Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier: jtDGjtV5MsY2ZAVo0SIk+kCcXRl6wMoNgepj6jzWX+8=
Subject key identifier: BA:59:0C:97:23:13:4C:9C:6F:92:6D:D2:26:B2:33:CD:61:DC:C1:6D
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 01989524481F27313B5285CA87224C089463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number: 1638
Signing time: Sun 10 Aug 2025 18:00:39 +0000
Manifest this update: Sun 10 Aug 2025 18:00:39 +0000
Manifest next update: Mon 11 Aug 2025 18:00:39 +0000
Files and hashes: 1: HvGkzNX-LlaIXMSfIk5S1mOC0oY.roa (hash: cwXFNBAD/M2F0MUB/ov5M8039XefOPt3b2kagm/DMzw=)
2: ZqsDRLhiPpia2P-7RyyhANwTVV4.roa (hash: 0rsjP4AuQ2t0LszFPHOckD8EVFICht07+jDEBI6TOgQ=)
3: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: 9q5+DvLUjT5P9G47/vXbU9JkQcXnFCjj5MW1tvLbP+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:48:1f:27:31:3b:52:85:ca:87:22:4c:08:94:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Aug 10 18:00:39 2025 GMT
Not After : Aug 11 18:00:39 2025 GMT
Subject: CN=ba590c9723134c9c6f926dd226b233cd61dcc16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:8c:ec:b8:7c:b4:f8:7c:0a:63:26:fc:88:
24:c0:d3:12:94:39:8c:d3:ce:d8:d1:0c:69:9c:03:
b1:dc:f5:14:f0:d7:be:87:49:75:df:7a:3d:7d:0f:
a2:2d:ff:32:18:7b:a7:12:4e:8e:26:e8:30:77:5f:
be:84:c9:cd:18:56:12:f3:16:a9:88:4d:78:88:23:
ee:d3:64:8f:39:8c:9f:fc:80:82:90:d7:ea:1c:83:
05:e1:4e:95:cb:ea:82:1e:69:4a:dc:d5:24:bc:c4:
d6:dd:db:80:67:7d:80:80:51:02:10:6f:75:bf:93:
d2:18:24:5b:aa:d3:47:ff:49:d3:fc:b7:1d:54:b9:
c5:4b:10:b3:42:f6:dd:19:ae:27:71:96:5b:9e:73:
93:ce:5f:a2:94:fe:b1:cd:c5:b0:40:70:91:50:02:
1e:4b:5d:ac:b6:14:3d:1d:94:e8:af:da:a2:9f:47:
0a:c2:4d:eb:1a:c8:ea:c6:a7:3f:cc:b4:c0:a4:ee:
9c:82:d4:9a:de:89:95:85:fd:a7:c8:2c:1f:55:5d:
b4:26:db:a1:51:db:72:b2:48:0b:6c:6b:97:91:e1:
ef:8b:bd:fc:d9:57:f1:a7:fc:85:dc:24:6a:75:09:
92:bb:2b:6c:9f:59:4d:01:bf:db:95:e8:f4:ee:01:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:59:0C:97:23:13:4C:9C:6F:92:6D:D2:26:B2:33:CD:61:DC:C1:6D
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:45:00:16:ed:14:73:cb:bd:37:39:e7:bb:ef:7a:1d:b6:e9:
0e:8f:81:f1:b2:49:f0:c5:3e:06:44:c8:8d:d7:44:16:e7:34:
a3:93:d9:22:e2:2c:6c:31:c6:ba:a9:af:e2:59:42:ae:40:52:
87:44:5d:34:5c:59:db:19:93:0a:a3:d4:a0:59:80:3f:2c:ba:
c3:30:6a:4b:0f:d1:7c:1e:08:92:9c:57:ac:0e:bd:3f:52:01:
86:25:03:95:4c:8e:aa:cf:e6:e9:4c:38:b5:f5:10:f9:c2:3a:
c8:20:bf:43:77:f1:0b:58:70:bc:2e:9a:66:4a:78:0e:35:30:
5b:98:8a:12:7d:a4:9f:94:9d:f4:04:8b:05:0f:53:da:d8:75:
e7:b2:32:97:33:db:51:dd:50:46:0b:59:4c:18:a7:f2:15:ad:
4d:f9:f7:ad:26:0b:17:54:d5:d9:2f:6a:fb:40:63:68:01:0a:
15:5d:a8:5f:54:b1:58:18:a8:49:5f:be:2e:74:28:05:84:30:
aa:d5:f7:ea:8d:f2:79:ce:15:96:1b:b2:0b:16:28:86:ae:2b:
90:05:64:4d:16:6b:24:dc:36:a8:4a:96:ba:1b:13:98:60:49:
12:fb:3a:25:e9:fa:d0:8c:d5:09:97:62:ff:3a:c5:b2:df:f8:
ae:14:b3:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVJEgfJzE7UoXKhyJMCJRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTY3ZmNiMGJkYzYwMDFkOGNmNzA3M2M2NDllYjk4MTlm
YzVlYjgwHhcNMjUwODEwMTgwMDM5WhcNMjUwODExMTgwMDM5WjAzMTEwLwYDVQQD
EyhiYTU5MGM5NzIzMTM0YzljNmY5MjZkZDIyNmIyMzNjZDYxZGNjMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfWM7Lh8tPh8CmMm/IgkwNMSlDmM
087Y0QxpnAOx3PUU8Ne+h0l133o9fQ+iLf8yGHunEk6OJugwd1++hMnNGFYS8xap
iE14iCPu02SPOYyf/ICCkNfqHIMF4U6Vy+qCHmlK3NUkvMTW3duAZ32AgFECEG91
v5PSGCRbqtNH/0nT/LcdVLnFSxCzQvbdGa4ncZZbnnOTzl+ilP6xzcWwQHCRUAIe
S12sthQ9HZTor9qin0cKwk3rGsjqxqc/zLTApO6cgtSa3omVhf2nyCwfVV20Jtuh
UdtyskgLbGuXkeHvi7382Vfxp/yF3CRqdQmSuytsn1lNAb/blej07gEagwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpZDJcjE0ycb5Jt0iayM81h3MFtMB8GA1UdIwQY
MBaAFLnmf8sL3GAB2M9wc8ZJ65gZ/F64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEt
ZmE3MWFlMDVkYzNmLzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEtZmE3MWFlMDVkYzNm
LzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEUAFu0U
c8u9Nznnu+96HbbpDo+B8bJJ8MU+BkTIjddEFuc0o5PZIuIsbDHGuqmv4llCrkBS
h0RdNFxZ2xmTCqPUoFmAPyy6wzBqSw/RfB4IkpxXrA69P1IBhiUDlUyOqs/m6Uw4
tfUQ+cI6yCC/Q3fxC1hwvC6aZkp4DjUwW5iKEn2kn5Sd9ASLBQ9T2th157IylzPb
Ud1QRgtZTBin8hWtTfn3rSYLF1TV2S9q+0BjaAEKFV2oX1SxWBioSV++LnQoBYQw
qtX36o3yec4VlhuyCxYohq4rkAVkTRZrJNw2qEqWuhsTmGBJEvs6Jen60IzVCZdi
/zrFst/4rhSzPQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 20:58:40 2025 by rpki-client