Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
File: uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json)
Hash identifier: +5HepNqk3sZ5rn9JpKSRkXlHgaCwqTEy9Vd2/T78MwM=
Subject key identifier: 6F:13:58:A8:97:F8:F7:7E:38:43:97:99:55:B6:AC:56:BE:96:98:65
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Certificate issuer: /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial: 01987FAF8A4AC6AEB1BC4E52D5C16D36DA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
Manifest number: 049A
Signing time: Wed 06 Aug 2025 14:01:07 +0000
Manifest this update: Wed 06 Aug 2025 14:01:07 +0000
Manifest next update: Thu 07 Aug 2025 14:01:07 +0000
Files and hashes: 1: AHKOzgYDCyvjAkh-ui4tIs6DkuE.roa (hash: 4hfOmwMTypbmuLmMH8Qfr5/pQbm/yaKEh2rP/ouR/uE=)
2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: XkR9Xfyi4fa4d3rFpF9/dGQFVXqq3ul5N8iMgpfp1Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:af:8a:4a:c6:ae:b1:bc:4e:52:d5:c1:6d:36:da:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Validity
Not Before: Aug 6 14:01:07 2025 GMT
Not After : Aug 7 14:01:07 2025 GMT
Subject: CN=6f1358a897f8f77e3843979955b6ac56be969865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:2b:b4:b9:43:a9:3f:3d:19:32:da:0b:0f:
de:7c:b4:a8:a0:78:b7:a6:a0:ef:88:54:7a:03:55:
57:8e:75:09:06:be:fd:f8:60:f8:9d:a2:a7:4d:6c:
69:6e:3a:b0:87:66:17:1f:2a:45:26:26:22:89:7e:
8f:e2:93:fa:c3:1b:ea:d0:4f:89:aa:82:0a:28:76:
5c:47:3a:24:12:21:54:b8:f5:77:5c:f7:05:e6:11:
b4:db:b6:bb:ec:3f:a8:f1:81:6c:60:71:58:2f:b3:
48:d9:73:6c:e2:97:24:02:c3:80:3c:f2:e8:99:ae:
d5:34:e9:a2:c8:26:84:4b:8b:99:3c:40:4a:da:1d:
9e:6a:96:bd:97:12:4e:06:b9:c0:8f:bc:22:bc:8b:
e3:49:1e:0d:ae:b0:73:57:ba:15:e8:b4:c2:55:6e:
e0:f2:ad:3c:aa:87:f5:22:a0:48:46:2b:cb:b0:56:
8e:cc:1c:fd:a6:de:ab:a3:ca:69:78:b4:a8:50:45:
d5:23:26:2f:93:3b:51:d5:e8:8b:73:e6:1a:80:db:
2f:fa:a8:a9:1f:45:f2:00:cc:b8:a4:19:ec:14:fd:
c4:32:31:56:6e:b5:aa:a4:8e:20:c5:54:25:2e:a4:
21:9c:84:fc:37:9f:62:3d:4f:2a:4b:ed:20:be:2c:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:13:58:A8:97:F8:F7:7E:38:43:97:99:55:B6:AC:56:BE:96:98:65
X509v3 Authority Key Identifier:
keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:93:e9:04:74:9f:59:f9:32:a6:ee:7c:c6:af:e7:17:57:05:
46:94:cc:e8:d1:2d:c9:87:cd:8e:d9:60:b5:54:37:d1:d1:e8:
37:a1:47:18:90:da:b4:89:e0:12:47:6f:e7:0a:18:0d:43:00:
9e:b7:b0:51:a5:57:22:0b:3c:2e:ad:ea:fb:70:f2:9d:34:16:
67:5d:b6:f9:92:6b:94:60:19:eb:a4:23:80:3c:9c:22:ef:3c:
00:73:a4:d5:24:1c:0f:86:76:fe:db:fc:14:ea:f6:60:07:dd:
74:9b:08:f7:ac:49:05:80:1d:70:0b:f6:34:22:e3:8e:e4:98:
46:29:8d:41:9b:0e:58:9c:66:47:b8:b8:59:d2:85:58:91:78:
5f:57:f6:1f:e5:8a:39:11:06:82:82:ae:da:5c:cb:cf:41:50:
03:55:7b:09:88:a9:0b:86:e5:1c:d8:f2:ca:e2:55:d9:27:0c:
e7:1a:16:99:fc:e3:c5:8f:6b:70:44:f8:50:7a:a7:3e:11:25:
4b:f1:5d:5f:2b:a2:6c:c3:3a:48:2e:ad:cb:58:54:63:08:1e:
f9:c3:7d:07:a3:0e:a2:b4:49:f8:88:21:bb:d2:70:6e:77:3f:
46:dc:e7:f4:b2:c5:38:89:fa:1a:39:d3:4a:6a:e4:fe:f3:b7:
94:aa:e6:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/r4pKxq6xvE5S1cFtNtqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOGRhZDJjNGEwZTExN2E2ODY4YzhkNjdiZTEwMzA4YTY0
OTc0YWQwHhcNMjUwODA2MTQwMTA3WhcNMjUwODA3MTQwMTA3WjAzMTEwLwYDVQQD
Eyg2ZjEzNThhODk3ZjhmNzdlMzg0Mzk3OTk1NWI2YWM1NmJlOTY5ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4wrtLlDqT89GTLaCw/efLSooHi3
pqDviFR6A1VXjnUJBr79+GD4naKnTWxpbjqwh2YXHypFJiYiiX6P4pP6wxvq0E+J
qoIKKHZcRzokEiFUuPV3XPcF5hG027a77D+o8YFsYHFYL7NI2XNs4pckAsOAPPLo
ma7VNOmiyCaES4uZPEBK2h2eapa9lxJOBrnAj7wivIvjSR4NrrBzV7oV6LTCVW7g
8q08qof1IqBIRivLsFaOzBz9pt6ro8ppeLSoUEXVIyYvkztR1eiLc+YagNsv+qip
H0XyAMy4pBnsFP3EMjFWbrWqpI4gxVQlLqQhnIT8N59iPU8qS+0gviwXUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8TWKiX+Pd+OEOXmVW2rFa+lphlMB8GA1UdIwQY
MBaAFLqNrSxKDhF6aGjI1nvhAwimSXStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mM2M1ZDgtNWVhNS00ODJlLTkzMWYt
MjljMDIzZjk0NzgxLzEvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mM2M1ZDgtNWVhNS00ODJlLTkzMWYtMjljMDIzZjk0Nzgx
LzEvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapPpBHSf
Wfkypu58xq/nF1cFRpTM6NEtyYfNjtlgtVQ30dHoN6FHGJDatIngEkdv5woYDUMA
nrewUaVXIgs8Lq3q+3DynTQWZ122+ZJrlGAZ66QjgDycIu88AHOk1SQcD4Z2/tv8
FOr2YAfddJsI96xJBYAdcAv2NCLjjuSYRimNQZsOWJxmR7i4WdKFWJF4X1f2H+WK
OREGgoKu2lzLz0FQA1V7CYipC4blHNjyyuJV2ScM5xoWmfzjxY9rcET4UHqnPhEl
S/FdXyuibMM6SC6ty1hUYwge+cN9B6MOorRJ+Ighu9Jwbnc/Rtzn9LLFOIn6GjnT
Smrk/vO3lKrm+w==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:27:01 2025 by rpki-client