Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier: x/YMaZLqTyI2a54We+rhA3e/LMTErWAM6hLwCcZQMmI=
Subject key identifier: F3:00:E1:42:92:FF:BD:C0:AF:61:A0:03:3B:24:BA:F4:7A:7F:C4:8D
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial: 01983E3CF9925DE15ECDDB527A8E7014DA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number: 05DE
Signing time: Thu 24 Jul 2025 21:00:40 +0000
Manifest this update: Thu 24 Jul 2025 21:00:40 +0000
Manifest next update: Fri 25 Jul 2025 21:00:40 +0000
Files and hashes: 1: HoEt4y6zf8w5L0OHd11vl-inukI.roa (hash: 470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=)
2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: ZIOidYQlHe0H0UUdHOIAquQcdTnl6OjUhulkMdmtBTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3c:f9:92:5d:e1:5e:cd:db:52:7a:8e:70:14:da:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Validity
Not Before: Jul 24 21:00:40 2025 GMT
Not After : Jul 25 21:00:40 2025 GMT
Subject: CN=f300e14292ffbdc0af61a0033b24baf47a7fc48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:55:03:6c:a1:0a:d4:49:76:08:a0:98:00:31:
85:83:be:74:0e:f1:11:8f:49:d6:3d:70:84:b1:86:
11:c5:e0:c7:98:e0:d1:9f:d8:52:36:19:1c:7e:16:
67:07:a7:01:24:ca:3d:1d:2c:8f:e6:65:04:df:48:
b6:07:0f:7c:0d:29:dd:23:52:4d:c5:10:6b:15:91:
b2:5b:f6:94:53:5c:08:8d:1c:4b:ea:fb:eb:33:c5:
a6:ae:a3:4e:99:3d:cc:6e:9d:8f:2d:fe:c9:d3:32:
bf:a1:fb:98:1d:65:b4:07:fb:60:3a:29:b6:65:69:
ff:4b:ec:e0:f4:07:71:0e:5d:be:24:b1:34:dc:ac:
91:66:6a:b2:40:65:bf:a8:99:5c:8c:89:1c:ab:e0:
49:be:8e:2b:4b:59:fc:cf:75:2e:f1:d2:1c:f1:c8:
75:42:f7:5d:77:c3:70:e4:6a:24:19:37:4d:f0:b6:
79:1b:74:06:f8:61:fd:20:03:c3:4d:fc:9b:46:8f:
b1:4a:a4:ac:c9:c2:af:5f:26:28:f7:41:e0:b0:db:
47:0f:c8:f9:59:9a:6e:1b:cd:54:93:96:a0:ef:13:
4a:43:5d:fb:15:85:13:9c:7d:a8:3e:96:26:79:2b:
86:26:d1:93:63:cb:e9:e4:8a:df:e9:72:eb:5a:47:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:00:E1:42:92:FF:BD:C0:AF:61:A0:03:3B:24:BA:F4:7A:7F:C4:8D
X509v3 Authority Key Identifier:
keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ed:7e:b5:7a:26:d0:11:cb:47:4d:39:69:4c:1e:1d:1d:10:
30:d0:a5:6d:ce:43:7f:e3:31:1d:4c:48:c8:40:b2:81:30:89:
73:68:8f:d3:30:82:60:e9:88:9a:97:42:56:0b:e0:76:33:74:
45:82:7f:b8:70:5b:8e:44:5f:9f:fc:6c:4f:91:94:88:78:29:
43:28:b2:f5:70:c2:f4:3a:c6:8c:dd:a1:65:82:21:5c:4a:c5:
b4:9e:da:42:84:54:5b:f4:4a:af:d6:2d:f4:f5:18:4e:08:f5:
09:1c:b6:95:b5:9d:39:18:90:7c:37:0e:e8:54:82:74:84:3b:
3f:92:20:f0:c8:47:a0:d3:d7:58:de:46:29:5e:b6:0b:26:d7:
d3:e5:ed:de:dd:fa:32:a3:42:08:28:3c:66:24:3c:21:ab:a7:
c7:d7:4e:75:14:0a:0d:71:eb:3d:57:25:b6:04:1d:a2:0e:3b:
98:ef:5b:f0:4b:57:ea:14:db:1f:33:f3:13:9e:cc:f0:0c:f8:
c0:88:be:2c:bd:ef:c2:d2:24:c1:1e:01:6d:5b:9a:cb:9a:70:
a7:0f:a1:e6:6e:cf:86:d7:61:a5:a5:e7:dd:f4:4e:ac:5c:58:
91:e2:61:f9:36:af:03:e1:70:89:be:c2:01:d3:b8:c6:e2:54:
7f:11:ff:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+PPmSXeFezdtSeo5wFNoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZWFhMTljYTI3YTZmNTdmMmNiYjRlNDYzNzIwYjQzNmFm
MTdkZWEwHhcNMjUwNzI0MjEwMDQwWhcNMjUwNzI1MjEwMDQwWjAzMTEwLwYDVQQD
EyhmMzAwZTE0MjkyZmZiZGMwYWY2MWEwMDMzYjI0YmFmNDdhN2ZjNDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lUDbKEK1El2CKCYADGFg750DvER
j0nWPXCEsYYRxeDHmODRn9hSNhkcfhZnB6cBJMo9HSyP5mUE30i2Bw98DSndI1JN
xRBrFZGyW/aUU1wIjRxL6vvrM8WmrqNOmT3Mbp2PLf7J0zK/ofuYHWW0B/tgOim2
ZWn/S+zg9AdxDl2+JLE03KyRZmqyQGW/qJlcjIkcq+BJvo4rS1n8z3Uu8dIc8ch1
Qvddd8Nw5GokGTdN8LZ5G3QG+GH9IAPDTfybRo+xSqSsycKvXyYo90HgsNtHD8j5
WZpuG81Uk5ag7xNKQ137FYUTnH2oPpYmeSuGJtGTY8vp5Irf6XLrWkcUzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMA4UKS/73Ar2GgAzskuvR6f8SNMB8GA1UdIwQY
MBaAFFPqoZyiem9X8su05GNyC0Nq8X3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wZDNiMmItZTMwNC00ZDYxLWI2ZDAt
MjdlOGY0ZjFjNjg0LzEvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8wZDNiMmItZTMwNC00ZDYxLWI2ZDAtMjdlOGY0ZjFjNjg0
LzEvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu+1+tXom
0BHLR005aUweHR0QMNClbc5Df+MxHUxIyECygTCJc2iP0zCCYOmImpdCVgvgdjN0
RYJ/uHBbjkRfn/xsT5GUiHgpQyiy9XDC9DrGjN2hZYIhXErFtJ7aQoRUW/RKr9Yt
9PUYTgj1CRy2lbWdORiQfDcO6FSCdIQ7P5Ig8MhHoNPXWN5GKV62CybX0+Xt3t36
MqNCCCg8ZiQ8Iaunx9dOdRQKDXHrPVcltgQdog47mO9b8EtX6hTbHzPzE57M8Az4
wIi+LL3vwtIkwR4BbVuay5pwpw+h5m7PhtdhpaXn3fROrFxYkeJh+TavA+Fwib7C
AdO4xuJUfxH/Wg==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:20:40 2025 by rpki-client