Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json)
Hash identifier: meNW0bIRFpz6RLoPXr0PJ8t34L8HXtH1/J4QnRqU63E=
Subject key identifier: F2:9F:D8:8E:D0:80:A4:3F:43:AF:5A:5F:FA:BF:03:80:07:08:EB:CC
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 01987418F7B05BB7E88CDF946DB73D57D9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
Manifest number: 06A1
Signing time: Mon 04 Aug 2025 08:00:50 +0000
Manifest this update: Mon 04 Aug 2025 08:00:50 +0000
Manifest next update: Tue 05 Aug 2025 08:00:50 +0000
Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: dPA1oqxnEmLtvSEW52iPx1CIHHVJm3qJ/XrduG+bIPc=)
2: z0gK7j1eTNv7dmhYM5fYU83PlcI.roa (hash: F9PSIbqhKjRh7i/sDNMQoDtTGb+P8gRfs9+wZwKnUuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f7:b0:5b:b7:e8:8c:df:94:6d:b7:3d:57:d9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Aug 4 08:00:50 2025 GMT
Not After : Aug 5 08:00:50 2025 GMT
Subject: CN=f29fd88ed080a43f43af5a5ffabf03800708ebcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:8f:8e:74:32:d2:87:e8:3e:f9:36:ad:5f:
d0:e8:7c:96:ba:1d:7d:88:ed:e0:5c:29:94:d6:b9:
94:70:fa:75:3e:d7:02:d9:07:6a:34:00:ed:71:b3:
0f:0b:fa:2e:09:d4:97:8e:5a:0e:16:42:62:3b:92:
5e:e6:e1:95:c2:aa:82:e4:9e:7d:cb:9d:95:9a:e4:
de:13:e2:46:c0:4a:14:7e:a2:75:9b:86:a5:b1:57:
5e:f9:f5:00:ce:e6:6c:67:82:13:51:02:2c:11:6d:
1b:e2:a9:ce:f0:f2:08:92:e6:32:5d:78:b7:65:d5:
25:db:63:95:47:62:f9:27:f9:f6:5f:83:3b:34:25:
2b:85:1a:34:a5:1b:1b:d3:b1:2d:3b:9b:4c:fc:d5:
d9:c8:85:87:fc:6c:52:af:e4:50:d6:26:d3:26:73:
7e:9f:6f:10:1c:4a:57:d1:47:df:88:66:5f:76:89:
6d:53:7c:ff:9e:b7:db:62:1c:73:3a:48:c7:96:0b:
21:38:f4:cd:be:bc:20:6c:90:af:fc:72:48:8c:51:
af:ac:05:cf:3b:40:0c:01:ad:f1:95:51:e1:b2:2c:
af:24:7a:6a:48:89:1b:f1:34:64:c1:3c:85:15:2e:
af:2d:fd:20:d2:34:69:01:d7:fc:7e:3d:ed:47:ef:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9F:D8:8E:D0:80:A4:3F:43:AF:5A:5F:FA:BF:03:80:07:08:EB:CC
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:30:26:e4:2f:3c:73:1c:fd:02:ed:e9:02:be:60:9e:64:73:
09:48:3c:1c:f7:0f:05:3a:eb:3c:34:db:20:ef:d6:02:05:bf:
d1:f2:4a:1c:dd:52:13:4b:e1:24:91:19:8b:42:2d:6c:5e:70:
34:86:a9:ef:60:47:b3:62:fd:13:d8:01:14:9e:db:be:d9:fc:
6d:19:d3:c2:88:df:5c:83:c8:e8:54:cd:7e:42:46:8b:c8:75:
8e:e4:b0:85:aa:38:0b:1a:a5:12:8e:69:16:22:01:98:9a:a2:
ec:52:f8:a4:d5:8a:d9:a1:e5:8e:f2:cb:dc:48:83:b2:5e:40:
40:d0:2f:aa:d9:99:d7:e1:13:94:86:c6:af:85:7a:69:64:c5:
f9:bb:88:c9:c5:54:0c:2d:f9:50:24:bd:b3:29:43:88:e3:d5:
cb:bc:cd:15:65:15:ac:8b:a1:b1:6f:2f:29:7f:55:0b:69:f3:
82:8c:50:aa:b4:97:88:db:63:6d:ac:0f:eb:fc:8c:3b:2a:55:
a3:c9:88:b3:36:29:c5:15:d5:b3:6c:72:c0:3e:4c:01:d1:0a:
fa:81:fe:44:1e:3b:23:3a:9f:64:fb:80:55:13:8c:a3:de:24:
a9:27:1e:1b:92:b3:af:5e:3d:06:8d:1e:67:ff:f5:83:f6:46:
01:06:d5:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GPewW7fojN+Ubbc9V9nTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNWFkMTdmNGM2MjBkNThkNDUzZDVmNmQ3YzkyMzNmY2Ux
MjY0OTkwHhcNMjUwODA0MDgwMDUwWhcNMjUwODA1MDgwMDUwWjAzMTEwLwYDVQQD
EyhmMjlmZDg4ZWQwODBhNDNmNDNhZjVhNWZmYWJmMDM4MDA3MDhlYmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY2PjnQy0ofoPvk2rV/Q6HyWuh19
iO3gXCmU1rmUcPp1PtcC2QdqNADtcbMPC/ouCdSXjloOFkJiO5Je5uGVwqqC5J59
y52VmuTeE+JGwEoUfqJ1m4alsVde+fUAzuZsZ4ITUQIsEW0b4qnO8PIIkuYyXXi3
ZdUl22OVR2L5J/n2X4M7NCUrhRo0pRsb07EtO5tM/NXZyIWH/GxSr+RQ1ibTJnN+
n28QHEpX0UffiGZfdoltU3z/nrfbYhxzOkjHlgshOPTNvrwgbJCv/HJIjFGvrAXP
O0AMAa3xlVHhsiyvJHpqSIkb8TRkwTyFFS6vLf0g0jRpAdf8fj3tR+8uEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKf2I7QgKQ/Q69aX/q/A4AHCOvMMB8GA1UdIwQY
MBaAFFBa0X9MYg1Y1FPV9tfJIz/OEmSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hMmZjMTgtNTM0Yi00NDU0LTliZDEt
ZmU2YmIwNDkzMzdkLzEvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hMmZjMTgtNTM0Yi00NDU0LTliZDEtZmU2YmIwNDkzMzdk
LzEvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTAm5C88
cxz9Au3pAr5gnmRzCUg8HPcPBTrrPDTbIO/WAgW/0fJKHN1SE0vhJJEZi0ItbF5w
NIap72BHs2L9E9gBFJ7bvtn8bRnTwojfXIPI6FTNfkJGi8h1juSwhao4CxqlEo5p
FiIBmJqi7FL4pNWK2aHljvLL3EiDsl5AQNAvqtmZ1+ETlIbGr4V6aWTF+buIycVU
DC35UCS9sylDiOPVy7zNFWUVrIuhsW8vKX9VC2nzgoxQqrSXiNtjbawP6/yMOypV
o8mIszYpxRXVs2xywD5MAdEK+oH+RB47IzqfZPuAVROMo94kqSceG5Kzr149Bo0e
Z//1g/ZGAQbVyw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:20 2025 by rpki-client