Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File: UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier: 8TxS3Oda/aOHcdNSXEtqbCwgzArouKuSazYTC0JBp4A=
Subject key identifier: 8D:D4:73:A0:3C:2D:57:7A:1C:40:49:9B:80:65:5B:E2:3A:5C:37:3D
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer: /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial: 019874507652DC8E224A0CE942E2BDAA3CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number: 097B
Signing time: Mon 04 Aug 2025 09:01:26 +0000
Manifest this update: Mon 04 Aug 2025 09:01:26 +0000
Manifest next update: Tue 05 Aug 2025 09:01:26 +0000
Files and hashes: 1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: dysESq6F/7YqODaGhW5+ddf0ZQHbclotPsJ0BmJ/vdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:76:52:dc:8e:22:4a:0c:e9:42:e2:bd:aa:3c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
Validity
Not Before: Aug 4 09:01:26 2025 GMT
Not After : Aug 5 09:01:26 2025 GMT
Subject: CN=8dd473a03c2d577a1c40499b80655be23a5c373d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:d9:59:05:0f:d7:fd:f5:6f:49:44:12:e5:
d9:fa:29:85:db:19:84:91:07:fa:93:4d:ba:24:36:
a1:4c:01:87:d6:44:07:a4:71:4b:b2:49:41:1a:d7:
7d:1a:e2:7a:ab:7b:aa:3b:56:35:c4:94:12:1b:8d:
5e:59:73:df:53:9a:df:96:ab:7f:50:43:55:a2:92:
96:a5:04:1f:de:29:71:e6:7c:4b:fc:f1:c1:7c:f6:
cc:51:a5:f6:d9:53:91:2c:13:ba:92:cc:6d:c4:bf:
c6:86:47:eb:90:3e:8a:c9:3a:d1:11:df:74:83:84:
57:c7:db:e7:bb:36:ab:3f:1d:8c:42:e6:cc:25:fc:
53:fb:8e:b4:d7:fe:77:67:cd:9c:74:d7:d2:e2:39:
a4:e9:e4:60:4c:0e:76:ca:c6:4d:ee:45:5c:46:73:
8a:a4:98:63:d2:13:f6:72:9c:03:4e:68:c5:d2:be:
3c:a0:5e:a0:05:a2:b9:6a:0c:f5:3e:dd:47:14:16:
99:ad:a7:c6:47:0e:07:a2:6e:7e:6b:d7:bb:b8:46:
4e:85:37:ed:ae:12:cf:65:05:5a:9a:80:b3:27:15:
7d:62:b7:28:85:1b:ea:ac:36:82:79:07:e8:3e:a8:
3a:bf:8d:07:8b:a1:e7:30:3a:b2:56:88:4f:99:1a:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D4:73:A0:3C:2D:57:7A:1C:40:49:9B:80:65:5B:E2:3A:5C:37:3D
X509v3 Authority Key Identifier:
keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e0:b4:da:01:31:90:dc:a6:fb:b4:22:8b:81:41:ba:50:8a:
4b:cf:4a:14:e1:bc:74:44:9a:b3:a8:5b:4f:ea:ca:d4:1c:c9:
01:2f:0c:b2:09:71:42:68:14:29:5a:65:de:e0:9e:c7:e1:15:
bb:40:04:53:b4:a8:59:1e:3c:08:04:7e:e8:4c:c1:2c:ac:b0:
d5:6f:80:7b:84:54:d1:65:88:d7:4a:ae:51:43:53:65:9e:24:
8a:fd:5e:2f:0f:a3:c4:f3:60:50:1a:b3:68:30:61:71:cb:61:
fb:a8:9f:80:ba:30:fe:8c:ab:ee:3e:ac:ea:ac:a9:fb:2f:b3:
8c:b4:a1:35:28:34:07:3e:85:e7:05:8c:19:ff:0b:7b:57:43:
b9:96:5b:ce:46:3c:06:06:df:6b:3c:95:58:66:ec:58:2f:d1:
da:a9:d4:8a:24:73:ce:93:81:48:9b:a6:1d:07:62:35:8d:fe:
85:fc:a3:c1:d0:de:73:80:a2:f6:ab:25:8e:39:f7:eb:a5:31:
1b:b6:49:92:5f:60:ad:57:c7:37:16:1d:f6:69:55:d8:9e:7b:
0a:af:22:fa:a1:cd:a8:27:8c:fd:a0:7a:0d:b6:64:3f:9c:28:
b8:20:1a:86:17:15:69:97:89:9f:6a:2f:cb:6e:46:6b:68:0e:
b2:dd:55:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UHZS3I4iSgzpQuK9qjzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTAzOTc1NmNjZjMxZjY0YTg4MzQ0M2UxZjE3MzI4MzRk
MmI4YjIwHhcNMjUwODA0MDkwMTI2WhcNMjUwODA1MDkwMTI2WjAzMTEwLwYDVQQD
Eyg4ZGQ0NzNhMDNjMmQ1NzdhMWM0MDQ5OWI4MDY1NWJlMjNhNWMzNzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa7ZWQUP1/31b0lEEuXZ+imF2xmE
kQf6k026JDahTAGH1kQHpHFLsklBGtd9GuJ6q3uqO1Y1xJQSG41eWXPfU5rflqt/
UENVopKWpQQf3ilx5nxL/PHBfPbMUaX22VORLBO6ksxtxL/GhkfrkD6KyTrREd90
g4RXx9vnuzarPx2MQubMJfxT+4601/53Z82cdNfS4jmk6eRgTA52ysZN7kVcRnOK
pJhj0hP2cpwDTmjF0r48oF6gBaK5agz1Pt1HFBaZrafGRw4Hom5+a9e7uEZOhTft
rhLPZQVamoCzJxV9YrcohRvqrDaCeQfoPqg6v40Hi6HnMDqyVohPmRqG0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3Uc6A8LVd6HEBJm4BlW+I6XDc9MB8GA1UdIwQY
MBaAFFAQOXVszzH2Sog0Q+Hxcyg00riyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAt
Y2RhMjZjMzYwNjJhLzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAtY2RhMjZjMzYwNjJh
LzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+C02gEx
kNym+7Qii4FBulCKS89KFOG8dESas6hbT+rK1BzJAS8MsglxQmgUKVpl3uCex+EV
u0AEU7SoWR48CAR+6EzBLKyw1W+Ae4RU0WWI10quUUNTZZ4kiv1eLw+jxPNgUBqz
aDBhccth+6ifgLow/oyr7j6s6qyp+y+zjLShNSg0Bz6F5wWMGf8Le1dDuZZbzkY8
BgbfazyVWGbsWC/R2qnUiiRzzpOBSJumHQdiNY3+hfyjwdDec4Ci9qsljjn366Ux
G7ZJkl9grVfHNxYd9mlV2J57Cq8i+qHNqCeM/aB6DbZkP5wouCAahhcVaZeJn2ov
y25Ga2gOst1V+w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:22 2025 by rpki-client