Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: sqfu17V0FF/xiqYBd+yN1UHmS9ldNPAGJQiQMj0muxs=
Subject key identifier: F2:D8:FF:B8:C7:6F:DC:AA:4B:06:A3:97:B8:E2:66:21:BB:D1:8E:59
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 0197752DEB33189AA8DD3F69F1900B183EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 0565
Signing time: Sun 15 Jun 2025 20:00:32 +0000
Manifest this update: Sun 15 Jun 2025 20:00:32 +0000
Manifest next update: Mon 16 Jun 2025 20:00:32 +0000
Files and hashes: 1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: brwt08W7mSb2E9muBQjCdlJ6iovsPDKxGsRqJbHCGZE=)
2: iV0Wv5wAAAuwTZ0gWPXcPSbfCnc.roa (hash: LNWcJcYvVHSoTAScNXiZdlhb/qYL7H8xTSxcF3h+E20=)
3: vVml-l53US0HR41A4phaytdM2rk.roa (hash: +IKLjTldT5przVLfqGguidbYHxSzGtV1XnPlO6F1rvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:2d:eb:33:18:9a:a8:dd:3f:69:f1:90:0b:18:3e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Jun 15 20:00:32 2025 GMT
Not After : Jun 16 20:00:32 2025 GMT
Subject: CN=f2d8ffb8c76fdcaa4b06a397b8e26621bbd18e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:a8:95:46:a7:63:a7:be:a1:fd:46:69:04:
01:c6:81:c2:5b:3a:c3:06:1f:b9:54:76:b9:6d:df:
7a:be:e4:21:fb:46:9b:ca:71:f4:12:f9:e7:ff:ae:
71:ea:83:0d:1d:31:c6:18:6c:bf:0b:fb:0e:80:c2:
33:e2:3a:8c:8e:75:63:a2:b8:30:62:6a:35:b6:6b:
08:9f:9e:35:2b:3c:8e:bf:9b:bf:67:2f:b4:99:d2:
3a:d4:e3:32:79:69:46:e5:28:ca:c7:c7:33:99:f8:
32:bf:a2:77:fa:f8:fd:fc:40:03:5b:5d:e7:16:bb:
00:72:8a:5f:0d:a9:bb:19:0d:a5:2d:5d:07:ea:27:
0b:45:f5:fe:3b:49:3a:da:0f:78:17:34:7e:ed:a6:
99:77:9f:5a:ed:6c:33:76:a7:44:ae:f6:02:85:8c:
78:e0:a4:44:ae:fc:42:aa:27:5c:d5:61:94:9f:e1:
7a:e9:11:59:cd:e7:7c:44:0d:c5:43:c1:74:d7:f0:
5d:05:e4:e7:ed:de:3b:fd:ff:4d:a8:d3:cf:6b:4f:
b4:8c:86:bb:43:3b:1e:63:cd:33:fb:e9:f7:64:9a:
ea:95:9c:96:c6:3c:52:a0:cb:fd:fb:02:00:42:db:
b4:63:e0:09:3b:5b:dd:ed:54:11:14:c5:cc:ba:fc:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D8:FF:B8:C7:6F:DC:AA:4B:06:A3:97:B8:E2:66:21:BB:D1:8E:59
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d3:aa:86:f1:61:de:b7:14:75:f0:35:bd:2b:e6:66:a1:1d:
f9:3f:a0:3f:35:00:21:73:39:33:52:c1:15:84:d4:fa:26:2a:
4d:e9:dd:e1:8a:0c:a2:93:60:ef:14:ed:29:4f:aa:dd:9a:90:
31:a8:64:0a:f8:17:7a:89:83:13:c0:99:6e:70:1e:65:8e:90:
7f:a0:a6:fe:e2:1f:fd:87:80:3d:e7:74:09:5d:af:84:09:75:
c0:b0:7a:48:3c:84:c1:e8:85:50:b2:61:fa:e4:b1:9c:5e:91:
31:22:b0:fb:ba:a5:1b:06:61:1d:9e:d6:40:24:f2:1f:f3:c6:
2e:e8:d3:01:e4:68:59:7f:d3:0a:37:ab:5c:23:45:d1:d8:0c:
27:c6:5a:8d:7e:76:d2:df:4e:db:c2:47:18:8d:72:50:99:72:
72:4e:e6:bc:a0:b9:73:ce:be:ba:48:54:69:6c:7a:23:78:61:
5a:d4:87:a5:e2:b5:7e:a9:3e:1c:d9:91:e4:4b:4b:60:48:5a:
37:c5:43:bf:a5:86:36:51:96:d9:19:c6:8c:48:ee:75:54:9c:
56:68:b5:1a:bb:c2:e8:32:87:16:c7:97:d0:49:ce:26:19:36:
46:2c:70:d8:f0:ce:b0:b5:d0:f4:eb:c0:a2:a9:d0:84:9c:40:
7a:37:09:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1LeszGJqo3T9p8ZALGD6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTI5ZDA0OGRlYjJlMGJmNjIyNzEzOTlhMDkwYjkwMTAx
NjBiMzkwHhcNMjUwNjE1MjAwMDMyWhcNMjUwNjE2MjAwMDMyWjAzMTEwLwYDVQQD
EyhmMmQ4ZmZiOGM3NmZkY2FhNGIwNmEzOTdiOGUyNjYyMWJiZDE4ZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu62olUanY6e+of1GaQQBxoHCWzrD
Bh+5VHa5bd96vuQh+0abynH0Evnn/65x6oMNHTHGGGy/C/sOgMIz4jqMjnVjorgw
Ymo1tmsIn541KzyOv5u/Zy+0mdI61OMyeWlG5SjKx8czmfgyv6J3+vj9/EADW13n
FrsAcopfDam7GQ2lLV0H6icLRfX+O0k62g94FzR+7aaZd59a7WwzdqdErvYChYx4
4KRErvxCqidc1WGUn+F66RFZzed8RA3FQ8F01/BdBeTn7d47/f9NqNPPa0+0jIa7
QzseY80z++n3ZJrqlZyWxjxSoMv9+wIAQtu0Y+AJO1vd7VQRFMXMuvxWFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLY/7jHb9yqSwajl7jiZiG70Y5ZMB8GA1UdIwQY
MBaAFFMSnQSN6y4L9iJxOZoJC5AQFgs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMt
N2FlNjM1OWQzMTEwLzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMtN2FlNjM1OWQzMTEw
LzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdOqhvFh
3rcUdfA1vSvmZqEd+T+gPzUAIXM5M1LBFYTU+iYqTend4YoMopNg7xTtKU+q3ZqQ
MahkCvgXeomDE8CZbnAeZY6Qf6Cm/uIf/YeAPed0CV2vhAl1wLB6SDyEweiFULJh
+uSxnF6RMSKw+7qlGwZhHZ7WQCTyH/PGLujTAeRoWX/TCjerXCNF0dgMJ8ZajX52
0t9O28JHGI1yUJlyck7mvKC5c86+ukhUaWx6I3hhWtSHpeK1fqk+HNmR5EtLYEha
N8VDv6WGNlGW2RnGjEjudVScVmi1GrvC6DKHFseX0EnOJhk2Rixw2PDOsLXQ9OvA
oqnQhJxAejcJ7g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:40:44 2025 by rpki-client