Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: rk6KykkEymSOo1fofi78Y55x+UrLYDh7n1S9C6XPy0M=
Subject key identifier: 09:55:49:AE:90:AD:40:98:3C:29:BB:CB:54:84:0B:7E:2A:39:BB:4D
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 0198744FC2AE7226E7A2E3088B7122131767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 05E8
Signing time: Mon 04 Aug 2025 09:00:40 +0000
Manifest this update: Mon 04 Aug 2025 09:00:40 +0000
Manifest next update: Tue 05 Aug 2025 09:00:40 +0000
Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: b65yLu065ncJ/bGIfCKXhe3TsiuyeXsZsz92suQbsME=)
3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:c2:ae:72:26:e7:a2:e3:08:8b:71:22:13:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Aug 4 09:00:40 2025 GMT
Not After : Aug 5 09:00:40 2025 GMT
Subject: CN=095549ae90ad40983c29bbcb54840b7e2a39bb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:52:6f:19:cc:15:94:46:56:ba:52:d7:94:
65:fc:66:2f:92:dd:f7:54:62:26:14:33:30:bd:a6:
af:fc:8f:75:d9:fb:77:63:8f:eb:de:a8:89:de:e9:
77:c6:27:c5:a9:d2:56:70:42:04:10:60:30:60:7d:
c1:bd:18:0b:41:60:6a:32:94:f1:bf:84:06:61:67:
db:d8:f0:ea:7c:6e:3b:8e:68:db:6e:cf:08:12:88:
84:f8:4a:4d:cd:e3:97:55:10:27:d2:f5:d7:40:09:
4f:70:45:7c:88:71:a0:a9:e3:dd:05:d4:77:bc:5f:
0c:b3:3e:6b:09:f2:cd:d4:8d:ed:4b:10:8e:c8:ae:
70:03:91:d0:7d:d9:1d:a8:34:f6:36:96:e0:0e:86:
f0:b0:f6:a6:2b:04:ca:df:e6:f3:e6:f3:aa:22:42:
03:fc:7b:bd:16:3f:fa:7d:e0:8b:5d:c0:4a:45:43:
4a:9a:dd:53:7a:d7:f7:e0:f0:2d:ae:02:bb:95:a6:
b2:6a:bb:ae:cf:17:e5:36:5a:89:93:74:98:8e:66:
a9:e9:c1:20:77:67:68:17:74:ce:f2:ef:76:31:67:
51:29:86:1e:15:e3:39:9d:07:ef:7a:d7:46:af:53:
7e:fd:95:f2:c3:91:d2:e0:52:90:49:50:8b:43:06:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:55:49:AE:90:AD:40:98:3C:29:BB:CB:54:84:0B:7E:2A:39:BB:4D
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:48:b9:bd:fa:50:9d:1b:e2:d2:42:19:8a:13:09:89:2a:0a:
be:48:45:f4:54:05:a2:1d:1f:eb:e5:b9:fa:06:94:a0:9d:3e:
97:af:a2:64:28:e6:80:7f:94:d7:41:92:b0:35:a2:2e:29:7e:
91:54:b6:3c:3f:1d:5a:de:87:2d:bd:ab:ce:85:b8:4b:e3:7f:
da:0d:1b:7a:5a:b6:20:04:83:66:a2:68:4a:e6:4d:c0:48:64:
65:fd:67:c0:c2:58:98:d3:09:9e:2f:9b:71:68:23:7a:e0:79:
ec:50:a8:30:68:ef:16:a3:42:0f:32:b0:aa:c6:e5:4d:28:b7:
54:89:a6:66:ed:18:64:e2:78:15:eb:46:04:dd:63:71:18:6e:
73:f8:a8:d4:56:61:6d:a9:6c:31:d9:ea:b8:fb:ac:32:06:e7:
6e:b5:8f:37:62:8b:97:ae:87:d7:a9:3a:9e:26:9f:4f:03:8f:
3b:8b:ba:a0:32:00:05:b8:dd:37:f1:4c:86:ee:57:f0:5f:62:
e9:a1:e1:ce:20:cd:33:09:81:ff:f9:e0:eb:4f:63:ff:0f:46:
5a:2d:aa:53:fc:83:bf:73:93:5f:46:c5:9c:1f:34:55:23:a3:
15:30:3e:0d:71:8f:62:3b:75:c4:e0:5f:58:5f:9f:1b:c7:b8:
23:57:07:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T8KucibnouMIi3EiExdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWQ2NzkxYjhkYmU5YzM1MmJkNjRhOTMyMjE3MmI0MWM0
YjIxNzEwHhcNMjUwODA0MDkwMDQwWhcNMjUwODA1MDkwMDQwWjAzMTEwLwYDVQQD
EygwOTU1NDlhZTkwYWQ0MDk4M2MyOWJiY2I1NDg0MGI3ZTJhMzliYjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnxSbxnMFZRGVrpS15Rl/GYvkt33
VGImFDMwvaav/I912ft3Y4/r3qiJ3ul3xifFqdJWcEIEEGAwYH3BvRgLQWBqMpTx
v4QGYWfb2PDqfG47jmjbbs8IEoiE+EpNzeOXVRAn0vXXQAlPcEV8iHGgqePdBdR3
vF8Msz5rCfLN1I3tSxCOyK5wA5HQfdkdqDT2NpbgDobwsPamKwTK3+bz5vOqIkID
/Hu9Fj/6feCLXcBKRUNKmt1Tetf34PAtrgK7laayaruuzxflNlqJk3SYjmap6cEg
d2doF3TO8u92MWdRKYYeFeM5nQfvetdGr1N+/ZXyw5HS4FKQSVCLQwb+6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlVSa6QrUCYPCm7y1SEC34qObtNMB8GA1UdIwQY
MBaAFFGtZ5G42+nDUr1kqTIhcrQcSyFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMt
MWE4OWZmMTE5NjVlLzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMtMWE4OWZmMTE5NjVl
LzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnki5vfpQ
nRvi0kIZihMJiSoKvkhF9FQFoh0f6+W5+gaUoJ0+l6+iZCjmgH+U10GSsDWiLil+
kVS2PD8dWt6HLb2rzoW4S+N/2g0belq2IASDZqJoSuZNwEhkZf1nwMJYmNMJni+b
cWgjeuB57FCoMGjvFqNCDzKwqsblTSi3VImmZu0YZOJ4FetGBN1jcRhuc/io1FZh
balsMdnquPusMgbnbrWPN2KLl66H16k6niafTwOPO4u6oDIABbjdN/FMhu5X8F9i
6aHhziDNMwmB//ng609j/w9GWi2qU/yDv3OTX0bFnB80VSOjFTA+DXGPYjt1xOBf
WF+fG8e4I1cHOg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:53 2025 by rpki-client