Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: iH3E0TeWO0lroOXtJWL4vcvOzKDSZXHldfhtnS845iM=
Subject key identifier: AE:35:B3:0B:58:96:60:6A:F6:EC:A1:EE:A3:AD:0B:B1:A7:E0:16:98
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 01988B103FD59DE098AB656C160E3E145F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 19:02:34 +0000
Manifest this update: Fri 08 Aug 2025 19:02:34 +0000
Manifest next update: Sat 09 Aug 2025 19:02:34 +0000
Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: yE6rgl7VSPUVscym+HnNOP6HM2B5x3cTR3vpGJgTWmk=)
3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:3f:d5:9d:e0:98:ab:65:6c:16:0e:3e:14:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Aug 8 19:02:34 2025 GMT
Not After : Aug 9 19:02:34 2025 GMT
Subject: CN=ae35b30b5896606af6eca1eea3ad0bb1a7e01698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:42:be:b0:c3:4a:af:78:03:7f:e1:2f:70:
7f:e9:13:b0:b3:bb:02:e3:c7:34:9c:8c:03:d9:49:
eb:d6:95:6d:f7:44:84:a1:5e:69:31:b3:35:49:f8:
3d:e3:be:8e:78:00:24:37:77:61:9f:93:9f:b6:4c:
a4:bb:a1:98:ec:36:99:0f:82:9e:a6:b1:47:1d:d5:
bc:29:94:ff:68:f1:7d:02:6c:14:78:db:14:c7:0d:
34:82:3e:19:e7:2d:45:16:a8:2c:84:14:d2:59:f4:
8f:16:c9:10:ed:cc:17:b1:c5:3c:9f:95:b9:dc:31:
74:71:95:45:48:2b:6f:2a:e2:ba:20:16:ea:57:37:
9e:3e:8f:aa:7d:2f:d2:79:2c:69:67:71:4c:72:cd:
f6:37:a4:3f:b2:71:dd:0e:07:e5:6c:2d:3a:24:da:
af:2f:07:94:11:75:c1:e7:b9:4c:45:30:c2:75:e7:
b1:52:fe:3f:1e:1f:a1:b4:31:df:fb:39:1f:a0:cd:
f8:63:d9:d1:01:e0:c8:b7:84:86:9f:2f:e3:11:c1:
44:13:2f:0e:8d:6b:41:ab:0e:ef:67:8e:d9:37:fd:
cd:5e:47:f6:98:09:b5:8c:ed:e9:b5:95:bd:b7:23:
da:96:10:6a:ed:34:03:c8:d5:b2:c4:40:ea:f7:b8:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:35:B3:0B:58:96:60:6A:F6:EC:A1:EE:A3:AD:0B:B1:A7:E0:16:98
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9e:db:2f:9e:f9:29:2b:d8:42:3d:13:cf:79:81:e9:d3:59:
66:ab:01:91:33:54:5b:b2:e8:b5:fd:9f:fd:a2:b3:dc:1d:dc:
53:76:a4:6c:58:2d:7e:75:79:d1:c8:30:54:8b:2e:e8:d8:ef:
3a:5a:01:ff:a7:5b:9a:70:ea:09:e2:93:09:49:db:7e:d3:d8:
d0:0a:69:db:e8:55:5f:73:42:ca:93:4e:71:1c:73:b4:4d:92:
36:5b:c1:a9:22:94:c2:50:c9:cf:cd:36:c0:83:c6:8b:cd:1b:
a9:f3:3f:7a:be:13:ca:4e:98:64:db:ee:e7:75:3e:7c:3a:9e:
3e:19:cd:59:a7:3f:f9:2f:a2:3c:d0:a7:36:c8:26:3f:ab:1e:
97:af:29:80:aa:2d:63:1e:bc:17:aa:90:9e:2a:f1:43:56:c7:
be:37:63:81:bc:27:5c:9e:b6:27:7c:7b:65:20:aa:c0:49:e7:
29:5a:28:e1:01:dc:e4:a9:9f:de:5d:52:b2:55:da:b6:80:b9:
10:c2:22:3b:c9:8f:13:56:46:92:35:d6:6e:79:73:06:40:24:
bf:36:8a:26:cd:5c:71:5f:2b:ee:70:72:9f:f7:75:90:69:e4:
bb:40:d1:e6:fa:f2:73:89:e0:7c:6b:f7:71:a2:fd:99:18:86:
60:9e:3b:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLED/VneCYq2VsFg4+FF8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTZjNzUwODQwZmU1YzAxMDNhN2Y1MTAyMmM3Y2VlYThm
ZTk2OWIwHhcNMjUwODA4MTkwMjM0WhcNMjUwODA5MTkwMjM0WjAzMTEwLwYDVQQD
EyhhZTM1YjMwYjU4OTY2MDZhZjZlY2ExZWVhM2FkMGJiMWE3ZTAxNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+JCvrDDSq94A3/hL3B/6ROws7sC
48c0nIwD2Unr1pVt90SEoV5pMbM1Sfg9476OeAAkN3dhn5Oftkyku6GY7DaZD4Ke
prFHHdW8KZT/aPF9AmwUeNsUxw00gj4Z5y1FFqgshBTSWfSPFskQ7cwXscU8n5W5
3DF0cZVFSCtvKuK6IBbqVzeePo+qfS/SeSxpZ3FMcs32N6Q/snHdDgflbC06JNqv
LweUEXXB57lMRTDCdeexUv4/Hh+htDHf+zkfoM34Y9nRAeDIt4SGny/jEcFEEy8O
jWtBqw7vZ47ZN/3NXkf2mAm1jO3ptZW9tyPalhBq7TQDyNWyxEDq97jVnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK41swtYlmBq9uyh7qOtC7Gn4BaYMB8GA1UdIwQY
MBaAFFBWx1CED+XAEDp/UQIsfO6o/pabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yNTI5NjgtYjhiYS00ZTE5LTg0ZDct
MzIyODI4NmRhNjAxLzEvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8yNTI5NjgtYjhiYS00ZTE5LTg0ZDctMzIyODI4NmRhNjAx
LzEvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjp7bL575
KSvYQj0Tz3mB6dNZZqsBkTNUW7Lotf2f/aKz3B3cU3akbFgtfnV50cgwVIsu6Njv
OloB/6dbmnDqCeKTCUnbftPY0App2+hVX3NCypNOcRxztE2SNlvBqSKUwlDJz802
wIPGi80bqfM/er4Tyk6YZNvu53U+fDqePhnNWac/+S+iPNCnNsgmP6sel68pgKot
Yx68F6qQnirxQ1bHvjdjgbwnXJ62J3x7ZSCqwEnnKVoo4QHc5Kmf3l1SslXatoC5
EMIiO8mPE1ZGkjXWbnlzBkAkvzaKJs1ccV8r7nByn/d1kGnku0DR5vryc4ngfGv3
caL9mRiGYJ47Zw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:45:34 2025 by rpki-client