Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File: 2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier: Ujpd0E3LfBkTfgvnaKeONMPFmvafWC/+gab0orjzVXQ=
Subject key identifier: 3A:15:46:54:BE:07:F4:77:C2:32:8F:E1:75:CF:4A:D4:58:6F:10:DA
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 01987D8B39EA488ABA54BC0274100612041A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number: 0C87
Signing time: Wed 06 Aug 2025 04:02:12 +0000
Manifest this update: Wed 06 Aug 2025 04:02:12 +0000
Manifest next update: Thu 07 Aug 2025 04:02:12 +0000
Files and hashes: 1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: 55Rco92JHKwf5jq3wUSNC5JCMMkrmXiBCRf+coWxzNc=)
2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=)
3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:39:ea:48:8a:ba:54:bc:02:74:10:06:12:04:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Aug 6 04:02:12 2025 GMT
Not After : Aug 7 04:02:12 2025 GMT
Subject: CN=3a154654be07f477c2328fe175cf4ad4586f10da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1b:0f:d2:a5:c0:fb:89:55:bc:1a:4d:4a:ea:
dc:83:3b:a9:2e:7e:72:20:b7:74:8a:c8:15:88:32:
8d:d9:b8:96:a7:ae:1f:9f:ff:f9:35:3d:68:7a:4f:
21:1b:8d:80:8a:88:bb:24:a0:71:68:c2:6a:c6:e3:
a1:44:e0:ce:41:8e:ed:02:3e:17:60:8b:a7:29:9c:
98:fe:11:da:57:48:a9:62:fc:2f:84:a1:66:ab:5f:
f0:73:e1:47:c0:b9:62:a2:e7:c9:08:77:65:75:d5:
02:06:6d:dd:0d:9c:26:a3:a6:6a:74:b5:f4:77:91:
65:6f:c0:19:f5:6b:c6:ad:5e:b9:3a:78:22:aa:f6:
58:93:7b:24:8f:6f:d0:51:d4:69:cd:3d:4b:a8:19:
48:06:2c:82:34:99:9a:96:60:d4:5c:a4:0e:39:23:
c2:f3:7c:aa:62:eb:a4:67:16:1a:91:37:0b:e6:45:
08:6b:38:6d:8b:fd:91:6f:8e:b7:b3:f4:c2:c9:17:
19:f0:06:75:04:33:b4:fc:df:99:c0:3a:63:3b:e2:
fc:5d:db:d0:89:f1:78:4b:6b:90:93:1a:5e:ba:2f:
70:c0:5c:90:a2:cf:7f:a3:4f:fa:44:93:79:be:eb:
d6:c6:0f:03:5c:23:75:71:96:e5:9d:37:b5:29:9e:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:15:46:54:BE:07:F4:77:C2:32:8F:E1:75:CF:4A:D4:58:6F:10:DA
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:af:88:78:ea:ee:0d:73:25:7e:c7:65:ca:49:77:20:4e:5b:
69:62:f5:25:4e:43:c5:9e:2f:06:13:92:fc:71:4a:6b:6e:c4:
7b:80:d7:a0:db:0f:a3:23:fc:46:bd:50:f9:9c:b4:88:a2:3f:
7a:e3:9c:45:e6:cd:43:f0:bd:31:76:6d:ba:a7:cd:43:69:a3:
fd:76:f8:3b:b9:ec:41:48:8d:aa:12:01:b5:ea:73:64:ee:bc:
c4:f6:1f:d3:7f:75:63:f4:f2:e6:ed:6d:3e:b2:0c:75:65:5e:
33:de:28:f0:c8:e3:4a:74:da:2a:a4:85:36:96:58:93:7a:09:
b4:eb:4a:0c:ca:6e:d5:09:3b:d4:d7:24:4f:a2:05:fc:d1:53:
71:e8:6b:ef:a0:8b:fe:5d:72:ca:04:0b:74:04:77:90:98:2b:
d5:bd:5c:6b:cd:8a:c4:44:97:d5:0a:22:1d:99:0f:a6:94:31:
4f:66:71:97:58:c2:52:72:b1:db:c0:49:4e:9d:d6:42:77:a6:
06:ae:27:d1:09:36:4d:eb:6f:b5:96:99:27:b4:bb:45:8d:f6:
96:7e:90:e4:6d:7c:c6:d9:a7:94:3d:63:36:d0:d4:88:bd:75:
b8:4a:a0:e1:09:b7:43:43:95:da:00:e5:04:65:1e:28:5f:4e:
02:86:e1:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9iznqSIq6VLwCdBAGEgQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDdiMjgxMzQ4YWJkYWMyNGMyYmQxNmRhMDY3NzVjYTc1
NWY0MTAwHhcNMjUwODA2MDQwMjEyWhcNMjUwODA3MDQwMjEyWjAzMTEwLwYDVQQD
EygzYTE1NDY1NGJlMDdmNDc3YzIzMjhmZTE3NWNmNGFkNDU4NmYxMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hsP0qXA+4lVvBpNSurcgzupLn5y
ILd0isgViDKN2biWp64fn//5NT1oek8hG42Aioi7JKBxaMJqxuOhRODOQY7tAj4X
YIunKZyY/hHaV0ipYvwvhKFmq1/wc+FHwLlioufJCHdlddUCBm3dDZwmo6ZqdLX0
d5Flb8AZ9WvGrV65OngiqvZYk3skj2/QUdRpzT1LqBlIBiyCNJmalmDUXKQOOSPC
83yqYuukZxYakTcL5kUIazhti/2Rb463s/TCyRcZ8AZ1BDO0/N+ZwDpjO+L8XdvQ
ifF4S2uQkxpeui9wwFyQos9/o0/6RJN5vuvWxg8DXCN1cZblnTe1KZ4agQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoVRlS+B/R3wjKP4XXPStRYbxDaMB8GA1UdIwQY
MBaAFNlHsoE0ir2sJMK9FtoGd1ynVfQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYt
NjZhYzBkYmE1YmYyLzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYtNjZhYzBkYmE1YmYy
LzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmq+IeOru
DXMlfsdlykl3IE5baWL1JU5DxZ4vBhOS/HFKa27Ee4DXoNsPoyP8Rr1Q+Zy0iKI/
euOcRebNQ/C9MXZtuqfNQ2mj/Xb4O7nsQUiNqhIBtepzZO68xPYf0391Y/Ty5u1t
PrIMdWVeM94o8MjjSnTaKqSFNpZYk3oJtOtKDMpu1Qk71NckT6IF/NFTcehr76CL
/l1yygQLdAR3kJgr1b1ca82KxESX1QoiHZkPppQxT2Zxl1jCUnKx28BJTp3WQnem
Bq4n0Qk2TetvtZaZJ7S7RY32ln6Q5G18xtmnlD1jNtDUiL11uEqg4Qm3Q0OV2gDl
BGUeKF9OAobhzg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:53 2025 by rpki-client