
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
File: UvbBEDFTJEhSvLPiO23ioWuqen8.mft (raw, json)
Hash identifier: 6P/CrDNcQrJP1SZiaoIzaRh+gE02pjzMkV0k9h3sa3I=
Subject key identifier: A6:F8:C5:97:07:BD:E8:14:E9:8F:01:37:06:DF:85:EF:31:D1:CB:91
Authority key identifier: 52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F
Certificate issuer: /CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
Certificate serial: 01987CE5987C45645FE530DF58A2D1464A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
Manifest number: 1068
Signing time: Wed 06 Aug 2025 01:01:18 +0000
Manifest this update: Wed 06 Aug 2025 01:01:18 +0000
Manifest next update: Thu 07 Aug 2025 01:01:18 +0000
Files and hashes: 1: UvbBEDFTJEhSvLPiO23ioWuqen8.crl (hash: VBrVc9Pi7/T4J68vrcsjAQX2IWtD0NNrPcQe83rTDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:98:7c:45:64:5f:e5:30:df:58:a2:d1:46:4a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
Validity
Not Before: Aug 6 01:01:18 2025 GMT
Not After : Aug 7 01:01:18 2025 GMT
Subject: CN=a6f8c59707bde814e98f013706df85ef31d1cb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:32:6a:61:c8:f2:16:ed:dd:bf:01:20:65:
09:77:74:9e:63:8d:61:53:04:d4:26:83:cb:da:d5:
31:01:96:1f:44:24:ec:ab:97:a4:2e:b7:5e:6e:1d:
ba:bd:87:43:2a:8c:1d:f6:a3:9b:c8:2a:e1:f4:f3:
22:df:55:60:dd:0c:17:8a:62:11:7a:22:37:f8:ab:
35:ff:bf:f6:53:d7:9a:46:26:b3:59:0b:ef:b3:88:
6e:fe:cb:5c:4c:4e:3b:8c:f8:d4:af:37:24:4e:ad:
8a:4e:6b:6a:54:ac:00:d6:e7:c2:38:b8:b6:7b:6b:
29:83:bd:71:90:87:c7:74:17:78:e1:09:0b:fc:89:
56:bc:39:25:ef:88:ed:05:a8:5b:f4:fa:a7:67:de:
03:48:34:cc:fd:61:b7:75:c8:b3:9b:92:69:e0:6f:
b1:89:8e:53:67:1c:6e:f3:25:7c:79:b8:82:fa:a6:
67:e7:42:cb:98:8f:24:a8:aa:74:37:28:d6:50:da:
5e:b7:62:2c:72:51:e7:67:9a:cb:62:2c:43:23:08:
9d:40:d0:33:1a:9b:3f:3b:90:0c:ba:9f:a4:59:0a:
12:d5:35:54:5b:49:1e:2c:d8:83:47:8e:b9:45:84:
5a:7c:7a:22:16:bf:84:b9:ad:3d:e6:50:25:62:01:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F8:C5:97:07:BD:E8:14:E9:8F:01:37:06:DF:85:EF:31:D1:CB:91
X509v3 Authority Key Identifier:
keyid:52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:51:56:71:2a:16:96:06:31:00:80:81:7b:cc:39:35:89:79:
c4:31:d4:a0:da:60:68:56:4b:0f:1d:b0:45:9f:37:0f:44:01:
01:e3:db:4b:c6:6e:9d:b6:bf:4b:8e:34:17:56:ea:b0:cf:68:
63:31:3a:ee:12:78:6c:39:79:5e:4b:d1:21:58:f0:c1:d4:f3:
4d:34:e1:b8:51:f6:f0:d2:1a:35:ec:ba:2c:ca:c7:a6:b3:8f:
7e:9e:a8:01:10:51:3e:da:29:0f:06:b2:3a:d2:cd:97:92:ee:
88:6e:eb:8f:29:f4:da:ba:f5:ea:44:f8:55:85:51:a8:2c:ec:
fd:56:ce:ff:62:5b:63:5d:30:be:11:c5:1f:51:fd:88:8c:1d:
78:84:86:f8:01:48:40:dc:0e:f3:ca:d3:65:92:ed:ad:e7:11:
7e:d8:08:33:d2:e2:01:6e:0f:22:23:52:b4:25:c8:1a:36:ab:
6a:03:2c:fe:e6:26:d3:02:d1:cc:1a:0e:ed:ec:43:21:ce:03:
dc:d7:6d:34:57:9d:b2:4b:27:52:2a:ca:e2:1a:0d:38:8e:da:
bc:22:47:0c:98:f3:69:5b:98:3f:1d:c3:e9:0d:e7:19:bb:35:
97:81:d8:18:d1:10:12:7b:da:60:4a:34:46:dd:06:da:68:d2:
e8:1b:bc:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85Zh8RWRf5TDfWKLRRkoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZjZjMTEwMzE1MzI0NDg1MmJjYjNlMjNiNmRlMmExNmJh
YTdhN2YwHhcNMjUwODA2MDEwMTE4WhcNMjUwODA3MDEwMTE4WjAzMTEwLwYDVQQD
EyhhNmY4YzU5NzA3YmRlODE0ZTk4ZjAxMzcwNmRmODVlZjMxZDFjYjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgsyamHI8hbt3b8BIGUJd3SeY41h
UwTUJoPL2tUxAZYfRCTsq5ekLrdebh26vYdDKowd9qObyCrh9PMi31Vg3QwXimIR
eiI3+Ks1/7/2U9eaRiazWQvvs4hu/stcTE47jPjUrzckTq2KTmtqVKwA1ufCOLi2
e2spg71xkIfHdBd44QkL/IlWvDkl74jtBahb9PqnZ94DSDTM/WG3dcizm5Jp4G+x
iY5TZxxu8yV8ebiC+qZn50LLmI8kqKp0NyjWUNpet2IsclHnZ5rLYixDIwidQNAz
Gps/O5AMup+kWQoS1TVUW0keLNiDR465RYRafHoiFr+Eua095lAlYgGpSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb4xZcHvegU6Y8BNwbfhe8x0cuRMB8GA1UdIwQY
MBaAFFL2wRAxUyRIUryz4jtt4qFrqnp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXZiQkVERlRKRWhTdkxQaU8yM2lvV3VxZW44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lYjc4YTMtNjI3Ni00MTBhLWEzZTEt
MGRiY2ZlYWM5OGE1LzEvVXZiQkVERlRKRWhTdkxQaU8yM2lvV3VxZW44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lYjc4YTMtNjI3Ni00MTBhLWEzZTEtMGRiY2ZlYWM5OGE1
LzEvVXZiQkVERlRKRWhTdkxQaU8yM2lvV3VxZW44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVFWcSoW
lgYxAICBe8w5NYl5xDHUoNpgaFZLDx2wRZ83D0QBAePbS8Zunba/S440F1bqsM9o
YzE67hJ4bDl5XkvRIVjwwdTzTTThuFH28NIaNey6LMrHprOPfp6oARBRPtopDway
OtLNl5LuiG7rjyn02rr16kT4VYVRqCzs/VbO/2JbY10wvhHFH1H9iIwdeISG+AFI
QNwO88rTZZLtrecRftgIM9LiAW4PIiNStCXIGjaragMs/uYm0wLRzBoO7exDIc4D
3NdtNFedsksnUirK4hoNOI7avCJHDJjzaVuYPx3D6Q3nGbs1l4HYGNEQEnvaYEo0
Rt0G2mjS6Bu8KA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:12 2025 by rpki-client