Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: r5zFqszKnDDX2aDr7EFB2EJ7NOzmOGytTYJrZCIwXPk=
Subject key identifier: 87:3B:8E:AA:ED:67:8A:2C:58:0E:DD:7C:B1:71:DA:37:88:B2:F6:18
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 0198733DE746D8B7CDD87AA71D52B18BED56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 15DC
Signing time: Mon 04 Aug 2025 04:01:33 +0000
Manifest this update: Mon 04 Aug 2025 04:01:33 +0000
Manifest next update: Tue 05 Aug 2025 04:01:33 +0000
Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: ndAm2lBlHXXf6uw8Y3tyXn93ng1XJG7wpnAALYSbgVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:e7:46:d8:b7:cd:d8:7a:a7:1d:52:b1:8b:ed:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Aug 4 04:01:33 2025 GMT
Not After : Aug 5 04:01:33 2025 GMT
Subject: CN=873b8eaaed678a2c580edd7cb171da3788b2f618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:02:9f:14:78:21:50:22:67:0f:d5:c6:65:
54:ab:4e:31:f2:5d:93:0e:6b:da:53:50:5f:c1:d2:
29:c8:c7:8a:c1:6f:af:49:6a:a5:cb:14:66:9d:8b:
00:f6:ff:c9:a5:2c:62:f6:cb:ba:3a:5b:4c:ad:75:
2d:0a:1a:ee:06:3e:f2:04:0e:ee:6e:1a:00:20:f1:
79:c2:5d:7b:79:9e:27:c3:ef:32:fe:f5:ca:2d:0b:
49:a6:54:16:ed:10:83:85:97:02:86:8d:2f:85:89:
d7:3c:c7:5d:a6:56:98:19:40:a8:23:c5:87:67:64:
7d:09:c5:8c:28:ad:87:85:04:6e:1c:b3:5f:b0:a7:
3b:d3:c0:5d:2d:ae:c6:9f:37:c6:4d:24:e3:97:cc:
7d:65:fc:31:ef:3a:4a:6e:97:4a:72:44:93:e8:f9:
2d:c2:e2:9b:1b:21:32:cb:a0:ce:e5:37:00:81:11:
e0:4d:b1:92:b9:38:d0:5c:17:d4:1b:e9:5b:a1:d1:
5c:a1:80:de:63:8d:39:25:bc:02:66:a5:53:07:a9:
7f:b3:dc:97:63:1f:0d:49:3f:4b:83:56:63:ec:28:
cc:0f:2a:b4:2a:30:b6:c8:2a:64:1c:6f:b4:6a:cd:
04:6f:ad:45:3d:19:aa:23:56:38:f0:3c:43:d9:9c:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3B:8E:AA:ED:67:8A:2C:58:0E:DD:7C:B1:71:DA:37:88:B2:F6:18
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d1:2e:4b:c3:96:63:35:fe:7b:ab:9c:43:bb:15:95:7c:f5:
ce:e6:6f:e3:76:d5:25:48:13:e9:fc:37:46:69:cc:43:ab:41:
c0:1a:8b:09:a5:3b:93:03:1b:2a:94:c3:2d:28:9e:15:2c:a0:
99:69:2f:88:d4:d9:eb:a9:f7:f2:bb:89:f9:8b:0a:4e:ff:f1:
0c:69:5e:1e:e6:8d:d6:05:4c:08:12:99:b9:2d:79:67:30:ea:
3d:06:37:64:30:8f:de:e0:2d:23:47:ad:c2:50:bf:8f:c4:af:
a4:e7:84:f9:6a:d0:40:f8:dd:fb:45:86:ed:6a:ca:59:dc:21:
73:fa:29:d3:14:bb:c8:e2:a9:6e:33:8b:11:65:59:eb:df:a4:
33:32:f6:dc:bb:bb:83:5f:b2:06:f3:db:bd:54:64:bf:3f:97:
78:31:e7:d0:2e:92:93:16:0d:9a:92:6c:0d:89:ad:2a:32:2a:
48:12:16:47:83:ff:1b:c2:44:a1:ae:4b:eb:8b:0e:3f:30:9b:
25:27:d8:02:b2:1d:97:d5:9d:43:7b:0f:cc:f9:b6:b6:f8:71:
7e:51:7e:d9:18:bd:12:d3:a8:65:87:01:7e:05:27:18:6d:50:
48:df:8d:52:c9:5f:46:0e:4d:42:aa:aa:fc:20:ee:d0:76:d3:
e3:33:db:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPedG2LfN2HqnHVKxi+1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDIzYjFlNmMwN2U2MmFmMmQyZTdlYjZkZTA4OTNiMDkx
MTlhYmIwHhcNMjUwODA0MDQwMTMzWhcNMjUwODA1MDQwMTMzWjAzMTEwLwYDVQQD
Eyg4NzNiOGVhYWVkNjc4YTJjNTgwZWRkN2NiMTcxZGEzNzg4YjJmNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U4CnxR4IVAiZw/VxmVUq04x8l2T
DmvaU1BfwdIpyMeKwW+vSWqlyxRmnYsA9v/JpSxi9su6OltMrXUtChruBj7yBA7u
bhoAIPF5wl17eZ4nw+8y/vXKLQtJplQW7RCDhZcCho0vhYnXPMddplaYGUCoI8WH
Z2R9CcWMKK2HhQRuHLNfsKc708BdLa7GnzfGTSTjl8x9Zfwx7zpKbpdKckST6Pkt
wuKbGyEyy6DO5TcAgRHgTbGSuTjQXBfUG+lbodFcoYDeY405JbwCZqVTB6l/s9yX
Yx8NST9Lg1Zj7CjMDyq0KjC2yCpkHG+0as0Eb61FPRmqI1Y48DxD2ZztpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIc7jqrtZ4osWA7dfLFx2jeIsvYYMB8GA1UdIwQY
MBaAFLjSOx5sB+Yq8tLn623giTsJEZq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMt
NjkwNjFlZjJjNDk5LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMtNjkwNjFlZjJjNDk5
LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdEuS8OW
YzX+e6ucQ7sVlXz1zuZv43bVJUgT6fw3RmnMQ6tBwBqLCaU7kwMbKpTDLSieFSyg
mWkviNTZ66n38ruJ+YsKTv/xDGleHuaN1gVMCBKZuS15ZzDqPQY3ZDCP3uAtI0et
wlC/j8SvpOeE+WrQQPjd+0WG7WrKWdwhc/op0xS7yOKpbjOLEWVZ69+kMzL23Lu7
g1+yBvPbvVRkvz+XeDHn0C6SkxYNmpJsDYmtKjIqSBIWR4P/G8JEoa5L64sOPzCb
JSfYArIdl9WdQ3sPzPm2tvhxflF+2Ri9EtOoZYcBfgUnGG1QSN+NUslfRg5NQqqq
/CDu0HbT4zPbiQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:32 2025 by rpki-client