Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: ap54A52V5+W6nh9+zm4nvLJrjp7ToA3UFSs9+gdxBeA=
Subject key identifier: 0B:90:1A:A2:B2:21:D9:E1:45:00:E8:38:F1:8F:52:8E:D9:72:60:D2
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 01983EAAC172663F776B2E6500023497CD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 15FB
Signing time: Thu 24 Jul 2025 23:00:34 +0000
Manifest this update: Thu 24 Jul 2025 23:00:34 +0000
Manifest next update: Fri 25 Jul 2025 23:00:34 +0000
Files and hashes: 1: 2hZweGDLaTOG9__dBEdUkTtfsSw.roa (hash: x2mvxEnLHZTwd7sK9WWW9RrPHq1tkRpvzUBh9hY6j6E=)
2: YKs5bmFUVAk0U3c65JyA-yx_ru8.roa (hash: /iSRIEZxHR2KYrSfKlv13GZuPtZZ9il7XqwpwVFRwXE=)
3: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: 85GrgMj2Zqd6/Jz0ItBtiYVc1pNFXBiIaxSsJtioO3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:aa:c1:72:66:3f:77:6b:2e:65:00:02:34:97:cd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Jul 24 23:00:34 2025 GMT
Not After : Jul 25 23:00:34 2025 GMT
Subject: CN=0b901aa2b221d9e14500e838f18f528ed97260d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:50:fa:5e:d9:c0:9b:89:ea:c4:38:e8:b2:
2e:ad:4e:08:d5:24:17:31:53:78:f8:fe:f2:79:9f:
6d:9e:75:17:3f:77:6e:2d:75:c4:95:59:91:47:a8:
e5:f0:5c:b9:0c:4c:81:73:2c:ab:aa:d1:6b:08:3a:
cc:e9:38:03:3d:20:67:dc:0c:0a:c2:ee:02:85:fc:
bd:01:37:72:53:d8:f5:29:ca:a0:36:52:50:a8:4a:
8a:ce:1a:0f:7c:b2:4a:c5:63:88:7f:85:bb:66:fd:
c9:78:27:90:07:e2:9a:6e:83:21:3f:9e:20:de:f8:
31:95:19:44:84:da:65:2c:a5:e7:81:b9:e3:b1:49:
6d:43:f0:24:fb:a6:20:60:82:43:15:92:a0:62:4d:
a3:ae:cc:ae:b0:c5:78:8c:e0:47:84:e9:6f:d0:d1:
05:ee:1d:c0:fa:85:d5:c8:c8:65:7e:76:41:4b:fc:
b8:21:7a:b1:ce:44:7e:50:bd:40:fb:cd:58:3b:63:
f6:6a:ef:64:58:e2:4c:c9:75:49:7d:ef:e0:00:20:
b1:95:49:1c:46:22:4b:ec:27:7e:98:75:3c:11:bf:
91:1d:c2:51:ca:4c:ec:85:ff:2d:d5:72:31:01:0e:
51:08:d7:35:bc:94:19:ef:56:d2:44:c0:bc:eb:49:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:90:1A:A2:B2:21:D9:E1:45:00:E8:38:F1:8F:52:8E:D9:72:60:D2
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ff:24:35:53:c2:25:05:9c:93:92:98:9b:43:49:71:39:ed:
8f:fd:74:cb:14:a9:c1:ee:5f:37:e3:57:e8:e0:9b:a1:e7:cf:
8f:ef:8c:33:d0:03:8f:35:5c:c7:a4:b5:1f:78:3d:79:d0:a9:
b5:16:7c:26:ed:8f:c7:a0:c4:dd:25:b7:91:23:92:63:9b:b3:
20:f4:6f:1c:58:fc:5e:a3:e4:1d:c8:fa:0a:10:ff:d6:cd:92:
a2:91:d2:3c:55:2c:40:f0:cf:b7:34:34:7f:72:5c:41:a9:a6:
f7:38:6f:c7:ee:b9:d9:ac:2b:92:09:8f:09:8a:a8:cb:72:aa:
c1:d5:bd:36:d7:fc:ad:a3:55:cd:55:d9:ea:ab:dc:8c:f6:39:
4d:60:00:4b:7e:9f:7b:5b:c6:48:48:aa:da:92:a2:f9:3d:58:
fa:82:e1:68:f3:21:81:06:58:34:08:c3:23:c5:fc:0d:30:51:
13:93:e1:88:bf:c6:1f:65:8b:00:5f:cb:ad:4d:c0:c0:28:8f:
2a:7c:95:b9:63:af:9d:0f:51:c0:9a:51:d2:e0:44:60:68:2b:
31:27:21:3e:df:5f:1a:38:b9:c6:f4:f1:3a:48:74:92:0d:d7:
11:ce:49:aa:4c:af:38:1b:73:b5:0c:de:5f:59:6e:78:8c:ae:
75:45:a1:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+qsFyZj93ay5lAAI0l81qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjllZTY2MTY0ZDNjYjQxZGJkMmRmNTQxNzgxN2MzMmY0
Y2VhMDUwHhcNMjUwNzI0MjMwMDM0WhcNMjUwNzI1MjMwMDM0WjAzMTEwLwYDVQQD
EygwYjkwMWFhMmIyMjFkOWUxNDUwMGU4MzhmMThmNTI4ZWQ5NzI2MGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HVQ+l7ZwJuJ6sQ46LIurU4I1SQX
MVN4+P7yeZ9tnnUXP3duLXXElVmRR6jl8Fy5DEyBcyyrqtFrCDrM6TgDPSBn3AwK
wu4Chfy9ATdyU9j1KcqgNlJQqEqKzhoPfLJKxWOIf4W7Zv3JeCeQB+KaboMhP54g
3vgxlRlEhNplLKXngbnjsUltQ/Ak+6YgYIJDFZKgYk2jrsyusMV4jOBHhOlv0NEF
7h3A+oXVyMhlfnZBS/y4IXqxzkR+UL1A+81YO2P2au9kWOJMyXVJfe/gACCxlUkc
RiJL7Cd+mHU8Eb+RHcJRykzshf8t1XIxAQ5RCNc1vJQZ71bSRMC860mVcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuQGqKyIdnhRQDoOPGPUo7ZcmDSMB8GA1UdIwQY
MBaAFLhp7mYWTTy0Hb0t9UF4F8MvTOoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODkt
Y2QxZmE0ODQ0MTFiLzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODktY2QxZmE0ODQ0MTFi
LzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmf8kNVPC
JQWck5KYm0NJcTntj/10yxSpwe5fN+NX6OCboefPj++MM9ADjzVcx6S1H3g9edCp
tRZ8Ju2Px6DE3SW3kSOSY5uzIPRvHFj8XqPkHcj6ChD/1s2SopHSPFUsQPDPtzQ0
f3JcQamm9zhvx+652awrkgmPCYqoy3KqwdW9Ntf8raNVzVXZ6qvcjPY5TWAAS36f
e1vGSEiq2pKi+T1Y+oLhaPMhgQZYNAjDI8X8DTBRE5PhiL/GH2WLAF/LrU3AwCiP
KnyVuWOvnQ9RwJpR0uBEYGgrMSchPt9fGji5xvTxOkh0kg3XEc5JqkyvOBtztQze
X1lueIyudUWhzQ==
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:35:00 2025 by rpki-client