Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
File: UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft (raw, json)
Hash identifier: IrrMjb08DC63cl8y93/q2P7AKWFt+B6CuFl+18CrLSs=
Subject key identifier: 12:EF:B4:D3:87:A2:7C:FD:D8:C5:57:BF:75:F9:33:BF:1F:03:B6:92
Authority key identifier: 50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
Certificate issuer: /CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Certificate serial: 0197499F2F215D93EF3A10C9083CC0EB058B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
Manifest number: 04C8
Signing time: Sat 07 Jun 2025 09:00:58 +0000
Manifest this update: Sat 07 Jun 2025 09:00:58 +0000
Manifest next update: Sun 08 Jun 2025 09:00:58 +0000
Files and hashes: 1: CtRLEvt809yNddQQC3-YdVEz8S0.roa (hash: iOnEw767paDA6G2cUVNf8J3Qp7lK0IUOS20QbdMgtb4=)
2: UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl (hash: ERVY8nTNwYBIGbvLLQGVk+F539pd+E2plqaA7hGEh7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:2f:21:5d:93:ef:3a:10:c9:08:3c:c0:eb:05:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Validity
Not Before: Jun 7 09:00:58 2025 GMT
Not After : Jun 8 09:00:58 2025 GMT
Subject: CN=12efb4d387a27cfdd8c557bf75f933bf1f03b692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:70:e3:a9:ed:2f:37:e8:18:07:5c:f4:1d:
2a:14:ab:cf:d6:c3:19:f4:01:a0:b4:88:d7:11:91:
ee:af:99:eb:01:3a:9e:a1:f8:34:e5:3f:32:53:f9:
39:09:46:2d:15:4e:13:5c:94:47:95:b8:37:65:21:
2d:f8:e2:8d:16:d7:3e:f0:ef:9f:a1:94:7a:aa:7f:
5b:08:34:71:51:25:fa:e3:b2:9c:bf:28:e7:69:88:
5e:79:51:b4:1d:0c:34:0e:b6:cb:f6:c2:70:27:ff:
b4:26:8e:72:89:9e:ac:b2:c3:05:16:47:c2:18:a8:
23:0b:2b:31:f7:d2:6b:a7:96:7a:ec:28:5a:51:44:
2f:23:fb:23:32:75:36:33:3a:6d:25:8d:f1:47:b0:
bc:af:79:b2:cb:ef:fa:8a:21:01:ff:b1:89:9f:71:
c4:c9:e2:b7:9e:42:ee:c8:a1:42:16:54:04:de:75:
b8:d5:aa:af:d9:79:9e:02:d7:4a:52:46:e7:91:8f:
13:a4:23:51:64:aa:17:c6:64:da:2d:e1:08:57:92:
04:ea:6a:15:75:d1:50:bb:a1:a5:7a:14:6b:38:51:
6d:27:fb:b2:fd:aa:a6:0c:84:2e:6d:8f:9f:b4:2f:
af:9a:ba:a2:a3:46:43:31:40:21:22:f6:6a:f7:af:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EF:B4:D3:87:A2:7C:FD:D8:C5:57:BF:75:F9:33:BF:1F:03:B6:92
X509v3 Authority Key Identifier:
keyid:50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bd:e0:a4:6e:07:c8:63:fa:da:ad:ef:d3:0c:d8:1c:e0:9e:
18:35:74:0e:99:70:11:bc:e8:b1:bc:20:1f:83:70:95:d4:fa:
77:4a:0a:1e:57:a2:ee:45:87:8c:5d:c0:c7:35:3b:40:d0:a1:
38:6f:b4:de:b3:62:7e:1a:e5:12:d7:d5:e6:2c:ac:96:44:d6:
2a:9e:65:28:e4:9e:9e:70:da:d8:78:79:13:9f:82:c2:79:a2:
63:1c:ce:f5:d5:8a:a6:52:22:28:9d:39:8f:65:95:88:90:92:
fa:2e:ae:fa:9e:6b:5f:1b:98:0d:e7:72:0d:1a:40:ce:95:47:
52:ff:95:39:a5:56:d2:65:77:59:72:14:2c:44:e2:69:9b:28:
84:14:16:31:eb:4a:2c:22:95:a8:fb:06:b7:6e:01:c4:78:09:
5e:66:57:fc:92:f5:a0:ad:93:6b:8d:41:16:9c:41:b7:77:7c:
cf:6d:3c:84:ab:9e:43:45:be:2f:94:d2:61:95:b3:62:36:4a:
c0:92:45:76:19:87:27:79:9a:dc:9a:ad:33:58:b7:9f:e0:27:
d8:8a:4d:3b:3e:d1:66:6b:d5:c7:d6:35:54:18:60:98:de:4a:
67:d0:22:dc:27:f4:da:4e:55:d1:e6:c4:e3:fe:47:bb:cc:3e:
9f:73:92:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJny8hXZPvOhDJCDzA6wWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTNjN2RhOWM4ZmZmZWE1Y2VkOTdhNzk5MDIwMGQ0YmVl
ZTQxNzcwHhcNMjUwNjA3MDkwMDU4WhcNMjUwNjA4MDkwMDU4WjAzMTEwLwYDVQQD
EygxMmVmYjRkMzg3YTI3Y2ZkZDhjNTU3YmY3NWY5MzNiZjFmMDNiNjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcBw46ntLzfoGAdc9B0qFKvP1sMZ
9AGgtIjXEZHur5nrATqeofg05T8yU/k5CUYtFU4TXJRHlbg3ZSEt+OKNFtc+8O+f
oZR6qn9bCDRxUSX647KcvyjnaYheeVG0HQw0DrbL9sJwJ/+0Jo5yiZ6sssMFFkfC
GKgjCysx99Jrp5Z67ChaUUQvI/sjMnU2MzptJY3xR7C8r3myy+/6iiEB/7GJn3HE
yeK3nkLuyKFCFlQE3nW41aqv2XmeAtdKUkbnkY8TpCNRZKoXxmTaLeEIV5IE6moV
ddFQu6GlehRrOFFtJ/uy/aqmDIQubY+ftC+vmrqio0ZDMUAhIvZq968KgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLvtNOHonz92MVXv3X5M78fA7aSMB8GA1UdIwQY
MBaAFFBTx9qcj//qXO2Xp5kCANS+7kF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZQSDJweVBfLXBjN1plbm1RSUExTDd1UVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wZjhjZTctY2E5Ni00MzViLTg1NzQt
YWM2MjBkYTJmODdlLzEvVUZQSDJweVBfLXBjN1plbm1RSUExTDd1UVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8wZjhjZTctY2E5Ni00MzViLTg1NzQtYWM2MjBkYTJmODdl
LzEvVUZQSDJweVBfLXBjN1plbm1RSUExTDd1UVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARL3gpG4H
yGP62q3v0wzYHOCeGDV0DplwEbzosbwgH4NwldT6d0oKHlei7kWHjF3AxzU7QNCh
OG+03rNifhrlEtfV5iyslkTWKp5lKOSennDa2Hh5E5+CwnmiYxzO9dWKplIiKJ05
j2WViJCS+i6u+p5rXxuYDedyDRpAzpVHUv+VOaVW0mV3WXIULETiaZsohBQWMetK
LCKVqPsGt24BxHgJXmZX/JL1oK2Ta41BFpxBt3d8z208hKueQ0W+L5TSYZWzYjZK
wJJFdhmHJ3ma3JqtM1i3n+An2IpNOz7RZmvVx9Y1VBhgmN5KZ9Ai3Cf02k5V0ebE
4/5Hu8w+n3OS4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:37:41 2025 by rpki-client