Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: qwItyPkgdU0J64GneHhgEgHIxHbCOLHYqyxWbf3md2o=
Subject key identifier: 95:A9:92:53:0F:76:56:F1:7D:C0:32:1F:EC:85:44:6D:D9:60:B8:70
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 0197643A568E6B06F16C755DA0F4ED5CF290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 13:00:34 +0000
Manifest this update: Thu 12 Jun 2025 13:00:34 +0000
Manifest next update: Fri 13 Jun 2025 13:00:34 +0000
Files and hashes: 1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: SkL3xZh/hEqQd5RsmvLewhGTuuR4qhRLP20T0Ng2i24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:3a:56:8e:6b:06:f1:6c:75:5d:a0:f4:ed:5c:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Jun 12 13:00:34 2025 GMT
Not After : Jun 13 13:00:34 2025 GMT
Subject: CN=95a992530f7656f17dc0321fec85446dd960b870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:fd:b8:7e:d4:08:cf:4d:38:63:f5:b9:b5:
6e:fe:71:9e:fa:7c:2f:5b:a6:b0:02:a1:c5:01:7a:
89:40:44:42:28:e4:75:2f:11:8e:be:55:e8:27:95:
e7:35:4c:dd:a7:86:9a:43:d0:79:36:46:91:25:6e:
b8:f3:b6:c6:82:f7:0e:c2:82:92:fb:46:39:97:e8:
46:ec:6f:98:a7:b4:e5:a9:cf:5d:b1:80:e6:aa:59:
ed:99:e9:af:56:c6:1f:16:65:bb:a2:71:51:77:aa:
1b:c0:66:30:bf:93:b9:99:55:e6:bf:c9:e0:0c:68:
21:7a:37:04:b3:19:07:64:e0:2e:bb:18:e4:1e:42:
e0:3f:06:ba:38:d5:b2:ea:42:be:94:dd:74:af:34:
57:1d:07:83:12:15:e8:f9:54:bd:34:eb:51:6d:b1:
a6:e5:a2:04:4a:4b:ce:ed:89:17:82:ba:ed:41:fd:
73:a3:13:e7:b8:2c:12:9e:1e:8e:7e:30:00:2d:44:
25:1f:9c:96:5b:e9:8a:6f:73:8d:ae:47:83:48:a3:
eb:1e:81:61:00:3d:7e:c9:06:91:10:a2:73:d7:be:
66:2a:7b:be:8e:88:20:cb:11:c0:69:cc:4f:f6:24:
88:8f:4f:54:5f:f8:d2:75:b3:8b:08:5e:04:23:4d:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A9:92:53:0F:76:56:F1:7D:C0:32:1F:EC:85:44:6D:D9:60:B8:70
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1f:c2:85:37:91:f2:3f:3f:e1:b2:4c:5f:dc:af:62:85:4e:
44:9b:d9:03:f1:e7:41:cb:de:ae:07:30:29:2f:cd:fe:d0:3c:
b0:76:47:ed:df:c5:8e:a6:9e:65:ac:e4:b3:32:24:81:93:2a:
77:48:12:78:b5:f8:bc:bc:c4:fe:dd:49:af:bd:26:44:01:e0:
b8:49:d9:40:ce:80:20:f1:bc:20:69:a3:84:40:b1:bd:12:bb:
14:59:ce:ad:96:62:9b:c3:a3:7d:b8:68:27:59:23:25:1d:93:
c1:63:fb:a0:e7:ab:1a:e8:67:97:8a:bb:ce:f1:4b:1a:f1:cc:
53:eb:83:f3:10:fe:c5:6b:6a:01:2b:37:a7:96:62:8c:29:b7:
b4:3b:88:6a:d6:c0:a6:5a:4f:ca:a9:85:fd:4b:58:25:3e:a3:
12:15:e0:e7:ef:79:b1:88:71:e2:6a:ee:db:e6:2d:71:5f:78:
2a:e5:eb:5d:4a:03:ca:59:1b:1d:bc:72:03:8f:a1:ca:85:31:
3e:64:4c:29:fa:1f:38:86:bd:f7:42:37:d3:1b:61:9a:52:fd:
aa:51:37:75:10:16:32:e1:98:b2:c6:f6:9e:57:fb:60:53:b0:
d6:53:70:dd:f2:bf:b6:d6:02:88:81:ef:c1:df:f4:05:c2:d9:
29:2a:2f:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkOlaOawbxbHVdoPTtXPKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNDNkZWQ3NDViMDVmNDAzOGU5ODNmYjlkNzhlZGY1NmYy
NTEzNDYwHhcNMjUwNjEyMTMwMDM0WhcNMjUwNjEzMTMwMDM0WjAzMTEwLwYDVQQD
Eyg5NWE5OTI1MzBmNzY1NmYxN2RjMDMyMWZlYzg1NDQ2ZGQ5NjBiODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoz9uH7UCM9NOGP1ubVu/nGe+nwv
W6awAqHFAXqJQERCKOR1LxGOvlXoJ5XnNUzdp4aaQ9B5NkaRJW6487bGgvcOwoKS
+0Y5l+hG7G+Yp7Tlqc9dsYDmqlntmemvVsYfFmW7onFRd6obwGYwv5O5mVXmv8ng
DGghejcEsxkHZOAuuxjkHkLgPwa6ONWy6kK+lN10rzRXHQeDEhXo+VS9NOtRbbGm
5aIESkvO7YkXgrrtQf1zoxPnuCwSnh6OfjAALUQlH5yWW+mKb3ONrkeDSKPrHoFh
AD1+yQaREKJz175mKnu+joggyxHAacxP9iSIj09UX/jSdbOLCF4EI00x2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWpklMPdlbxfcAyH+yFRG3ZYLhwMB8GA1UdIwQY
MBaAFFJD3tdFsF9AOOmD+5147fVvJRNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMt
YzUzNmRmNWMyNzRlLzEvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMtYzUzNmRmNWMyNzRl
LzEvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlB/ChTeR
8j8/4bJMX9yvYoVORJvZA/HnQcvergcwKS/N/tA8sHZH7d/FjqaeZazkszIkgZMq
d0gSeLX4vLzE/t1Jr70mRAHguEnZQM6AIPG8IGmjhECxvRK7FFnOrZZim8Ojfbho
J1kjJR2TwWP7oOerGuhnl4q7zvFLGvHMU+uD8xD+xWtqASs3p5ZijCm3tDuIatbA
plpPyqmF/UtYJT6jEhXg5+95sYhx4mru2+YtcV94KuXrXUoDylkbHbxyA4+hyoUx
PmRMKfofOIa990I30xthmlL9qlE3dRAWMuGYssb2nlf7YFOw1lNw3fK/ttYCiIHv
wd/0BcLZKSovWg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 21:29:44 2025 by rpki-client