Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: tKdDyzliiggV5GS2v4rvLIvBnZYgVw412Ip7cx13iX4=
Subject key identifier: 0E:6B:47:CB:72:8C:A1:BE:C5:84:F0:24:B2:13:1B:96:4B:5D:A7:CF
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01975158E103E4EB513D628A7C777557D3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 158F
Signing time: Sun 08 Jun 2025 21:01:08 +0000
Manifest this update: Sun 08 Jun 2025 21:01:08 +0000
Manifest next update: Mon 09 Jun 2025 21:01:08 +0000
Files and hashes: 1: DFgAMB_c4WeZyOx-eglKZBMeXuM.roa (hash: X7EnRSIwEjRtkMbUxZKI4C9GzuFGjpE6JJQKft4XunM=)
2: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: +FElD8R0nEsVFzOFqEffxWY4txkjlBJowOgA9DsNH1M=)
3: cwQffYg0kiYjH-1rNcYLA94-ef0.roa (hash: Kweid10quhXZ8y9/SE/PMiXEL+CcUKUXoutq1WDQ6Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:e1:03:e4:eb:51:3d:62:8a:7c:77:75:57:d3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jun 8 21:01:08 2025 GMT
Not After : Jun 9 21:01:08 2025 GMT
Subject: CN=0e6b47cb728ca1bec584f024b2131b964b5da7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:4a:88:8b:cb:fa:43:82:6f:44:1f:08:1c:
64:05:c7:a7:11:12:da:0d:cc:e1:84:ce:e5:2b:1d:
68:7b:82:df:fc:ba:b9:a6:8a:9f:d7:84:1a:a6:d4:
2d:63:a9:3d:91:d8:5a:dd:41:9f:ea:65:2e:cc:aa:
9e:73:78:2b:f0:dc:0f:f4:23:45:37:46:17:78:d0:
38:08:ec:7e:48:bc:1c:70:ea:8a:71:c3:29:69:5b:
ad:44:57:2d:7d:90:8f:fc:7f:e7:86:e7:3d:62:48:
3a:e9:5b:b6:93:97:82:5f:b7:f8:b0:21:97:a6:ec:
fc:71:70:58:7e:85:5f:a3:ad:7d:c8:72:83:3d:4a:
7e:88:bf:cb:00:53:ea:85:52:1a:4e:99:26:e3:7a:
2e:f0:a2:17:22:a6:f0:30:b9:c3:e4:09:55:57:6e:
f4:09:5f:93:c8:6d:94:56:21:4e:95:fd:90:79:c8:
e5:b2:0d:90:7a:4b:6b:c3:cd:f7:67:8c:1a:b4:ce:
52:a3:b7:f4:48:1b:40:1e:c0:dc:d5:01:e5:b2:f2:
de:96:a8:e8:2e:0b:44:aa:ce:68:c9:1d:3a:80:ec:
80:82:1b:50:75:a1:33:9a:d8:af:22:d1:f1:37:c4:
f7:d1:17:67:49:78:99:d1:49:39:bd:ae:5b:a1:aa:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6B:47:CB:72:8C:A1:BE:C5:84:F0:24:B2:13:1B:96:4B:5D:A7:CF
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:86:be:8f:b6:e6:55:2b:62:cb:72:d0:97:5a:0b:62:bc:09:
7f:29:48:b8:14:eb:b0:55:7b:62:53:37:c8:e1:04:9a:c5:65:
d3:16:04:38:6d:60:f3:9f:bd:c5:fd:1a:b1:47:41:ab:68:ce:
62:41:14:44:f8:13:c3:06:eb:30:f1:b7:da:d0:07:d0:63:b6:
09:c0:61:05:a4:ea:64:3d:ac:28:d2:8c:26:75:a7:89:a3:7e:
79:5d:43:10:9b:ac:c3:a3:f7:4f:f1:7a:b4:85:a5:15:41:e0:
a7:b7:83:44:da:7e:80:b1:35:6e:1d:e9:5a:15:6d:d6:bc:3b:
63:18:d9:31:de:53:ed:49:18:56:15:ec:c7:af:5d:33:d7:b6:
55:6a:e3:ca:45:64:66:dd:27:4a:ac:b9:ac:80:e6:dc:22:6e:
22:80:f6:c4:26:ce:b1:d9:55:16:84:82:5c:7f:f4:ea:75:6f:
49:5c:53:d5:95:ae:d5:04:77:69:85:ff:55:bb:52:76:ae:8b:
10:20:61:d4:90:12:f2:d7:d2:3c:6d:d2:ff:55:5e:69:66:fc:
b1:a6:7f:d9:c7:dd:be:d0:1a:ec:1c:6c:42:1f:de:1d:4f:f3:
b8:66:31:47:da:ec:6e:a7:c8:1f:10:23:e8:b6:d7:1e:ed:45:
e8:21:b5:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRWOED5OtRPWKKfHd1V9PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjUwNjA4MjEwMTA4WhcNMjUwNjA5MjEwMTA4WjAzMTEwLwYDVQQD
EygwZTZiNDdjYjcyOGNhMWJlYzU4NGYwMjRiMjEzMWI5NjRiNWRhN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rtKiIvL+kOCb0QfCBxkBcenERLa
DczhhM7lKx1oe4Lf/Lq5poqf14QaptQtY6k9kdha3UGf6mUuzKqec3gr8NwP9CNF
N0YXeNA4COx+SLwccOqKccMpaVutRFctfZCP/H/nhuc9Ykg66Vu2k5eCX7f4sCGX
puz8cXBYfoVfo619yHKDPUp+iL/LAFPqhVIaTpkm43ou8KIXIqbwMLnD5AlVV270
CV+TyG2UViFOlf2Qecjlsg2Qektrw833Z4watM5So7f0SBtAHsDc1QHlsvLelqjo
LgtEqs5oyR06gOyAghtQdaEzmtivItHxN8T30RdnSXiZ0Uk5va5boarlfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5rR8tyjKG+xYTwJLITG5ZLXafPMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYa+j7bm
VStiy3LQl1oLYrwJfylIuBTrsFV7YlM3yOEEmsVl0xYEOG1g85+9xf0asUdBq2jO
YkEURPgTwwbrMPG32tAH0GO2CcBhBaTqZD2sKNKMJnWniaN+eV1DEJusw6P3T/F6
tIWlFUHgp7eDRNp+gLE1bh3pWhVt1rw7YxjZMd5T7UkYVhXsx69dM9e2VWrjykVk
Zt0nSqy5rIDm3CJuIoD2xCbOsdlVFoSCXH/06nVvSVxT1ZWu1QR3aYX/VbtSdq6L
ECBh1JAS8tfSPG3S/1VeaWb8saZ/2cfdvtAa7BxsQh/eHU/zuGYxR9rsbqfIHxAj
6LbXHu1F6CG11w==
-----END CERTIFICATE-----
Generated at Mon Jun 9 03:15:26 2025 by rpki-client