Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: wbf8VWSG0ccLXms5I3Xn/lBQr+GfFwbf4LSiFf+kSHo=
Subject key identifier: 32:68:A5:0D:F1:B3:F7:44:5E:D8:8E:30:21:A3:87:85:81:77:ED:43
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 019768BC57312CF46B86D4F5D72B5F4884D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0CE7
Signing time: Fri 13 Jun 2025 10:01:02 +0000
Manifest this update: Fri 13 Jun 2025 10:01:02 +0000
Manifest next update: Sat 14 Jun 2025 10:01:02 +0000
Files and hashes: 1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: zNsoSrC4NUrQTEuwyt4AXuRx3yaSvSl2Ktg3C5kS2D0=)
3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:57:31:2c:f4:6b:86:d4:f5:d7:2b:5f:48:84:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Jun 13 10:01:02 2025 GMT
Not After : Jun 14 10:01:02 2025 GMT
Subject: CN=3268a50df1b3f7445ed88e3021a387858177ed43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:3b:b8:13:34:8b:93:8a:75:f6:32:66:e6:
68:4b:87:a5:7b:79:9b:fa:db:99:cf:da:56:4f:5a:
76:24:53:e9:3a:be:a2:f1:78:ea:98:87:36:05:32:
54:50:ba:2d:ab:5f:0a:50:ad:2c:63:5a:67:6e:88:
23:2f:b9:d7:f5:dd:b9:3e:98:77:af:a9:7c:5a:7e:
12:5a:cb:a7:33:90:b1:45:8b:a8:35:c4:a2:c2:9f:
7b:8f:67:90:e5:4e:db:3e:ac:96:46:25:c4:40:0e:
39:3f:57:80:a4:57:98:e3:68:d2:79:2b:85:cb:c7:
1c:25:de:28:e4:0c:01:dc:45:5c:70:29:e0:4e:c4:
aa:71:fc:38:f3:23:d6:d7:e3:c2:9f:f9:aa:d5:57:
cf:ed:83:05:9d:44:47:a4:f6:28:f8:18:52:cf:1c:
d9:d3:3c:33:b1:27:bd:58:75:65:c9:2f:37:69:f3:
57:a3:72:44:90:3f:9b:b2:95:7f:1d:c9:69:a4:bf:
77:b6:ee:67:50:1b:62:e1:55:b2:45:24:e3:fa:f8:
cd:c8:b5:3d:08:cb:60:6f:3d:6f:1a:ba:aa:ab:b3:
49:64:c0:5f:2d:56:8b:0e:7b:34:4b:63:0e:9e:96:
d6:38:b2:4e:e2:55:f3:f7:52:f8:5c:0e:ae:6b:5f:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:68:A5:0D:F1:B3:F7:44:5E:D8:8E:30:21:A3:87:85:81:77:ED:43
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ea:65:85:39:7b:97:57:d9:56:a1:4c:3d:6a:78:81:bd:6f:
f8:4f:e5:14:f5:79:e5:2a:83:e6:d3:0c:1f:a9:c6:ef:f7:5a:
b2:1e:30:f1:f0:62:63:8b:2d:8c:9a:09:60:f8:cf:12:10:9e:
eb:48:c0:b3:73:d4:37:74:39:9a:ad:0e:62:f7:5f:79:76:b7:
4a:ea:27:53:92:8f:09:21:2e:50:11:23:96:c2:96:86:06:df:
27:8a:7b:fb:dc:cc:9b:c7:86:c3:f6:69:6e:9c:38:52:f9:07:
5b:07:dd:2a:10:ea:a2:5a:1e:cc:72:85:5e:32:ea:cb:85:6c:
3f:e8:cd:d3:34:54:47:cb:34:f0:3e:47:29:0a:c8:a0:29:41:
21:03:ac:e1:9e:4e:95:d1:9e:07:12:dc:a6:91:9d:01:65:5d:
29:54:3d:c1:db:bf:28:38:f5:ba:41:1a:a6:dc:bc:64:a8:7e:
05:ce:63:84:80:2f:36:9c:24:f0:6d:d5:4f:49:d8:0e:fd:52:
8f:f5:2b:66:fb:31:2e:e0:6e:87:bd:ea:c3:44:5f:3a:eb:4a:
02:43:b9:c4:9d:06:f6:08:a1:56:45:bf:1a:00:92:3a:c9:07:
8c:ff:c8:3f:e9:8e:71:f9:1e:af:e8:6b:b4:13:ee:a7:2b:43:
a9:15:94:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovFcxLPRrhtT11ytfSITWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTE0MDQ5NWJkMDZjMmU4ZWZhY2I3ZWQwYTMxNTE2ZGIx
ZjQwNWYwHhcNMjUwNjEzMTAwMTAyWhcNMjUwNjE0MTAwMTAyWjAzMTEwLwYDVQQD
EygzMjY4YTUwZGYxYjNmNzQ0NWVkODhlMzAyMWEzODc4NTgxNzdlZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHI7uBM0i5OKdfYyZuZoS4ele3mb
+tuZz9pWT1p2JFPpOr6i8XjqmIc2BTJUULotq18KUK0sY1pnbogjL7nX9d25Pph3
r6l8Wn4SWsunM5CxRYuoNcSiwp97j2eQ5U7bPqyWRiXEQA45P1eApFeY42jSeSuF
y8ccJd4o5AwB3EVccCngTsSqcfw48yPW1+PCn/mq1VfP7YMFnURHpPYo+BhSzxzZ
0zwzsSe9WHVlyS83afNXo3JEkD+bspV/HclppL93tu5nUBti4VWyRSTj+vjNyLU9
CMtgbz1vGrqqq7NJZMBfLVaLDns0S2MOnpbWOLJO4lXz91L4XA6ua18/EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJopQ3xs/dEXtiOMCGjh4WBd+1DMB8GA1UdIwQY
MBaAFFHhQElb0GwujvrLftCjFRbbH0BfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUt
OTg2NzY0MmMyZjEwLzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUtOTg2NzY0MmMyZjEw
LzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+plhTl7
l1fZVqFMPWp4gb1v+E/lFPV55SqD5tMMH6nG7/dash4w8fBiY4stjJoJYPjPEhCe
60jAs3PUN3Q5mq0OYvdfeXa3SuonU5KPCSEuUBEjlsKWhgbfJ4p7+9zMm8eGw/Zp
bpw4UvkHWwfdKhDqoloezHKFXjLqy4VsP+jN0zRUR8s08D5HKQrIoClBIQOs4Z5O
ldGeBxLcppGdAWVdKVQ9wdu/KDj1ukEapty8ZKh+Bc5jhIAvNpwk8G3VT0nYDv1S
j/UrZvsxLuBuh73qw0RfOutKAkO5xJ0G9gihVkW/GgCSOskHjP/IP+mOcfker+hr
tBPupytDqRWUAA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:30 2025 by rpki-client