Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File: uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier: kORFHmzB9rYQrLAeNfimN6ylK/LKpT5WtP5sJKa6Rfk=
Subject key identifier: 94:2B:0E:EF:E7:87:6B:0C:BE:8D:F6:FB:C3:C2:D6:43:9E:E4:6A:07
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 0199233172CBEB88BF8C765D188B723227E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:01:07 +0000
Manifest this update: Sun 07 Sep 2025 08:01:07 +0000
Manifest next update: Mon 08 Sep 2025 08:01:07 +0000
Files and hashes: 1: J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa (hash: edy80RXVye8xP8f43mCgyStXMeEBN6IE5pQ7y7lCAc8=)
2: RNunNkTlRavCIWC6GWUuTV58ZmQ.roa (hash: gKrJFKjacm0BkE8pyBxq+mcxr78x3vhWqOMKiIcTERc=)
3: TV8n2Nhf92M5RowrecsMHv_G6_Q.roa (hash: gbZyNyumFupj0Q0mMep5WOuD2tZvRRISK0wECqrhMRg=)
4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: OxK2+Az8frWR0+Q5c/1YRyWRq1bT0PuBneWDuqtxR7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:72:cb:eb:88:bf:8c:76:5d:18:8b:72:32:27:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: Sep 7 08:01:07 2025 GMT
Not After : Sep 8 08:01:07 2025 GMT
Subject: CN=942b0eefe7876b0cbe8df6fbc3c2d6439ee46a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:3b:8b:d9:1e:39:33:76:03:47:69:0f:f7:
23:11:30:01:1f:97:9e:21:92:44:5b:ce:b8:e5:1e:
5d:ff:f3:fa:5b:d0:33:ba:f5:4e:0a:d6:90:f3:f5:
b0:24:29:53:30:67:0e:f4:08:5e:e1:93:15:24:df:
41:d0:eb:75:93:2c:f8:f9:47:f7:e3:c8:b8:e6:5b:
fb:26:34:70:0d:b0:ee:94:41:f4:a4:f3:45:80:0e:
1c:9f:e1:ad:6b:5c:ba:4e:87:15:25:bf:8b:75:e0:
9f:9d:11:b2:b0:62:45:88:02:a4:c1:28:c9:8c:8e:
ed:74:39:5c:8d:e1:9e:46:9a:f7:6d:5d:a5:02:29:
68:13:46:96:5d:cb:de:6d:0f:3f:f6:55:c9:b0:4f:
43:16:84:21:e3:b4:c1:93:53:5e:05:43:10:f5:5e:
e7:99:ee:d5:43:4e:41:d8:c0:25:82:8c:64:ea:0a:
9d:99:40:1d:ca:f5:be:ae:0f:9b:d8:2e:62:a6:dd:
9c:86:91:db:23:fd:16:af:cb:c3:7b:a9:1d:d7:5b:
fe:61:9f:f2:c8:11:89:c7:59:f7:64:9c:9b:08:69:
55:8e:3a:9c:c3:2e:09:ee:8b:9b:a0:a0:e8:86:7a:
4b:90:44:bd:b9:1a:6f:52:d6:cd:61:90:9d:7c:cd:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2B:0E:EF:E7:87:6B:0C:BE:8D:F6:FB:C3:C2:D6:43:9E:E4:6A:07
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:db:45:54:77:21:dd:0d:ef:da:f2:96:b0:f9:71:8a:8e:78:
21:0d:d1:ab:c0:1c:96:4e:62:5e:1f:7d:be:4b:9d:be:a4:c3:
5f:07:3d:42:3b:7a:9a:ff:56:b9:63:59:21:62:1b:6b:fa:6e:
e3:0a:92:c4:c4:54:8f:1a:c0:6b:be:57:05:49:bf:83:49:75:
b2:9c:20:10:88:df:b9:0c:c8:e5:dc:4a:fb:e4:a2:26:9e:3e:
0d:78:bc:0d:23:3a:a1:46:0a:b7:01:ab:91:36:59:39:01:bb:
f7:e8:d3:14:6c:4b:6d:0f:c9:19:b6:4c:1f:91:15:76:a8:ff:
d7:c6:14:b4:2e:6b:c0:98:df:06:65:7e:fc:8b:2f:24:22:c4:
f7:f6:65:46:9f:0f:4f:29:92:b7:7b:ae:41:d2:33:41:ce:1e:
0d:83:7f:00:a1:43:70:0d:46:53:50:ff:e8:fc:a2:81:cc:62:
83:e3:0e:0d:49:d7:2e:41:c6:54:46:75:77:68:a5:61:23:57:
aa:c4:ac:34:c8:1b:2d:85:79:79:cc:68:a7:6a:36:0f:d3:f2:
c4:e5:20:18:03:69:f0:a7:78:23:7a:af:78:e4:91:be:bd:f7:
4d:c0:d0:d3:25:7f:2c:f8:6f:ff:a3:d2:30:44:54:0c:75:38:
07:7d:19:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMXLL64i/jHZdGItyMifoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MjEyNzdmM2U3OTU0YTRhZjU1MjBhOTkwNDJmYjA4OTNh
ZjgwNGQwHhcNMjUwOTA3MDgwMTA3WhcNMjUwOTA4MDgwMTA3WjAzMTEwLwYDVQQD
Eyg5NDJiMGVlZmU3ODc2YjBjYmU4ZGY2ZmJjM2MyZDY0MzllZTQ2YTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOU7i9keOTN2A0dpD/cjETABH5ee
IZJEW8645R5d//P6W9AzuvVOCtaQ8/WwJClTMGcO9Ahe4ZMVJN9B0Ot1kyz4+Uf3
48i45lv7JjRwDbDulEH0pPNFgA4cn+Gta1y6TocVJb+LdeCfnRGysGJFiAKkwSjJ
jI7tdDlcjeGeRpr3bV2lAiloE0aWXcvebQ8/9lXJsE9DFoQh47TBk1NeBUMQ9V7n
me7VQ05B2MAlgoxk6gqdmUAdyvW+rg+b2C5ipt2chpHbI/0Wr8vDe6kd11v+YZ/y
yBGJx1n3ZJybCGlVjjqcwy4J7ouboKDohnpLkES9uRpvUtbNYZCdfM31NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQrDu/nh2sMvo32+8PC1kOe5GoHMB8GA1UdIwQY
MBaAFLkhJ38+eVSkr1UgqZBC+wiTr4BNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84Y2NiY2MtY2Q1MS00NGFlLThmMDUt
MzZmZDIzMzUxNGY5LzEvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84Y2NiY2MtY2Q1MS00NGFlLThmMDUtMzZmZDIzMzUxNGY5
LzEvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedtFVHch
3Q3v2vKWsPlxio54IQ3Rq8Aclk5iXh99vkudvqTDXwc9Qjt6mv9WuWNZIWIba/pu
4wqSxMRUjxrAa75XBUm/g0l1spwgEIjfuQzI5dxK++SiJp4+DXi8DSM6oUYKtwGr
kTZZOQG79+jTFGxLbQ/JGbZMH5EVdqj/18YUtC5rwJjfBmV+/IsvJCLE9/ZlRp8P
TymSt3uuQdIzQc4eDYN/AKFDcA1GU1D/6Pyigcxig+MODUnXLkHGVEZ1d2ilYSNX
qsSsNMgbLYV5ecxop2o2D9PyxOUgGANp8Kd4I3qveOSRvr33TcDQ0yV/LPhv/6PS
MERUDHU4B30ZEg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:47 2025 by rpki-client