Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: cmi/Mz8CFMGgeg9/HewJ1aBOwjiUHqrLvCXfBgcW1wg=
Subject key identifier: E1:58:EA:69:40:E4:8D:C7:13:AA:DE:0C:CA:B3:5D:62:E7:A2:EB:BF
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 01984DE6CE000452A1708E8B4F52CE8A8C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 22:00:28 +0000
Manifest this update: Sun 27 Jul 2025 22:00:28 +0000
Manifest next update: Mon 28 Jul 2025 22:00:28 +0000
Files and hashes: 1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: S5E9AzJxlsrSa+j8PkYgTA6Mc28rzLNPc9YE+oX6cGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:ce:00:04:52:a1:70:8e:8b:4f:52:ce:8a:8c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Jul 27 22:00:28 2025 GMT
Not After : Jul 28 22:00:28 2025 GMT
Subject: CN=e158ea6940e48dc713aade0ccab35d62e7a2ebbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:24:86:f6:1a:ce:5a:85:ed:a8:eb:8d:a0:
77:33:bd:95:75:ab:05:94:ba:51:d1:5c:95:3a:76:
87:94:58:35:cd:1e:24:cc:ad:38:fe:92:5e:22:87:
8e:54:b3:e4:72:a8:df:01:b9:7e:00:35:ad:0c:93:
e5:dd:1b:b4:69:93:41:d9:3d:01:8e:45:37:b4:aa:
06:83:fc:c9:e1:8b:9e:d8:89:56:4d:66:71:40:e4:
0e:46:ef:2f:37:65:5f:23:4b:dd:a3:cb:64:e1:62:
85:01:fd:8d:c6:41:ba:d3:c6:a1:32:6c:24:8b:06:
43:d9:11:84:b5:58:00:cd:fc:69:5d:c4:da:5b:d0:
90:3a:46:b8:94:f8:27:61:50:b5:8c:05:20:5e:1c:
b9:87:ed:85:43:c2:25:b7:53:79:e2:13:ea:4b:16:
2f:24:f8:0d:6b:91:64:7f:7e:a6:62:8d:c3:d3:78:
b7:fc:47:02:8e:8a:72:1a:28:a1:62:52:ca:81:a4:
3c:e6:b9:3c:e7:23:91:e8:8e:f0:18:97:55:9d:35:
16:d2:45:05:c4:09:7c:0f:b2:2c:88:88:e4:71:01:
fb:47:c9:80:14:3a:ba:52:5c:b1:30:08:f6:75:68:
65:dd:97:0a:45:94:75:6d:9f:4d:49:c0:75:30:32:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:58:EA:69:40:E4:8D:C7:13:AA:DE:0C:CA:B3:5D:62:E7:A2:EB:BF
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:cb:c2:1a:07:5c:6e:2d:1d:56:17:3b:92:93:18:ce:18:80:
93:51:fa:93:f0:15:a5:d8:8f:46:42:7e:50:37:6c:56:99:00:
ee:76:6f:58:12:06:36:c8:63:db:6b:af:0c:76:1b:23:c1:6f:
33:58:c4:e9:47:96:c7:85:6c:9e:88:94:f7:ef:0f:f8:8b:7c:
44:37:61:1b:ba:e9:dc:b1:9c:85:38:b7:cd:4f:c5:20:01:81:
fa:e2:4f:bf:e5:93:31:42:75:5c:9e:1d:be:8f:c8:92:ea:f2:
9e:83:62:68:76:3b:6f:8e:17:d5:4d:f0:b3:6f:ec:44:bd:b4:
8d:aa:2d:bf:a6:0c:80:31:42:70:2b:bc:c7:c9:97:3b:8b:84:
39:9a:20:c6:5e:83:be:7e:dc:b0:e7:59:04:2d:72:bf:c9:15:
b3:fe:2e:75:e8:bf:46:80:5c:b0:56:c0:e5:82:c4:9c:83:38:
f5:35:e9:f7:04:5b:c2:cd:17:bd:d3:63:00:cc:3e:c8:6b:ab:
d9:25:73:4c:ca:ce:98:31:4e:f6:83:9e:20:e5:dd:c4:a6:ff:
6a:cc:96:2f:1b:68:21:bd:8f:89:82:2c:97:36:e4:af:87:d6:
42:e1:d0:1d:e7:3c:d0:89:af:ce:94:12:42:69:e2:1a:04:db:
08:e3:c0:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhN5s4ABFKhcI6LT1LOiox8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNDNkZWQ3NDViMDVmNDAzOGU5ODNmYjlkNzhlZGY1NmYy
NTEzNDYwHhcNMjUwNzI3MjIwMDI4WhcNMjUwNzI4MjIwMDI4WjAzMTEwLwYDVQQD
EyhlMTU4ZWE2OTQwZTQ4ZGM3MTNhYWRlMGNjYWIzNWQ2MmU3YTJlYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnAkhvYazlqF7ajrjaB3M72VdasF
lLpR0VyVOnaHlFg1zR4kzK04/pJeIoeOVLPkcqjfAbl+ADWtDJPl3Ru0aZNB2T0B
jkU3tKoGg/zJ4Yue2IlWTWZxQOQORu8vN2VfI0vdo8tk4WKFAf2NxkG608ahMmwk
iwZD2RGEtVgAzfxpXcTaW9CQOka4lPgnYVC1jAUgXhy5h+2FQ8Ilt1N54hPqSxYv
JPgNa5Fkf36mYo3D03i3/EcCjopyGiihYlLKgaQ85rk85yOR6I7wGJdVnTUW0kUF
xAl8D7IsiIjkcQH7R8mAFDq6UlyxMAj2dWhl3ZcKRZR1bZ9NScB1MDK0OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFY6mlA5I3HE6reDMqzXWLnouu/MB8GA1UdIwQY
MBaAFFJD3tdFsF9AOOmD+5147fVvJRNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMt
YzUzNmRmNWMyNzRlLzEvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMtYzUzNmRmNWMyNzRl
LzEvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxcvCGgdc
bi0dVhc7kpMYzhiAk1H6k/AVpdiPRkJ+UDdsVpkA7nZvWBIGNshj22uvDHYbI8Fv
M1jE6UeWx4VsnoiU9+8P+It8RDdhG7rp3LGchTi3zU/FIAGB+uJPv+WTMUJ1XJ4d
vo/IkurynoNiaHY7b44X1U3ws2/sRL20jaotv6YMgDFCcCu8x8mXO4uEOZogxl6D
vn7csOdZBC1yv8kVs/4udei/RoBcsFbA5YLEnIM49TXp9wRbws0XvdNjAMw+yGur
2SVzTMrOmDFO9oOeIOXdxKb/asyWLxtoIb2PiYIslzbkr4fWQuHQHec80ImvzpQS
QmniGgTbCOPADA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 06:52:51 2025 by rpki-client