Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: 33T+MByBBLZMwjUYYGSpoun10Bj6NglEapz9RR5BBnM=
Subject key identifier: 38:F9:B4:2C:17:71:8E:9B:CD:ED:5E:26:1E:F7:6E:A8:53:75:FB:94
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 01974AB197BD64164B450C0C65B75547D1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 14:00:42 +0000
Manifest this update: Sat 07 Jun 2025 14:00:42 +0000
Manifest next update: Sun 08 Jun 2025 14:00:42 +0000
Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=)
2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=)
3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: Ay5UlB8pQDE+gzAfexPk9n2gslKFjkDtJH/m23whZog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:97:bd:64:16:4b:45:0c:0c:65:b7:55:47:d1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Jun 7 14:00:42 2025 GMT
Not After : Jun 8 14:00:42 2025 GMT
Subject: CN=38f9b42c17718e9bcded5e261ef76ea85375fb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:1c:2b:22:79:c5:6b:1a:23:51:fd:0b:71:
a3:53:dd:3e:4b:89:ec:55:de:e5:04:d8:33:b3:ff:
9e:bd:ee:9d:fe:48:5c:39:a9:0d:0f:f8:fb:37:85:
1e:1c:1b:25:99:32:b5:e7:6b:37:7f:65:a0:35:1e:
46:f2:e4:83:0d:92:40:74:5d:98:cc:5e:4f:71:e0:
67:1e:f7:a5:28:b9:8d:04:6a:d2:a3:6f:08:da:2c:
98:d5:d5:8f:ea:a3:79:35:e1:bb:e9:df:2b:d8:46:
e0:28:36:cb:c8:c7:08:d1:57:8c:a8:45:5f:24:4f:
5d:a5:1f:26:1f:0b:58:bd:25:e2:ab:45:8c:09:38:
18:1d:9b:c8:fb:46:46:5c:65:aa:a8:41:88:73:84:
f0:1d:24:b8:45:4a:6a:03:6a:b6:fe:ed:23:c1:f1:
43:27:61:fe:91:34:71:05:8a:31:2e:4d:08:62:1c:
40:5e:41:89:94:ad:89:15:f2:d7:d9:9b:4a:d1:21:
2c:4e:87:da:f6:d4:19:5e:46:02:bb:c8:7e:27:eb:
0d:f5:0a:ec:8f:95:d7:2b:5e:8f:ac:90:5c:a3:ba:
68:fb:a2:5d:e5:70:10:7f:ba:3a:a3:0d:d4:b8:ca:
33:c7:b2:5e:97:4b:26:3d:5b:88:fe:ec:de:15:96:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F9:B4:2C:17:71:8E:9B:CD:ED:5E:26:1E:F7:6E:A8:53:75:FB:94
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:12:d2:41:99:e6:6a:19:03:ff:45:1b:91:1e:24:5e:5b:49:
4e:6e:62:e1:84:35:a2:ae:ba:cc:ef:37:52:e8:3c:11:b1:07:
ab:6e:7e:43:23:cb:fe:dd:df:e8:68:c0:1e:9d:25:96:c9:f1:
17:4f:f2:36:04:0f:cd:f3:f2:0f:5c:16:80:e1:81:9d:06:89:
c7:8c:97:da:c7:4a:8a:a8:b2:42:4e:11:8b:4c:8f:a2:85:38:
21:44:00:f0:1c:df:e1:ee:df:28:06:9f:56:ae:f4:4c:76:49:
81:c6:af:03:de:71:3f:80:92:9d:4d:2c:06:43:57:bc:3a:8e:
ac:09:00:81:86:4a:37:8a:e2:9e:10:60:5c:27:c7:79:62:b0:
1b:0c:e8:24:31:76:a7:b1:37:5d:21:44:7b:73:d5:63:73:fd:
74:36:e5:0e:3d:a4:7d:d3:b9:c2:72:a5:e2:a7:d1:93:59:a8:
fe:98:c8:11:6a:24:38:b0:e9:0e:df:98:d4:7b:a9:4e:9d:b9:
b0:45:37:b5:d0:01:fa:1a:27:76:35:44:aa:43:9d:f8:89:db:
63:d1:81:02:28:b1:89:c4:f1:4e:47:ec:c3:60:3c:6e:af:cd:
46:c9:6b:e3:20:a3:7b:d5:bb:ca:7e:0d:3d:59:f3:c7:62:68:
44:4f:97:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsZe9ZBZLRQwMZbdVR9HMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz
YjU3NjIwHhcNMjUwNjA3MTQwMDQyWhcNMjUwNjA4MTQwMDQyWjAzMTEwLwYDVQQD
EygzOGY5YjQyYzE3NzE4ZTliY2RlZDVlMjYxZWY3NmVhODUzNzVmYjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIccKyJ5xWsaI1H9C3GjU90+S4ns
Vd7lBNgzs/+eve6d/khcOakND/j7N4UeHBslmTK152s3f2WgNR5G8uSDDZJAdF2Y
zF5PceBnHvelKLmNBGrSo28I2iyY1dWP6qN5NeG76d8r2EbgKDbLyMcI0VeMqEVf
JE9dpR8mHwtYvSXiq0WMCTgYHZvI+0ZGXGWqqEGIc4TwHSS4RUpqA2q2/u0jwfFD
J2H+kTRxBYoxLk0IYhxAXkGJlK2JFfLX2ZtK0SEsTofa9tQZXkYCu8h+J+sN9Qrs
j5XXK16PrJBco7po+6Jd5XAQf7o6ow3UuMozx7Jel0smPVuI/uzeFZbz7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj5tCwXcY6bze1eJh73bqhTdfuUMB8GA1UdIwQY
MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt
ZGQzYjRmODM4MWM0LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0
LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhLSQZnm
ahkD/0UbkR4kXltJTm5i4YQ1oq66zO83Uug8EbEHq25+QyPL/t3f6GjAHp0llsnx
F0/yNgQPzfPyD1wWgOGBnQaJx4yX2sdKiqiyQk4Ri0yPooU4IUQA8Bzf4e7fKAaf
Vq70THZJgcavA95xP4CSnU0sBkNXvDqOrAkAgYZKN4rinhBgXCfHeWKwGwzoJDF2
p7E3XSFEe3PVY3P9dDblDj2kfdO5wnKl4qfRk1mo/pjIEWokOLDpDt+Y1HupTp25
sEU3tdAB+hondjVEqkOd+InbY9GBAiixicTxTkfsw2A8bq/NRslr4yCje9W7yn4N
PVnzx2JoRE+XSA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:40 2025 by rpki-client