Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/6278c4-64df-4f8f-ad34-68384ffd6e6f/1/UGG999pVZ22XGIK-7pAhvF-zFy0.mft
File: UGG999pVZ22XGIK-7pAhvF-zFy0.mft (raw, json)
Hash identifier: E+eGd8GHR34Uff7F6Di2QFyh1FYVYqnxlfH5HXu4a3E=
Subject key identifier: 8B:96:8A:AA:7C:E5:41:9E:62:E1:CB:CA:80:54:26:00:24:93:FC:D9
Authority key identifier: 50:61:BD:F7:DA:55:67:6D:97:18:82:BE:EE:90:21:BC:5F:B3:17:2D
Certificate issuer: /CN=5061bdf7da55676d971882beee9021bc5fb3172d
Certificate serial: 01984A41891A9517EDD3737DDB3D125DBC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGG999pVZ22XGIK-7pAhvF-zFy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/6278c4-64df-4f8f-ad34-68384ffd6e6f/1/UGG999pVZ22XGIK-7pAhvF-zFy0.mft
Manifest number: 08B8
Signing time: Sun 27 Jul 2025 05:01:05 +0000
Manifest this update: Sun 27 Jul 2025 05:01:05 +0000
Manifest next update: Mon 28 Jul 2025 05:01:05 +0000
Files and hashes: 1: UGG999pVZ22XGIK-7pAhvF-zFy0.crl (hash: kRCuWjDcfHWUOq8QbXAvOlSEfZkeZrJ+DOwqTC9h5Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/6278c4-64df-4f8f-ad34-68384ffd6e6f/1/UGG999pVZ22XGIK-7pAhvF-zFy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/6278c4-64df-4f8f-ad34-68384ffd6e6f/1/UGG999pVZ22XGIK-7pAhvF-zFy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UGG999pVZ22XGIK-7pAhvF-zFy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:89:1a:95:17:ed:d3:73:7d:db:3d:12:5d:bc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5061bdf7da55676d971882beee9021bc5fb3172d
Validity
Not Before: Jul 27 05:01:05 2025 GMT
Not After : Jul 28 05:01:05 2025 GMT
Subject: CN=8b968aaa7ce5419e62e1cbca805426002493fcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:71:af:09:c6:b1:d7:5a:5c:f8:69:18:61:
19:9c:dd:54:85:b5:7f:87:c7:47:53:8b:41:12:a6:
b6:d3:7e:f6:27:32:8e:36:5a:31:11:9f:34:be:a5:
a0:d5:28:bc:d1:ff:e3:80:d9:ac:29:90:08:90:0e:
05:78:96:d2:e0:1d:c0:ac:4a:57:35:f9:d9:c9:d1:
71:5d:e9:4e:e6:aa:49:81:c5:64:c5:c1:d7:8a:4a:
04:39:b5:f8:b9:d2:85:1c:a3:27:00:bb:86:76:3f:
a0:73:06:b1:e3:ad:da:90:b4:e1:13:b9:89:fb:2f:
ef:2d:a2:bd:1a:45:94:b5:86:3f:12:d0:36:f7:d2:
5b:9c:21:df:91:ee:e8:23:3d:65:61:9f:4b:cc:4d:
b9:e3:1d:e0:bb:b6:e7:9c:c8:f9:1b:48:21:6b:93:
d7:eb:0f:6e:d8:f0:e0:c4:9b:be:c1:ae:cd:a6:c5:
f5:3a:39:fc:6f:7d:7e:0d:ab:1c:3a:d8:d1:de:86:
bf:3e:21:53:cc:9f:c1:35:b5:cd:90:2f:44:80:20:
af:6e:61:ce:93:96:46:d5:38:9d:ff:a2:5a:ca:39:
36:8f:93:eb:46:af:9f:96:13:1a:67:a7:88:a3:c8:
b3:2b:de:a4:56:0d:8a:3e:c5:c1:6d:93:64:be:d7:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:96:8A:AA:7C:E5:41:9E:62:E1:CB:CA:80:54:26:00:24:93:FC:D9
X509v3 Authority Key Identifier:
keyid:50:61:BD:F7:DA:55:67:6D:97:18:82:BE:EE:90:21:BC:5F:B3:17:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGG999pVZ22XGIK-7pAhvF-zFy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6278c4-64df-4f8f-ad34-68384ffd6e6f/1/UGG999pVZ22XGIK-7pAhvF-zFy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6278c4-64df-4f8f-ad34-68384ffd6e6f/1/UGG999pVZ22XGIK-7pAhvF-zFy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7d:16:b0:40:26:9e:f2:31:cb:15:5d:27:4d:52:16:52:df:
ba:9f:f8:9b:7e:8f:33:cd:e3:9e:c7:62:ca:8d:14:8c:42:69:
6a:72:78:fe:73:06:29:02:3d:50:2d:c3:e1:0b:0c:ec:df:83:
2b:c8:4a:20:87:9d:82:e4:9c:e3:66:da:4a:10:eb:d8:bb:53:
51:b4:ff:9f:13:dd:06:6a:e1:ef:31:23:22:58:ec:4d:f3:fb:
b6:d3:85:d9:0b:58:f5:bc:bf:ea:b9:b0:0b:34:4f:a2:c6:30:
f9:c9:5b:57:49:f3:ac:0a:54:96:2c:e2:42:42:cf:02:b5:84:
2b:71:fe:48:2b:a5:bc:45:2c:33:ee:74:4d:40:27:f9:15:62:
2e:c9:e4:f3:b3:32:52:bf:d3:f8:f2:15:3b:8c:1a:8f:e7:4a:
66:94:9a:b9:13:f3:bd:f6:4a:97:e5:fe:b5:1f:9f:6c:e3:47:
81:db:a0:89:43:12:e1:83:49:de:db:b3:b1:fb:21:97:5e:3e:
b6:33:2a:41:4c:41:4e:3c:ce:3c:fc:67:57:60:31:72:90:dc:
a6:7a:e4:f2:58:24:2f:af:dc:92:33:f1:60:7e:c6:c5:22:c7:
61:3f:4d:58:64:f4:a9:d2:8d:7c:d5:79:fc:a2:e9:7f:14:e7:
26:e0:8f:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQYkalRft03N92z0SXbx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNjFiZGY3ZGE1NTY3NmQ5NzE4ODJiZWVlOTAyMWJjNWZi
MzE3MmQwHhcNMjUwNzI3MDUwMTA1WhcNMjUwNzI4MDUwMTA1WjAzMTEwLwYDVQQD
Eyg4Yjk2OGFhYTdjZTU0MTllNjJlMWNiY2E4MDU0MjYwMDI0OTNmY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdlxrwnGsddaXPhpGGEZnN1UhbV/
h8dHU4tBEqa20372JzKONloxEZ80vqWg1Si80f/jgNmsKZAIkA4FeJbS4B3ArEpX
NfnZydFxXelO5qpJgcVkxcHXikoEObX4udKFHKMnALuGdj+gcwax463akLThE7mJ
+y/vLaK9GkWUtYY/EtA299JbnCHfke7oIz1lYZ9LzE254x3gu7bnnMj5G0gha5PX
6w9u2PDgxJu+wa7NpsX1Ojn8b31+DascOtjR3oa/PiFTzJ/BNbXNkC9EgCCvbmHO
k5ZG1Tid/6Jayjk2j5PrRq+flhMaZ6eIo8izK96kVg2KPsXBbZNkvtcfGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuWiqp85UGeYuHLyoBUJgAkk/zZMB8GA1UdIwQY
MBaAFFBhvffaVWdtlxiCvu6QIbxfsxctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUdHOTk5cFZaMjJYR0lLLTdwQWh2Ri16RnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi82Mjc4YzQtNjRkZi00ZjhmLWFkMzQt
NjgzODRmZmQ2ZTZmLzEvVUdHOTk5cFZaMjJYR0lLLTdwQWh2Ri16RnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi82Mjc4YzQtNjRkZi00ZjhmLWFkMzQtNjgzODRmZmQ2ZTZm
LzEvVUdHOTk5cFZaMjJYR0lLLTdwQWh2Ri16RnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC30WsEAm
nvIxyxVdJ01SFlLfup/4m36PM83jnsdiyo0UjEJpanJ4/nMGKQI9UC3D4QsM7N+D
K8hKIIedguSc42baShDr2LtTUbT/nxPdBmrh7zEjIljsTfP7ttOF2QtY9by/6rmw
CzRPosYw+clbV0nzrApUliziQkLPArWEK3H+SCulvEUsM+50TUAn+RViLsnk87My
Ur/T+PIVO4waj+dKZpSauRPzvfZKl+X+tR+fbONHgdugiUMS4YNJ3tuzsfshl14+
tjMqQUxBTjzOPPxnV2AxcpDcpnrk8lgkL6/ckjPxYH7GxSLHYT9NWGT0qdKNfNV5
/KLpfxTnJuCP8w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:14 2025 by rpki-client