8f:52:aa:1d:a8:f8:49:f9:23:e0:8d:0e:0e:56:
88:2f:ea:c2:b6:a6:83:b8:4c:1b:8e:5d:fd:34:85:
6c:ba:cc:5d:76:35:ac:40:72:8f:b8:c6:b5:20:3c:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:57:F2:92:0F:FE:AC:91:81:D4:E8:86:A3:27:40:FE:2C:43:AC:60
X509v3 Authority Key Identifier:
keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f0:52:26:76:1e:33:5b:48:cf:20:28:47:94:fd:53:8f:0f:
1a:60:fb:32:79:f0:08:2a:fc:af:6b:98:23:3d:3f:55:46:b1:
43:83:a0:e6:b3:81:ee:29:48:f5:a0:cb:dc:53:61:8c:62:0d:
59:a2:74:31:4b:2f:14:19:00:ae:72:b4:d7:6c:2e:21:28:8e:
db:39:1b:1c:cb:3c:f7:ca:79:1c:40:c5:e6:25:3e:60:84:2e:
f7:23:54:71:71:78:fb:59:d7:c0:20:d2:b2:78:03:c6:48:fb:
c8:7d:39:be:0c:f9:18:db:05:c4:e7:26:0c:cb:17:1d:18:d6:
83:48:e3:ca:ae:d3:7b:36:9e:06:7e:13:80:34:26:34:00:1f:
49:ac:ee:d9:f0:96:0a:a8:96:f3:76:cd:c7:e0:95:23:1e:87:
a2:2f:d0:d3:91:77:40:98:3b:88:c3:a9:eb:a9:16:3d:34:07:
a0:88:23:d1:1b:48:cc:97:bd:ff:90:c4:44:a8:de:21:ed:b0:
66:b0:f4:03:c3:6c:1e:9d:24:a9:65:08:9e:2f:39:a3:93:1c:
ab:9e:19:33:7b:19:a3:30:13:79:f9:cb:cf:b4:f7:27:a6:9c:
64:20:f2:1f:6a:c4:90:0e:f9:97:a0:96:02:00:e2:d6:25:a4:
07:91:de:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhWRX/xiXJsAu85hlUFYvddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZGFmYTdlYTU1MzE3ODEzM2U3ZTg0ZmVlYjhhYzNhOWRi
Y2Y5Y2EwHhcNMjUwNzI5MTMwMDUxWhcNMjUwNzMwMTMwMDUxWjAzMTEwLwYDVQQD
EyhhYTU3ZjI5MjBmZmVhYzkxODFkNGU4ODZhMzI3NDBmZTJjNDNhYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u9egtJGWtE9zjJDSEker2I3ywHk
YH0F+0oEVEZfPDKuqwH2e3tFgDHLaS2NNQUpHjIXardvUXPuJM8IU5LYAcjpHq6h
w1Dk34OpuZEO3zILhQsoZi7NxZ0ro+fbLoY4W7VkumgKDTLQXJFtdGhjtPD+zi21
i7p77upKaBm5jT6QopMZaxzh7CZMIjW25xP7JiodxZlT7wvyJIfYNtdnTBlYRaNE
Oi1W5+5NSbTtaS6gJRng1G0zauDbu2M/RN7xyjkLCUjA/jbQy9XboHfU0gJ/j1Kq
Haj4Sfkj4I0ODlaIL+rCtqaDuEwbjl39NIVsusxddjWsQHKPuMa1IDzKiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpX8pIP/qyRgdTohqMnQP4sQ6xgMB8GA1UdIwQY
MBaAFLja+n6lUxeBM+foT+64rDqdvPnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUt
NmI4OWZhNDY3NTdjLzEvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUtNmI4OWZhNDY3NTdj
LzEvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvBSJnYe
M1tIzyAoR5T9U48PGmD7MnnwCCr8r2uYIz0/VUaxQ4Og5rOB7ilI9aDL3FNhjGIN
WaJ0MUsvFBkArnK012wuISiO2zkbHMs898p5HEDF5iU+YIQu9yNUcXF4+1nXwCDS
sngDxkj7yH05vgz5GNsFxOcmDMsXHRjWg0jjyq7TezaeBn4TgDQmNAAfSazu2fCW
CqiW83bNx+CVIx6Hoi/Q05F3QJg7iMOp66kWPTQHoIgj0RtIzJe9/5DERKjeIe2w
ZrD0A8NsHp0kqWUIni85o5Mcq54ZM3sZozATefnLz7T3J6acZCDyH2rEkA75l6CW
AgDi1iWkB5Heyw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 16:29:35 2025 by rpki-client