Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
File: UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json)
Hash identifier: CGE+DXOpquX5xN7vL6G1eQzmNgTwE8Yq5/fj+vlhAQk=
Subject key identifier: 63:66:32:89:CB:4F:D7:6B:93:19:A8:14:83:6A:B8:A0:71:35:3E:8F
Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
Certificate issuer: /CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Certificate serial: 019848C03764AD60AEAEE49BF356E043F238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
Manifest number: 1564
Signing time: Sat 26 Jul 2025 22:00:13 +0000
Manifest this update: Sat 26 Jul 2025 22:00:13 +0000
Manifest next update: Sun 27 Jul 2025 22:00:13 +0000
Files and hashes: 1: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: 8lAUS2MiMcZS5PEH8jIZTbiRe7SU0+mwZfTW3B+3m/E=)
2: g6kbe_eW2XgI6YD7cyTnjFDylR0.roa (hash: VTjbXO0Nq4toGU1LGHuG65b5vXVgfgU9Ntfeo8aohYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:37:64:ad:60:ae:ae:e4:9b:f3:56:e0:43:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Validity
Not Before: Jul 26 22:00:13 2025 GMT
Not After : Jul 27 22:00:13 2025 GMT
Subject: CN=63663289cb4fd76b9319a814836ab8a071353e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:7d:c3:d9:8e:61:9b:73:bb:f1:e3:b1:69:
7c:f9:23:e4:6d:d6:0d:bf:67:94:94:47:db:ca:2f:
c0:f8:45:83:7c:52:c5:75:ea:c1:a5:d2:e9:a7:84:
79:ec:34:3e:6e:3e:26:56:ca:d5:7c:76:2c:6e:e0:
3a:63:86:5f:8e:6c:ac:c5:50:1f:21:3f:43:53:a9:
6c:4e:b9:1c:c8:70:ae:9f:4e:ad:56:fd:55:18:3b:
2b:d6:a6:cc:ce:77:35:66:2f:21:05:3b:21:b5:39:
4d:e4:e2:75:10:ac:87:7e:8c:29:22:63:42:d0:99:
73:85:0a:a6:da:7d:6c:8a:c3:7d:37:6d:80:15:79:
fb:77:b7:68:df:f2:90:d1:3c:04:4b:29:14:02:ad:
2b:83:fa:88:10:e3:4c:cd:f1:8a:82:26:6d:8f:55:
82:63:b9:ad:e7:25:43:e3:fc:f3:99:5e:37:01:82:
66:3c:f2:35:e9:58:cf:11:40:c0:81:0f:d2:db:e8:
4a:4c:cb:a8:9a:d7:8d:7d:da:f8:bf:f2:e9:fb:75:
cf:9f:f8:c3:9d:1d:10:67:08:d0:42:d9:ef:3e:6b:
b8:50:2d:82:ea:7c:a4:85:37:7d:aa:73:ad:8c:98:
4c:81:45:ca:06:f0:92:58:19:4d:16:cc:b4:f9:fc:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:32:89:CB:4F:D7:6B:93:19:A8:14:83:6A:B8:A0:71:35:3E:8F
X509v3 Authority Key Identifier:
keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:54:36:47:1f:57:99:76:fc:1d:31:6a:52:d6:ea:58:c7:f6:
93:43:64:6c:5c:6e:61:0e:2f:ab:77:88:bf:64:04:d0:c8:dd:
23:b4:77:8e:44:65:09:51:b9:26:3c:fe:dd:8e:3a:1e:a3:4a:
a9:74:f8:a8:c1:2a:9c:2e:50:94:79:05:7d:98:c8:01:34:6c:
61:e7:4e:5f:32:24:78:6e:7c:d0:b4:88:a2:24:92:f6:96:e5:
17:5d:83:b9:0b:6d:f4:b9:d2:73:27:99:7f:05:35:25:12:33:
f2:27:30:6b:9b:86:66:f4:2c:71:6b:2c:73:4c:ce:17:81:3b:
f9:46:e8:87:7d:25:65:f6:11:2a:96:53:92:98:97:38:07:b5:
24:1e:36:29:55:bb:b4:4b:57:ba:72:99:4c:a3:2a:29:3b:87:
bc:d3:75:b3:c8:21:e5:45:f1:a7:94:b4:f6:33:01:e4:c0:18:
0e:5d:70:72:47:cc:ab:2f:fe:d1:12:16:48:bd:65:84:bc:8b:
b8:ae:2d:c6:18:cb:2e:48:27:1b:89:d3:37:38:6e:1a:00:72:
26:d3:3c:32:70:5d:8e:8f:39:2d:34:91:fc:3e:19:c3:17:c0:
ab:22:c7:ce:2b:e1:d6:64:13:2e:17:03:ac:e7:c3:20:c8:ff:
34:c1:7c:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwDdkrWCuruSb81bgQ/I4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNzMzODZmMzY3MjgxODRhYTAwM2IxZDk2MzlmZTM5YzRh
MTJhYTkwHhcNMjUwNzI2MjIwMDEzWhcNMjUwNzI3MjIwMDEzWjAzMTEwLwYDVQQD
Eyg2MzY2MzI4OWNiNGZkNzZiOTMxOWE4MTQ4MzZhYjhhMDcxMzUzZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn19w9mOYZtzu/HjsWl8+SPkbdYN
v2eUlEfbyi/A+EWDfFLFderBpdLpp4R57DQ+bj4mVsrVfHYsbuA6Y4ZfjmysxVAf
IT9DU6lsTrkcyHCun06tVv1VGDsr1qbMznc1Zi8hBTshtTlN5OJ1EKyHfowpImNC
0JlzhQqm2n1sisN9N22AFXn7d7do3/KQ0TwESykUAq0rg/qIEONMzfGKgiZtj1WC
Y7mt5yVD4/zzmV43AYJmPPI16VjPEUDAgQ/S2+hKTMuomteNfdr4v/Lp+3XPn/jD
nR0QZwjQQtnvPmu4UC2C6nykhTd9qnOtjJhMgUXKBvCSWBlNFsy0+fzZQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNmMonLT9drkxmoFINquKBxNT6PMB8GA1UdIwQY
MBaAFFFzOG82coGEqgA7HZY5/jnEoSqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xN2MwMmItZDczNS00MWNhLTgyMjkt
MGNkZGY3OWVlOTBmLzEvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xN2MwMmItZDczNS00MWNhLTgyMjktMGNkZGY3OWVlOTBm
LzEvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1Q2Rx9X
mXb8HTFqUtbqWMf2k0NkbFxuYQ4vq3eIv2QE0MjdI7R3jkRlCVG5Jjz+3Y46HqNK
qXT4qMEqnC5QlHkFfZjIATRsYedOXzIkeG580LSIoiSS9pblF12DuQtt9LnScyeZ
fwU1JRIz8icwa5uGZvQscWssc0zOF4E7+Uboh30lZfYRKpZTkpiXOAe1JB42KVW7
tEtXunKZTKMqKTuHvNN1s8gh5UXxp5S09jMB5MAYDl1wckfMqy/+0RIWSL1lhLyL
uK4txhjLLkgnG4nTNzhuGgByJtM8MnBdjo85LTSR/D4ZwxfAqyLHzivh1mQTLhcD
rOfDIMj/NMF81w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:06:19 2025 by rpki-client