Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
File: UnFDjiPOkl5mwlmYEiG1toOi8I8.mft (raw, json)
Hash identifier: SkD/T88TTHgr0BlEm/x0QHggEEvsfawWiO2LytnYkRI=
Subject key identifier: B3:48:09:0E:0F:0F:C4:15:81:F8:54:81:05:65:08:94:B2:38:9A:00
Authority key identifier: 52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
Certificate issuer: /CN=5271438e23ce925e66c259981221b5b683a2f08f
Certificate serial: 0198A23CA1C77EFA2D5D3E138FAB5FEE4B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
Manifest number: 0B93
Signing time: Wed 13 Aug 2025 07:02:19 +0000
Manifest this update: Wed 13 Aug 2025 07:02:19 +0000
Manifest next update: Thu 14 Aug 2025 07:02:19 +0000
Files and hashes: 1: UnFDjiPOkl5mwlmYEiG1toOi8I8.crl (hash: FsshKhKNhykLVY2S+4BHHC71jy1Jka1fmUzl6xLzY0U=)
2: b23Ppzc40t1gh2jcC0tEEtTjq-Y.roa (hash: PLO31FJDvhLM1rCGRuVKcX7pZ7U9Xsy2KrFDiy0XrKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:3c:a1:c7:7e:fa:2d:5d:3e:13:8f:ab:5f:ee:4b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5271438e23ce925e66c259981221b5b683a2f08f
Validity
Not Before: Aug 13 07:02:19 2025 GMT
Not After : Aug 14 07:02:19 2025 GMT
Subject: CN=b348090e0f0fc41581f8548105650894b2389a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:f0:40:2c:e3:ba:3f:a7:9a:ec:32:e9:dd:
e0:1a:6c:7b:dc:07:00:4a:2f:7d:d6:68:fa:b1:db:
b9:74:5f:7c:10:8a:5d:ff:9e:49:85:ff:fa:35:6d:
e9:36:94:7d:07:5a:75:9b:5c:5b:ae:9b:d3:d3:0a:
4c:32:46:b6:21:81:5a:6b:6c:20:22:15:0d:57:c4:
6f:28:34:f9:77:1c:83:8f:c9:44:4b:39:2a:20:b1:
7c:36:5b:bf:71:8a:b4:1d:0e:0a:27:e9:ca:20:ea:
eb:2d:43:f6:84:dc:05:6a:9b:49:f5:aa:26:f8:3f:
62:47:8e:43:81:c5:c9:45:d0:8d:d8:8a:45:70:01:
08:83:cb:0d:53:0c:52:c2:61:8c:b8:86:b8:b0:75:
4d:0c:46:63:76:23:fd:e0:d8:f1:c1:23:2a:6b:2d:
3b:b5:2d:8e:d6:05:6a:c1:34:ec:7f:64:df:c9:3c:
aa:85:29:24:9d:d7:d0:f2:2b:a3:80:a8:9a:fd:57:
ed:8e:a4:98:a2:eb:35:50:5f:34:60:29:cf:0d:5d:
90:93:99:96:6d:b3:35:d1:98:a2:e6:f4:77:fb:0f:
7c:f3:a5:22:db:4d:d6:26:fa:db:95:32:94:49:f8:
b4:0f:18:79:c1:68:2e:e3:e3:67:e2:3f:60:7e:c6:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:48:09:0E:0F:0F:C4:15:81:F8:54:81:05:65:08:94:B2:38:9A:00
X509v3 Authority Key Identifier:
keyid:52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:da:ae:e6:92:6d:20:f8:e2:3c:d9:cc:a2:73:c8:36:5b:de:
6d:e0:01:8c:7a:d9:a8:d4:bd:d7:ce:79:c8:73:e4:e0:ec:90:
59:68:09:cc:97:ba:cb:b8:f0:1c:3b:eb:2d:ed:74:e2:09:69:
1c:11:9f:5e:e0:0c:b9:07:55:ba:60:29:b5:20:f5:d7:82:68:
57:05:b5:42:4c:8a:d6:2c:46:0c:98:34:da:cb:22:cb:4a:38:
0b:2d:79:e6:fa:90:34:3e:6a:64:5f:5c:76:82:d1:e9:50:69:
71:b4:6b:11:c8:89:6f:74:cc:87:11:69:b4:5b:f5:a3:fe:ae:
6e:79:11:ac:3a:05:62:51:eb:f7:5c:41:ae:7f:74:e5:f3:03:
08:ce:3f:68:dd:f7:e8:f1:28:69:90:1b:01:8a:9c:79:7b:62:
00:ef:75:b5:bf:50:e8:ef:74:18:cf:d8:55:e4:1e:75:e7:a7:
bf:c8:e3:19:f2:0c:80:7a:2d:28:d0:03:28:70:00:c0:10:fa:
7a:9c:71:9f:e2:b8:54:44:07:05:ef:55:30:39:6f:35:dd:cd:
80:3e:60:d3:30:e3:fc:cd:70:78:bb:13:88:27:15:3c:cd:d3:
f0:4b:37:50:34:76:b6:5b:10:4b:f2:d1:f0:71:d6:59:c5:3f:
5d:75:31:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiiPKHHfvotXT4Tj6tf7ktGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNzE0MzhlMjNjZTkyNWU2NmMyNTk5ODEyMjFiNWI2ODNh
MmYwOGYwHhcNMjUwODEzMDcwMjE5WhcNMjUwODE0MDcwMjE5WjAzMTEwLwYDVQQD
EyhiMzQ4MDkwZTBmMGZjNDE1ODFmODU0ODEwNTY1MDg5NGIyMzg5YTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jbwQCzjuj+nmuwy6d3gGmx73AcA
Si991mj6sdu5dF98EIpd/55Jhf/6NW3pNpR9B1p1m1xbrpvT0wpMMka2IYFaa2wg
IhUNV8RvKDT5dxyDj8lESzkqILF8Nlu/cYq0HQ4KJ+nKIOrrLUP2hNwFaptJ9aom
+D9iR45DgcXJRdCN2IpFcAEIg8sNUwxSwmGMuIa4sHVNDEZjdiP94NjxwSMqay07
tS2O1gVqwTTsf2TfyTyqhSkkndfQ8iujgKia/VftjqSYous1UF80YCnPDV2Qk5mW
bbM10Zii5vR3+w9886Ui203WJvrblTKUSfi0Dxh5wWgu4+Nn4j9gfsYJVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNICQ4PD8QVgfhUgQVlCJSyOJoAMB8GA1UdIwQY
MBaAFFJxQ44jzpJeZsJZmBIhtbaDovCPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW5GRGppUE9rbDVtd2xtWUVpRzF0b09pOEk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MDY5MTctYWY2Yi00ZTFlLTg3NzMt
OWFkMDM1NDc0MTE0LzEvVW5GRGppUE9rbDVtd2xtWUVpRzF0b09pOEk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84MDY5MTctYWY2Yi00ZTFlLTg3NzMtOWFkMDM1NDc0MTE0
LzEvVW5GRGppUE9rbDVtd2xtWUVpRzF0b09pOEk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9qu5pJt
IPjiPNnMonPINlvebeABjHrZqNS91855yHPk4OyQWWgJzJe6y7jwHDvrLe104glp
HBGfXuAMuQdVumAptSD114JoVwW1QkyK1ixGDJg02ssiy0o4Cy155vqQND5qZF9c
doLR6VBpcbRrEciJb3TMhxFptFv1o/6ubnkRrDoFYlHr91xBrn905fMDCM4/aN33
6PEoaZAbAYqceXtiAO91tb9Q6O90GM/YVeQedeenv8jjGfIMgHotKNADKHAAwBD6
epxxn+K4VEQHBe9VMDlvNd3NgD5g0zDj/M1weLsTiCcVPM3T8Es3UDR2tlsQS/LR
8HHWWcU/XXUxqw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 09:45:04 2025 by rpki-client