Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier: PIZaLe4gZ8K0eH52nZUBX/qs3AtiSSKiTNKnL0RGn/c=
Subject key identifier: A3:E2:67:0F:02:D8:E2:8A:80:8B:37:3F:A6:D1:EA:64:3B:E8:E9:4B
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 01974A43BF36D88F4C2E2144A58B51BDD845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number: 0D49
Signing time: Sat 07 Jun 2025 12:00:43 +0000
Manifest this update: Sat 07 Jun 2025 12:00:43 +0000
Manifest next update: Sun 08 Jun 2025 12:00:43 +0000
Files and hashes: 1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: msQsimsVBPiuxTnqy3wed31yUYGTXlCk8DsEuRINKAg=)
2: YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa (hash: 4/OtRTmHPZoVC5SXZxinCft/J9eQslnnS2y+eRKDbVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:bf:36:d8:8f:4c:2e:21:44:a5:8b:51:bd:d8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Jun 7 12:00:43 2025 GMT
Not After : Jun 8 12:00:43 2025 GMT
Subject: CN=a3e2670f02d8e28a808b373fa6d1ea643be8e94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:c9:c8:42:9f:b5:9f:9a:48:52:61:7f:72:
28:16:fc:51:7b:12:6c:3a:db:2b:42:92:51:d4:a8:
77:fd:1f:dd:bf:a7:28:f9:ba:6d:28:64:fa:a1:84:
bc:72:b2:6f:78:18:04:59:c7:b1:8f:c2:f8:5e:6b:
29:44:63:af:a1:67:9e:bd:62:6e:8f:14:11:ce:03:
be:99:df:95:8e:b9:92:a9:4b:32:e3:c6:89:d4:f5:
fe:5e:07:f4:71:73:0a:33:5b:e1:93:96:a4:36:6a:
76:af:9e:d0:8c:b9:b1:54:c5:49:14:b9:cb:d3:e1:
4f:4a:91:73:3b:df:e4:da:88:7d:51:77:7b:db:8f:
e3:59:fa:51:1b:70:a6:da:3a:78:de:60:d5:35:7c:
4c:2c:dc:9a:a4:b5:ba:ff:28:00:15:28:3c:c4:dc:
05:44:4c:82:ad:46:cd:ca:84:ee:ff:a0:c2:4b:0a:
38:25:b9:2d:60:cd:56:4f:97:58:2d:cd:b8:e2:d0:
03:8d:65:a2:95:d7:a4:44:de:f0:4e:b7:8b:5f:e4:
9b:28:e5:1e:59:03:da:40:7a:8e:89:c8:eb:15:64:
55:b7:fa:13:92:e0:6e:5c:32:08:a3:be:47:ef:02:
6c:16:c5:33:0b:28:a6:14:5c:dc:ee:20:ec:06:8f:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E2:67:0F:02:D8:E2:8A:80:8B:37:3F:A6:D1:EA:64:3B:E8:E9:4B
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:cc:aa:65:5e:85:01:e1:1c:08:e1:0e:db:92:46:c7:c3:86:
eb:8a:24:1a:ff:f4:35:ca:d7:d4:35:a2:b4:ec:26:98:26:d7:
e4:c3:39:e0:8d:11:ba:87:3b:96:70:73:80:86:09:e9:b2:3d:
80:02:0e:1d:e0:c9:4a:87:f5:ca:6b:a1:23:77:cf:93:d1:ce:
74:dc:b4:a5:47:e3:4a:11:32:4e:9f:42:05:06:aa:7a:35:c9:
4d:7c:bc:60:d6:c6:a2:0d:a0:2b:94:4e:e4:be:81:4e:d7:7a:
c7:49:45:3e:e3:b5:56:ac:f6:d6:89:8f:c4:6d:ad:b9:9e:09:
1d:f4:df:28:16:ee:ab:20:79:63:f8:72:6d:ea:7c:1e:4d:b0:
f1:ee:eb:69:05:63:db:5f:95:e2:e9:f4:28:31:e1:64:91:d0:
39:b0:98:20:02:a9:be:c9:2a:a9:e6:18:0d:c3:9e:d9:a3:6f:
7e:c8:58:46:e4:0b:e3:e5:19:61:8b:a8:0f:b0:2c:0e:ec:c1:
d7:32:41:5e:38:69:a6:0a:1d:9c:b0:23:50:7c:c0:82:f4:6b:
a0:4d:c7:99:7c:01:fa:7b:13:f4:95:84:85:6a:23:9b:fc:bb:
b2:f1:d8:7b:85:03:ce:0d:21:bb:f8:fd:4f:70:c8:7f:f7:34:
4e:16:33:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ7822I9MLiFEpYtRvdhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNTdjODdkMTExYzgwNTBmZDVjOWFjMmIwNmJlNjIzMjM2
NzUwMzMwHhcNMjUwNjA3MTIwMDQzWhcNMjUwNjA4MTIwMDQzWjAzMTEwLwYDVQQD
EyhhM2UyNjcwZjAyZDhlMjhhODA4YjM3M2ZhNmQxZWE2NDNiZThlOTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTjJyEKftZ+aSFJhf3IoFvxRexJs
OtsrQpJR1Kh3/R/dv6co+bptKGT6oYS8crJveBgEWcexj8L4XmspRGOvoWeevWJu
jxQRzgO+md+VjrmSqUsy48aJ1PX+Xgf0cXMKM1vhk5akNmp2r57QjLmxVMVJFLnL
0+FPSpFzO9/k2oh9UXd724/jWfpRG3Cm2jp43mDVNXxMLNyapLW6/ygAFSg8xNwF
REyCrUbNyoTu/6DCSwo4JbktYM1WT5dYLc244tADjWWildekRN7wTreLX+SbKOUe
WQPaQHqOicjrFWRVt/oTkuBuXDIIo75H7wJsFsUzCyimFFzc7iDsBo+c4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPiZw8C2OKKgIs3P6bR6mQ76OlLMB8GA1UdIwQY
MBaAFFFXyH0RHIBQ/VyawrBr5iMjZ1AzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80ZTdiNWMtMjkwNi00NzhhLThlZjAt
ZDI5NzAxNDg3NTM2LzEvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80ZTdiNWMtMjkwNi00NzhhLThlZjAtZDI5NzAxNDg3NTM2
LzEvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMyqZV6F
AeEcCOEO25JGx8OG64okGv/0NcrX1DWitOwmmCbX5MM54I0Ruoc7lnBzgIYJ6bI9
gAIOHeDJSof1ymuhI3fPk9HOdNy0pUfjShEyTp9CBQaqejXJTXy8YNbGog2gK5RO
5L6BTtd6x0lFPuO1Vqz21omPxG2tuZ4JHfTfKBbuqyB5Y/hybep8Hk2w8e7raQVj
21+V4un0KDHhZJHQObCYIAKpvskqqeYYDcOe2aNvfshYRuQL4+UZYYuoD7AsDuzB
1zJBXjhppgodnLAjUHzAgvRroE3HmXwB+nsT9JWEhWojm/y7svHYe4UDzg0hu/j9
T3DIf/c0ThYzfw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:22 2025 by rpki-client