Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier: 1GXP6BdgMKeVEMRnDL8Ish6DJIIxdQwO6BKEVF3Xthc=
Subject key identifier: 87:18:3F:06:7B:25:9A:D9:7F:50:A4:E3:09:04:49:6F:82:34:F9:99
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial: 01974E57B1028D3D120525AA07BFB9096C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number: 1579
Signing time: Sun 08 Jun 2025 07:00:59 +0000
Manifest this update: Sun 08 Jun 2025 07:00:59 +0000
Manifest next update: Mon 09 Jun 2025 07:00:59 +0000
Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: jbjz1HCLwUtHgCe26t/Fh7gtfYk+6GMo4pGW8AJPTQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:b1:02:8d:3d:12:05:25:aa:07:bf:b9:09:6c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
Validity
Not Before: Jun 8 07:00:59 2025 GMT
Not After : Jun 9 07:00:59 2025 GMT
Subject: CN=87183f067b259ad97f50a4e30904496f8234f999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:09:dd:0f:de:e8:9a:f5:56:c1:52:82:dd:
47:13:33:f4:fb:3a:c2:96:1e:d8:5a:48:40:f8:38:
97:5c:74:76:d0:34:03:36:b6:8e:11:31:37:c0:1e:
b0:9f:ea:83:3c:a9:32:31:52:6d:7c:ff:7a:a0:37:
1d:57:1e:9e:64:9d:46:bb:6e:cb:33:c6:7d:f8:75:
1f:79:a8:91:9b:e6:01:7e:66:1d:42:7e:e7:3c:df:
0d:a0:f0:93:4a:df:04:ee:6f:52:ed:49:b3:13:47:
44:e5:cc:bf:31:dd:17:eb:a8:51:52:9a:f4:3a:da:
07:74:eb:d1:91:5d:82:68:79:87:8e:e2:bf:84:8f:
61:b8:48:3c:db:1a:29:61:3f:a0:aa:01:cb:5b:90:
df:3f:c0:61:d3:37:cd:cb:13:47:6c:5a:1b:ba:5a:
00:73:ec:11:f6:32:d1:e5:e6:16:f1:99:b8:aa:0d:
ad:f1:14:9f:0d:6d:aa:14:6e:cd:cc:c9:3f:4d:72:
ff:f6:97:55:c8:dd:25:3f:6e:7b:6b:60:63:fd:4b:
2d:1f:b5:dd:e1:e0:11:52:21:f8:4e:54:fa:de:e4:
a4:6d:03:89:ed:f9:02:5d:ca:8f:dc:71:09:bc:c9:
74:1c:4a:b2:f1:19:ea:61:44:ad:f8:3a:a4:30:6f:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:18:3F:06:7B:25:9A:D9:7F:50:A4:E3:09:04:49:6F:82:34:F9:99
X509v3 Authority Key Identifier:
keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:09:ec:5c:7a:39:d5:5c:be:0b:48:95:fe:2a:e5:f9:a1:09:
af:7a:e9:5f:dc:8a:ee:1a:e2:d5:da:b8:89:fe:20:c1:7b:c8:
9a:fb:f8:68:61:54:71:d6:80:a6:9d:20:38:a0:7e:fb:bf:3f:
39:d0:38:33:6b:8c:1b:9f:3e:c2:c8:1f:7a:94:d5:19:c2:e3:
a8:69:94:40:8a:39:41:2f:c2:a3:da:53:a5:9b:28:03:c7:72:
b3:db:15:11:88:88:55:94:e9:6c:79:ec:ad:0d:0e:68:22:83:
6d:83:d1:4e:a7:3d:94:f9:76:40:eb:96:1a:1c:81:ca:d2:f3:
cd:ca:3a:27:60:ba:06:f5:dd:06:b1:5e:79:6e:f9:ff:8e:be:
e3:01:0b:70:a8:1b:db:03:83:4f:f2:cb:e6:11:54:ae:cb:5e:
de:04:2b:91:3d:a7:67:b3:7b:18:c4:5b:f4:eb:82:12:96:74:
25:f7:2d:ea:dc:c8:d0:45:8f:20:3e:4e:be:e4:94:6d:bc:27:
2c:9c:9c:2b:89:47:7e:03:78:a6:ac:87:e4:27:e9:90:0c:c0:
2b:f0:9f:dd:9d:7c:e8:4b:4b:37:f9:6d:89:96:ad:b7:0b:bd:
d0:b0:64:1c:e8:68:53:62:f3:4d:b2:95:b5:16:43:e0:72:75:
ba:5d:ea:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV7ECjT0SBSWqB7+5CWyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOTg1NjdhMDM5ZTVjY2UyM2VlOTM3NDA5NmVlZDU3YmJi
YTI5OGUwHhcNMjUwNjA4MDcwMDU5WhcNMjUwNjA5MDcwMDU5WjAzMTEwLwYDVQQD
Eyg4NzE4M2YwNjdiMjU5YWQ5N2Y1MGE0ZTMwOTA0NDk2ZjgyMzRmOTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdIJ3Q/e6Jr1VsFSgt1HEzP0+zrC
lh7YWkhA+DiXXHR20DQDNraOETE3wB6wn+qDPKkyMVJtfP96oDcdVx6eZJ1Gu27L
M8Z9+HUfeaiRm+YBfmYdQn7nPN8NoPCTSt8E7m9S7UmzE0dE5cy/Md0X66hRUpr0
OtoHdOvRkV2CaHmHjuK/hI9huEg82xopYT+gqgHLW5DfP8Bh0zfNyxNHbFobuloA
c+wR9jLR5eYW8Zm4qg2t8RSfDW2qFG7NzMk/TXL/9pdVyN0lP257a2Bj/UstH7Xd
4eARUiH4TlT63uSkbQOJ7fkCXcqP3HEJvMl0HEqy8RnqYUSt+DqkMG8iewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcYPwZ7JZrZf1Ck4wkESW+CNPmZMB8GA1UdIwQY
MBaAFFGYVnoDnlzOI+6TdAlu7Ve7uimOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82Njc5YTktMDkzZi00YmMzLWEzZDQt
ODhhYTgxNDg2NzgzLzEvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82Njc5YTktMDkzZi00YmMzLWEzZDQtODhhYTgxNDg2Nzgz
LzEvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegnsXHo5
1Vy+C0iV/irl+aEJr3rpX9yK7hri1dq4if4gwXvImvv4aGFUcdaApp0gOKB++78/
OdA4M2uMG58+wsgfepTVGcLjqGmUQIo5QS/Co9pTpZsoA8dys9sVEYiIVZTpbHns
rQ0OaCKDbYPRTqc9lPl2QOuWGhyBytLzzco6J2C6BvXdBrFeeW75/46+4wELcKgb
2wODT/LL5hFUrste3gQrkT2nZ7N7GMRb9OuCEpZ0Jfct6tzI0EWPID5OvuSUbbwn
LJycK4lHfgN4pqyH5CfpkAzAK/Cf3Z186EtLN/ltiZattwu90LBkHOhoU2LzTbKV
tRZD4HJ1ul3qCQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:16 2025 by rpki-client