Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
File: UqWb8EMIAwY1n1opSR9UWwcFHAU.mft (raw, json)
Hash identifier: WsDxxfomyhn83Yelsyj5fKG6kXSrHipvs4Mz0hQemM0=
Subject key identifier: 13:69:DF:85:67:6B:C0:81:F0:45:6C:69:85:93:C1:8E:8A:E7:BA:52
Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
Certificate issuer: /CN=52a59bf043080306359f5a29491f545b07051c05
Certificate serial: 019845887A20466FE652D6FBD4D1AD8A1CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 07:00:28 +0000
Manifest this update: Sat 26 Jul 2025 07:00:28 +0000
Manifest next update: Sun 27 Jul 2025 07:00:28 +0000
Files and hashes: 1: GvWU7eZamVvazZtWUoco1OLF2MQ.roa (hash: 9kEJ/d7rwclzCBcSORu1ByXHG+IDCNPxceZqglg+1Hw=)
2: UqWb8EMIAwY1n1opSR9UWwcFHAU.crl (hash: Roq5aKY7cKkca5aWHdeEb47kItH4We+qKBsyriu4YEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:7a:20:46:6f:e6:52:d6:fb:d4:d1:ad:8a:1c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a59bf043080306359f5a29491f545b07051c05
Validity
Not Before: Jul 26 07:00:28 2025 GMT
Not After : Jul 27 07:00:28 2025 GMT
Subject: CN=1369df85676bc081f0456c698593c18e8ae7ba52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:71:ee:e7:0b:b1:a6:69:a1:17:b2:75:28:
db:92:6b:cf:77:a6:47:f8:49:3e:dc:18:69:35:8d:
d9:bd:e7:db:70:25:c8:24:b2:b9:1f:46:de:84:cd:
3d:7b:c9:ac:04:91:b7:39:17:b9:ff:2f:31:0d:7e:
36:81:f8:6f:64:82:db:f6:fd:fa:1d:b1:72:ab:dc:
f0:a8:0e:3b:32:98:ab:ad:d9:ad:07:25:d3:28:5a:
eb:a5:12:49:da:a4:54:03:42:2f:c6:15:4e:bd:e0:
26:cf:c0:bd:30:0f:82:d8:31:9e:c3:be:7d:60:22:
8f:32:e4:d5:a9:92:49:59:c4:4f:4a:57:72:d7:f0:
6d:c4:7c:4a:22:ea:dd:09:c8:ae:8f:61:53:26:df:
bf:4f:de:da:7c:0b:09:f6:18:2d:be:12:83:19:c5:
d6:f8:3e:4c:8f:d7:e1:69:b1:a2:35:f2:6b:67:aa:
b6:00:04:79:96:4a:0e:58:45:4f:79:94:d8:12:9b:
15:52:67:5f:84:ef:44:80:b0:57:70:7f:9f:2c:2b:
e9:97:bd:8b:02:40:40:f1:da:fc:4b:dc:44:52:43:
5d:20:44:ec:7e:c9:f9:9b:a5:9a:ad:19:e3:77:ea:
ef:83:aa:90:b0:89:43:8d:44:83:e6:68:b7:50:2b:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:69:DF:85:67:6B:C0:81:F0:45:6C:69:85:93:C1:8E:8A:E7:BA:52
X509v3 Authority Key Identifier:
keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:07:e1:b1:90:fe:65:67:fc:18:48:42:d6:e0:49:49:ed:8e:
4a:f1:a4:55:10:ff:63:f8:f2:07:09:70:56:46:7e:00:3c:87:
9f:58:4a:68:17:82:15:45:c1:8d:8b:89:3e:e4:c4:08:dc:c1:
14:17:12:3b:32:a8:4e:62:5a:0d:56:9f:ba:2f:ec:94:f4:27:
78:4b:44:e9:0e:7f:a3:11:c6:8f:70:8a:64:b0:4d:ce:d1:02:
03:9f:f7:3e:e3:d7:30:7a:bb:72:aa:8b:a0:63:fb:5f:8f:aa:
10:84:4e:d1:c4:72:90:a9:bd:ef:96:d1:c5:a7:51:c7:f0:eb:
b9:b0:5c:1f:cd:58:64:30:7b:a2:be:10:11:24:7c:69:d9:e9:
ca:4e:50:8f:28:06:bf:5b:6a:3f:9b:0a:8b:b8:89:3c:18:f0:
1f:cd:f3:1a:10:b1:ca:4c:30:e6:82:e4:91:45:5b:99:58:44:
44:1f:d9:dc:ed:15:ed:0a:a2:27:bd:ae:1c:43:77:50:03:64:
7c:6f:44:16:e5:64:0d:27:c1:fe:48:a5:f5:2a:63:96:5b:26:
5c:76:d9:eb:42:16:fa:9e:69:82:73:a8:50:06:2d:f6:17:6b:
b9:19:a6:8a:c8:07:22:df:ae:a5:c5:10:84:4a:69:77:bf:6f:
50:b9:27:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiHogRm/mUtb71NGtihzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTU5YmYwNDMwODAzMDYzNTlmNWEyOTQ5MWY1NDViMDcw
NTFjMDUwHhcNMjUwNzI2MDcwMDI4WhcNMjUwNzI3MDcwMDI4WjAzMTEwLwYDVQQD
EygxMzY5ZGY4NTY3NmJjMDgxZjA0NTZjNjk4NTkzYzE4ZThhZTdiYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGRx7ucLsaZpoReydSjbkmvPd6ZH
+Ek+3BhpNY3ZvefbcCXIJLK5H0behM09e8msBJG3ORe5/y8xDX42gfhvZILb9v36
HbFyq9zwqA47MpirrdmtByXTKFrrpRJJ2qRUA0IvxhVOveAmz8C9MA+C2DGew759
YCKPMuTVqZJJWcRPSldy1/BtxHxKIurdCciuj2FTJt+/T97afAsJ9hgtvhKDGcXW
+D5Mj9fhabGiNfJrZ6q2AAR5lkoOWEVPeZTYEpsVUmdfhO9EgLBXcH+fLCvpl72L
AkBA8dr8S9xEUkNdIETsfsn5m6WarRnjd+rvg6qQsIlDjUSD5mi3UCvMvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNp34Vna8CB8EVsaYWTwY6K57pSMB8GA1UdIwQY
MBaAFFKlm/BDCAMGNZ9aKUkfVFsHBRwFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82ZDcyOWUtZTE2Yi00MWE5LTkwMTIt
MDE0YzcwOTc3ZDQ5LzEvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82ZDcyOWUtZTE2Yi00MWE5LTkwMTItMDE0YzcwOTc3ZDQ5
LzEvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgfhsZD+
ZWf8GEhC1uBJSe2OSvGkVRD/Y/jyBwlwVkZ+ADyHn1hKaBeCFUXBjYuJPuTECNzB
FBcSOzKoTmJaDVafui/slPQneEtE6Q5/oxHGj3CKZLBNztECA5/3PuPXMHq7cqqL
oGP7X4+qEIRO0cRykKm975bRxadRx/DrubBcH81YZDB7or4QESR8adnpyk5QjygG
v1tqP5sKi7iJPBjwH83zGhCxykww5oLkkUVbmVhERB/Z3O0V7QqiJ72uHEN3UANk
fG9EFuVkDSfB/kil9SpjllsmXHbZ60IW+p5pgnOoUAYt9hdruRmmisgHIt+upcUQ
hEppd79vULkn1w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:48:14 2025 by rpki-client