Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
File: USt7qR3DDrtBPNBVvUMpLi0UAY8.mft (raw, json)
Hash identifier: 39ywV12nkhliJFLD+M02elwDqRapvE4PHiWTMArmG0s=
Subject key identifier: FA:9B:FE:D2:34:90:38:74:B1:B0:69:A3:02:ED:11:A8:8D:25:C8:DA
Authority key identifier: 51:2B:7B:A9:1D:C3:0E:BB:41:3C:D0:55:BD:43:29:2E:2D:14:01:8F
Certificate issuer: /CN=512b7ba91dc30ebb413cd055bd43292e2d14018f
Certificate serial: 0198A08437C2B6E20BF247AE539ADDB9E76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
Manifest number: 05B1
Signing time: Tue 12 Aug 2025 23:01:16 +0000
Manifest this update: Tue 12 Aug 2025 23:01:16 +0000
Manifest next update: Wed 13 Aug 2025 23:01:16 +0000
Files and hashes: 1: USt7qR3DDrtBPNBVvUMpLi0UAY8.crl (hash: FQcqZ/vH0mDAZJLCCNLQBRuN4SdultSfa8Irm2mRTIw=)
2: vloVVT9ufVGR6rj5SefMS3qmK1c.roa (hash: /V+TKP3WFA5NtQkzEdfMB+4hHPZcd6oAqeonzaeqn0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:37:c2:b6:e2:0b:f2:47:ae:53:9a:dd:b9:e7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512b7ba91dc30ebb413cd055bd43292e2d14018f
Validity
Not Before: Aug 12 23:01:16 2025 GMT
Not After : Aug 13 23:01:16 2025 GMT
Subject: CN=fa9bfed234903874b1b069a302ed11a88d25c8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:f9:ef:1c:3d:15:1c:78:be:d0:52:82:2e:
c1:ab:68:f9:ce:c5:71:d7:db:1f:2f:12:c2:7e:2f:
a9:8f:ba:85:ef:fc:07:c3:5d:83:07:91:9f:c3:d8:
70:62:7b:1e:c1:df:1c:fe:12:a2:cd:cc:7e:94:2f:
da:45:4f:da:ff:85:4c:e2:fc:98:1c:07:cc:5b:a4:
6b:1d:49:bf:a1:98:ba:68:2f:10:ab:45:ce:bc:15:
1f:6d:9d:c7:c1:c6:7c:ae:c7:44:c0:08:a1:2a:91:
58:f3:74:71:66:be:fe:49:08:b3:44:a1:04:f2:17:
29:78:d8:6b:68:09:4b:13:a4:da:3f:2c:df:93:f0:
90:16:e7:0a:63:ce:55:3b:22:62:73:83:33:75:bf:
f9:ce:d8:7e:63:75:1a:a3:52:6a:4c:02:a9:2a:cd:
fc:2b:32:bb:7b:3c:5e:ff:cc:c2:b5:fd:5e:47:a5:
b5:66:3b:96:96:82:ca:4f:17:7b:5d:00:b2:86:90:
f8:3f:71:37:f0:be:b4:e7:f3:32:d1:5d:55:1a:f2:
80:e2:b0:f7:94:da:3e:20:d7:f8:f3:39:a3:84:ce:
8d:c6:d4:ad:ae:e1:55:bd:cb:d8:f6:b2:c8:c4:fe:
79:fc:2f:f9:06:71:3d:71:25:5a:83:59:54:9b:bd:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9B:FE:D2:34:90:38:74:B1:B0:69:A3:02:ED:11:A8:8D:25:C8:DA
X509v3 Authority Key Identifier:
keyid:51:2B:7B:A9:1D:C3:0E:BB:41:3C:D0:55:BD:43:29:2E:2D:14:01:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:29:47:24:15:52:bc:57:2f:49:ed:30:36:65:28:3a:0a:57:
f4:7b:67:d2:64:15:07:71:bc:f2:7d:03:91:7e:40:25:9e:f7:
ae:0a:4f:83:67:aa:27:fa:cc:67:cb:08:d6:29:6c:11:cc:74:
d6:4b:9d:ed:a0:17:42:16:75:71:7a:30:55:6a:37:4a:ef:8a:
a0:46:d6:86:34:4f:77:83:65:9e:55:9f:ff:0f:6b:2b:32:07:
ec:33:0d:20:23:27:01:ad:0a:6a:f9:16:e1:cc:72:fc:0d:9a:
59:f9:f5:ce:4c:91:a2:a2:0e:7a:5e:f2:e2:c5:3f:06:41:fa:
1b:a9:c6:e7:1c:89:6f:56:e1:26:90:75:01:d2:1b:15:5a:82:
72:5f:e0:90:92:de:d7:3f:90:f3:dd:1b:d6:46:6d:42:6d:e3:
b6:7d:f5:ed:33:1b:2c:f7:42:cf:76:23:ad:47:1f:b2:72:4c:
34:be:e8:c4:83:9b:dc:56:b7:e1:14:b0:5b:f4:9f:4d:53:0c:
7d:31:80:02:b7:4d:76:cb:d0:b8:ed:28:dd:ca:a2:99:10:7d:
1b:73:2e:d7:d7:be:89:12:9d:e8:17:59:01:71:a4:16:20:a7:
14:5d:cf:30:97:f1:73:52:cc:31:71:11:3a:5b:bc:3d:c1:98:
9c:b0:00:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZighDfCtuIL8keuU5rdueduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMmI3YmE5MWRjMzBlYmI0MTNjZDA1NWJkNDMyOTJlMmQx
NDAxOGYwHhcNMjUwODEyMjMwMTE2WhcNMjUwODEzMjMwMTE2WjAzMTEwLwYDVQQD
EyhmYTliZmVkMjM0OTAzODc0YjFiMDY5YTMwMmVkMTFhODhkMjVjOGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk757xw9FRx4vtBSgi7Bq2j5zsVx
19sfLxLCfi+pj7qF7/wHw12DB5Gfw9hwYnsewd8c/hKizcx+lC/aRU/a/4VM4vyY
HAfMW6RrHUm/oZi6aC8Qq0XOvBUfbZ3HwcZ8rsdEwAihKpFY83RxZr7+SQizRKEE
8hcpeNhraAlLE6TaPyzfk/CQFucKY85VOyJic4Mzdb/5zth+Y3Uao1JqTAKpKs38
KzK7ezxe/8zCtf1eR6W1ZjuWloLKTxd7XQCyhpD4P3E38L605/My0V1VGvKA4rD3
lNo+INf48zmjhM6NxtStruFVvcvY9rLIxP55/C/5BnE9cSVag1lUm72PLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqb/tI0kDh0sbBpowLtEaiNJcjaMB8GA1UdIwQY
MBaAFFEre6kdww67QTzQVb1DKS4tFAGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVN0N3FSM0REcnRCUE5CVnZVTXBMaTBVQVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82M2ZlOWUtNjBhMC00ZjgwLThjMDEt
MTY3Mzc0OWJjZWVjLzEvVVN0N3FSM0REcnRCUE5CVnZVTXBMaTBVQVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82M2ZlOWUtNjBhMC00ZjgwLThjMDEtMTY3Mzc0OWJjZWVj
LzEvVVN0N3FSM0REcnRCUE5CVnZVTXBMaTBVQVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKylHJBVS
vFcvSe0wNmUoOgpX9Htn0mQVB3G88n0DkX5AJZ73rgpPg2eqJ/rMZ8sI1ilsEcx0
1kud7aAXQhZ1cXowVWo3Su+KoEbWhjRPd4NlnlWf/w9rKzIH7DMNICMnAa0KavkW
4cxy/A2aWfn1zkyRoqIOel7y4sU/BkH6G6nG5xyJb1bhJpB1AdIbFVqCcl/gkJLe
1z+Q890b1kZtQm3jtn317TMbLPdCz3YjrUcfsnJMNL7oxIOb3Fa34RSwW/SfTVMM
fTGAArdNdsvQuO0o3cqimRB9G3Mu19e+iRKd6BdZAXGkFiCnFF3PMJfxc1LMMXER
Olu8PcGYnLAAOw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:12 2025 by rpki-client