Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
File: UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft (raw, json)
Hash identifier: akbcgEFvP6ctcB5eswU9axy9N76AVOM7F5Mb8XeNKtQ=
Subject key identifier: 82:C7:B8:F5:58:27:F6:9E:52:CE:F7:F9:BD:DD:E5:EA:69:30:97:26
Authority key identifier: 52:F2:5B:D0:5A:C1:48:85:1F:A2:A4:63:AD:0D:E0:70:81:84:04:F7
Certificate issuer: /CN=52f25bd05ac148851fa2a463ad0de070818404f7
Certificate serial: 0198477777A8FEF141389A7D54CEDE9AAAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
Manifest number: 0A2A
Signing time: Sat 26 Jul 2025 16:01:08 +0000
Manifest this update: Sat 26 Jul 2025 16:01:08 +0000
Manifest next update: Sun 27 Jul 2025 16:01:08 +0000
Files and hashes: 1: UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl (hash: SbsuedAheqvKnVNm9chiBFIgageB/3EcGCj+fNiua3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:77:a8:fe:f1:41:38:9a:7d:54:ce:de:9a:aa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f25bd05ac148851fa2a463ad0de070818404f7
Validity
Not Before: Jul 26 16:01:08 2025 GMT
Not After : Jul 27 16:01:08 2025 GMT
Subject: CN=82c7b8f55827f69e52cef7f9bddde5ea69309726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:c9:d2:4e:82:b6:e8:63:c0:3e:cd:f0:d3:
48:b1:bd:99:96:37:66:ed:e1:2c:92:c9:51:47:ba:
63:0e:ac:b5:69:e5:ea:80:1a:a7:ff:cb:6a:31:3c:
ec:be:b4:3e:d6:b6:d2:c2:8a:83:c4:05:c0:b1:91:
cb:8e:d4:a5:4e:d7:c6:2a:8e:01:21:99:e2:64:1f:
37:63:2d:b8:05:b0:3e:c9:25:ec:37:eb:af:99:84:
2d:01:e9:21:8b:fa:5a:09:47:7a:d9:ce:74:4a:a7:
05:71:98:61:e8:5a:37:3b:c4:72:c0:b2:94:24:53:
b2:39:41:98:42:48:7a:86:38:f3:90:2e:fa:39:0a:
a7:4e:c5:07:c4:6c:3f:c0:04:21:64:15:23:8a:24:
02:29:41:e1:a4:4d:c5:11:3e:91:2c:55:e7:7f:3d:
53:93:e0:d8:fc:0c:0a:e8:76:84:0f:e4:cf:d2:07:
bb:c2:90:f3:69:b8:94:c9:42:90:57:b0:66:0d:33:
69:06:32:1f:67:7e:1b:d0:65:a9:98:06:98:50:cd:
24:b2:a4:47:d0:16:7d:34:8b:2c:8b:e2:6c:09:6b:
9c:9b:32:fc:2a:99:30:ce:a8:7c:e3:74:34:0c:31:
bc:ad:78:6b:a8:b2:d3:eb:fb:d9:5d:c7:47:5d:5e:
b4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C7:B8:F5:58:27:F6:9E:52:CE:F7:F9:BD:DD:E5:EA:69:30:97:26
X509v3 Authority Key Identifier:
keyid:52:F2:5B:D0:5A:C1:48:85:1F:A2:A4:63:AD:0D:E0:70:81:84:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9b:58:0f:41:0f:24:a5:18:82:8a:75:88:15:df:b3:9f:2c:
88:60:27:89:0d:ed:08:23:67:8a:2a:e8:39:20:c0:f1:fd:a1:
fc:4c:ed:70:e4:09:54:00:13:0d:c3:6f:b3:b7:10:6e:aa:f5:
b2:01:c2:00:87:cc:8d:f1:00:8d:ee:45:ec:5b:09:5f:a0:05:
b8:da:a7:4c:97:7f:a9:19:da:83:29:d1:79:14:97:23:d4:8f:
32:88:9b:12:13:8c:d6:4e:5f:84:01:a2:22:fe:95:81:0b:6e:
a4:9b:c8:f8:d5:14:26:74:39:5a:d2:4f:0f:c0:9c:f7:a9:a2:
e6:e6:1f:f8:ea:35:01:86:07:fb:18:d6:a9:82:a1:a5:3c:6e:
48:b9:be:ad:13:f5:8a:38:a2:fa:c2:41:52:b4:2d:59:49:34:
72:ef:1c:8e:a1:a5:79:d2:5e:57:7a:67:3b:97:01:e5:a3:68:
c0:b5:f2:52:f9:02:62:a2:46:17:7e:f7:20:c2:75:99:a7:6f:
40:06:5e:5d:62:7d:4b:e8:b4:9d:e2:46:b0:3d:35:b8:6b:e8:
7d:b4:b7:31:1f:cf:7e:de:7d:e1:3d:3b:65:c3:4f:0e:83:d2:
9b:b1:a0:04:99:09:8e:17:04:f9:e0:17:07:15:f8:dd:7a:31:
ba:02:4c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd3eo/vFBOJp9VM7emqrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZjI1YmQwNWFjMTQ4ODUxZmEyYTQ2M2FkMGRlMDcwODE4
NDA0ZjcwHhcNMjUwNzI2MTYwMTA4WhcNMjUwNzI3MTYwMTA4WjAzMTEwLwYDVQQD
Eyg4MmM3YjhmNTU4MjdmNjllNTJjZWY3ZjliZGRkZTVlYTY5MzA5NzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndLJ0k6CtuhjwD7N8NNIsb2Zljdm
7eEskslRR7pjDqy1aeXqgBqn/8tqMTzsvrQ+1rbSwoqDxAXAsZHLjtSlTtfGKo4B
IZniZB83Yy24BbA+ySXsN+uvmYQtAekhi/paCUd62c50SqcFcZhh6Fo3O8RywLKU
JFOyOUGYQkh6hjjzkC76OQqnTsUHxGw/wAQhZBUjiiQCKUHhpE3FET6RLFXnfz1T
k+DY/AwK6HaED+TP0ge7wpDzabiUyUKQV7BmDTNpBjIfZ34b0GWpmAaYUM0ksqRH
0BZ9NIssi+JsCWucmzL8Kpkwzqh843Q0DDG8rXhrqLLT6/vZXcdHXV60vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILHuPVYJ/aeUs73+b3d5eppMJcmMB8GA1UdIwQY
MBaAFFLyW9BawUiFH6KkY60N4HCBhAT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXZKYjBGckJTSVVmb3FSanJRM2djSUdFQlBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xMmQ0ZjItNTAyOC00NGZiLWJkZjMt
YzgyMjE1NWFjZmE2LzEvVXZKYjBGckJTSVVmb3FSanJRM2djSUdFQlBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xMmQ0ZjItNTAyOC00NGZiLWJkZjMtYzgyMjE1NWFjZmE2
LzEvVXZKYjBGckJTSVVmb3FSanJRM2djSUdFQlBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5tYD0EP
JKUYgop1iBXfs58siGAniQ3tCCNniiroOSDA8f2h/EztcOQJVAATDcNvs7cQbqr1
sgHCAIfMjfEAje5F7FsJX6AFuNqnTJd/qRnagynReRSXI9SPMoibEhOM1k5fhAGi
Iv6VgQtupJvI+NUUJnQ5WtJPD8Cc96mi5uYf+Oo1AYYH+xjWqYKhpTxuSLm+rRP1
ijii+sJBUrQtWUk0cu8cjqGledJeV3pnO5cB5aNowLXyUvkCYqJGF373IMJ1madv
QAZeXWJ9S+i0neJGsD01uGvofbS3MR/Pft594T07ZcNPDoPSm7GgBJkJjhcE+eAX
BxX43XoxugJMbQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:24:49 2025 by rpki-client