Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
File: uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft (raw, json)
Hash identifier: wZMtlv6pu5r6ZN4JbYyGeeSU1mjqQS6BTqn5bp+MAbM=
Subject key identifier: D9:9F:F6:82:73:C1:DC:6F:3F:F1:17:46:1F:14:75:9E:96:29:15:5F
Authority key identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
Certificate issuer: /CN=b90907cee4fac50f3753622ad21a989ae7741c47
Certificate serial: 019847E508B081595E3DC8A2B7CB7FB70FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
Manifest number: 1302
Signing time: Sat 26 Jul 2025 18:00:48 +0000
Manifest this update: Sat 26 Jul 2025 18:00:48 +0000
Manifest next update: Sun 27 Jul 2025 18:00:48 +0000
Files and hashes: 1: uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl (hash: oHGEvgd69TKWLJZybboWmyIoZ7F5jGFnWHBr4JuFSTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:08:b0:81:59:5e:3d:c8:a2:b7:cb:7f:b7:0f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90907cee4fac50f3753622ad21a989ae7741c47
Validity
Not Before: Jul 26 18:00:48 2025 GMT
Not After : Jul 27 18:00:48 2025 GMT
Subject: CN=d99ff68273c1dc6f3ff117461f14759e9629155f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:98:ed:67:35:46:c3:f6:29:7b:97:03:18:
57:c9:e7:c6:fd:83:b0:c0:03:13:07:af:ff:8e:b5:
aa:00:b9:ee:8e:53:cc:97:a1:aa:bb:0a:3b:54:7a:
bd:dd:bc:93:63:b8:d1:10:dc:3f:27:54:3f:b4:78:
bf:9c:55:29:03:ed:e0:58:1b:2f:e1:08:50:0a:58:
1a:e5:d0:63:8b:af:f6:4e:db:6c:2b:8f:cb:ee:c7:
4e:d1:be:8c:4a:68:ab:26:ea:29:52:82:5b:14:81:
96:97:34:96:ac:48:06:42:9c:41:ce:70:9b:18:ac:
5c:10:64:d6:f9:f2:fd:2a:c7:82:21:b3:d3:c4:c0:
06:f1:95:1a:ea:4a:31:f2:3b:c5:92:38:98:f1:b4:
24:46:59:33:e4:80:d6:05:e5:0d:90:cf:c9:53:b5:
f3:5d:7f:b1:3d:19:98:f8:53:6d:48:b4:a1:15:c3:
aa:76:4c:4e:a7:5e:03:ac:f6:07:2f:78:57:ed:de:
37:92:45:b8:54:93:36:8e:1c:49:18:f7:ee:e3:5b:
83:c1:1d:7e:82:e9:34:34:2c:40:4d:74:22:38:37:
9e:b0:e7:e9:41:d4:5d:8f:43:f4:e0:e1:9d:c0:a8:
60:1c:0b:4b:ee:a8:47:65:f0:ab:7b:61:78:74:73:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9F:F6:82:73:C1:DC:6F:3F:F1:17:46:1F:14:75:9E:96:29:15:5F
X509v3 Authority Key Identifier:
keyid:B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d4:76:e4:d2:05:6d:2e:49:9d:6e:ad:db:aa:95:bb:3a:f4:
2f:c0:3b:f9:51:f0:c3:f3:48:70:c7:f5:cf:53:11:8c:bc:01:
db:9a:64:d5:4b:37:b7:b4:fe:01:bc:49:a2:8a:cf:96:a9:9e:
d9:6a:21:2b:9a:7c:73:b2:90:99:5a:7f:76:76:26:d7:af:3a:
86:08:92:0f:a7:4e:03:5d:bc:35:c3:d3:64:25:e8:d4:60:99:
5f:49:f2:82:cc:d0:61:32:98:b3:18:fb:9d:50:16:ec:fb:f6:
c7:e3:24:6e:ff:1c:9a:59:69:31:98:17:80:59:00:7c:17:08:
c4:b7:ba:65:dc:68:82:0f:d9:fd:c1:a5:c8:b2:7a:82:c7:82:
d2:be:d8:88:3e:a8:63:29:78:30:ac:44:0c:5b:d5:30:ca:5f:
32:e5:dc:9b:35:1c:12:1a:6e:7c:dc:40:38:40:a7:e3:40:86:
45:f2:ab:d5:9d:2a:43:1c:b2:cf:ef:24:c5:b1:34:1c:58:93:
4b:2a:03:a4:87:e4:b6:47:cf:22:92:48:fe:d1:ef:66:87:89:
f1:e6:a5:6a:24:9c:20:af:a1:40:06:93:d5:f9:76:00:6d:1c:
0c:47:21:7f:8e:7a:1f:77:66:f4:ef:6d:26:d5:16:1e:e8:dc:
6a:3d:ee:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5QiwgVlePciit8t/tw/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MDkwN2NlZTRmYWM1MGYzNzUzNjIyYWQyMWE5ODlhZTc3
NDFjNDcwHhcNMjUwNzI2MTgwMDQ4WhcNMjUwNzI3MTgwMDQ4WjAzMTEwLwYDVQQD
EyhkOTlmZjY4MjczYzFkYzZmM2ZmMTE3NDYxZjE0NzU5ZTk2MjkxNTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVaY7Wc1RsP2KXuXAxhXyefG/YOw
wAMTB6//jrWqALnujlPMl6Gquwo7VHq93byTY7jRENw/J1Q/tHi/nFUpA+3gWBsv
4QhQClga5dBji6/2TttsK4/L7sdO0b6MSmirJuopUoJbFIGWlzSWrEgGQpxBznCb
GKxcEGTW+fL9KseCIbPTxMAG8ZUa6kox8jvFkjiY8bQkRlkz5IDWBeUNkM/JU7Xz
XX+xPRmY+FNtSLShFcOqdkxOp14DrPYHL3hX7d43kkW4VJM2jhxJGPfu41uDwR1+
guk0NCxATXQiODeesOfpQdRdj0P04OGdwKhgHAtL7qhHZfCre2F4dHM7ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmf9oJzwdxvP/EXRh8UdZ6WKRVfMB8GA1UdIwQY
MBaAFLkJB87k+sUPN1NiKtIamJrndBxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zYzE2ZDItZDI5MC00N2ZiLTkxMWQt
NTk5NmNhZTlkMTE1LzEvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zYzE2ZDItZDI5MC00N2ZiLTkxMWQtNTk5NmNhZTlkMTE1
LzEvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdR25NIF
bS5JnW6t26qVuzr0L8A7+VHww/NIcMf1z1MRjLwB25pk1Us3t7T+AbxJoorPlqme
2WohK5p8c7KQmVp/dnYm1686hgiSD6dOA128NcPTZCXo1GCZX0nygszQYTKYsxj7
nVAW7Pv2x+Mkbv8cmllpMZgXgFkAfBcIxLe6Zdxogg/Z/cGlyLJ6gseC0r7YiD6o
Yyl4MKxEDFvVMMpfMuXcmzUcEhpufNxAOECn40CGRfKr1Z0qQxyyz+8kxbE0HFiT
SyoDpIfktkfPIpJI/tHvZoeJ8ealaiScIK+hQAaT1fl2AG0cDEchf456H3dm9O9t
JtUWHujcaj3uIg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:18:33 2025 by rpki-client