Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
File: uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json)
Hash identifier: WEIe1UKcZvzjRQBwEpBXp7rZeL7mNS2kHR2CshBbIiw=
Subject key identifier: C1:C0:AD:4A:D9:12:CD:D5:DE:FE:EB:20:D3:38:67:6B:CC:63:C4:65
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Certificate issuer: /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial: 01987ABFEC5E5EC00FC2E711C788A1DD2F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
Manifest number: 0729
Signing time: Tue 05 Aug 2025 15:00:54 +0000
Manifest this update: Tue 05 Aug 2025 15:00:54 +0000
Manifest next update: Wed 06 Aug 2025 15:00:54 +0000
Files and hashes: 1: sIDOXg67yEuo_7naS_BfCVLmcEk.roa (hash: d8agrpVd7dmHrJl/IhvjPgn5Td9Dpm4TU3p5w1Cxjt0=)
2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: ESaGJQw+2Cw8LgngrafSho9su1Xu9uSCFfa1/Vt/dkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:ec:5e:5e:c0:0f:c2:e7:11:c7:88:a1:dd:2f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Validity
Not Before: Aug 5 15:00:54 2025 GMT
Not After : Aug 6 15:00:54 2025 GMT
Subject: CN=c1c0ad4ad912cdd5defeeb20d338676bcc63c465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:1b:1d:a1:e0:2b:bb:b2:9b:05:0f:87:ce:
72:fd:45:a2:d3:93:40:fb:ff:12:12:2e:84:85:5f:
5c:36:16:0f:7e:dc:1d:b7:33:b1:6d:73:62:a0:ce:
58:a7:ab:dd:6f:e3:e4:2c:4d:9b:ff:4f:20:96:29:
69:b2:42:32:41:da:c0:91:fe:50:94:dc:87:83:50:
91:2a:62:ec:99:46:fa:ad:f4:fb:12:8a:ab:74:3d:
c9:6b:15:77:b6:12:9e:d0:68:43:60:0b:9f:e5:1a:
c5:f7:e6:cc:29:48:8c:ed:4d:80:34:d7:36:de:4b:
42:33:b7:ee:10:af:c5:85:45:a7:b5:6a:b5:d9:36:
29:fd:00:6e:a0:97:54:d2:dd:79:3a:1f:a0:a0:04:
34:78:fc:02:e8:9e:63:27:1d:6f:d7:34:3c:de:91:
1c:8b:30:15:b0:11:00:1b:c5:08:cf:97:8d:6a:52:
f3:02:7a:d4:06:2f:65:5f:aa:5c:b7:dd:2c:85:27:
66:10:0d:49:6f:ef:bc:54:20:7d:37:c3:10:73:76:
55:d2:c8:18:c4:91:40:6f:19:19:39:3d:72:80:1c:
ba:bb:2e:08:cc:43:3e:1e:3f:26:80:d6:ac:86:1c:
4f:04:5a:22:81:41:da:11:f7:10:90:c0:a7:fc:76:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C0:AD:4A:D9:12:CD:D5:DE:FE:EB:20:D3:38:67:6B:CC:63:C4:65
X509v3 Authority Key Identifier:
keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7d:9f:af:41:b9:ce:dd:9e:0b:08:cf:a3:e8:77:f9:fb:b7:
6b:f7:0c:f7:57:2f:b9:a5:3e:1d:cb:10:a5:82:95:85:8e:76:
a2:94:00:bb:7b:7d:8b:c1:0d:ef:60:a4:3a:a3:04:26:9e:50:
64:7c:c1:5c:58:bc:81:c8:4a:64:ab:24:08:2b:01:0c:a8:63:
25:5d:aa:4d:09:b2:47:55:e0:78:5f:c4:82:48:ab:3e:23:90:
06:6d:64:84:7a:62:d5:91:b7:b1:f6:8d:e3:04:69:a6:86:e6:
35:ee:55:b6:38:17:ca:d8:c1:b7:9f:9b:fb:21:bf:51:af:fe:
d6:26:24:66:77:ba:c1:05:3b:27:6a:94:f9:7c:d5:ef:1a:c3:
78:56:3f:30:6a:ba:dc:bc:b5:50:8c:f1:12:a9:a1:dc:d9:bf:
3d:84:f9:e8:f4:ae:d3:39:b1:63:84:8f:6a:a2:ef:94:bc:97:
ff:7f:ea:38:a6:48:f2:ae:9d:4e:ef:7f:f2:52:41:97:75:8d:
a4:12:04:1a:f2:16:a4:82:20:82:d1:10:8f:a7:9e:70:e3:c6:
51:ca:26:e8:a2:09:7b:c0:64:b4:e8:7c:8e:98:2c:6b:0e:f4:
8e:87:4f:93:96:08:bf:13:de:56:fc:dc:dc:34:1a:67:52:c3:
74:e5:d8:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6v+xeXsAPwucRx4ih3S92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzY4Y2RhNjVmNjY5NjJjY2I5NjgzZjE1NTBkMTRlNTYx
MDdhMGEwHhcNMjUwODA1MTUwMDU0WhcNMjUwODA2MTUwMDU0WjAzMTEwLwYDVQQD
EyhjMWMwYWQ0YWQ5MTJjZGQ1ZGVmZWViMjBkMzM4Njc2YmNjNjNjNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS8bHaHgK7uymwUPh85y/UWi05NA
+/8SEi6EhV9cNhYPftwdtzOxbXNioM5Yp6vdb+PkLE2b/08glilpskIyQdrAkf5Q
lNyHg1CRKmLsmUb6rfT7EoqrdD3JaxV3thKe0GhDYAuf5RrF9+bMKUiM7U2ANNc2
3ktCM7fuEK/FhUWntWq12TYp/QBuoJdU0t15Oh+goAQ0ePwC6J5jJx1v1zQ83pEc
izAVsBEAG8UIz5eNalLzAnrUBi9lX6pct90shSdmEA1Jb++8VCB9N8MQc3ZV0sgY
xJFAbxkZOT1ygBy6uy4IzEM+Hj8mgNashhxPBFoigUHaEfcQkMCn/HYjMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHArUrZEs3V3v7rINM4Z2vMY8RlMB8GA1UdIwQY
MBaAFLjGjNpl9mlizLloPxVQ0U5WEHoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAt
OGY0OGEzNzAyZjkwLzEvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAtOGY0OGEzNzAyZjkw
LzEvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACn2fr0G5
zt2eCwjPo+h3+fu3a/cM91cvuaU+HcsQpYKVhY52opQAu3t9i8EN72CkOqMEJp5Q
ZHzBXFi8gchKZKskCCsBDKhjJV2qTQmyR1XgeF/EgkirPiOQBm1khHpi1ZG3sfaN
4wRppobmNe5VtjgXytjBt5+b+yG/Ua/+1iYkZne6wQU7J2qU+XzV7xrDeFY/MGq6
3Ly1UIzxEqmh3Nm/PYT56PSu0zmxY4SPaqLvlLyX/3/qOKZI8q6dTu9/8lJBl3WN
pBIEGvIWpIIggtEQj6eecOPGUcom6KIJe8BktOh8jpgsaw70jodPk5YIvxPeVvzc
3DQaZ1LDdOXY+w==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:09:05 2025 by rpki-client