Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
File: UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft (raw, json)
Hash identifier: 3+nmVev2oFwCS7wwFzmHcpKg+BVrHIJ0jr/rK6lo0rg=
Subject key identifier: DE:56:C8:28:BD:3E:D7:59:E1:E7:2C:E3:6F:39:08:79:9C:CA:3B:4F
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 01987CAE293091969BF3F6FF6BF524FE59B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 00:00:45 +0000
Manifest this update: Wed 06 Aug 2025 00:00:45 +0000
Manifest next update: Thu 07 Aug 2025 00:00:45 +0000
Files and hashes: 1: O3S2kKvFZ3ZKfEqSxKEU0hUcMEM.roa (hash: UAJCEcCp2/+1CwINfz4/qAR0IkJC6tKzPu5ouB4y1xo=)
2: UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl (hash: x9Z8BVNXz92BOaI2whkm8rvzcsHe8g1Jm1HGuT+uQwU=)
3: i386TLXJ3T0t3DEp8z4OsAQZ5gg.roa (hash: 1WJwasmqZfO5Vi7FzjM8cLSApQE5Ou2nBbRnhWtNShk=)
4: mpgyXJ7iE41eH88IcrenXFUA9NI.roa (hash: wZqBDQ4cwcpcocBr4dj1IjCT+ao6cHj31fYRn+uOxj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:29:30:91:96:9b:f3:f6:ff:6b:f5:24:fe:59:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Aug 6 00:00:45 2025 GMT
Not After : Aug 7 00:00:45 2025 GMT
Subject: CN=de56c828bd3ed759e1e72ce36f3908799cca3b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:44:26:33:25:73:ef:b6:cd:4a:9c:2e:b4:
80:cc:a6:ba:f1:5d:0e:78:e4:49:98:1c:e4:85:0f:
9e:d2:f3:f4:a6:3e:68:09:55:1d:d5:03:9d:cc:a2:
24:0d:71:ba:de:99:06:91:28:a5:5b:47:24:a6:b9:
91:4e:aa:a5:4e:95:d2:ec:f4:8b:97:a2:55:98:e4:
39:7f:a2:e2:9a:a1:bb:0a:54:7f:0b:a6:43:27:2f:
6f:16:c1:fb:45:b0:2e:7b:a2:70:ef:86:bf:57:5d:
92:f7:42:e7:59:aa:4a:56:ed:d1:68:6c:08:b1:a6:
da:3f:e9:60:c1:97:40:b7:a5:b8:c6:20:df:dc:20:
13:64:0c:81:ae:79:05:6d:17:0d:51:1b:6c:9d:a4:
01:ff:e9:f7:dd:53:c0:cf:04:94:2b:9a:05:ed:cd:
25:25:49:2d:be:20:30:d4:d7:ba:4c:49:a9:6f:48:
56:e7:a9:2f:c7:e2:15:8b:66:a3:cb:c7:c0:1e:eb:
89:0a:cc:52:4d:ab:96:94:e5:23:01:ee:bf:20:26:
03:f4:4d:06:4e:49:8a:31:d6:f2:b7:94:a1:18:44:
53:00:b8:94:3f:08:4b:aa:29:33:5c:e1:49:06:a5:
d9:1d:0f:3c:85:30:56:1c:16:19:24:ac:3c:05:e5:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:C8:28:BD:3E:D7:59:E1:E7:2C:E3:6F:39:08:79:9C:CA:3B:4F
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c1:30:d4:06:a4:26:f0:98:30:16:07:d3:d2:aa:2f:df:16:
23:1d:7a:50:00:17:77:df:b3:4a:98:a1:6d:af:f4:f4:25:8c:
3c:38:22:66:65:a1:30:6c:56:00:cc:4a:e4:92:6f:1b:ba:f9:
db:9f:9a:b1:2e:f4:72:12:8e:2f:27:38:bf:5b:09:c4:c5:eb:
56:e6:64:e1:23:6a:8a:b1:57:07:89:a2:9f:af:4c:fb:ee:27:
7b:00:fb:f2:96:0a:d5:4f:ee:56:a9:85:6d:02:91:d2:7b:83:
cd:61:29:ab:7f:6b:7d:69:8b:d0:c4:ba:45:73:84:1c:68:2c:
52:9e:6d:b3:dc:52:4a:7b:ce:3e:b9:c3:ed:09:93:d1:fb:de:
90:64:1c:f1:d9:b8:bd:c4:d8:26:76:d5:30:c9:1f:96:1f:4a:
8b:85:24:8d:9b:6e:c8:a2:f3:45:df:18:7b:1b:e6:ac:56:16:
4c:c2:ec:16:e5:a1:91:24:0a:9f:08:a0:d2:5f:4c:7d:2a:4f:
bb:b7:71:97:61:70:21:22:b3:90:cd:05:b5:f7:5e:dc:9e:02:
3d:ad:22:57:a2:69:b9:06:97:d1:0a:b7:56:7d:b9:1a:20:fd:
c3:9c:34:fe:11:48:d1:2a:46:87:04:9a:90:d7:9f:bd:91:ba:
f3:09:a8:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rikwkZab8/b/a/Uk/lm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWM2M2M2ZDc1NmJiMmFjZDNmMWFkOTJhYzQxNWRhODU3
ZTZjOTgwHhcNMjUwODA2MDAwMDQ1WhcNMjUwODA3MDAwMDQ1WjAzMTEwLwYDVQQD
EyhkZTU2YzgyOGJkM2VkNzU5ZTFlNzJjZTM2ZjM5MDg3OTljY2EzYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFxEJjMlc++2zUqcLrSAzKa68V0O
eORJmBzkhQ+e0vP0pj5oCVUd1QOdzKIkDXG63pkGkSilW0ckprmRTqqlTpXS7PSL
l6JVmOQ5f6LimqG7ClR/C6ZDJy9vFsH7RbAue6Jw74a/V12S90LnWapKVu3RaGwI
sabaP+lgwZdAt6W4xiDf3CATZAyBrnkFbRcNURtsnaQB/+n33VPAzwSUK5oF7c0l
JUktviAw1Ne6TEmpb0hW56kvx+IVi2ajy8fAHuuJCsxSTauWlOUjAe6/ICYD9E0G
TkmKMdbyt5ShGERTALiUPwhLqikzXOFJBqXZHQ88hTBWHBYZJKw8BeVVqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5WyCi9PtdZ4ecs4285CHmcyjtPMB8GA1UdIwQY
MBaAFFCcY8bXVrsqzT8a2SrEFdqFfmyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMt
MzhhMzkyNDc3NmU5LzEvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMtMzhhMzkyNDc3NmU5
LzEvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcEw1Aak
JvCYMBYH09KqL98WIx16UAAXd9+zSpihba/09CWMPDgiZmWhMGxWAMxK5JJvG7r5
25+asS70chKOLyc4v1sJxMXrVuZk4SNqirFXB4min69M++4newD78pYK1U/uVqmF
bQKR0nuDzWEpq39rfWmL0MS6RXOEHGgsUp5ts9xSSnvOPrnD7QmT0fvekGQc8dm4
vcTYJnbVMMkflh9Ki4UkjZtuyKLzRd8YexvmrFYWTMLsFuWhkSQKnwig0l9MfSpP
u7dxl2FwISKzkM0Ftfde3J4CPa0iV6JpuQaX0Qq3Vn25GiD9w5w0/hFI0SpGhwSa
kNefvZG68wmo9A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:25 2025 by rpki-client