Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: lNQNytNCS4JDxFFyfPTI7aXdnZIFgmqlmkwTs2RX6NI=
Subject key identifier: EE:B5:36:8E:23:8B:37:63:03:C1:03:33:9F:C9:16:41:F0:90:B3:78
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 0198748706D417AB914D6F071FE56D16C008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 12AA
Signing time: Mon 04 Aug 2025 10:01:02 +0000
Manifest this update: Mon 04 Aug 2025 10:01:02 +0000
Manifest next update: Tue 05 Aug 2025 10:01:02 +0000
Files and hashes: 1: F1LbGv2MkXWWefxkT_CtpriNBr4.roa (hash: RRHmy9X/CGJW+TnFMQF3NirLVJyyI3P64OOzvqQr238=)
2: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: ewBwz8lqhTP+bXlrpBO6HSaIKPKv8wzcvUAo9azsmDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:06:d4:17:ab:91:4d:6f:07:1f:e5:6d:16:c0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Aug 4 10:01:02 2025 GMT
Not After : Aug 5 10:01:02 2025 GMT
Subject: CN=eeb5368e238b376303c103339fc91641f090b378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:9e:27:6b:78:81:4a:4e:34:0f:f6:a7:b3:
5f:55:0c:68:0f:02:77:06:a2:86:f1:14:d8:4c:e1:
c7:23:c0:a0:a5:c2:3b:90:de:a3:7f:fc:72:43:08:
e4:01:88:29:df:ca:a1:32:52:54:24:d1:d9:f2:1f:
08:a0:ba:9e:cc:7d:ef:3d:87:bc:07:4f:af:6c:4e:
45:68:90:b4:82:15:1c:23:55:b3:1e:d9:fb:95:95:
62:f3:2f:0f:32:5a:cf:b6:af:2d:61:eb:2a:15:ab:
5b:d4:f3:a2:c9:eb:a8:b8:46:14:93:9f:6f:04:6e:
ff:23:7a:22:01:72:5b:dc:d7:db:a4:a7:95:a7:e4:
9a:99:e0:ba:b6:6a:b2:0a:a5:e9:e6:e8:61:a2:a0:
15:51:95:dc:20:a8:f7:d5:b1:55:07:2a:0f:ec:fd:
24:1a:88:94:71:75:07:44:99:94:a8:82:02:bb:f1:
73:93:34:da:d5:e8:09:95:d0:e1:64:38:4c:91:9c:
7d:2a:f6:6c:fb:40:b2:41:3c:8f:1d:ca:fb:d3:7f:
66:68:89:ab:20:5f:03:85:5d:50:e7:18:45:c3:29:
22:08:8e:80:e2:a7:76:f8:92:fa:da:07:71:bd:93:
31:d8:d1:59:57:73:93:90:48:47:e1:75:b4:05:cd:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B5:36:8E:23:8B:37:63:03:C1:03:33:9F:C9:16:41:F0:90:B3:78
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:20:8c:3c:46:09:c8:e3:91:d4:6e:b0:3a:ce:5a:1f:11:e4:
13:7e:73:b9:18:8b:43:22:d4:d9:34:25:df:ce:f0:30:16:3a:
00:03:01:7e:29:b3:f6:d1:eb:73:07:0a:8f:af:80:de:35:e4:
da:02:f5:2f:db:6d:d1:01:95:20:fb:9c:74:c9:71:fc:36:12:
06:7d:f7:27:76:72:6a:1e:67:f3:2b:b1:c3:ba:d5:5c:67:67:
7a:98:69:b3:99:fe:09:5f:3e:db:3d:13:3e:2b:bc:df:fc:88:
8d:dd:9a:5b:f5:ce:f0:ee:49:cd:67:71:83:93:5a:68:8d:21:
ce:7e:18:32:57:92:be:e9:ce:b2:1f:eb:1e:95:32:e5:f4:6e:
f9:56:a7:92:e5:99:dc:fd:10:90:0c:e1:b5:9d:1a:18:b3:88:
ce:88:ce:6b:74:ca:53:33:59:5e:52:bf:c8:3b:e1:66:e9:1d:
e4:a3:e0:d2:be:6e:01:b6:97:f4:8d:3c:17:11:57:30:ed:09:
74:ad:12:07:ed:c4:75:a9:6c:f2:da:99:59:a2:c5:00:61:d2:
26:ec:72:c1:e0:6c:5c:64:27:9b:8f:8d:b7:90:02:72:d5:d5:
5b:53:6a:fc:ec:c8:0d:a3:62:4c:d8:57:43:ee:3f:53:2c:84:
db:ad:1a:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hwbUF6uRTW8HH+VtFsAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzODU1YzhlY2U5YmQ2ZjhlMzk0MDIwMjIxMmNlMDliMDVm
NWY4YTAwHhcNMjUwODA0MTAwMTAyWhcNMjUwODA1MTAwMTAyWjAzMTEwLwYDVQQD
EyhlZWI1MzY4ZTIzOGIzNzYzMDNjMTAzMzM5ZmM5MTY0MWYwOTBiMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1saeJ2t4gUpONA/2p7NfVQxoDwJ3
BqKG8RTYTOHHI8CgpcI7kN6jf/xyQwjkAYgp38qhMlJUJNHZ8h8IoLqezH3vPYe8
B0+vbE5FaJC0ghUcI1WzHtn7lZVi8y8PMlrPtq8tYesqFatb1POiyeuouEYUk59v
BG7/I3oiAXJb3NfbpKeVp+SameC6tmqyCqXp5uhhoqAVUZXcIKj31bFVByoP7P0k
GoiUcXUHRJmUqIICu/FzkzTa1egJldDhZDhMkZx9KvZs+0CyQTyPHcr7039maImr
IF8DhV1Q5xhFwykiCI6A4qd2+JL62gdxvZMx2NFZV3OTkEhH4XW0Bc3qcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO61No4jizdjA8EDM5/JFkHwkLN4MB8GA1UdIwQY
MBaAFFOFXI7Om9b445QCAiEs4JsF9figMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MzM2YjAtY2JlNC00ZGEyLTg0MWIt
MWNlZmQxZmExMGE2LzEvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MzM2YjAtY2JlNC00ZGEyLTg0MWItMWNlZmQxZmExMGE2
LzEvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsiCMPEYJ
yOOR1G6wOs5aHxHkE35zuRiLQyLU2TQl387wMBY6AAMBfimz9tHrcwcKj6+A3jXk
2gL1L9tt0QGVIPucdMlx/DYSBn33J3Zyah5n8yuxw7rVXGdnephps5n+CV8+2z0T
Piu83/yIjd2aW/XO8O5JzWdxg5NaaI0hzn4YMleSvunOsh/rHpUy5fRu+VankuWZ
3P0QkAzhtZ0aGLOIzojOa3TKUzNZXlK/yDvhZukd5KPg0r5uAbaX9I08FxFXMO0J
dK0SB+3Edals8tqZWaLFAGHSJuxyweBsXGQnm4+Nt5ACctXVW1Nq/OzIDaNiTNhX
Q+4/UyyE260alA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:23:51 2025 by rpki-client