Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File: UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier: wwmcnToCcu4gALWsxtlNnfW7cD9TLYZ7Fn3z/w/z65I=
Subject key identifier: 79:C1:26:45:36:DE:6F:92:DE:6D:AC:DE:EB:4D:81:D0:6E:B3:A0:0D
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 019770E3A7F9AAFDA5509DDAB95673FCFDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number: 1030
Signing time: Sun 15 Jun 2025 00:00:57 +0000
Manifest this update: Sun 15 Jun 2025 00:00:57 +0000
Manifest next update: Mon 16 Jun 2025 00:00:57 +0000
Files and hashes: 1: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: xsUpS3VFJJfprc1ZiPXh/r11z3hG18N9SxiJiAo+uAc=)
2: ZZhPPwqLkt0i32K3myspkarpm7w.roa (hash: I/Su6LLFQ+Dm0Pej9IN4WakV0FZtHq7XZa94FgMwfR8=)
3: _U1q7kl-Gvc0JP4VZVgWjqcMCOs.roa (hash: 3X8IGbj3QMA8V3ptFiyp/tKTSPuKRQ3qYJfTsAQKmxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:a7:f9:aa:fd:a5:50:9d:da:b9:56:73:fc:fd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Jun 15 00:00:57 2025 GMT
Not After : Jun 16 00:00:57 2025 GMT
Subject: CN=79c1264536de6f92de6dacdeeb4d81d06eb3a00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:99:8b:1b:df:92:ee:37:aa:4a:19:2b:60:2f:
c3:32:66:df:39:3e:1f:ac:02:34:0b:ce:84:f3:de:
06:17:7d:0a:fb:5e:f0:e9:05:d8:fc:b2:d7:f4:2f:
63:d1:44:a9:00:04:8a:d2:25:2b:38:a7:64:5a:ee:
bb:98:2b:2a:53:56:1d:16:33:cb:05:43:c0:d9:89:
8a:5d:9c:f9:a0:94:da:5a:a1:ed:ec:9e:c5:37:6a:
ab:6e:05:6a:9f:20:ff:e3:50:db:c0:2f:9c:54:a3:
a7:95:19:38:4e:eb:d6:c9:df:13:ef:5c:2a:37:7d:
f4:65:61:cd:00:0d:1a:b8:a3:99:67:20:4d:8f:f7:
7b:97:48:f1:8e:1a:e6:c8:50:5a:77:17:fe:7c:20:
47:0a:e6:36:1c:9b:fd:d7:2a:f1:52:6f:26:e5:56:
ce:c1:d4:cf:72:f2:c3:79:0c:69:5d:2d:3c:98:59:
13:67:49:ad:d4:94:b2:31:9b:a5:0d:5f:fb:03:0a:
20:11:c2:c4:18:04:56:37:d4:5b:9a:a4:02:02:04:
26:5f:b9:1c:a7:9e:46:9b:0b:ef:32:28:17:8b:f6:
bf:87:ba:bd:65:01:a5:72:43:2a:a6:73:7e:d4:a0:
0f:07:71:41:98:ad:09:ff:3f:93:9d:c3:20:3c:ef:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C1:26:45:36:DE:6F:92:DE:6D:AC:DE:EB:4D:81:D0:6E:B3:A0:0D
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:76:85:c9:a4:2c:0e:82:55:d9:40:a8:4a:13:df:81:75:7e:
a4:24:bf:d1:7a:81:de:cd:87:29:84:4a:be:85:cd:ec:df:cf:
ec:c2:6e:71:68:76:53:e1:76:77:8a:73:1f:af:e7:79:4a:55:
2e:51:e4:8e:52:94:15:f4:ef:3f:85:20:81:02:e7:d7:eb:66:
4e:ce:22:d0:8b:70:ff:dc:dc:bc:b8:bf:90:fe:94:b8:08:25:
45:c8:7c:ab:31:ff:9d:07:a1:cb:bb:75:40:29:86:c6:74:83:
13:ab:b4:9f:45:21:15:f1:56:43:21:4c:90:bd:79:0f:2c:5f:
95:6e:2c:f3:9e:91:58:21:3b:db:b7:f0:78:3b:df:e0:28:f9:
4c:62:43:8c:f8:2c:6b:32:56:93:c2:c6:b0:42:60:8a:20:dd:
52:f1:0b:be:b2:d6:a1:eb:d2:1b:5e:28:eb:0e:e0:69:7c:96:
11:5b:fe:79:5d:2e:e9:05:7d:a5:03:b9:14:a3:e8:24:4e:69:
0b:22:63:c6:7b:f4:5e:19:5b:90:83:ca:69:eb:06:d1:37:ce:
3f:a3:6b:c0:21:44:84:c4:44:10:67:ec:1e:23:b8:a7:01:91:
10:f6:ce:0b:c0:94:37:0a:6a:2e:26:d1:6f:5b:87:a5:29:b2:
c2:32:0e:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdw46f5qv2lUJ3auVZz/P3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNDUyM2Y4ODExZWJlNWFhMzU5ODUxMWE0OGYzYmFmMDAw
MWE4ZTgwHhcNMjUwNjE1MDAwMDU3WhcNMjUwNjE2MDAwMDU3WjAzMTEwLwYDVQQD
Eyg3OWMxMjY0NTM2ZGU2ZjkyZGU2ZGFjZGVlYjRkODFkMDZlYjNhMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ZmLG9+S7jeqShkrYC/DMmbfOT4f
rAI0C86E894GF30K+17w6QXY/LLX9C9j0USpAASK0iUrOKdkWu67mCsqU1YdFjPL
BUPA2YmKXZz5oJTaWqHt7J7FN2qrbgVqnyD/41DbwC+cVKOnlRk4TuvWyd8T71wq
N330ZWHNAA0auKOZZyBNj/d7l0jxjhrmyFBadxf+fCBHCuY2HJv91yrxUm8m5VbO
wdTPcvLDeQxpXS08mFkTZ0mt1JSyMZulDV/7AwogEcLEGARWN9RbmqQCAgQmX7kc
p55GmwvvMigXi/a/h7q9ZQGlckMqpnN+1KAPB3FBmK0J/z+TncMgPO91LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnBJkU23m+S3m2s3utNgdBus6ANMB8GA1UdIwQY
MBaAFFBFI/iBHr5ao1mFEaSPO68AAajoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjAyM2UtYTM5Ny00NmJiLTk0NjUt
YmYzZjYyYjk1ZjEwLzEvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zYjAyM2UtYTM5Ny00NmJiLTk0NjUtYmYzZjYyYjk1ZjEw
LzEvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXaFyaQs
DoJV2UCoShPfgXV+pCS/0XqB3s2HKYRKvoXN7N/P7MJucWh2U+F2d4pzH6/neUpV
LlHkjlKUFfTvP4UggQLn1+tmTs4i0Itw/9zcvLi/kP6UuAglRch8qzH/nQehy7t1
QCmGxnSDE6u0n0UhFfFWQyFMkL15DyxflW4s856RWCE727fweDvf4Cj5TGJDjPgs
azJWk8LGsEJgiiDdUvELvrLWoevSG14o6w7gaXyWEVv+eV0u6QV9pQO5FKPoJE5p
CyJjxnv0XhlbkIPKaesG0TfOP6NrwCFEhMREEGfsHiO4pwGREPbOC8CUNwpqLibR
b1uHpSmywjIOxw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:39:29 2025 by rpki-client