Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
File: u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json)
Hash identifier: yDjdxQpbiRXYSd5WyB+taBznkE16MqH7+T/vgYl4kJs=
Subject key identifier: 71:C3:D7:87:D7:DF:C3:51:CC:65:B0:8D:49:D1:3F:AF:2F:82:0B:36
Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Certificate serial: 01987298D359DC942C0E631F69AF7B126D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
Manifest number: 0F2C
Signing time: Mon 04 Aug 2025 01:01:14 +0000
Manifest this update: Mon 04 Aug 2025 01:01:14 +0000
Manifest next update: Tue 05 Aug 2025 01:01:14 +0000
Files and hashes: 1: qojwO3L9jg1p6UhN03evhyipuOQ.roa (hash: dfUoGagRhqiwPd1LKf2UOdIpsG5QndFaYf8UR5Y9xlA=)
2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: 3D4LqWnKQegXmM9zWDKymvpvqDoxdMuPiVJ+dOeFHvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:d3:59:dc:94:2c:0e:63:1f:69:af:7b:12:6d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Validity
Not Before: Aug 4 01:01:14 2025 GMT
Not After : Aug 5 01:01:14 2025 GMT
Subject: CN=71c3d787d7dfc351cc65b08d49d13faf2f820b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:bb:97:59:71:7c:3e:d3:4a:05:57:2e:bd:
99:a8:7f:9b:00:1c:23:45:de:1e:e3:68:b6:69:f9:
33:04:8c:90:04:0c:1c:33:1f:2c:43:1d:ff:fb:09:
fd:58:c5:93:53:d1:bb:80:95:99:47:91:c6:2e:7e:
f4:b2:98:c6:98:58:e2:e6:07:09:52:28:cc:46:fa:
6d:f3:eb:5e:9d:4f:23:72:80:30:04:5b:ce:10:b6:
65:03:67:7d:b2:fb:f9:20:c1:e2:f3:0a:f2:5d:d1:
1c:be:09:c0:ac:c8:0e:81:e6:72:fc:cf:d4:1e:ee:
5a:69:8c:f3:df:8b:0f:48:c7:5e:08:39:f7:4e:50:
b4:33:c8:97:f8:b9:03:74:c0:63:0b:48:cf:27:5a:
16:88:43:bd:46:7e:5c:9d:98:ad:5a:49:c8:86:77:
fd:41:05:2d:67:88:f2:7c:c9:d2:27:a7:b7:ce:2a:
61:c1:04:6c:23:b7:e9:65:e5:18:f5:2b:46:00:bf:
42:06:95:5f:69:33:e0:3c:05:40:80:32:39:d4:a6:
ba:22:51:e4:0d:66:75:17:12:96:bb:9a:7e:49:90:
f6:1d:c0:bb:db:61:57:61:dc:87:9a:9d:ae:55:74:
2c:f8:d2:70:8e:72:94:6b:79:cb:9f:c6:b1:23:6d:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:D7:87:D7:DF:C3:51:CC:65:B0:8D:49:D1:3F:AF:2F:82:0B:36
X509v3 Authority Key Identifier:
keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:84:5d:bb:9d:db:c9:f9:1e:f9:10:aa:59:ee:bf:f5:cf:cc:
65:a2:d0:d9:a1:d3:ca:c6:82:39:b8:3c:3e:cc:7a:82:96:91:
07:63:38:9b:11:e7:07:07:ab:f8:ef:04:af:43:6e:33:3b:2f:
2c:a4:eb:f5:f5:c8:6d:df:0e:48:0d:27:de:ee:12:e1:e8:3d:
3e:dc:39:8e:ab:5b:63:5d:cd:65:31:a5:c3:56:6d:1f:ed:84:
31:1e:c3:85:e2:18:35:62:e4:75:f3:ea:58:71:6e:4c:5e:69:
ce:98:02:06:3e:d3:80:c7:4b:0d:2d:f2:8a:c6:6d:ec:44:66:
62:54:ab:49:00:26:d7:d7:15:57:f8:66:6e:37:16:f1:30:69:
fd:df:10:1c:be:81:cf:21:66:a0:83:49:c6:bc:dc:97:f5:c8:
05:55:2c:f2:dc:4c:46:ba:c4:bb:88:0d:2f:3e:55:42:79:b6:
8e:e9:9a:36:f6:f1:ad:4e:bd:f2:52:03:f7:a4:9e:87:65:61:
fc:bb:82:51:fc:e9:a1:ea:e4:9e:aa:4c:ab:77:50:96:dc:82:
d4:13:af:22:8c:c6:96:a7:ae:bc:6b:fe:3d:65:27:c7:fe:f4:
1b:d5:e7:1a:36:65:00:10:1c:14:48:c0:06:aa:65:e9:e7:e5:
ca:3a:33:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymNNZ3JQsDmMfaa97Em1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNTI4YzEyNmFlZDBkN2Y1YTA2OTUwZWIyYzIwMzM0ODY4
NTZhMTUwHhcNMjUwODA0MDEwMTE0WhcNMjUwODA1MDEwMTE0WjAzMTEwLwYDVQQD
Eyg3MWMzZDc4N2Q3ZGZjMzUxY2M2NWIwOGQ0OWQxM2ZhZjJmODIwYjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/S7l1lxfD7TSgVXLr2ZqH+bABwj
Rd4e42i2afkzBIyQBAwcMx8sQx3/+wn9WMWTU9G7gJWZR5HGLn70spjGmFji5gcJ
UijMRvpt8+tenU8jcoAwBFvOELZlA2d9svv5IMHi8wryXdEcvgnArMgOgeZy/M/U
Hu5aaYzz34sPSMdeCDn3TlC0M8iX+LkDdMBjC0jPJ1oWiEO9Rn5cnZitWknIhnf9
QQUtZ4jyfMnSJ6e3ziphwQRsI7fpZeUY9StGAL9CBpVfaTPgPAVAgDI51Ka6IlHk
DWZ1FxKWu5p+SZD2HcC722FXYdyHmp2uVXQs+NJwjnKUa3nLn8axI20OtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHD14fX38NRzGWwjUnRP68vggs2MB8GA1UdIwQY
MBaAFLtSjBJq7Q1/WgaVDrLCAzSGhWoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2It
MjE1OWVmZWU2YTA3LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2ItMjE1OWVmZWU2YTA3
LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYRdu53b
yfke+RCqWe6/9c/MZaLQ2aHTysaCObg8Psx6gpaRB2M4mxHnBwer+O8Er0NuMzsv
LKTr9fXIbd8OSA0n3u4S4eg9Ptw5jqtbY13NZTGlw1ZtH+2EMR7DheIYNWLkdfPq
WHFuTF5pzpgCBj7TgMdLDS3yisZt7ERmYlSrSQAm19cVV/hmbjcW8TBp/d8QHL6B
zyFmoINJxrzcl/XIBVUs8txMRrrEu4gNLz5VQnm2jumaNvbxrU698lID96Seh2Vh
/LuCUfzpoerknqpMq3dQltyC1BOvIozGlqeuvGv+PWUnx/70G9XnGjZlABAcFEjA
Bqpl6eflyjozJw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:21 2025 by rpki-client