Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: IdRyphhOG+F288U31GPyfaM4H12aGWz27Coy5fFHWtA=
Subject key identifier: 4F:33:FF:CB:B3:1D:83:3C:90:2B:B2:BD:F0:99:1D:03:53:56:DD:45
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 019887D6F0F8D759C5562D8AA169B65F9B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 142C
Signing time: Fri 08 Aug 2025 04:01:07 +0000
Manifest this update: Fri 08 Aug 2025 04:01:07 +0000
Manifest next update: Sat 09 Aug 2025 04:01:07 +0000
Files and hashes: 1: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (hash: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: BN3fbqeHM6A0IQppLrc5QDhPzGOIM/7feERVlTyAVMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:f0:f8:d7:59:c5:56:2d:8a:a1:69:b6:5f:9b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Aug 8 04:01:07 2025 GMT
Not After : Aug 9 04:01:07 2025 GMT
Subject: CN=4f33ffcbb31d833c902bb2bdf0991d035356dd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:76:88:0b:01:a9:1f:50:75:cf:5b:ca:f4:
c4:d8:a1:17:d8:60:e1:61:98:90:da:0d:91:57:73:
c8:75:d1:09:1c:ff:a6:9c:37:20:7f:17:5c:e8:2d:
4d:a5:1c:96:87:32:5e:cf:04:5a:39:7e:43:ea:ef:
dc:cb:bb:bf:ad:79:53:36:dd:e8:e5:38:91:48:1f:
3e:9e:56:a8:5b:2e:67:2d:6d:59:4a:d9:b0:57:ae:
70:b5:5e:1f:ed:6f:f9:79:30:78:2b:bf:5b:1e:54:
54:2e:e3:de:12:86:bb:83:49:bb:b6:d5:32:7b:b1:
82:45:39:a4:72:c1:f5:47:25:43:3b:d8:92:9f:ee:
80:e7:93:e4:24:e4:47:75:d0:60:14:02:c3:a5:7c:
ab:71:7b:5a:5f:35:87:08:6a:00:4c:1a:b3:68:44:
8d:c2:32:57:81:c1:8f:dc:82:46:aa:b8:d4:ae:f8:
e9:44:05:ca:ba:fb:1d:4a:d2:a7:c2:e7:f6:64:f5:
37:69:32:6a:0a:45:b8:92:ac:b0:69:d6:a0:86:39:
a6:62:c7:dc:2f:b8:a2:63:c2:32:91:b9:a3:cf:b1:
8f:e0:0f:40:1a:28:fe:c2:80:89:c2:17:9a:8b:7e:
08:9f:e1:bc:b3:12:c3:29:b6:e7:d3:1e:34:f7:3b:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:33:FF:CB:B3:1D:83:3C:90:2B:B2:BD:F0:99:1D:03:53:56:DD:45
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:95:cc:a9:2d:6b:fe:c5:17:ea:5f:46:68:09:13:a4:e1:e3:
64:93:8a:1a:c6:07:87:e0:34:95:69:44:7f:b3:d9:c6:35:ec:
85:64:07:9a:36:46:22:ed:9f:69:c6:0e:8c:b7:b8:c2:b3:ee:
7b:3c:90:bc:d4:d1:78:0f:17:29:61:b5:ec:45:97:be:82:20:
6f:f9:18:8d:bd:8d:ba:68:55:fd:6c:83:d7:a9:cb:02:b2:f2:
0f:5c:80:77:c2:09:78:09:a6:83:ce:a5:e5:71:5f:8e:15:04:
60:20:7d:8d:87:1c:1c:ce:21:f9:84:f1:d6:4f:2f:d2:ff:7d:
aa:24:a1:c9:04:46:6d:03:4c:b0:36:35:ee:8d:e5:45:35:e0:
66:71:37:5f:8a:75:e0:55:d4:a1:67:bc:e0:a9:df:eb:e8:6c:
d8:18:e9:8d:d7:54:64:d9:5e:8b:1d:0a:25:4f:80:df:e8:21:
33:d2:02:0e:59:b1:f0:4a:ca:69:e0:7b:8b:23:e9:f4:d4:8f:
1d:a7:0f:4b:c0:da:0c:42:12:a5:aa:25:94:a0:2c:ff:63:1b:
98:76:75:f9:44:26:96:b0:98:69:33:e0:22:76:3a:67:ad:cb:
c4:cc:fd:22:7d:9b:b0:47:b2:2c:9c:4e:a5:21:00:76:db:21:
4d:64:20:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiH1vD411nFVi2KoWm2X5t5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTlkZDVhYzAzMjI1ODQ0YjZiNDkwZjkyZjAzNDdjY2Yw
OTY3MDgwHhcNMjUwODA4MDQwMTA3WhcNMjUwODA5MDQwMTA3WjAzMTEwLwYDVQQD
Eyg0ZjMzZmZjYmIzMWQ4MzNjOTAyYmIyYmRmMDk5MWQwMzUzNTZkZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn92iAsBqR9Qdc9byvTE2KEX2GDh
YZiQ2g2RV3PIddEJHP+mnDcgfxdc6C1NpRyWhzJezwRaOX5D6u/cy7u/rXlTNt3o
5TiRSB8+nlaoWy5nLW1ZStmwV65wtV4f7W/5eTB4K79bHlRULuPeEoa7g0m7ttUy
e7GCRTmkcsH1RyVDO9iSn+6A55PkJORHddBgFALDpXyrcXtaXzWHCGoATBqzaESN
wjJXgcGP3IJGqrjUrvjpRAXKuvsdStKnwuf2ZPU3aTJqCkW4kqywadaghjmmYsfc
L7iiY8Iykbmjz7GP4A9AGij+woCJwheai34In+G8sxLDKbbn0x409zt44QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8z/8uzHYM8kCuyvfCZHQNTVt1FMB8GA1UdIwQY
MBaAFLmZ3VrAMiWES2tJD5LwNHzPCWcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2Yt
ZmNhYWYyZWYzNjAxLzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2YtZmNhYWYyZWYzNjAx
LzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZXMqS1r
/sUX6l9GaAkTpOHjZJOKGsYHh+A0lWlEf7PZxjXshWQHmjZGIu2facYOjLe4wrPu
ezyQvNTReA8XKWG17EWXvoIgb/kYjb2NumhV/WyD16nLArLyD1yAd8IJeAmmg86l
5XFfjhUEYCB9jYccHM4h+YTx1k8v0v99qiShyQRGbQNMsDY17o3lRTXgZnE3X4p1
4FXUoWe84Knf6+hs2BjpjddUZNleix0KJU+A3+ghM9ICDlmx8ErKaeB7iyPp9NSP
HacPS8DaDEISpaollKAs/2MbmHZ1+UQmlrCYaTPgInY6Z63LxMz9In2bsEeyLJxO
pSEAdtshTWQgYA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:13:46 2025 by rpki-client