Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
File: u0CY4P3tthLyOdpSSgS14N6kxT8.mft (raw, json)
Hash identifier: QCAN175RF9CpC56WWWvIqV2xnI5ew1XAcA1Ue+Y1uXs=
Subject key identifier: 58:67:6D:44:66:F4:87:82:0E:D7:45:EC:C1:2E:8A:61:6A:CD:44:E3
Authority key identifier: BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
Certificate issuer: /CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Certificate serial: 019893A3EF8D1CFC5A32D3DB87BC37FC0041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
Manifest number: 1118
Signing time: Sun 10 Aug 2025 11:00:51 +0000
Manifest this update: Sun 10 Aug 2025 11:00:51 +0000
Manifest next update: Mon 11 Aug 2025 11:00:51 +0000
Files and hashes: 1: pDFtrRqSytqofU52Bi4GLIxTxPM.roa (hash: FhQVFWsHZFXcD5DtHy8k60bsokhKGFTiQLeglKl8pII=)
2: u0CY4P3tthLyOdpSSgS14N6kxT8.crl (hash: r5Ydt25sp1qkcsfyBNRXX5trkKPpjCPaE8NNRSu46sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:ef:8d:1c:fc:5a:32:d3:db:87:bc:37:fc:00:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Validity
Not Before: Aug 10 11:00:51 2025 GMT
Not After : Aug 11 11:00:51 2025 GMT
Subject: CN=58676d4466f487820ed745ecc12e8a616acd44e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:ba:f6:7f:87:ee:32:17:07:ac:8e:ea:91:
c0:b2:00:59:62:57:45:89:58:50:f3:00:a9:52:b9:
a3:b5:3a:7c:19:ac:22:59:7b:8e:ad:20:88:0b:b0:
b3:63:d5:49:17:91:9f:e4:f1:97:33:35:ca:f0:06:
b4:9e:19:ca:60:02:52:fb:2d:86:64:c3:db:4b:2a:
3d:ef:a1:73:e6:21:8d:51:cc:a5:70:5a:4e:0d:12:
ac:4e:c9:b0:99:8b:79:1d:b5:a3:c9:14:f5:b2:39:
5f:99:b0:15:a9:7c:82:76:d3:35:dd:37:89:ff:b0:
01:59:c2:6a:bf:9d:08:8b:ad:66:af:d2:3b:f3:a2:
6d:d0:22:44:1e:f6:51:47:d3:b8:7b:41:3e:80:c9:
50:f1:ec:01:02:56:d2:b0:07:97:51:63:4e:1a:13:
d4:30:4f:59:ca:5e:86:40:19:c5:28:ea:1d:db:99:
83:7f:2c:01:ac:1e:1a:9c:19:13:45:15:01:43:16:
9b:24:d1:d2:96:f4:da:16:77:81:5e:4c:45:7d:d0:
a7:20:3d:d2:3f:26:f1:f2:cd:6c:b5:f1:58:fe:47:
5e:be:8d:17:8c:27:9d:6c:55:ac:ef:67:db:23:da:
fb:2c:c0:7e:3e:2a:de:7c:b7:ce:22:f3:3b:af:28:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:67:6D:44:66:F4:87:82:0E:D7:45:EC:C1:2E:8A:61:6A:CD:44:E3
X509v3 Authority Key Identifier:
keyid:BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:71:e6:09:73:8e:b4:00:3a:ee:09:29:8b:25:6b:ae:e2:fe:
08:50:fe:36:7a:66:32:bb:52:a4:e7:0e:40:5d:79:c4:2f:a5:
f5:7e:0c:3d:46:50:20:d3:6a:4b:d7:0d:2d:30:76:7b:fd:ce:
10:a8:eb:1a:21:2a:82:49:55:7e:0e:40:ae:14:32:b8:af:56:
f6:78:39:f1:f9:c6:91:b1:4d:48:51:8c:ae:f0:c6:cb:d6:66:
27:d0:de:dd:49:0c:ac:50:60:9f:d9:59:00:f5:3d:18:08:2a:
8c:6f:6a:5e:d1:91:f2:a0:1d:66:4a:30:7e:58:ae:54:54:c4:
70:09:50:b0:80:a6:b4:4f:8b:65:50:8d:e5:fc:5b:f8:44:3d:
44:6d:e6:43:09:af:da:0b:f5:08:4c:c2:d0:63:52:d1:8e:50:
7c:3d:78:d1:9d:62:2c:81:26:95:44:c3:a9:55:9b:7a:b8:b6:
55:8f:72:3f:4a:da:08:c6:60:5e:c0:82:9c:64:31:63:df:aa:
d3:c6:52:f6:46:e0:30:cf:0c:88:c4:11:ee:21:11:32:c0:fb:
13:ed:72:b6:b4:ef:f4:74:a2:87:4e:bd:05:31:36:28:30:f9:
88:0d:f0:d8:4e:0f:99:5e:13:f8:3a:58:e2:64:d2:ae:cd:a9:
b8:f0:04:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTo++NHPxaMtPbh7w3/ABBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDA5OGUwZmRlZGI2MTJmMjM5ZGE1MjRhMDRiNWUwZGVh
NGM1M2YwHhcNMjUwODEwMTEwMDUxWhcNMjUwODExMTEwMDUxWjAzMTEwLwYDVQQD
Eyg1ODY3NmQ0NDY2ZjQ4NzgyMGVkNzQ1ZWNjMTJlOGE2MTZhY2Q0NGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj269n+H7jIXB6yO6pHAsgBZYldF
iVhQ8wCpUrmjtTp8GawiWXuOrSCIC7CzY9VJF5Gf5PGXMzXK8Aa0nhnKYAJS+y2G
ZMPbSyo976Fz5iGNUcylcFpODRKsTsmwmYt5HbWjyRT1sjlfmbAVqXyCdtM13TeJ
/7ABWcJqv50Ii61mr9I786Jt0CJEHvZRR9O4e0E+gMlQ8ewBAlbSsAeXUWNOGhPU
ME9Zyl6GQBnFKOod25mDfywBrB4anBkTRRUBQxabJNHSlvTaFneBXkxFfdCnID3S
Pybx8s1stfFY/kdevo0XjCedbFWs72fbI9r7LMB+PirefLfOIvM7ryjY6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhnbURm9IeCDtdF7MEuimFqzUTjMB8GA1UdIwQY
MBaAFLtAmOD97bYS8jnaUkoEteDepMU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBDWTRQM3R0aEx5T2RwU1NnUzE0TjZreFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YjczM2UtOTgzOS00ZjZmLWI0YjYt
ZmY1YWE5ZWVmNGUyLzEvdTBDWTRQM3R0aEx5T2RwU1NnUzE0TjZreFQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85YjczM2UtOTgzOS00ZjZmLWI0YjYtZmY1YWE5ZWVmNGUy
LzEvdTBDWTRQM3R0aEx5T2RwU1NnUzE0TjZreFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnHmCXOO
tAA67gkpiyVrruL+CFD+NnpmMrtSpOcOQF15xC+l9X4MPUZQINNqS9cNLTB2e/3O
EKjrGiEqgklVfg5ArhQyuK9W9ng58fnGkbFNSFGMrvDGy9ZmJ9De3UkMrFBgn9lZ
APU9GAgqjG9qXtGR8qAdZkowfliuVFTEcAlQsICmtE+LZVCN5fxb+EQ9RG3mQwmv
2gv1CEzC0GNS0Y5QfD140Z1iLIEmlUTDqVWberi2VY9yP0raCMZgXsCCnGQxY9+q
08ZS9kbgMM8MiMQR7iERMsD7E+1ytrTv9HSih069BTE2KDD5iA3w2E4PmV4T+DpY
4mTSrs2puPAEFw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:35 2025 by rpki-client