Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: N6cOyTa8Nye0NTXrjCXegmVAVrpjQo9fNNlTBsxBILc=
Subject key identifier: 45:1F:5F:4E:19:07:6E:B4:CC:C5:BC:9C:4B:36:63:6E:DF:B9:16:5F
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 019770758120C3C80187CA17E36B792AB4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 12E0
Signing time: Sat 14 Jun 2025 22:00:38 +0000
Manifest this update: Sat 14 Jun 2025 22:00:38 +0000
Manifest next update: Sun 15 Jun 2025 22:00:38 +0000
Files and hashes: 1: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: Wo0nd0DyGscMm9M+ZBFzIBBQWxDdzyq3KOUDBnTAvbg=)
2: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (hash: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:81:20:c3:c8:01:87:ca:17:e3:6b:79:2a:b4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Jun 14 22:00:38 2025 GMT
Not After : Jun 15 22:00:38 2025 GMT
Subject: CN=451f5f4e19076eb4ccc5bc9c4b36636edfb9165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:fe:87:92:e7:6b:00:1d:10:bb:76:4b:64:
67:c8:d8:e1:cc:b4:de:7f:63:19:10:75:b6:dc:e7:
20:86:81:f3:c1:7e:21:eb:38:13:3b:10:a4:92:f0:
8d:15:4b:af:f7:27:c8:ad:e1:c3:2b:be:a0:f0:c5:
62:74:0d:ac:d3:5f:b5:0a:1b:4d:f3:2f:53:ce:02:
60:c2:be:67:58:e1:56:e2:47:3a:0b:8e:df:ac:a6:
9e:9f:c1:4e:e8:39:99:fa:db:dd:71:01:82:d6:fc:
a6:c0:59:40:2f:03:7b:0c:a7:49:16:bc:45:60:b8:
c2:6b:92:56:63:11:48:6b:46:37:2b:0a:37:98:04:
71:5e:5d:54:f9:fb:db:ad:a0:61:5f:75:72:a2:d0:
a8:91:8e:3e:42:8c:6a:04:e6:72:f9:70:4a:3d:7a:
8f:2e:db:58:95:37:0d:8a:54:4b:85:17:66:dc:da:
0b:84:b7:e5:07:16:6d:62:d7:5d:b9:50:5e:a4:9c:
89:33:77:44:98:9d:48:8b:77:bd:ff:6f:ad:ed:26:
01:00:7a:b3:ad:68:92:db:32:64:d6:73:97:7f:c5:
60:89:58:5d:a0:a7:61:11:e8:da:0b:f6:61:f4:88:
98:c1:8f:6c:2a:d3:fd:8c:67:f4:27:04:93:c5:52:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1F:5F:4E:19:07:6E:B4:CC:C5:BC:9C:4B:36:63:6E:DF:B9:16:5F
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:26:a1:f8:b2:34:c2:a5:62:75:08:c0:20:24:df:4f:59:11:
7f:c3:50:3c:f3:3d:06:ee:de:50:4e:8e:7f:8f:d2:23:bb:0a:
2d:a6:79:da:7c:30:14:e0:73:ba:f7:52:5c:13:72:98:8f:32:
d0:c2:ee:50:9c:6c:fe:77:d4:ee:d5:c6:f9:58:e7:3c:28:11:
4a:9d:f7:dd:d1:e3:9f:1d:05:5c:3c:05:ec:83:a7:2f:12:f1:
3c:4e:f6:93:80:aa:a6:40:a3:e0:0d:47:bd:11:3c:e4:83:71:
7a:7f:60:1b:0e:47:0d:98:9e:1c:a2:34:f6:5e:a9:df:5a:d5:
3a:04:9c:4f:fd:bb:cb:92:16:43:ff:2d:e5:50:7d:10:f2:97:
78:4f:ee:eb:67:0d:09:fd:68:0f:ae:b9:6f:56:43:5e:c1:76:
3a:66:09:f6:54:6b:3f:23:91:d6:e8:29:09:f7:77:18:f9:67:
48:9a:f7:29:ca:53:00:0d:ac:49:c9:22:2d:23:fe:12:fd:b7:
65:ef:3f:7d:f4:5c:21:41:75:34:fe:0b:12:20:c7:70:4c:4a:
40:90:57:8b:11:fe:cf:89:98:50:dd:2d:cf:c0:29:70:da:12:
57:cd:ff:c5:8b:12:2c:45:2a:48:cb:f7:e4:fc:37:22:fe:38:
4d:07:1a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdYEgw8gBh8oX42t5KrSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjEwN2VkMDdiNWFjMGQ4MjY5ZDcyMjlkOWZkMmNhMGUz
MjY1OGIwHhcNMjUwNjE0MjIwMDM4WhcNMjUwNjE1MjIwMDM4WjAzMTEwLwYDVQQD
Eyg0NTFmNWY0ZTE5MDc2ZWI0Y2NjNWJjOWM0YjM2NjM2ZWRmYjkxNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvD+h5LnawAdELt2S2RnyNjhzLTe
f2MZEHW23OcghoHzwX4h6zgTOxCkkvCNFUuv9yfIreHDK76g8MVidA2s01+1ChtN
8y9TzgJgwr5nWOFW4kc6C47frKaen8FO6DmZ+tvdcQGC1vymwFlALwN7DKdJFrxF
YLjCa5JWYxFIa0Y3Kwo3mARxXl1U+fvbraBhX3VyotCokY4+QoxqBOZy+XBKPXqP
LttYlTcNilRLhRdm3NoLhLflBxZtYtdduVBepJyJM3dEmJ1Ii3e9/2+t7SYBAHqz
rWiS2zJk1nOXf8VgiVhdoKdhEejaC/Zh9IiYwY9sKtP9jGf0JwSTxVKdKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUfX04ZB260zMW8nEs2Y27fuRZfMB8GA1UdIwQY
MBaAFFIhB+0HtawNgmnXIp2f0soOMmWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTIt
NTliY2UzMTljMWNiLzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTItNTliY2UzMTljMWNi
LzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSah+LI0
wqVidQjAICTfT1kRf8NQPPM9Bu7eUE6Of4/SI7sKLaZ52nwwFOBzuvdSXBNymI8y
0MLuUJxs/nfU7tXG+VjnPCgRSp333dHjnx0FXDwF7IOnLxLxPE72k4CqpkCj4A1H
vRE85INxen9gGw5HDZieHKI09l6p31rVOgScT/27y5IWQ/8t5VB9EPKXeE/u62cN
Cf1oD665b1ZDXsF2OmYJ9lRrPyOR1ugpCfd3GPlnSJr3KcpTAA2sSckiLSP+Ev23
Ze8/ffRcIUF1NP4LEiDHcExKQJBXixH+z4mYUN0tz8ApcNoSV83/xYsSLEUqSMv3
5Pw3Iv44TQcaBw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 02:58:41 2025 by rpki-client