Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File: UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier: Jy9vUph/VjOlu86pi2DhInDABwn7sRwR7U9c+6BjbG0=
Subject key identifier: 4C:F5:29:13:36:7B:83:DC:72:2F:8F:AA:95:A5:F4:12:B1:52:A6:1C
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial: 0199277B901B1E5638B8417BDD40E437E5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number: 1395
Signing time: Mon 08 Sep 2025 04:00:33 +0000
Manifest this update: Mon 08 Sep 2025 04:00:33 +0000
Manifest next update: Tue 09 Sep 2025 04:00:33 +0000
Files and hashes: 1: 1qF2qpZ4KDEQgCHi8Zz6Mofp1Bw.roa (hash: ZUGdPkmwhsuvGIfhBFvpGPh0RIr8NwcoDU94MyjHlG0=)
2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: MMY0FLV8BqbFNSY+RdKn02ix9GVAvkNGKIfV4Z3EwGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7b:90:1b:1e:56:38:b8:41:7b:dd:40:e4:37:e5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Validity
Not Before: Sep 8 04:00:33 2025 GMT
Not After : Sep 9 04:00:33 2025 GMT
Subject: CN=4cf52913367b83dc722f8faa95a5f412b152a61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:6c:8c:2d:c3:5b:d1:6b:fa:0d:d5:84:49:
a4:b1:d7:bc:17:7e:9a:b8:49:b3:c4:ad:91:d7:2f:
5f:14:bb:76:1f:75:4f:42:60:72:94:53:eb:c3:6d:
18:9b:87:cd:fd:44:77:f7:4e:b0:1b:24:56:77:94:
56:ad:7b:49:0c:20:6d:f9:29:03:09:4a:07:70:5b:
2c:3c:94:42:ab:b8:53:b1:1f:de:3d:13:8e:6a:a7:
59:92:36:39:ba:fc:ab:30:3a:b1:62:79:30:7f:6c:
d7:84:a7:18:f8:94:e7:2a:23:5f:ef:6d:ef:8f:5e:
98:db:c6:b0:68:ea:6a:e6:53:cb:51:82:47:16:3a:
09:8e:af:c8:57:d0:4b:c3:c1:4a:a3:ff:00:9a:d0:
7d:47:05:18:fb:94:88:c4:83:84:a0:fd:46:4e:5c:
92:a7:27:02:20:a8:77:be:81:ff:67:d1:9d:c7:a2:
db:87:a2:35:0a:00:ef:c7:a1:4e:1d:ac:08:28:3e:
e9:8d:3b:33:50:e7:d0:5c:82:db:6b:38:b5:cc:d7:
bc:46:7c:91:55:3c:63:66:6b:69:16:6d:42:c3:42:
16:6c:27:eb:66:5b:91:1f:94:6f:59:14:f4:e1:ad:
ca:21:e5:58:ec:63:5b:6b:6f:7a:5e:05:aa:a0:02:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F5:29:13:36:7B:83:DC:72:2F:8F:AA:95:A5:F4:12:B1:52:A6:1C
X509v3 Authority Key Identifier:
keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:61:9d:9b:01:b4:7b:56:b2:7e:79:5e:92:39:57:d2:dc:50:
82:7d:a1:6b:1b:80:86:95:0d:51:8b:cb:2b:05:18:b0:41:52:
71:cc:4b:be:92:b0:e8:20:8c:86:63:e9:06:c3:9d:0d:60:39:
a1:d7:8c:d6:5c:92:a7:f5:83:67:5f:36:af:2f:b0:f8:72:e2:
b6:0a:51:0e:de:9a:5f:2c:b0:09:9e:29:ce:94:4c:1a:46:6e:
6e:13:33:00:9a:10:0c:3b:b6:fd:89:9d:03:a4:65:3a:8b:06:
b8:18:52:b9:9f:67:75:2f:9b:ea:de:60:b9:fd:9e:bd:52:71:
cc:5b:19:21:d5:a2:05:c1:4f:ed:59:44:03:eb:fb:20:cb:1c:
6c:49:8a:d2:21:57:a7:df:9a:50:60:b9:95:3d:11:ff:26:b1:
c5:69:d6:8b:0d:1a:42:1f:70:fb:03:87:f9:08:2b:f1:0f:bb:
73:d9:fb:bf:d5:65:8b:09:f6:0c:40:8c:f3:04:31:87:cb:0e:
29:00:45:4e:81:59:d1:ec:ad:2e:1d:cc:21:c3:d8:44:ea:2b:
dd:03:8a:66:f8:ca:3d:ac:19:c0:d7:84:74:6a:16:8a:a4:de:
98:ff:e8:cc:e3:62:58:2f:21:ba:b4:16:ad:1e:ba:65:b3:8a:
41:ac:7c:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkne5AbHlY4uEF73UDkN+XEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNzBkYzUyMDRkZWNmN2FiZWE1MDcwZDc1ZmEwNThjOGFj
MDEzZDUwHhcNMjUwOTA4MDQwMDMzWhcNMjUwOTA5MDQwMDMzWjAzMTEwLwYDVQQD
Eyg0Y2Y1MjkxMzM2N2I4M2RjNzIyZjhmYWE5NWE1ZjQxMmIxNTJhNjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uRsjC3DW9Fr+g3VhEmksde8F36a
uEmzxK2R1y9fFLt2H3VPQmBylFPrw20Ym4fN/UR3906wGyRWd5RWrXtJDCBt+SkD
CUoHcFssPJRCq7hTsR/ePROOaqdZkjY5uvyrMDqxYnkwf2zXhKcY+JTnKiNf723v
j16Y28awaOpq5lPLUYJHFjoJjq/IV9BLw8FKo/8AmtB9RwUY+5SIxIOEoP1GTlyS
pycCIKh3voH/Z9Gdx6Lbh6I1CgDvx6FOHawIKD7pjTszUOfQXILbazi1zNe8RnyR
VTxjZmtpFm1Cw0IWbCfrZluRH5RvWRT04a3KIeVY7GNba296XgWqoAKW6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEz1KRM2e4Pcci+PqpWl9BKxUqYcMB8GA1UdIwQY
MBaAFFBw3FIE3s96vqUHDXX6BYyKwBPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hMjhiNWMtODhkNy00YWQ0LTllMWQt
OGFjMTdlOWM0MGRiLzEvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hMjhiNWMtODhkNy00YWQ0LTllMWQtOGFjMTdlOWM0MGRi
LzEvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWGdmwG0
e1ayfnlekjlX0txQgn2haxuAhpUNUYvLKwUYsEFSccxLvpKw6CCMhmPpBsOdDWA5
odeM1lySp/WDZ182ry+w+HLitgpRDt6aXyywCZ4pzpRMGkZubhMzAJoQDDu2/Ymd
A6RlOosGuBhSuZ9ndS+b6t5guf2evVJxzFsZIdWiBcFP7VlEA+v7IMscbEmK0iFX
p9+aUGC5lT0R/yaxxWnWiw0aQh9w+wOH+Qgr8Q+7c9n7v9Vliwn2DECM8wQxh8sO
KQBFToFZ0eytLh3MIcPYROor3QOKZvjKPawZwNeEdGoWiqTemP/ozONiWC8hurQW
rR66ZbOKQax8Gg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:06:59 2025 by rpki-client