Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json)
Hash identifier: NN4TkYMkQGvRWPOElf222P84zRHDWpsPtUHqOVR08lQ=
Subject key identifier: FB:3A:94:0A:B6:7D:58:B6:A4:B1:81:62:6B:41:49:AE:BD:41:B9:8B
Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Certificate serial: 01976D064F8B6CA13E580753C35F78A569DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
Manifest number: 128C
Signing time: Sat 14 Jun 2025 06:00:19 +0000
Manifest this update: Sat 14 Jun 2025 06:00:19 +0000
Manifest next update: Sun 15 Jun 2025 06:00:19 +0000
Files and hashes: 1: CNzkiSB6aHtzY0O727sE464QSi8.roa (hash: jl53RICMTSEcHClA6hdGIYAm+qbxdQWju025NBkPLn8=)
2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: Op0IqSQfSJQr9pWtHEze82+cwaoam9FyKXxjVtkFbNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:4f:8b:6c:a1:3e:58:07:53:c3:5f:78:a5:69:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Validity
Not Before: Jun 14 06:00:19 2025 GMT
Not After : Jun 15 06:00:19 2025 GMT
Subject: CN=fb3a940ab67d58b6a4b181626b4149aebd41b98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:4b:48:1e:cc:82:fc:87:76:f9:02:45:e0:
c0:ee:2c:c7:30:b6:77:02:1a:02:9f:d8:5f:f5:ac:
e5:4d:33:ef:e7:8c:f7:3e:5e:db:38:ed:21:6a:d9:
e5:7d:62:05:52:31:b4:ec:96:3a:c1:00:85:db:75:
92:c2:28:f6:69:23:fb:2f:dd:1c:a1:44:f8:13:65:
ba:36:91:c8:93:99:79:f8:16:c4:8a:e8:40:c7:03:
77:27:74:2a:02:bf:a6:e4:e0:22:d3:6b:69:ff:e9:
12:be:10:71:f5:e7:ab:4b:5e:9b:68:fc:46:ac:32:
da:6b:af:19:1d:75:c2:0a:03:cc:da:a6:cf:17:e4:
1c:98:1c:00:e3:70:69:1c:b9:21:75:82:61:25:bf:
44:a5:ed:e3:ec:f3:1a:4a:db:2e:dc:c4:b8:47:3b:
35:80:06:0a:28:09:53:57:b6:45:00:49:0f:f7:22:
bf:6d:44:2d:3f:8f:b3:83:8b:6b:81:b0:1b:c3:3e:
32:e0:8c:62:a4:23:31:75:96:a0:e6:9f:d0:17:3f:
fc:3f:ac:a5:ea:06:c6:1d:38:9c:a1:86:fc:85:7e:
f0:f7:01:bc:83:56:6d:d1:31:d0:2a:9d:72:a5:7f:
6c:ce:92:cb:24:d4:96:e1:bb:16:f1:ba:87:54:47:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:94:0A:B6:7D:58:B6:A4:B1:81:62:6B:41:49:AE:BD:41:B9:8B
X509v3 Authority Key Identifier:
keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5b:bb:6a:57:c6:13:23:6d:21:8e:ac:96:62:4d:47:c3:af:
ae:70:61:7a:b0:7b:69:89:76:ec:19:38:8b:32:fb:6c:b3:06:
7b:72:78:da:cf:f5:91:b0:c7:7b:f1:ab:0d:0c:80:95:01:10:
db:0d:37:4d:75:26:18:85:ce:46:69:fe:c7:f9:01:62:69:be:
8f:61:2f:b8:20:13:26:d3:4a:d1:9f:c5:8e:e8:a8:30:8b:b7:
40:60:81:1d:4d:e3:32:cd:83:2d:c6:6e:3f:3e:17:61:47:e4:
c8:3e:3e:aa:86:5b:12:7c:54:6c:86:f1:6c:0c:cd:af:ba:34:
72:21:f7:60:99:68:ac:51:fb:4a:2e:09:8e:b8:3b:a4:82:ab:
21:88:4b:1e:1c:81:14:5a:b4:f2:2f:77:62:41:fa:eb:ae:7e:
f6:b7:a9:ae:d2:e1:79:32:58:61:e0:9e:4c:9e:90:10:51:8a:
57:33:80:40:95:d4:c9:ac:ce:73:4b:25:40:b4:a3:e5:42:d1:
d5:4a:ee:1b:f3:7a:af:e5:87:7e:66:ec:39:65:2b:a3:55:83:
dc:f0:06:11:43:ac:82:48:7c:e1:79:4b:bf:37:a7:c4:6e:dc:
63:81:af:1f:60:41:fb:12:f3:99:be:84:15:5b:5a:53:3a:9e:
ae:0e:cc:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBk+LbKE+WAdTw194pWneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNWY2MWE2ZTA4ZGVkNmYxZmY1MDUxMWM2MjA4OTY5NmFi
NTY0YTgwHhcNMjUwNjE0MDYwMDE5WhcNMjUwNjE1MDYwMDE5WjAzMTEwLwYDVQQD
EyhmYjNhOTQwYWI2N2Q1OGI2YTRiMTgxNjI2YjQxNDlhZWJkNDFiOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU1LSB7MgvyHdvkCReDA7izHMLZ3
AhoCn9hf9azlTTPv54z3Pl7bOO0hatnlfWIFUjG07JY6wQCF23WSwij2aSP7L90c
oUT4E2W6NpHIk5l5+BbEiuhAxwN3J3QqAr+m5OAi02tp/+kSvhBx9eerS16baPxG
rDLaa68ZHXXCCgPM2qbPF+QcmBwA43BpHLkhdYJhJb9Epe3j7PMaStsu3MS4Rzs1
gAYKKAlTV7ZFAEkP9yK/bUQtP4+zg4trgbAbwz4y4IxipCMxdZag5p/QFz/8P6yl
6gbGHTicoYb8hX7w9wG8g1Zt0THQKp1ypX9szpLLJNSW4bsW8bqHVEcVhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPs6lAq2fVi2pLGBYmtBSa69QbmLMB8GA1UdIwQY
MBaAFFFfYabgje1vH/UFEcYgiWlqtWSoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVY5aHB1Q043VzhmOVFVUnhpQ0phV3ExWktnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zYTkwZjUtNjViNS00MGI1LThlZDkt
OThjMDk1YzA3ZTI0LzEvVVY5aHB1Q043VzhmOVFVUnhpQ0phV3ExWktnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zYTkwZjUtNjViNS00MGI1LThlZDktOThjMDk1YzA3ZTI0
LzEvVVY5aHB1Q043VzhmOVFVUnhpQ0phV3ExWktnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalu7alfG
EyNtIY6slmJNR8OvrnBherB7aYl27Bk4izL7bLMGe3J42s/1kbDHe/GrDQyAlQEQ
2w03TXUmGIXORmn+x/kBYmm+j2EvuCATJtNK0Z/FjuioMIu3QGCBHU3jMs2DLcZu
Pz4XYUfkyD4+qoZbEnxUbIbxbAzNr7o0ciH3YJlorFH7Si4Jjrg7pIKrIYhLHhyB
FFq08i93YkH6665+9reprtLheTJYYeCeTJ6QEFGKVzOAQJXUyazOc0slQLSj5ULR
1UruG/N6r+WHfmbsOWUro1WD3PAGEUOsgkh84XlLvzenxG7cY4GvH2BB+xLzmb6E
FVtaUzqerg7Mig==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:41 2025 by rpki-client