Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
File: UhqgJHWNjRBOEXnFUDmBZjav4pg.mft (raw, json)
Hash identifier: eWXbvQTDCfgc1mf1m0vXAGg1IksufNCAuqjmdR1HOds=
Subject key identifier: 76:D9:6D:AB:97:6A:54:5B:78:E5:97:68:26:25:F8:F5:B2:50:F4:24
Authority key identifier: 52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
Certificate issuer: /CN=521aa024758d8d104e1179c55039816636afe298
Certificate serial: 01993123AE1E52459E037EAE4AE8096ACDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
Manifest number: 1677
Signing time: Wed 10 Sep 2025 01:00:45 +0000
Manifest this update: Wed 10 Sep 2025 01:00:45 +0000
Manifest next update: Thu 11 Sep 2025 01:00:45 +0000
Files and hashes: 1: UhqgJHWNjRBOEXnFUDmBZjav4pg.crl (hash: 5zubhp5nf6mmULMN5RN34IBifnnA/eef8a01alCBj5o=)
2: wzHTUEDPSJ9fu6Go3MzUkAR9gVE.roa (hash: HH9rFvWwfqcHjpbJnsKsdwBfEEqoBLNu0bOt5Pi9+gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:ae:1e:52:45:9e:03:7e:ae:4a:e8:09:6a:cd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521aa024758d8d104e1179c55039816636afe298
Validity
Not Before: Sep 10 01:00:45 2025 GMT
Not After : Sep 11 01:00:45 2025 GMT
Subject: CN=76d96dab976a545b78e597682625f8f5b250f424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:5e:d9:56:67:87:9d:e8:39:9e:bc:0d:44:
2c:d5:70:78:5d:3d:f1:f1:06:3a:ad:17:8a:2d:5d:
7e:65:2a:e1:00:99:36:53:53:71:8a:7e:21:8d:35:
49:3d:28:72:27:37:87:d3:ba:1c:62:76:69:78:42:
09:0d:e4:0e:a6:92:19:f3:e6:a6:30:0d:cb:d6:02:
b5:36:e6:0e:8b:98:25:9b:18:f2:c4:6e:13:64:30:
06:ac:5d:fa:6a:78:fb:ca:c5:fb:09:57:3b:42:ac:
a4:3e:78:f7:0f:a6:77:e6:65:de:43:ea:96:04:91:
20:70:19:43:20:e7:1c:69:d0:71:4f:93:9c:cf:1c:
22:da:96:95:0c:02:6b:4c:a1:f5:6d:58:11:e2:2e:
18:50:b5:03:4b:ff:57:8d:93:de:10:3d:67:63:f9:
d6:21:48:32:6d:6a:81:bd:97:84:63:65:5f:9d:b2:
e2:74:97:38:60:57:0a:73:21:6b:ca:12:ea:fa:9a:
9d:dc:42:c1:7c:2d:76:4e:ee:81:61:01:95:02:b4:
da:44:fd:0c:70:3b:8c:f8:34:ff:bd:bc:dd:88:28:
a4:9b:f8:06:68:08:f9:4e:c9:14:38:b1:00:cc:99:
54:7b:59:15:87:fd:9e:e0:d5:e2:83:1a:72:a7:73:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D9:6D:AB:97:6A:54:5B:78:E5:97:68:26:25:F8:F5:B2:50:F4:24
X509v3 Authority Key Identifier:
keyid:52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:78:1d:8b:c8:2b:54:71:63:e1:2f:9e:81:8c:37:25:dc:e2:
6d:6b:77:fb:b8:b2:da:f1:b3:e7:8b:86:4a:9b:d3:ea:3c:d0:
96:79:71:cd:4a:a8:0a:7a:d3:3c:e6:14:11:a4:77:7d:e5:2f:
62:9d:84:ce:e6:63:60:4b:9f:6b:92:36:52:4b:c1:b4:e4:8c:
bf:8a:23:30:45:d5:36:87:c4:c4:89:db:44:3f:40:46:34:35:
a2:07:49:a0:61:82:1a:3c:ba:bf:39:95:bf:b2:9f:78:e6:35:
b0:b7:3b:55:72:54:27:08:5b:c3:08:7f:f2:88:9f:a7:8d:3b:
73:87:a5:1d:6d:b4:f2:cc:88:51:11:d6:4c:73:ee:cd:d3:80:
ef:b4:e9:c7:40:3a:e0:cd:70:f4:60:c5:f6:65:32:46:3f:d3:
6c:6c:87:09:7e:f3:49:c9:de:8a:19:74:3f:06:cc:c0:b7:5a:
b7:d4:30:ad:26:d3:27:8f:d6:5d:b7:e5:6f:f0:48:8e:c6:64:
0d:25:98:43:73:31:b4:37:b8:e4:af:0a:e0:76:34:f9:a7:2d:
68:84:68:84:a7:c7:b0:59:ac:e7:44:7d:9f:39:82:ba:5d:80:
2d:2b:68:74:b5:5e:d7:be:60:bd:d8:ac:e9:87:68:97:b8:0a:
c3:bc:08:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxI64eUkWeA36uSugJas3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWFhMDI0NzU4ZDhkMTA0ZTExNzljNTUwMzk4MTY2MzZh
ZmUyOTgwHhcNMjUwOTEwMDEwMDQ1WhcNMjUwOTExMDEwMDQ1WjAzMTEwLwYDVQQD
Eyg3NmQ5NmRhYjk3NmE1NDViNzhlNTk3NjgyNjI1ZjhmNWIyNTBmNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qxe2VZnh53oOZ68DUQs1XB4XT3x
8QY6rReKLV1+ZSrhAJk2U1Nxin4hjTVJPShyJzeH07ocYnZpeEIJDeQOppIZ8+am
MA3L1gK1NuYOi5glmxjyxG4TZDAGrF36anj7ysX7CVc7QqykPnj3D6Z35mXeQ+qW
BJEgcBlDIOccadBxT5Oczxwi2paVDAJrTKH1bVgR4i4YULUDS/9XjZPeED1nY/nW
IUgybWqBvZeEY2VfnbLidJc4YFcKcyFryhLq+pqd3ELBfC12Tu6BYQGVArTaRP0M
cDuM+DT/vbzdiCikm/gGaAj5TskUOLEAzJlUe1kVh/2e4NXigxpyp3NN8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbZbauXalRbeOWXaCYl+PWyUPQkMB8GA1UdIwQY
MBaAFFIaoCR1jY0QThF5xVA5gWY2r+KYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWhxZ0pIV05qUkJPRVhuRlVEbUJaamF2NHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wM2Y5ZWUtNTNlMy00ZjY5LWI4YjAt
YzEzOGU1YzI3YzJiLzEvVWhxZ0pIV05qUkJPRVhuRlVEbUJaamF2NHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wM2Y5ZWUtNTNlMy00ZjY5LWI4YjAtYzEzOGU1YzI3YzJi
LzEvVWhxZ0pIV05qUkJPRVhuRlVEbUJaamF2NHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3gdi8gr
VHFj4S+egYw3JdzibWt3+7iy2vGz54uGSpvT6jzQlnlxzUqoCnrTPOYUEaR3feUv
Yp2EzuZjYEufa5I2UkvBtOSMv4ojMEXVNofExInbRD9ARjQ1ogdJoGGCGjy6vzmV
v7KfeOY1sLc7VXJUJwhbwwh/8oifp407c4elHW208syIURHWTHPuzdOA77Tpx0A6
4M1w9GDF9mUyRj/TbGyHCX7zScneihl0PwbMwLdat9QwrSbTJ4/WXbflb/BIjsZk
DSWYQ3MxtDe45K8K4HY0+actaIRohKfHsFms50R9nzmCul2ALStodLVe175gvdis
6Ydol7gKw7wIlQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:29:47 2025 by rpki-client