Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File: UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier: GQC3xcUH3mkrjpLoED7VYwvZ6JoK8Xfo8LaE5e+alHs=
Subject key identifier: 84:2C:59:E6:44:A4:DF:A7:7E:E8:7A:35:1E:41:EC:CB:46:BE:C8:75
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial: 0199228C6C6FDABB7DB21B7A3228E8A266B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number: 0117
Signing time: Sun 07 Sep 2025 05:00:52 +0000
Manifest this update: Sun 07 Sep 2025 05:00:52 +0000
Manifest next update: Mon 08 Sep 2025 05:00:52 +0000
Files and hashes: 1: HmBHMAAoUy9qKm5EF-apsYNvL-Y.roa (hash: l1nynbFOV66i2gHUQws1+HFlLSzuk9i9xbBDIJI0tVk=)
2: RJxr8FfYNXMH1JQVOwgGzONUVKU.roa (hash: DR8gGJ69xVF1vRltrSd3W6LpV3g9f3689+1YFT6WiyI=)
3: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: gYLYD4m3t/c+AHqwaRkK1251PvMxC+gvL/YHSNKRydA=)
4: VD-LSAHFyPqWUZ2Vjm-KKmr8eKM.roa (hash: rKVzKhQ4K6eAovmJ6rMHEI/c6Cx2HmuMrN4fBqn4Zxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:6c:6f:da:bb:7d:b2:1b:7a:32:28:e8:a2:66:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Validity
Not Before: Sep 7 05:00:52 2025 GMT
Not After : Sep 8 05:00:52 2025 GMT
Subject: CN=842c59e644a4dfa77ee87a351e41eccb46bec875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:c7:a3:49:b7:6f:25:af:66:10:1a:28:6d:
63:f9:4d:9c:53:95:75:9e:d4:03:92:e6:07:ab:40:
90:82:16:41:28:5c:03:8e:a3:f0:54:d5:1c:85:1d:
bf:99:a9:77:d8:94:de:82:0f:85:1d:5e:f0:01:f0:
e9:90:ee:a4:6b:31:e8:ff:d6:12:c7:e1:90:50:78:
f7:d1:d7:22:7b:9a:a2:60:7b:da:43:32:19:84:4b:
95:aa:9b:b9:9e:1d:3b:97:d7:c7:fd:f5:7d:7a:ca:
ff:3d:5b:11:78:6a:95:ec:af:06:ac:b1:90:af:8e:
cc:1b:9c:38:e8:6e:b6:cf:23:1b:4e:db:f3:df:7d:
ce:19:eb:49:c9:fc:3b:d5:df:50:97:65:5b:00:e2:
31:a4:2d:13:2a:d9:9e:27:c4:4f:0f:42:9d:0b:82:
e3:57:07:86:63:c9:1b:db:42:37:e4:48:93:e7:e6:
ee:4c:fd:80:7d:40:76:4a:cf:fc:51:d0:03:8a:36:
e8:8e:d3:65:3e:e6:3c:93:3f:b6:fc:a7:9c:0a:88:
7d:4b:18:3d:85:83:ab:eb:eb:37:86:2f:a1:07:42:
45:b6:4d:56:cf:4c:7b:cc:06:30:d3:84:67:9f:ae:
b9:50:26:70:b6:cc:11:0e:0f:7b:82:56:bb:a9:01:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:59:E6:44:A4:DF:A7:7E:E8:7A:35:1E:41:EC:CB:46:BE:C8:75
X509v3 Authority Key Identifier:
keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3e:0a:c0:0d:52:83:22:d2:cc:86:70:c4:46:a6:b8:65:27:
19:a6:5b:f9:3b:30:d0:ed:99:ad:12:5a:b5:f7:d2:01:50:68:
8c:9e:b2:cc:f1:5f:a3:7e:b3:27:d6:26:fd:98:8c:5c:e7:50:
a0:fe:23:b4:9f:03:3f:27:f6:3b:88:0a:a2:0f:b3:87:5d:d5:
c2:b3:fd:3d:7d:7a:9b:e9:d3:fd:29:f4:db:28:42:f5:ec:36:
bb:ea:a5:65:62:93:1c:4c:03:59:42:65:0f:a1:94:e5:22:c8:
18:0e:1c:9a:26:20:bc:fa:8d:f1:5b:a4:f6:50:4b:f6:ae:62:
03:99:4f:e6:6d:7c:93:79:4c:b3:1f:80:4c:69:30:3a:2c:15:
3c:80:3c:e1:7b:a1:d8:9e:89:5a:36:5b:da:9e:ea:ca:ca:27:
4f:c9:61:5a:44:d1:ce:81:bf:bb:c2:04:b9:1c:0d:29:e0:86:
07:40:f4:2f:c7:5f:16:99:bf:2b:a7:9b:8c:ba:66:16:2a:50:
c2:e6:72:3e:9f:ac:34:4e:b1:c1:90:0a:03:df:c6:5b:82:ae:
ae:fc:48:7d:77:d3:1f:4a:33:8e:63:f6:f8:88:82:dc:10:4c:
6c:3b:8f:91:6f:05:ae:7f:82:a5:6c:50:15:3e:4d:c0:b0:79:
b5:eb:57:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijGxv2rt9sht6MijoomazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjJjNDAxY2U1YzllODgxY2Q5YTNiZThlZmVjNjAwMjJk
YTBlYjYwHhcNMjUwOTA3MDUwMDUyWhcNMjUwOTA4MDUwMDUyWjAzMTEwLwYDVQQD
Eyg4NDJjNTllNjQ0YTRkZmE3N2VlODdhMzUxZTQxZWNjYjQ2YmVjODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApErHo0m3byWvZhAaKG1j+U2cU5V1
ntQDkuYHq0CQghZBKFwDjqPwVNUchR2/mal32JTegg+FHV7wAfDpkO6kazHo/9YS
x+GQUHj30dcie5qiYHvaQzIZhEuVqpu5nh07l9fH/fV9esr/PVsReGqV7K8GrLGQ
r47MG5w46G62zyMbTtvz333OGetJyfw71d9Ql2VbAOIxpC0TKtmeJ8RPD0KdC4Lj
VweGY8kb20I35EiT5+buTP2AfUB2Ss/8UdADijbojtNlPuY8kz+2/KecCoh9Sxg9
hYOr6+s3hi+hB0JFtk1Wz0x7zAYw04Rnn665UCZwtswRDg97gla7qQHAvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQsWeZEpN+nfuh6NR5B7MtGvsh1MB8GA1UdIwQY
MBaAFFGyxAHOXJ6IHNmjvo7+xgAi2g62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMt
OTRkMWIxZDE2Yjg1LzEvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMtOTRkMWIxZDE2Yjg1
LzEvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhz4KwA1S
gyLSzIZwxEamuGUnGaZb+Tsw0O2ZrRJatffSAVBojJ6yzPFfo36zJ9Ym/ZiMXOdQ
oP4jtJ8DPyf2O4gKog+zh13VwrP9PX16m+nT/Sn02yhC9ew2u+qlZWKTHEwDWUJl
D6GU5SLIGA4cmiYgvPqN8Vuk9lBL9q5iA5lP5m18k3lMsx+ATGkwOiwVPIA84Xuh
2J6JWjZb2p7qysonT8lhWkTRzoG/u8IEuRwNKeCGB0D0L8dfFpm/K6ebjLpmFipQ
wuZyPp+sNE6xwZAKA9/GW4KurvxIfXfTH0ozjmP2+IiC3BBMbDuPkW8Frn+CpWxQ
FT5NwLB5tetXrg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:49 2025 by rpki-client