Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
File: UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json)
Hash identifier: 6i+fp8FpapbPfX1NvznRpokOC69F2QzAxb8PcrdYtWU=
Subject key identifier: 99:86:AB:7A:A3:83:47:98:88:2D:30:67:0E:44:5F:7B:93:8E:6E:16
Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Certificate issuer: /CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Certificate serial: 019922FA6DBDE328CA2633CB680FDA17AC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
Manifest number: 022B
Signing time: Sun 07 Sep 2025 07:01:01 +0000
Manifest this update: Sun 07 Sep 2025 07:01:01 +0000
Manifest next update: Mon 08 Sep 2025 07:01:01 +0000
Files and hashes: 1: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: 2UkTBBrKXoneFgy2Efnpce5WY3VFnJMSyFgo4WJ1S9s=)
2: nmBuzHJtZ8Dl8WdiCnqlxf6RBwE.roa (hash: 5lO2yokCGdZ3wXh+anWEIpykoRp00iS8dYyJESAicQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:6d:bd:e3:28:ca:26:33:cb:68:0f:da:17:ac:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Validity
Not Before: Sep 7 07:01:01 2025 GMT
Not After : Sep 8 07:01:01 2025 GMT
Subject: CN=9986ab7aa3834798882d30670e445f7b938e6e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:ad:fc:f6:1e:7e:04:56:09:62:db:df:77:
b4:5f:73:32:a6:a3:83:af:6b:8f:91:b2:e3:61:21:
4c:69:36:dd:59:d9:88:c4:b5:0e:96:61:a1:06:3c:
a6:b6:7e:67:eb:4f:15:6c:49:6d:a7:93:db:c9:6c:
d3:62:79:fb:79:32:02:02:51:7f:11:f2:44:0d:38:
70:39:65:54:88:fa:27:f9:d5:7f:0c:f0:63:80:79:
ea:4d:74:cc:af:3c:99:c4:01:86:5b:63:b1:c5:82:
18:71:35:6d:5b:ab:7e:60:2b:6f:7d:0f:2a:14:84:
40:60:58:39:55:2f:82:e8:68:f3:19:be:6f:cb:f6:
5d:bd:8c:f2:dc:7c:ac:f6:d4:f1:6b:f6:a0:4c:8a:
3d:11:4b:e7:b3:56:3a:cd:6b:ca:ea:95:06:9f:c6:
6f:81:3f:a5:1b:e4:e7:3c:5f:5d:0a:eb:e3:18:de:
21:06:a9:92:5f:5f:3f:3b:93:4e:12:08:44:27:1f:
d3:52:db:85:c4:32:27:d1:a1:fc:e7:44:55:4c:12:
a9:f6:6e:22:52:41:44:ce:1c:e8:34:71:2a:4c:ab:
0a:98:68:ef:e2:96:2e:0d:b9:6a:75:47:5f:e2:88:
58:fa:27:d8:2f:1c:b1:b7:b7:05:ea:06:06:db:3f:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:86:AB:7A:A3:83:47:98:88:2D:30:67:0E:44:5F:7B:93:8E:6E:16
X509v3 Authority Key Identifier:
keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fb:50:25:c0:f4:d1:de:11:1a:b6:b1:fb:86:84:34:21:1b:
33:39:69:dd:56:8b:a1:89:c8:12:6d:1c:f6:7d:3b:1b:8c:dd:
3a:8e:ea:55:51:5f:9c:5f:48:ba:1b:89:c5:b7:ab:6b:ff:3f:
db:51:ee:5d:1c:2e:ba:16:6b:ab:9e:ce:8a:50:1d:84:ee:62:
7f:df:b9:61:01:f1:47:85:87:76:a7:70:a0:e0:72:46:5b:98:
a5:9a:34:4c:1c:be:8d:31:27:b1:10:9e:2e:9b:6a:a0:78:03:
74:3c:c3:8e:76:0a:3b:1a:7c:3b:56:a3:04:9e:5f:42:8d:8a:
d2:d7:4c:21:6b:48:64:96:a8:93:4a:1a:0e:d4:48:d9:dd:76:
8e:22:55:2d:0e:48:d6:9b:5f:3c:08:ae:f8:c1:3e:36:76:46:
32:65:4a:48:ac:9a:7a:b3:4a:14:9f:5c:aa:5b:00:13:5f:29:
3e:77:6d:ea:4c:23:65:d0:3a:0a:83:0d:3a:da:ce:3f:57:9c:
b0:c1:1e:7e:42:8d:1d:d0:79:db:94:cc:7f:04:21:26:fe:6b:
e8:15:27:b1:9b:4a:dc:70:40:92:00:82:26:8c:0f:3a:7f:91:
99:c8:d6:b1:9d:1a:10:d3:fe:69:55:e9:17:58:c3:22:dc:99:
3a:a9:01:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+m294yjKJjPLaA/aF6ycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTBkZmM5MzcxYTk0OTFjYWE4NTg3MDBmZDk0NTIzNjZk
OWVkZGMwHhcNMjUwOTA3MDcwMTAxWhcNMjUwOTA4MDcwMTAxWjAzMTEwLwYDVQQD
Eyg5OTg2YWI3YWEzODM0Nzk4ODgyZDMwNjcwZTQ0NWY3YjkzOGU2ZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEet/PYefgRWCWLb33e0X3MypqOD
r2uPkbLjYSFMaTbdWdmIxLUOlmGhBjymtn5n608VbEltp5PbyWzTYnn7eTICAlF/
EfJEDThwOWVUiPon+dV/DPBjgHnqTXTMrzyZxAGGW2OxxYIYcTVtW6t+YCtvfQ8q
FIRAYFg5VS+C6GjzGb5vy/ZdvYzy3Hys9tTxa/agTIo9EUvns1Y6zWvK6pUGn8Zv
gT+lG+TnPF9dCuvjGN4hBqmSX18/O5NOEghEJx/TUtuFxDIn0aH850RVTBKp9m4i
UkFEzhzoNHEqTKsKmGjv4pYuDblqdUdf4ohY+ifYLxyxt7cF6gYG2z8gmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmGq3qjg0eYiC0wZw5EX3uTjm4WMB8GA1UdIwQY
MBaAFFHg38k3GpSRyqhYcA/ZRSNm2e3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODkt
NmFjMzUzNzBmZDczLzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODktNmFjMzUzNzBmZDcz
LzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/tQJcD0
0d4RGrax+4aENCEbMzlp3VaLoYnIEm0c9n07G4zdOo7qVVFfnF9IuhuJxbera/8/
21HuXRwuuhZrq57OilAdhO5if9+5YQHxR4WHdqdwoOByRluYpZo0TBy+jTEnsRCe
LptqoHgDdDzDjnYKOxp8O1ajBJ5fQo2K0tdMIWtIZJaok0oaDtRI2d12jiJVLQ5I
1ptfPAiu+ME+NnZGMmVKSKyaerNKFJ9cqlsAE18pPndt6kwjZdA6CoMNOtrOP1ec
sMEefkKNHdB525TMfwQhJv5r6BUnsZtK3HBAkgCCJowPOn+RmcjWsZ0aENP+aVXp
F1jDItyZOqkBnQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:35 2025 by rpki-client