Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
File: uHLaD5xsVoaj257hJKmQQrCogtE.mft (raw, json)
Hash identifier: M93iE+nQueD2Q7RWJO1D93XUC+tNwjAln05MyS8e1ww=
Subject key identifier: C2:4F:34:A9:4B:A6:3B:A1:58:39:DD:64:F6:DF:C3:8B:70:4D:CB:71
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial: 019851FABCE4B6ADD0F58ED2B7E741DA53C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 17:00:43 +0000
Manifest this update: Mon 28 Jul 2025 17:00:43 +0000
Manifest next update: Tue 29 Jul 2025 17:00:43 +0000
Files and hashes: 1: GwSclZbmW8WnUrygOTuyHlhOctc.roa (hash: 90yBE3rANCosAdjpMcBIDjsdlrAf7rrR2qzNpEkH8d8=)
2: RfhpUZchJkPP_5lxJHpNkmuGgNY.roa (hash: RyK9ORXOIgQu7p+VQmGJ1kdgaVVGVyFljq/xoyhLEM0=)
3: XK_-DoYkAq0FQtHBeHEZBiwTbtU.roa (hash: oLiyfMEZ+8NuCZuPjPWFi0zBy3xSJ1joH9/Uajj7btQ=)
4: uHLaD5xsVoaj257hJKmQQrCogtE.crl (hash: 7pYqE/uDlm4q3wb+Va6N2dj2JVzf8nhwWPQouYhfWzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:bc:e4:b6:ad:d0:f5:8e:d2:b7:e7:41:da:53:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Validity
Not Before: Jul 28 17:00:43 2025 GMT
Not After : Jul 29 17:00:43 2025 GMT
Subject: CN=c24f34a94ba63ba15839dd64f6dfc38b704dcb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d6:79:44:84:cb:1e:43:ac:ee:60:62:21:9f:
89:cf:db:9f:19:93:cb:14:cc:25:9d:df:53:cd:83:
8a:69:68:57:b4:d6:22:e9:e9:6c:a3:2a:ba:ae:b4:
15:f1:05:71:80:b4:da:db:90:1e:ad:84:c5:2d:56:
25:d7:52:ab:6d:59:46:1c:4d:15:63:6f:75:eb:b1:
4f:a5:47:cb:e6:70:5b:6e:59:6f:3a:f2:70:41:c7:
5d:b3:91:a3:70:0d:2d:19:0a:bd:66:e5:aa:a9:fb:
99:19:b5:a0:f7:97:d7:d8:af:39:e1:24:b5:4f:e3:
ea:47:e4:ad:ff:34:fc:fd:1e:c5:e8:59:e2:99:36:
70:67:63:85:25:ee:d7:23:1f:14:b6:3f:20:5f:84:
45:8f:1a:31:4d:47:b0:b1:7c:2e:6f:84:f2:76:cf:
14:c0:0e:6b:d5:5d:2e:8d:bb:67:a6:c0:67:83:67:
59:2b:51:6b:26:26:d5:e6:b1:8f:58:b3:aa:8c:99:
a1:2c:46:47:40:04:33:c5:e9:9f:1d:e3:78:28:28:
df:19:df:72:23:74:b9:f6:0c:10:f0:94:a9:5f:01:
0d:2f:c0:2f:39:e6:1a:2b:36:f6:0a:1d:7c:ea:bc:
f3:9f:18:47:d6:a6:95:bc:89:64:81:ec:e7:b7:70:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:34:A9:4B:A6:3B:A1:58:39:DD:64:F6:DF:C3:8B:70:4D:CB:71
X509v3 Authority Key Identifier:
keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:90:e4:87:6c:45:ab:74:52:2c:ca:bb:a5:e1:fd:44:b0:aa:
b0:43:c9:80:bc:80:ef:cb:99:f6:f9:4d:c3:72:fd:ae:02:e1:
70:33:24:59:a6:14:6c:74:43:2d:0e:ab:6f:d1:ff:ff:52:b9:
38:1e:aa:05:e3:29:ab:fa:9e:0f:cf:aa:24:63:35:00:e3:cf:
23:c7:ac:08:ca:78:bb:1b:b3:57:4f:f5:88:70:4d:82:1d:b4:
db:5e:ec:22:ca:1b:78:b8:9d:f6:4f:e2:5b:21:c8:1f:d4:74:
4c:0b:e1:b7:69:1b:e0:de:b7:4c:39:8f:ed:a0:f8:ab:2e:11:
12:fc:3b:54:d2:3b:25:9f:fb:3b:84:c6:0c:00:ea:42:47:16:
9d:43:71:f9:af:cd:e3:2c:14:74:8c:53:c2:b6:97:ce:55:cb:
56:73:33:59:d6:5d:e0:31:d7:3d:6f:4f:b4:7f:ec:88:03:93:
75:41:6a:ad:61:cc:c0:28:da:e3:35:c1:a2:73:eb:5f:1b:b4:
24:55:f9:56:41:f0:6c:1e:e1:0c:52:4a:06:b6:b8:d3:0a:21:
cd:15:a9:be:8a:ee:56:9f:43:76:a1:1d:f1:b6:99:8a:bc:ae:
c1:5d:97:8c:13:0e:ca:eb:a9:2c:89:4a:32:eb:70:70:59:4b:
bb:50:3d:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhR+rzktq3Q9Y7St+dB2lPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NzJkYTBmOWM2YzU2ODZhM2RiOWVlMTI0YTk5MDQyYjBh
ODgyZDEwHhcNMjUwNzI4MTcwMDQzWhcNMjUwNzI5MTcwMDQzWjAzMTEwLwYDVQQD
EyhjMjRmMzRhOTRiYTYzYmExNTgzOWRkNjRmNmRmYzM4YjcwNGRjYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NZ5RITLHkOs7mBiIZ+Jz9ufGZPL
FMwlnd9TzYOKaWhXtNYi6elsoyq6rrQV8QVxgLTa25AerYTFLVYl11KrbVlGHE0V
Y29167FPpUfL5nBbbllvOvJwQcdds5GjcA0tGQq9ZuWqqfuZGbWg95fX2K854SS1
T+PqR+St/zT8/R7F6FnimTZwZ2OFJe7XIx8Utj8gX4RFjxoxTUewsXwub4Tyds8U
wA5r1V0ujbtnpsBng2dZK1FrJibV5rGPWLOqjJmhLEZHQAQzxemfHeN4KCjfGd9y
I3S59gwQ8JSpXwENL8AvOeYaKzb2Ch186rzznxhH1qaVvIlkgeznt3CxrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJPNKlLpjuhWDndZPbfw4twTctxMB8GA1UdIwQY
MBaAFLhy2g+cbFaGo9ue4SSpkEKwqILRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMt
ZTIzMTAzYTg4MDUyLzEvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMtZTIzMTAzYTg4MDUy
LzEvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZDkh2xF
q3RSLMq7peH9RLCqsEPJgLyA78uZ9vlNw3L9rgLhcDMkWaYUbHRDLQ6rb9H//1K5
OB6qBeMpq/qeD8+qJGM1AOPPI8esCMp4uxuzV0/1iHBNgh20217sIsobeLid9k/i
WyHIH9R0TAvht2kb4N63TDmP7aD4qy4REvw7VNI7JZ/7O4TGDADqQkcWnUNx+a/N
4ywUdIxTwraXzlXLVnMzWdZd4DHXPW9PtH/siAOTdUFqrWHMwCja4zXBonPrXxu0
JFX5VkHwbB7hDFJKBra40wohzRWpvoruVp9DdqEd8baZiryuwV2XjBMOyuupLIlK
MutwcFlLu1A9Ow==
-----END CERTIFICATE-----
Generated at Mon Jul 28 22:33:46 2025 by rpki-client