Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
File: UoMHMHbmc6Mrfda83A-8wW83tqE.mft (raw, json)
Hash identifier: 5LtjhrHi5724UzlFMJ1sAYgf7gSuTAAyZmLVBE8dOr0=
Subject key identifier: FF:8A:A8:FA:5E:B3:E1:32:51:F6:F2:52:6B:C4:14:84:52:17:44:67
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Certificate issuer: /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial: 019931240D5BCF13FCC01F7AAB49D1D900FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 01:01:10 +0000
Manifest this update: Wed 10 Sep 2025 01:01:10 +0000
Manifest next update: Thu 11 Sep 2025 01:01:10 +0000
Files and hashes: 1: UoMHMHbmc6Mrfda83A-8wW83tqE.crl (hash: RbzutkKP2SjMe2kyQuXUIb7CSmVufsIpGdRLtl33ol0=)
2: lWp2pNz_835GJJ7O_kZ3ggU57jI.roa (hash: X3vMszfClu3G8XSh8MSgP9m7KkxSRkxy0B7sIqti9o0=)
3: pobSRqB4Q1gZ4DXOZf4V9pVZrL4.roa (hash: jRPTi+5Lw+W7BzK3Rqd36iIkpmMkM0yVpsHfYrztv94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:0d:5b:cf:13:fc:c0:1f:7a:ab:49:d1:d9:00:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Validity
Not Before: Sep 10 01:01:10 2025 GMT
Not After : Sep 11 01:01:10 2025 GMT
Subject: CN=ff8aa8fa5eb3e13251f6f2526bc4148452174467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:01:ee:98:ad:8d:53:6a:86:42:4f:29:0e:
b8:4e:f9:a5:2b:1f:58:8f:b1:aa:86:45:e3:cb:79:
1a:de:99:7e:e1:18:54:43:4d:60:19:b4:84:93:35:
b1:19:2b:0d:bf:0b:a1:34:2b:3c:ab:64:7a:29:b3:
17:f8:78:a4:4f:12:e0:d1:69:9a:b4:a1:87:b4:88:
c7:62:5c:65:1f:c5:37:05:e9:62:02:99:f0:38:4b:
49:43:e5:e7:3e:f9:36:14:38:78:0a:90:55:d3:28:
cd:df:37:a8:85:bc:b9:49:8c:3a:24:f6:c6:41:6c:
d2:3a:5c:a4:1e:72:92:35:47:f5:57:3b:c2:83:54:
5b:d8:92:34:08:42:8b:40:4e:9c:77:95:b5:fa:fb:
24:c8:6c:08:21:ca:dd:ad:57:54:b4:db:d1:b6:12:
ac:84:4f:65:8d:75:6e:99:40:64:68:e1:4c:9c:c4:
d8:08:45:ea:9c:e0:b7:48:72:dc:fb:a4:ee:79:ca:
bc:7a:63:2b:b5:07:45:01:27:f9:2a:6c:4e:59:91:
91:e0:c6:23:50:1f:d9:68:56:b0:9b:65:53:f6:a7:
c4:31:30:41:65:8b:0f:1e:81:5f:3d:c1:e6:5e:f8:
7a:14:6b:fe:8c:e1:bf:56:07:78:37:5f:b0:fc:d7:
d9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8A:A8:FA:5E:B3:E1:32:51:F6:F2:52:6B:C4:14:84:52:17:44:67
X509v3 Authority Key Identifier:
keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4b:4b:3a:e2:1e:23:f8:bd:2f:c3:af:16:79:c9:9f:66:ef:
51:e5:0f:2e:87:35:ef:c9:91:70:9f:24:ce:0b:dd:21:88:3a:
e9:60:a2:24:04:28:60:31:70:81:3b:fd:bc:8f:c6:16:be:47:
76:59:b9:f4:9d:f5:fb:72:b6:93:2f:c6:cf:65:a9:94:40:52:
ec:01:0d:03:79:4f:3d:de:04:c0:e8:2e:d4:04:3d:51:7f:00:
ae:e7:f7:3d:14:3c:bb:8b:db:a3:4a:59:41:88:35:33:24:fc:
08:f8:65:3b:0e:82:e3:2c:6a:ba:fd:d1:41:0e:38:da:84:de:
f5:cc:0c:d4:ec:be:31:ba:85:54:3e:21:60:0f:81:47:f6:0d:
e4:3c:28:5f:aa:79:32:7b:db:4b:fc:89:e0:ce:8a:0f:d5:cf:
26:ad:7f:61:51:4a:37:e0:87:8a:99:f1:1d:2c:92:26:8c:e0:
a7:52:0d:40:5d:c0:84:86:34:ea:75:64:c2:c1:68:a9:80:ec:
76:0e:c5:e7:5f:ce:42:62:48:23:36:8a:21:0e:b5:a0:3b:d7:
1e:8b:25:74:21:64:c2:5f:ea:ae:54:52:f5:4f:c3:16:e3:fa:
4e:24:75:45:e2:9b:d8:c3:90:7c:a3:52:25:99:14:3a:db:59:
f9:5b:e0:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxJA1bzxP8wB96q0nR2QD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODMwNzMwNzZlNjczYTMyYjdkZDZiY2RjMGZiY2MxNmYz
N2I2YTEwHhcNMjUwOTEwMDEwMTEwWhcNMjUwOTExMDEwMTEwWjAzMTEwLwYDVQQD
EyhmZjhhYThmYTVlYjNlMTMyNTFmNmYyNTI2YmM0MTQ4NDUyMTc0NDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUUB7pitjVNqhkJPKQ64TvmlKx9Y
j7GqhkXjy3ka3pl+4RhUQ01gGbSEkzWxGSsNvwuhNCs8q2R6KbMX+HikTxLg0Wma
tKGHtIjHYlxlH8U3BeliApnwOEtJQ+XnPvk2FDh4CpBV0yjN3zeohby5SYw6JPbG
QWzSOlykHnKSNUf1VzvCg1Rb2JI0CEKLQE6cd5W1+vskyGwIIcrdrVdUtNvRthKs
hE9ljXVumUBkaOFMnMTYCEXqnOC3SHLc+6Tuecq8emMrtQdFASf5KmxOWZGR4MYj
UB/ZaFawm2VT9qfEMTBBZYsPHoFfPcHmXvh6FGv+jOG/Vgd4N1+w/NfZ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+KqPpes+EyUfbyUmvEFIRSF0RnMB8GA1UdIwQY
MBaAFFKDBzB25nOjK33WvNwPvMFvN7ahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9NSE1IYm1jNk1yZmRhODNBLTh3VzgzdHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yN2U1MjctZTAyZS00YzMwLWE4NmIt
M2MzNTRkNjE4YjNhLzEvVW9NSE1IYm1jNk1yZmRhODNBLTh3VzgzdHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8yN2U1MjctZTAyZS00YzMwLWE4NmItM2MzNTRkNjE4YjNh
LzEvVW9NSE1IYm1jNk1yZmRhODNBLTh3VzgzdHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJktLOuIe
I/i9L8OvFnnJn2bvUeUPLoc178mRcJ8kzgvdIYg66WCiJAQoYDFwgTv9vI/GFr5H
dlm59J31+3K2ky/Gz2WplEBS7AENA3lPPd4EwOgu1AQ9UX8Aruf3PRQ8u4vbo0pZ
QYg1MyT8CPhlOw6C4yxquv3RQQ442oTe9cwM1Oy+MbqFVD4hYA+BR/YN5DwoX6p5
MnvbS/yJ4M6KD9XPJq1/YVFKN+CHipnxHSySJozgp1INQF3AhIY06nVkwsFoqYDs
dg7F51/OQmJIIzaKIQ61oDvXHosldCFkwl/qrlRS9U/DFuP6TiR1ReKb2MOQfKNS
JZkUOttZ+VvggA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:31:50 2025 by rpki-client