Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
File: UoG4QfEnaUidX9NDtyukT5DJbzI.mft (raw, json)
Hash identifier: fUu7kRFMQWSMX9hyGcUXzDCYkS2o4S7Fn6/cn4xIOqs=
Subject key identifier: 5E:7A:98:41:3E:7C:AB:ED:7F:7C:03:29:21:93:F7:AE:1E:83:F5:0D
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Certificate issuer: /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial: 01984AE5DC324EF4E390241FE1423F62305B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 08:00:34 +0000
Manifest this update: Sun 27 Jul 2025 08:00:34 +0000
Manifest next update: Mon 28 Jul 2025 08:00:34 +0000
Files and hashes: 1: 5BpJC5kfYpwnpQHv48KWy-JUppU.roa (hash: CrCPGt1FnNwvHaRxzi66Coran28PbWoZQZiC83vw/u0=)
2: UoG4QfEnaUidX9NDtyukT5DJbzI.crl (hash: KA8SYvwu7kGimLFYoIIoYBh036NNkvImhZnGYeNG8+M=)
3: fGMhxat_aWV3hx3-ZEsjMXX_eos.roa (hash: okji5lN0mnnP4DUHwDGGfA4mpjSl7H2/JOP5GvkdRJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:dc:32:4e:f4:e3:90:24:1f:e1:42:3f:62:30:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
Validity
Not Before: Jul 27 08:00:34 2025 GMT
Not After : Jul 28 08:00:34 2025 GMT
Subject: CN=5e7a98413e7cabed7f7c03292193f7ae1e83f50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:9b:5d:81:71:b7:03:0f:58:34:07:67:cc:
3c:86:0e:56:6a:a0:be:42:42:47:33:a2:d3:d9:25:
ea:c6:8a:4f:df:76:b4:4f:7b:7a:47:31:94:8b:b3:
fc:f4:58:91:db:a7:26:3d:94:94:c2:81:b0:d3:1a:
17:f2:3c:3a:34:ce:3f:56:39:49:fb:75:c4:d3:a1:
87:52:b0:53:c6:1a:01:af:f0:ea:63:81:d7:49:39:
db:94:f4:9b:b4:10:6a:3c:a9:04:58:70:d4:e6:22:
e2:0d:a3:00:e3:a0:75:30:c1:f0:b4:50:63:9f:d4:
44:fd:3b:99:20:0d:eb:8f:f8:00:ec:fc:ac:66:64:
a6:a4:01:73:49:e6:20:e2:f9:de:b8:93:ce:86:98:
6c:ab:01:22:bc:cd:7f:f9:23:15:ff:a8:9d:ab:67:
1c:93:d4:04:2b:c9:ed:f0:d6:f7:1c:87:21:90:1b:
88:80:a7:07:53:87:aa:69:5c:db:74:61:4d:63:0f:
fe:f4:93:3a:93:5b:80:23:10:5b:eb:a3:41:07:b7:
03:9e:48:38:0c:8a:f4:1c:b1:f5:c7:c0:03:32:43:
ed:9c:10:7a:93:9f:b2:33:d2:57:6e:f7:4b:13:da:
51:7b:d3:58:0c:c3:cc:8d:e5:1f:58:49:44:a7:b8:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7A:98:41:3E:7C:AB:ED:7F:7C:03:29:21:93:F7:AE:1E:83:F5:0D
X509v3 Authority Key Identifier:
keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:37:e4:8f:39:4a:ff:b4:54:05:ae:d2:a1:19:bf:00:f0:4a:
d9:c6:9b:10:32:57:98:ab:13:d2:06:14:2e:a1:62:1b:67:11:
64:43:c8:27:a7:b4:e6:00:f6:b4:05:71:8b:94:08:a2:6e:42:
66:27:04:23:9a:30:06:48:00:f3:bf:9d:4b:4f:e9:97:fc:18:
bd:0b:ba:9a:e7:31:c6:89:c1:36:f0:86:13:bf:19:16:f0:c0:
db:c7:f5:2c:5d:bd:25:88:2c:4c:84:d3:bd:95:c2:f4:02:fd:
81:a2:63:a7:77:03:5b:93:83:67:5d:06:eb:73:3c:4c:ec:89:
15:7e:27:f7:bd:5e:71:98:f8:52:f0:e9:03:ab:09:80:14:e9:
d2:36:dd:bb:61:f9:40:6c:28:28:82:36:44:7c:33:86:58:da:
20:3d:41:80:79:6b:3b:f7:f7:41:4b:92:8a:6f:3a:b7:9c:f8:
f9:6a:6c:9c:be:44:90:99:06:83:88:97:ad:49:dd:f8:4a:0c:
6f:03:3c:12:29:5d:cf:4a:02:3a:02:f5:f9:c1:41:22:7c:76:
8d:2b:f3:ea:1b:08:31:b0:8c:39:88:f6:31:4d:66:9e:15:0e:
a3:61:cd:a1:b1:4c:01:2d:8c:46:93:61:cd:8b:7c:fc:7d:4a:
71:e3:3f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5dwyTvTjkCQf4UI/YjBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODFiODQxZjEyNzY5NDg5ZDVmZDM0M2I3MmJhNDRmOTBj
OTZmMzIwHhcNMjUwNzI3MDgwMDM0WhcNMjUwNzI4MDgwMDM0WjAzMTEwLwYDVQQD
Eyg1ZTdhOTg0MTNlN2NhYmVkN2Y3YzAzMjkyMTkzZjdhZTFlODNmNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukSbXYFxtwMPWDQHZ8w8hg5WaqC+
QkJHM6LT2SXqxopP33a0T3t6RzGUi7P89FiR26cmPZSUwoGw0xoX8jw6NM4/VjlJ
+3XE06GHUrBTxhoBr/DqY4HXSTnblPSbtBBqPKkEWHDU5iLiDaMA46B1MMHwtFBj
n9RE/TuZIA3rj/gA7PysZmSmpAFzSeYg4vneuJPOhphsqwEivM1/+SMV/6idq2cc
k9QEK8nt8Nb3HIchkBuIgKcHU4eqaVzbdGFNYw/+9JM6k1uAIxBb66NBB7cDnkg4
DIr0HLH1x8ADMkPtnBB6k5+yM9JXbvdLE9pRe9NYDMPMjeUfWElEp7gSEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF56mEE+fKvtf3wDKSGT964eg/UNMB8GA1UdIwQY
MBaAFFKBuEHxJ2lInV/TQ7crpE+QyW8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9HNFFmRW5hVWlkWDlORHR5dWtUNURKYnpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xNDIyNWItYmY5NS00NWM5LThkN2It
ZmMyNWQ0NTVhZjg1LzEvVW9HNFFmRW5hVWlkWDlORHR5dWtUNURKYnpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xNDIyNWItYmY5NS00NWM5LThkN2ItZmMyNWQ0NTVhZjg1
LzEvVW9HNFFmRW5hVWlkWDlORHR5dWtUNURKYnpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzfkjzlK
/7RUBa7SoRm/APBK2cabEDJXmKsT0gYULqFiG2cRZEPIJ6e05gD2tAVxi5QIom5C
ZicEI5owBkgA87+dS0/pl/wYvQu6mucxxonBNvCGE78ZFvDA28f1LF29JYgsTITT
vZXC9AL9gaJjp3cDW5ODZ10G63M8TOyJFX4n971ecZj4UvDpA6sJgBTp0jbdu2H5
QGwoKII2RHwzhljaID1BgHlrO/f3QUuSim86t5z4+WpsnL5EkJkGg4iXrUnd+EoM
bwM8Eildz0oCOgL1+cFBInx2jSvz6hsIMbCMOYj2MU1mnhUOo2HNobFMAS2MRpNh
zYt8/H1KceM/Fw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:19 2025 by rpki-client