Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
File: uZDIXPoM7VKDY0mX56SqjOeDbbY.mft (raw, json)
Hash identifier: ZlULn5vuSTtL2xuHg4OYZatGt7ux9nAzdX/+XR4BtgU=
Subject key identifier: 2B:5F:E3:6D:D4:BE:82:04:DC:8C:40:19:C9:AA:C4:4C:89:E3:8A:B2
Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Certificate issuer: /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Certificate serial: 019894B7C68AB6A65C8E79301631B66F0878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 16:02:08 +0000
Manifest this update: Sun 10 Aug 2025 16:02:08 +0000
Manifest next update: Mon 11 Aug 2025 16:02:08 +0000
Files and hashes: 1: fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa (hash: Hb04qv2mCfUH3swl1KX6h239vXc62PCAwsB9N2VdCD0=)
2: uZDIXPoM7VKDY0mX56SqjOeDbbY.crl (hash: ZhzR/+izIf+w7pkBH3sABPDBET9wn2sKfvgTWNfPlLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:c6:8a:b6:a6:5c:8e:79:30:16:31:b6:6f:08:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Validity
Not Before: Aug 10 16:02:08 2025 GMT
Not After : Aug 11 16:02:08 2025 GMT
Subject: CN=2b5fe36dd4be8204dc8c4019c9aac44c89e38ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:8c:fd:32:12:c6:9e:90:02:9a:78:bb:92:
5e:f3:b8:2d:9d:c2:c7:cb:8f:f3:c1:7b:8b:98:f9:
aa:3c:0b:87:ec:26:b1:bb:3b:df:4e:fe:e2:00:26:
57:4c:4e:f7:31:ac:95:ad:61:d0:e7:62:3d:ed:cc:
8b:88:74:4f:c7:74:c5:72:4e:c7:2b:7a:ae:58:56:
14:db:3b:c8:bb:a7:44:42:e9:63:8c:19:15:5b:13:
f6:d2:85:57:37:26:e1:90:00:d9:e3:04:43:51:c3:
0d:34:2d:68:37:32:7c:59:9d:91:23:c4:b5:f9:f0:
d9:56:32:fd:36:b4:ee:fc:3c:38:15:de:e7:fd:b4:
df:49:f6:2e:49:b6:ad:c6:39:17:af:c2:98:59:7b:
e4:80:6f:aa:ee:c2:d1:f9:93:81:4b:64:65:70:05:
3b:c0:19:4a:35:e8:b3:6b:4b:65:15:44:78:bf:3b:
8b:ba:57:20:35:4d:f9:ad:3d:a0:2b:60:12:24:79:
72:b0:83:d5:b0:0b:2a:fa:38:10:e3:50:1e:58:26:
a2:f4:2c:ea:85:1e:e6:82:e1:3d:13:92:2c:71:db:
9d:84:49:be:43:f0:64:63:8d:e5:9e:3e:85:40:d8:
81:07:fb:94:ac:0c:a5:2f:d4:4a:3a:48:a2:dd:d6:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5F:E3:6D:D4:BE:82:04:DC:8C:40:19:C9:AA:C4:4C:89:E3:8A:B2
X509v3 Authority Key Identifier:
keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b7:ad:c5:12:22:39:fc:36:8a:90:1d:7e:e4:d3:42:11:08:
d3:b2:9e:e1:b5:dd:8f:7d:38:dc:4b:91:c6:45:ca:bd:43:eb:
ba:e9:00:13:ee:71:fd:fe:df:9f:62:a6:02:3f:9e:ed:45:9a:
fe:b6:ee:b4:2b:9c:2c:fe:6a:75:3a:e3:08:3a:9e:e0:19:b2:
21:1b:d2:6b:63:fb:69:75:18:da:f6:ac:87:2d:a7:6d:94:0d:
95:10:4c:38:80:f0:86:53:e2:ae:f7:39:05:96:9d:b6:a5:fa:
1d:47:31:eb:36:1f:83:03:b0:4f:2b:66:24:4c:e2:2f:b8:aa:
93:c0:3a:8a:fe:b5:6d:c9:ba:79:82:bf:01:f5:fa:c5:65:36:
11:c5:64:24:71:21:da:ce:61:d5:a4:da:3f:86:fb:e5:79:6c:
f1:21:d9:c7:b0:7b:b0:cd:e4:ba:95:98:e5:8e:a4:1e:71:09:
10:97:a5:cd:87:a7:64:5f:8b:68:6d:f5:19:c1:8e:5b:93:93:
2b:88:0e:a2:06:ee:68:60:44:61:e0:78:97:66:25:b7:bd:de:
3a:45:cb:34:aa:e9:d0:98:1d:0b:4b:fc:b8:49:d1:76:e9:a1:
95:3d:da:5c:d1:59:06:ae:94:61:fc:6f:b2:a6:6b:cd:0c:9d:
80:7c:a7:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUt8aKtqZcjnkwFjG2bwh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTBjODVjZmEwY2VkNTI4MzYzNDk5N2U3YTRhYThjZTc4
MzZkYjYwHhcNMjUwODEwMTYwMjA4WhcNMjUwODExMTYwMjA4WjAzMTEwLwYDVQQD
EygyYjVmZTM2ZGQ0YmU4MjA0ZGM4YzQwMTljOWFhYzQ0Yzg5ZTM4YWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ+M/TISxp6QApp4u5Je87gtncLH
y4/zwXuLmPmqPAuH7CaxuzvfTv7iACZXTE73MayVrWHQ52I97cyLiHRPx3TFck7H
K3quWFYU2zvIu6dEQuljjBkVWxP20oVXNybhkADZ4wRDUcMNNC1oNzJ8WZ2RI8S1
+fDZVjL9NrTu/Dw4Fd7n/bTfSfYuSbatxjkXr8KYWXvkgG+q7sLR+ZOBS2RlcAU7
wBlKNeiza0tlFUR4vzuLulcgNU35rT2gK2ASJHlysIPVsAsq+jgQ41AeWCai9Czq
hR7mguE9E5IscdudhEm+Q/BkY43lnj6FQNiBB/uUrAylL9RKOkii3dbRwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtf423UvoIE3IxAGcmqxEyJ44qyMB8GA1UdIwQY
MBaAFLmQyFz6DO1Sg2NJl+ekqozng222MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNzBlY2QtZTU3Ny00MDU4LTkzNTgt
NDczZjE1ZWMwZDUyLzEvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8xNzBlY2QtZTU3Ny00MDU4LTkzNTgtNDczZjE1ZWMwZDUy
LzEvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbetxRIi
Ofw2ipAdfuTTQhEI07Ke4bXdj3043EuRxkXKvUPruukAE+5x/f7fn2KmAj+e7UWa
/rbutCucLP5qdTrjCDqe4BmyIRvSa2P7aXUY2vashy2nbZQNlRBMOIDwhlPirvc5
BZadtqX6HUcx6zYfgwOwTytmJEziL7iqk8A6iv61bcm6eYK/AfX6xWU2EcVkJHEh
2s5h1aTaP4b75Xls8SHZx7B7sM3kupWY5Y6kHnEJEJelzYenZF+LaG31GcGOW5OT
K4gOogbuaGBEYeB4l2Ylt73eOkXLNKrp0JgdC0v8uEnRdumhlT3aXNFZBq6UYfxv
sqZrzQydgHynvA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:04:32 2025 by rpki-client