Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
File: UuQA66N5CiRc2rS05nu01gu-e0A.mft (raw, json)
Hash identifier: kdrPY03j9L+aaHmAE8DdzFE4vjdZ84Ry9PvTfhlTZ1s=
Subject key identifier: 89:E1:A7:A4:E4:C9:8C:34:A1:7C:BE:8B:A5:EC:78:0D:14:CB:CF:40
Authority key identifier: 52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
Certificate issuer: /CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Certificate serial: 01992330CA7665723A015FE1706F69EEE85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
Manifest number: 0EC7
Signing time: Sun 07 Sep 2025 08:00:24 +0000
Manifest this update: Sun 07 Sep 2025 08:00:24 +0000
Manifest next update: Mon 08 Sep 2025 08:00:24 +0000
Files and hashes: 1: UuQA66N5CiRc2rS05nu01gu-e0A.crl (hash: LmoxPCUAK81+lPmSGUIIdx9HCBrz2DSggaL9/661Qh8=)
2: rtVpNZa3L_NWvprN4f-UPAZwfTo.roa (hash: 2HzqWuMhkSfDBFXNVGHFl9K4DvsafbSLLfoHlblLKUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ca:76:65:72:3a:01:5f:e1:70:6f:69:ee:e8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Validity
Not Before: Sep 7 08:00:24 2025 GMT
Not After : Sep 8 08:00:24 2025 GMT
Subject: CN=89e1a7a4e4c98c34a17cbe8ba5ec780d14cbcf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:d3:03:22:57:7f:a9:1a:a0:7c:c3:f8:27:
52:db:ca:b9:c3:0a:88:4e:d5:88:55:c6:43:79:07:
e2:b2:ea:c2:49:1c:30:9f:38:d5:35:0c:7e:50:c2:
e9:f7:39:75:18:19:6c:ab:56:b3:5b:d7:4a:52:80:
9b:f5:e9:2c:5b:8b:6e:a6:79:c8:19:ae:3c:4e:a4:
cc:5e:60:4e:70:e0:34:8b:c1:f8:f4:57:0f:aa:1d:
6c:7a:f2:cb:09:f7:02:f6:c5:c6:02:9d:1e:19:f0:
17:3a:da:e7:52:32:ba:d3:44:41:6d:58:cf:b8:38:
10:2e:c0:03:d3:51:4c:29:1e:52:a8:d1:33:c9:29:
70:d0:0b:e4:0d:88:13:fe:5f:2f:fe:a2:88:15:13:
b1:85:1e:68:46:ee:3e:41:af:62:90:c9:e9:cb:ca:
42:fc:8c:b8:7b:0e:79:48:92:52:75:e8:60:58:5a:
b7:ab:61:06:9d:14:5b:b9:e2:c9:de:3e:7f:9d:23:
f9:b7:83:1f:ab:93:b2:26:93:86:86:b0:bf:8b:11:
e9:e8:85:a1:c1:41:ce:94:51:b0:82:de:4c:ff:68:
66:f2:7b:c9:83:a0:10:92:af:78:64:ab:6f:a3:2c:
53:85:ca:d3:3e:b5:c0:7f:28:38:f5:46:ee:16:a5:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E1:A7:A4:E4:C9:8C:34:A1:7C:BE:8B:A5:EC:78:0D:14:CB:CF:40
X509v3 Authority Key Identifier:
keyid:52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:88:76:af:d9:82:44:77:00:12:d4:b3:e7:96:e3:49:b4:ae:
69:a5:1a:7f:f8:13:97:29:87:08:b9:d0:c7:a6:d5:62:53:b0:
c2:bf:5c:b3:93:ed:90:6a:4e:40:ae:39:59:0b:7b:d6:17:52:
29:4e:1f:b2:56:1f:e4:49:38:ed:bb:cb:d5:13:94:36:a3:40:
01:90:52:fb:fb:63:8f:78:76:ea:82:83:97:16:df:37:41:d5:
1e:dc:cb:72:0d:3c:28:b0:d9:b8:a7:8e:80:cd:3d:49:89:9b:
bc:17:7d:5b:bc:51:02:c7:5f:40:4c:61:96:15:84:79:ba:31:
8b:31:33:34:96:6c:57:32:f5:dd:8b:39:da:f2:01:da:99:17:
1a:ae:fd:7d:c0:d8:a9:76:f7:a2:7e:95:f1:70:49:8b:07:64:
ee:29:7b:bf:e7:36:c7:b3:58:1f:74:8f:e0:a6:1f:e0:06:77:
e9:f7:52:91:e1:42:b0:1a:d4:23:b6:3d:a7:ba:44:a4:d2:41:
98:17:e4:6f:27:79:4f:2c:01:4d:9c:18:17:3d:81:6d:a8:80:
c6:7a:60:c0:ce:4b:7b:d3:f6:59:10:3f:62:66:9a:de:23:c9:
d5:2f:7f:e8:fc:2f:8c:53:26:8a:5b:ad:d6:19:13:a4:9a:4d:
00:2e:f6:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMMp2ZXI6AV/hcG9p7uhfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTQwMGViYTM3OTBhMjQ1Y2RhYjRiNGU2N2JiNGQ2MGJi
ZTdiNDAwHhcNMjUwOTA3MDgwMDI0WhcNMjUwOTA4MDgwMDI0WjAzMTEwLwYDVQQD
Eyg4OWUxYTdhNGU0Yzk4YzM0YTE3Y2JlOGJhNWVjNzgwZDE0Y2JjZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO/TAyJXf6kaoHzD+CdS28q5wwqI
TtWIVcZDeQfisurCSRwwnzjVNQx+UMLp9zl1GBlsq1azW9dKUoCb9eksW4tupnnI
Ga48TqTMXmBOcOA0i8H49FcPqh1sevLLCfcC9sXGAp0eGfAXOtrnUjK600RBbVjP
uDgQLsAD01FMKR5SqNEzySlw0AvkDYgT/l8v/qKIFROxhR5oRu4+Qa9ikMnpy8pC
/Iy4ew55SJJSdehgWFq3q2EGnRRbueLJ3j5/nSP5t4Mfq5OyJpOGhrC/ixHp6IWh
wUHOlFGwgt5M/2hm8nvJg6AQkq94ZKtvoyxThcrTPrXAfyg49UbuFqWeKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInhp6TkyYw0oXy+i6XseA0Uy89AMB8GA1UdIwQY
MBaAFFLkAOujeQokXNq0tOZ7tNYLvntAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVRQTY2TjVDaVJjMnJTMDVudTAxZ3UtZTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lM2QxOWYtMjhmYi00NWNiLWFmZTAt
Zjk3YWQzMDQ0ZTAyLzEvVXVRQTY2TjVDaVJjMnJTMDVudTAxZ3UtZTBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lM2QxOWYtMjhmYi00NWNiLWFmZTAtZjk3YWQzMDQ0ZTAy
LzEvVXVRQTY2TjVDaVJjMnJTMDVudTAxZ3UtZTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoh2r9mC
RHcAEtSz55bjSbSuaaUaf/gTlymHCLnQx6bVYlOwwr9cs5PtkGpOQK45WQt71hdS
KU4fslYf5Ek47bvL1ROUNqNAAZBS+/tjj3h26oKDlxbfN0HVHtzLcg08KLDZuKeO
gM09SYmbvBd9W7xRAsdfQExhlhWEeboxizEzNJZsVzL13Ys52vIB2pkXGq79fcDY
qXb3on6V8XBJiwdk7il7v+c2x7NYH3SP4KYf4AZ36fdSkeFCsBrUI7Y9p7pEpNJB
mBfkbyd5TywBTZwYFz2BbaiAxnpgwM5Le9P2WRA/Ymaa3iPJ1S9/6PwvjFMmilut
1hkTpJpNAC72Kw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:27 2025 by rpki-client