Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
File: UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft (raw, json)
Hash identifier: O2ISUvbYFDL2kT+m7w9oBOYDAzwLGHtoMR95iIBPa/I=
Subject key identifier: 33:41:CD:96:D9:9B:9E:DA:93:59:CE:8B:BB:AA:88:D8:C7:6F:B9:0E
Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
Certificate issuer: /CN=52702cdee043094ac2f33170125f94f7034da8f0
Certificate serial: 0198499BEE8EDCC686384B0CA7D7CD3F30FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
Manifest number: 0F9C
Signing time: Sun 27 Jul 2025 02:00:12 +0000
Manifest this update: Sun 27 Jul 2025 02:00:12 +0000
Manifest next update: Mon 28 Jul 2025 02:00:12 +0000
Files and hashes: 1: UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl (hash: cT+Twj0Fza1PPdQ9mDj02Pc3N37uJefth7k3r9Mlc8s=)
2: eZTqCsy1o9f-eq_FZSRPL4-aBD8.roa (hash: cQOdS5lB0S1LA9krJg3sdASUyUTn/NkoA0OQ3se0FuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:ee:8e:dc:c6:86:38:4b:0c:a7:d7:cd:3f:30:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0
Validity
Not Before: Jul 27 02:00:12 2025 GMT
Not After : Jul 28 02:00:12 2025 GMT
Subject: CN=3341cd96d99b9eda9359ce8bbbaa88d8c76fb90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:05:d2:a9:84:7a:05:d6:16:a1:55:aa:5c:61:
1b:35:28:c5:ea:ce:a2:ec:e5:2e:18:a3:9d:27:d0:
85:7a:ee:8d:f6:58:55:ae:5d:cd:3c:e7:f2:73:83:
13:86:44:42:c0:82:d3:7b:cd:78:83:2a:c7:bd:ec:
48:74:a7:dd:11:9d:02:cb:e5:51:ec:17:71:72:58:
9c:4c:a8:34:10:24:e1:e2:f4:3a:37:9c:6f:6c:aa:
a5:ed:e4:df:0a:4e:9a:72:93:06:a1:cf:57:64:9b:
e0:75:1f:c6:a4:da:5a:cd:27:1f:e5:e3:10:ed:a0:
7c:95:26:9d:ca:11:90:42:d5:94:5b:07:64:5f:13:
f0:1e:3a:63:92:df:39:04:89:02:51:52:5e:2c:09:
03:9e:8d:39:31:31:05:f9:b2:ff:b7:fd:d8:b3:5f:
16:ea:0c:ff:0c:3a:4b:05:80:4c:a4:e9:01:0f:5b:
66:e5:20:1e:7f:7e:ad:32:0f:0d:d0:56:e1:ff:01:
44:9b:7e:4f:1f:3b:7b:02:8d:e8:68:d5:25:5e:1b:
9c:11:40:71:55:09:d8:51:27:da:f1:ad:de:dd:5a:
a1:ee:bb:30:b8:1d:41:f9:32:a6:4f:9f:c4:ff:a9:
50:a7:eb:a9:f9:8e:b3:c9:af:3f:4d:d8:e8:ae:16:
ec:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:41:CD:96:D9:9B:9E:DA:93:59:CE:8B:BB:AA:88:D8:C7:6F:B9:0E
X509v3 Authority Key Identifier:
keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:29:db:ae:78:6d:0d:a8:a9:32:5c:f2:b8:fb:c8:38:97:e5:
3e:24:95:01:40:7e:39:e7:40:41:1c:09:19:30:36:8d:58:60:
a3:a4:2e:75:ce:c8:33:4c:11:6e:68:2e:11:84:2f:20:c5:3f:
d1:6d:ac:3b:0b:d2:1c:8b:7d:22:0b:d6:fd:af:41:b8:5e:7b:
2a:c5:4c:07:37:a9:23:35:b8:51:ec:92:1f:6e:2b:df:cc:9d:
9c:de:6b:7e:7b:6c:35:29:7e:0c:b7:56:3a:b2:89:e8:f5:d6:
88:76:07:25:6a:c1:c6:a7:d6:23:dd:1f:ed:95:72:d9:22:70:
a8:36:cb:d0:d0:6c:11:cf:5e:cf:0e:56:e4:76:33:85:a6:e4:
72:5c:ea:57:56:9a:d7:2e:ae:dc:d2:8c:92:af:56:20:8c:61:
1f:94:dd:ac:68:8e:a8:32:45:36:ee:60:9c:a5:3c:1e:86:eb:
52:47:76:b8:6f:f3:8e:ed:22:69:9f:09:77:7b:ef:5b:69:27:
89:26:3b:2b:5c:cc:9a:94:0f:d9:61:0b:e1:fd:dc:64:08:c1:
d1:8e:6e:2a:76:67:d6:ef:26:67:2e:6f:f1:96:f5:19:48:61:
46:a6:1e:6f:ba:fa:cc:cb:38:c7:44:42:14:f3:05:cf:6e:5d:
e2:dc:c6:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJm+6O3MaGOEsMp9fNPzD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNzAyY2RlZTA0MzA5NGFjMmYzMzE3MDEyNWY5NGY3MDM0
ZGE4ZjAwHhcNMjUwNzI3MDIwMDEyWhcNMjUwNzI4MDIwMDEyWjAzMTEwLwYDVQQD
EygzMzQxY2Q5NmQ5OWI5ZWRhOTM1OWNlOGJiYmFhODhkOGM3NmZiOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AXSqYR6BdYWoVWqXGEbNSjF6s6i
7OUuGKOdJ9CFeu6N9lhVrl3NPOfyc4MThkRCwILTe814gyrHvexIdKfdEZ0Cy+VR
7BdxclicTKg0ECTh4vQ6N5xvbKql7eTfCk6acpMGoc9XZJvgdR/GpNpazScf5eMQ
7aB8lSadyhGQQtWUWwdkXxPwHjpjkt85BIkCUVJeLAkDno05MTEF+bL/t/3Ys18W
6gz/DDpLBYBMpOkBD1tm5SAef36tMg8N0Fbh/wFEm35PHzt7Ao3oaNUlXhucEUBx
VQnYUSfa8a3e3Vqh7rswuB1B+TKmT5/E/6lQp+up+Y6zya8/TdjorhbsAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNBzZbZm57ak1nOi7uqiNjHb7kOMB8GA1UdIwQY
MBaAFFJwLN7gQwlKwvMxcBJflPcDTajwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kOGM4NWUtNDE5OC00ODY5LWI5Y2Qt
ZTI4MGI2NTAxNzA0LzEvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kOGM4NWUtNDE5OC00ODY5LWI5Y2QtZTI4MGI2NTAxNzA0
LzEvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvSnbrnht
DaipMlzyuPvIOJflPiSVAUB+OedAQRwJGTA2jVhgo6Qudc7IM0wRbmguEYQvIMU/
0W2sOwvSHIt9IgvW/a9BuF57KsVMBzepIzW4UeySH24r38ydnN5rfntsNSl+DLdW
OrKJ6PXWiHYHJWrBxqfWI90f7ZVy2SJwqDbL0NBsEc9ezw5W5HYzhabkclzqV1aa
1y6u3NKMkq9WIIxhH5TdrGiOqDJFNu5gnKU8HobrUkd2uG/zju0iaZ8Jd3vvW2kn
iSY7K1zMmpQP2WEL4f3cZAjB0Y5uKnZn1u8mZy5v8Zb1GUhhRqYeb7r6zMs4x0RC
FPMFz25d4tzGKw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:26 2025 by rpki-client