Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: LMc0zuzWEaSbaIZXxx3sVtnillANsZ6cwY6aWFdaDvk=
Subject key identifier: BA:C9:AC:65:36:31:3F:E8:E6:18:CB:7B:F4:22:66:CC:BE:62:AA:31
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 0198843122235A92C04E4AFE00E338FE0AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 1623
Signing time: Thu 07 Aug 2025 11:01:09 +0000
Manifest this update: Thu 07 Aug 2025 11:01:09 +0000
Manifest next update: Fri 08 Aug 2025 11:01:09 +0000
Files and hashes: 1: PYLR3kfr_0El_Ga2E9JeZcCyCVc.roa (hash: A0449RCi6B29H8zKA0rMM/NDvKNi2c+elOaTXG6BpHk=)
2: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: JbjSnToLO1dO11dk5aIvTMfRJQsxqq77koDa5bzhaOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:22:23:5a:92:c0:4e:4a:fe:00:e3:38:fe:0a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Aug 7 11:01:09 2025 GMT
Not After : Aug 8 11:01:09 2025 GMT
Subject: CN=bac9ac6536313fe8e618cb7bf42266ccbe62aa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:74:b8:04:91:c1:1a:7a:06:de:b3:85:d0:
c3:44:f5:3d:55:44:41:01:91:6e:7c:d0:40:bb:ce:
68:61:e5:34:8d:88:3c:5b:ea:95:93:91:46:9c:a9:
83:07:a9:b0:e4:00:06:3b:86:ac:ba:87:55:04:56:
94:b4:84:67:b1:0d:31:a2:bd:7c:05:6b:18:ff:0e:
04:c0:a1:02:35:9e:ad:3a:8d:6a:8f:d1:b4:da:35:
de:55:69:08:3d:14:cb:fd:72:4b:1d:c9:81:0a:67:
19:d8:f7:9a:e2:26:a5:92:1c:8b:c8:8f:8d:c7:0e:
9b:a1:2f:5c:84:aa:03:1b:99:48:91:1f:8d:aa:bd:
e8:71:6f:1c:ea:20:90:24:7e:14:64:0b:f8:b2:4f:
35:e6:14:67:4e:24:4c:f8:d4:96:8d:21:92:3f:38:
07:f1:47:e7:d3:a1:f0:be:60:8a:9c:db:75:0f:5c:
fa:94:7b:e1:33:14:58:b7:46:5b:f5:1c:78:d7:f6:
25:e8:48:80:46:61:02:c4:43:73:77:1b:9b:41:ae:
48:ea:48:68:dd:fc:20:44:6d:93:c9:76:98:95:e7:
93:9f:bb:9c:9e:fc:99:2f:ea:b7:e8:b9:bf:dc:1a:
55:18:3c:7b:d0:1c:a9:27:70:7e:e9:b7:18:24:d5:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C9:AC:65:36:31:3F:E8:E6:18:CB:7B:F4:22:66:CC:BE:62:AA:31
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a2:55:73:66:d2:b6:83:ef:e8:ee:8b:fe:ab:6a:4b:b5:b2:
6b:51:44:d9:26:2b:ba:bd:97:3a:0e:13:c9:ff:83:3a:16:13:
b1:12:db:77:27:4a:49:cd:e6:7a:40:6f:e1:9d:cc:e4:a2:bf:
ee:bb:e3:ac:5e:9f:fc:f5:34:32:fe:8e:64:92:c3:e0:49:9d:
23:97:4c:c8:6b:29:4c:50:a2:c0:51:d9:d9:eb:5f:d7:b8:63:
63:a6:ec:da:55:a9:35:2b:1f:aa:ed:b5:b4:54:7d:6f:c7:23:
6e:7d:33:e8:a4:e9:97:6b:82:78:66:4f:8d:2d:85:df:c1:8a:
84:60:2b:f4:8d:c5:56:28:44:a7:12:ff:fd:9d:01:54:41:65:
57:c3:01:8b:4c:ed:af:c4:cd:34:fe:88:f6:ef:e2:67:82:a3:
bb:54:83:7d:a8:61:db:27:ed:ba:be:01:9e:f5:f7:5a:b8:b9:
33:bd:81:fa:52:e5:53:02:dd:ae:b9:07:70:fe:a2:2b:ce:8e:
6e:ce:95:5d:26:c5:4d:39:b0:e4:36:8e:0b:6a:3a:6a:b3:d2:
26:25:51:44:20:5e:fb:7d:b0:93:3e:49:4b:f4:ee:87:49:91:
5e:95:2e:0d:c0:bd:7d:f1:4f:b7:d0:e8:8e:04:1c:49:8d:79:
dd:25:93:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEMSIjWpLATkr+AOM4/grGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOTRhMjZhYmE3MTAwNzYyMWZkNTk5ZDUzN2JiN2FlYWFk
ZThiMzMwHhcNMjUwODA3MTEwMTA5WhcNMjUwODA4MTEwMTA5WjAzMTEwLwYDVQQD
EyhiYWM5YWM2NTM2MzEzZmU4ZTYxOGNiN2JmNDIyNjZjY2JlNjJhYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DR0uASRwRp6Bt6zhdDDRPU9VURB
AZFufNBAu85oYeU0jYg8W+qVk5FGnKmDB6mw5AAGO4asuodVBFaUtIRnsQ0xor18
BWsY/w4EwKECNZ6tOo1qj9G02jXeVWkIPRTL/XJLHcmBCmcZ2Pea4ialkhyLyI+N
xw6boS9chKoDG5lIkR+Nqr3ocW8c6iCQJH4UZAv4sk815hRnTiRM+NSWjSGSPzgH
8Ufn06HwvmCKnNt1D1z6lHvhMxRYt0Zb9Rx41/Yl6EiARmECxENzdxubQa5I6kho
3fwgRG2TyXaYleeTn7ucnvyZL+q36Lm/3BpVGDx70BypJ3B+6bcYJNUQYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrJrGU2MT/o5hjLe/QiZsy+YqoxMB8GA1UdIwQY
MBaAFFCUomq6cQB2If1ZnVN7t66q3oszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmNlNzgtNGY5ZC00ODQ3LWI3NTkt
YjQ1MWU0NzdiOWMyLzEvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ZmNlNzgtNGY5ZC00ODQ3LWI3NTktYjQ1MWU0NzdiOWMy
LzEvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaJVc2bS
toPv6O6L/qtqS7Wya1FE2SYrur2XOg4Tyf+DOhYTsRLbdydKSc3mekBv4Z3M5KK/
7rvjrF6f/PU0Mv6OZJLD4EmdI5dMyGspTFCiwFHZ2etf17hjY6bs2lWpNSsfqu21
tFR9b8cjbn0z6KTpl2uCeGZPjS2F38GKhGAr9I3FVihEpxL//Z0BVEFlV8MBi0zt
r8TNNP6I9u/iZ4Kju1SDfahh2yftur4BnvX3Wri5M72B+lLlUwLdrrkHcP6iK86O
bs6VXSbFTTmw5DaOC2o6arPSJiVRRCBe+32wkz5JS/Tuh0mRXpUuDcC9ffFPt9Do
jgQcSY153SWTFQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:25:16 2025 by rpki-client