Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
File: U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json)
Hash identifier: h4ZdZ+sANj2ivIbzJcBhbJydtWm8k8ifQv6RHRszAhQ=
Subject key identifier: 2E:A5:90:E6:15:43:EE:FE:2C:FE:58:95:C0:DB:4F:E3:CC:AC:D7:37
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Certificate issuer: /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial: 01989E5E88BDEB1FB539DE43994BCC841EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
Manifest number: 1629
Signing time: Tue 12 Aug 2025 13:00:52 +0000
Manifest this update: Tue 12 Aug 2025 13:00:52 +0000
Manifest next update: Wed 13 Aug 2025 13:00:52 +0000
Files and hashes: 1: B4WLDJveFZVT_m8u5hStR6xu-pU.roa (hash: Nm6S6CMIoGZCCHyW+OnF60p//0+/EWirysqpstDuGNc=)
2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: mX52V1Oe0IoVKPg5fULdMQXI0B3gl7wOqG7g3jy9lu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:88:bd:eb:1f:b5:39:de:43:99:4b:cc:84:1e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Validity
Not Before: Aug 12 13:00:52 2025 GMT
Not After : Aug 13 13:00:52 2025 GMT
Subject: CN=2ea590e61543eefe2cfe5895c0db4fe3ccacd737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:d6:0b:ab:83:41:d4:1a:9c:62:57:ee:5e:
41:a7:4d:1b:3e:eb:5a:4c:0d:20:52:2e:97:df:5d:
62:df:de:ee:07:4e:47:6d:5a:09:f9:9d:2a:24:3f:
fc:6d:18:8e:1e:cb:2f:a4:f5:ad:05:19:af:99:c0:
ed:b0:ff:f3:8e:0c:26:d5:22:3b:7e:07:ba:a5:29:
ac:4b:28:fd:27:3e:c2:99:6d:86:17:68:61:bb:2c:
19:95:8c:0a:7a:8f:80:b4:e9:9c:f6:62:4a:2a:4c:
84:5c:5b:0c:e5:40:e7:64:19:75:6f:fd:4d:c4:1f:
ad:88:50:05:34:ed:14:11:1e:73:5d:7f:24:35:19:
64:9a:19:68:80:3d:22:99:34:84:aa:35:3f:e4:91:
14:b8:84:f9:d1:17:96:dd:d6:54:89:30:51:2a:9a:
fa:f5:27:c6:0e:c9:f2:6e:8c:2a:cf:a0:54:77:32:
83:75:88:dd:1c:c4:5b:a0:f6:81:c0:4a:ea:3f:1b:
27:f5:93:50:65:27:b8:fa:71:30:c6:03:65:f4:bb:
05:38:16:ed:c5:22:cc:50:71:e1:e8:0e:5a:5c:48:
e1:95:fd:85:7d:1b:59:fe:10:17:67:7d:73:5a:dc:
1e:31:70:79:d6:ee:2e:96:b0:56:c3:b8:d2:0d:fb:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A5:90:E6:15:43:EE:FE:2C:FE:58:95:C0:DB:4F:E3:CC:AC:D7:37
X509v3 Authority Key Identifier:
keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2d:78:8e:10:ec:a9:ff:fb:5a:78:3c:fd:1b:d9:76:47:53:
2d:60:cb:13:4c:2d:76:3e:80:c3:d0:fd:fd:46:17:59:4f:9d:
13:dd:e2:27:1b:fe:8e:56:ed:f9:a8:c3:ec:aa:1b:ea:95:4c:
84:59:f4:62:0f:71:e0:4d:d5:a8:1d:0c:ae:ef:cc:e1:04:4c:
48:61:f4:b1:61:c7:e0:af:b8:60:26:48:a8:68:cd:8e:14:0f:
3d:47:07:3f:68:6e:75:ed:f8:11:51:18:cb:9f:eb:4a:2b:de:
1f:b9:b3:26:e9:36:3c:0f:10:4e:3c:2d:c3:d0:bc:61:a9:89:
4d:36:cb:c1:5e:c7:a9:6d:de:46:5e:6e:d0:85:5a:e6:ab:e3:
8e:31:96:6e:92:fd:e3:24:8a:9a:19:c1:24:12:a4:8c:c2:74:
eb:63:04:12:26:72:6a:5a:31:34:3a:2e:e5:ea:5c:c2:4d:c4:
8a:e3:bf:28:1b:13:fa:59:b9:35:03:c0:21:18:8c:fc:7a:e8:
63:be:3b:ea:48:74:f8:b7:ff:ac:72:e8:72:27:b7:f3:18:28:
7a:fa:52:7c:c6:21:49:6b:58:75:f2:91:c8:57:f6:0a:46:cf:
9f:eb:41:53:9a:e4:d3:5b:41:0b:1a:21:88:01:97:13:e8:e3:
5d:67:a1:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieXoi96x+1Od5DmUvMhB7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDc4MjE5MjE1NThmNjZhMDM3ZmU5Y2EwZGNjMTA0NmNm
NDg0ZTAwHhcNMjUwODEyMTMwMDUyWhcNMjUwODEzMTMwMDUyWjAzMTEwLwYDVQQD
EygyZWE1OTBlNjE1NDNlZWZlMmNmZTU4OTVjMGRiNGZlM2NjYWNkNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgXWC6uDQdQanGJX7l5Bp00bPuta
TA0gUi6X311i397uB05HbVoJ+Z0qJD/8bRiOHssvpPWtBRmvmcDtsP/zjgwm1SI7
fge6pSmsSyj9Jz7CmW2GF2hhuywZlYwKeo+AtOmc9mJKKkyEXFsM5UDnZBl1b/1N
xB+tiFAFNO0UER5zXX8kNRlkmhlogD0imTSEqjU/5JEUuIT50ReW3dZUiTBRKpr6
9SfGDsnybowqz6BUdzKDdYjdHMRboPaBwErqPxsn9ZNQZSe4+nEwxgNl9LsFOBbt
xSLMUHHh6A5aXEjhlf2FfRtZ/hAXZ31zWtweMXB51u4ulrBWw7jSDftwLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6lkOYVQ+7+LP5YlcDbT+PMrNc3MB8GA1UdIwQY
MBaAFFNHghkhVY9moDf+nKDcwQRs9ITgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85NGVjYzQtZjRmZC00ZmNlLTgwNTQt
ZWQxNzc0YWRiZjJmLzEvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85NGVjYzQtZjRmZC00ZmNlLTgwNTQtZWQxNzc0YWRiZjJm
LzEvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC14jhDs
qf/7Wng8/RvZdkdTLWDLE0wtdj6Aw9D9/UYXWU+dE93iJxv+jlbt+ajD7Kob6pVM
hFn0Yg9x4E3VqB0Mru/M4QRMSGH0sWHH4K+4YCZIqGjNjhQPPUcHP2hude34EVEY
y5/rSiveH7mzJuk2PA8QTjwtw9C8YamJTTbLwV7HqW3eRl5u0IVa5qvjjjGWbpL9
4ySKmhnBJBKkjMJ062MEEiZyaloxNDou5epcwk3EiuO/KBsT+lm5NQPAIRiM/Hro
Y7476kh0+Lf/rHLocie38xgoevpSfMYhSWtYdfKRyFf2CkbPn+tBU5rk01tBCxoh
iAGXE+jjXWehvQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 18:24:38 2025 by rpki-client