Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier: ptPCtc8zO/WAmV3DToE7NtLXfAa8zET3uJ4t2Js5qY8=
Subject key identifier: 2D:85:A0:62:EB:33:AC:62:81:6A:44:B6:28:60:72:B2:7E:DE:F9:0C
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 01976EF4D0AEF795D11E7710E1B765683CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number: 0D5C
Signing time: Sat 14 Jun 2025 15:00:27 +0000
Manifest this update: Sat 14 Jun 2025 15:00:27 +0000
Manifest next update: Sun 15 Jun 2025 15:00:27 +0000
Files and hashes: 1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: YjYb+0tTPz41wwhkzedUsuswBe6F/FqfbtN0i5fIfac=)
2: YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa (hash: 4/OtRTmHPZoVC5SXZxinCft/J9eQslnnS2y+eRKDbVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:d0:ae:f7:95:d1:1e:77:10:e1:b7:65:68:3c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Jun 14 15:00:27 2025 GMT
Not After : Jun 15 15:00:27 2025 GMT
Subject: CN=2d85a062eb33ac62816a44b6286072b27edef90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:9d:41:dd:1c:46:06:20:a5:5a:7b:83:86:
19:bb:c1:c6:8f:d3:5d:56:39:85:c6:62:74:75:00:
f9:5a:7a:a6:e9:67:f4:75:1b:60:38:dc:a8:c3:1b:
46:47:f9:58:c2:ba:ad:06:6b:90:9e:94:c1:dc:ae:
9d:f6:54:04:4c:ee:33:f6:6a:d0:c1:85:13:2e:77:
0c:e3:e5:0e:2e:89:1c:4e:04:62:eb:11:74:7a:c8:
70:30:18:26:fe:a8:24:df:11:57:01:ef:07:ee:c8:
db:69:ce:f2:0f:b5:97:51:bb:d1:b9:70:bb:1b:d3:
64:1e:7a:15:2d:07:3a:52:cb:83:29:91:c6:5d:66:
de:8f:cb:f3:93:45:be:b7:77:ff:f0:30:fb:08:19:
71:3e:c1:ca:f4:d3:a1:21:4f:66:0b:16:c2:2c:41:
ea:2b:0e:6f:b7:85:64:b7:e8:6d:03:12:d7:e7:6c:
f1:bb:6e:c8:1b:2b:6a:10:bd:38:7e:e8:25:81:9d:
4f:dd:9b:4b:45:1c:d7:eb:11:95:db:b6:1c:c2:3d:
f4:c1:b2:d5:1a:73:1a:89:48:1d:93:a3:55:6c:71:
33:c4:71:f0:91:17:e0:07:ec:aa:d4:cb:b4:e0:76:
cf:17:2f:ef:dc:2d:17:bf:69:a5:df:93:fa:f6:95:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:85:A0:62:EB:33:AC:62:81:6A:44:B6:28:60:72:B2:7E:DE:F9:0C
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:82:92:c1:bf:a3:4c:ab:93:b1:b4:92:a0:53:ce:cc:f4:1d:
82:51:8f:e7:a7:b1:da:24:59:b7:e8:43:48:2f:56:8a:61:fd:
06:a9:3a:8d:b2:7f:63:37:26:8d:ca:45:61:fe:c6:98:89:18:
b2:03:92:90:00:80:42:99:17:2c:45:2c:18:94:5a:4b:88:ac:
24:ea:8e:1b:64:b4:4a:9a:2d:50:cc:82:89:b5:56:07:2f:48:
b6:73:1b:42:2b:1d:e6:3c:71:c1:7a:f9:24:4d:80:44:09:ac:
ee:61:99:9b:cd:b7:ee:29:0e:d0:f0:9f:86:7a:11:42:b8:4d:
5e:7e:85:37:b0:15:14:59:80:a7:c3:cc:49:5a:40:46:c9:cb:
36:f3:8a:51:28:14:b5:c5:11:1b:97:3a:00:e8:6f:89:82:ff:
dc:b3:16:30:0b:60:13:c0:5d:a2:ab:f9:64:44:2d:8f:bb:19:
ec:13:c9:1d:c4:f4:11:bc:f5:6d:f5:e6:3f:cb:c9:ed:9a:4e:
8c:c6:12:37:f9:fe:fa:1c:6f:45:11:e2:cb:92:8b:95:a1:dc:
c4:71:6a:8f:72:e3:ff:66:95:35:bc:71:fa:41:04:4a:46:f0:
c4:5a:fa:cc:8f:39:65:4c:d6:c1:8f:ca:70:48:58:b1:18:af:
8a:bb:a2:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9NCu95XRHncQ4bdlaDzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNTdjODdkMTExYzgwNTBmZDVjOWFjMmIwNmJlNjIzMjM2
NzUwMzMwHhcNMjUwNjE0MTUwMDI3WhcNMjUwNjE1MTUwMDI3WjAzMTEwLwYDVQQD
EygyZDg1YTA2MmViMzNhYzYyODE2YTQ0YjYyODYwNzJiMjdlZGVmOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxedQd0cRgYgpVp7g4YZu8HGj9Nd
VjmFxmJ0dQD5Wnqm6Wf0dRtgONyowxtGR/lYwrqtBmuQnpTB3K6d9lQETO4z9mrQ
wYUTLncM4+UOLokcTgRi6xF0eshwMBgm/qgk3xFXAe8H7sjbac7yD7WXUbvRuXC7
G9NkHnoVLQc6UsuDKZHGXWbej8vzk0W+t3f/8DD7CBlxPsHK9NOhIU9mCxbCLEHq
Kw5vt4Vkt+htAxLX52zxu27IGytqEL04fuglgZ1P3ZtLRRzX6xGV27Ycwj30wbLV
GnMaiUgdk6NVbHEzxHHwkRfgB+yq1Mu04HbPFy/v3C0Xv2ml35P69pVEBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2FoGLrM6xigWpEtihgcrJ+3vkMMB8GA1UdIwQY
MBaAFFFXyH0RHIBQ/VyawrBr5iMjZ1AzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80ZTdiNWMtMjkwNi00NzhhLThlZjAt
ZDI5NzAxNDg3NTM2LzEvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80ZTdiNWMtMjkwNi00NzhhLThlZjAtZDI5NzAxNDg3NTM2
LzEvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4KSwb+j
TKuTsbSSoFPOzPQdglGP56ex2iRZt+hDSC9WimH9Bqk6jbJ/YzcmjcpFYf7GmIkY
sgOSkACAQpkXLEUsGJRaS4isJOqOG2S0SpotUMyCibVWBy9ItnMbQisd5jxxwXr5
JE2ARAms7mGZm8237ikO0PCfhnoRQrhNXn6FN7AVFFmAp8PMSVpARsnLNvOKUSgU
tcURG5c6AOhviYL/3LMWMAtgE8Bdoqv5ZEQtj7sZ7BPJHcT0Ebz1bfXmP8vJ7ZpO
jMYSN/n++hxvRRHiy5KLlaHcxHFqj3Lj/2aVNbxx+kEESkbwxFr6zI85ZUzWwY/K
cEhYsRiviruiRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:24:54 2025 by rpki-client