Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: k7AK9IHOXsQzFYr+M9E2simIry2Rtw5OLY+lKbht3Sw=
Subject key identifier: 7F:29:E1:EA:15:47:10:75:F2:24:FA:59:6A:8A:D9:DB:03:18:77:66
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 01987B9D964E87947CDFE95F8DB89F19BE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1624
Signing time: Tue 05 Aug 2025 19:03:01 +0000
Manifest this update: Tue 05 Aug 2025 19:03:01 +0000
Manifest next update: Wed 06 Aug 2025 19:03:01 +0000
Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: BUkuoxLYCY8ylOe2DxIxoh12BO7knqJhbryVylVjZB4=)
2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:96:4e:87:94:7c:df:e9:5f:8d:b8:9f:19:be:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Aug 5 19:03:01 2025 GMT
Not After : Aug 6 19:03:01 2025 GMT
Subject: CN=7f29e1ea15471075f224fa596a8ad9db03187766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:f5:a5:94:5a:10:2e:02:c5:10:74:dc:91:
02:c2:08:f3:91:97:10:5a:7b:47:a5:e7:05:f9:e4:
d9:73:7f:28:da:bc:64:db:c6:49:4a:86:04:bc:ab:
49:fa:3f:c6:95:91:87:c4:1a:f1:f9:a7:ac:03:67:
77:28:1b:a9:6c:2d:cd:38:25:91:2d:9c:1c:bc:ab:
4a:4d:a1:8a:b6:49:87:16:15:c4:fe:72:fb:b2:91:
86:f7:7d:6d:5a:22:46:c1:72:d8:8c:d6:9f:e5:79:
01:5a:ac:30:e4:17:89:09:15:af:a3:95:2a:6e:eb:
ae:82:ea:c6:9c:d4:01:ac:aa:ac:9a:fc:ad:e4:fc:
ed:24:55:d2:c4:2c:0e:11:02:d9:19:ff:08:72:cf:
36:9f:49:06:e4:45:e9:fe:d1:38:33:e2:64:23:a4:
3b:aa:a9:36:b2:ae:3f:95:3d:68:07:38:1e:ad:ae:
91:e9:81:86:16:2e:11:f3:47:ab:ba:c6:8a:98:fb:
13:8b:cd:0c:89:75:74:16:2d:e6:a5:fb:4d:0c:cb:
8c:d9:10:e2:18:10:ac:a5:b4:01:17:07:64:f3:75:
ca:60:5b:b6:7f:c4:f9:12:b1:03:ec:4b:2c:1c:b5:
29:11:ad:c6:ba:45:78:3c:8a:03:89:97:3f:5d:1d:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:29:E1:EA:15:47:10:75:F2:24:FA:59:6A:8A:D9:DB:03:18:77:66
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:01:a9:fe:2f:73:cc:49:90:b5:c5:f2:91:9b:19:ed:f3:e0:
47:5a:23:1e:ce:09:84:1b:a4:06:22:c5:77:85:c2:64:eb:79:
f2:7a:5f:73:ef:d8:95:17:7f:a7:a5:37:75:92:19:cf:65:90:
9f:0a:07:53:92:4f:9a:0e:4f:71:28:63:62:2d:4a:38:1b:d9:
7e:b2:6a:bb:19:33:de:8e:b1:b0:b4:9d:ad:ee:91:44:31:0d:
29:01:ea:ab:1a:eb:3f:6a:40:54:71:3e:e1:38:92:fe:da:a1:
4f:e0:ee:f0:3e:27:98:fb:88:f6:9d:af:ea:28:ba:2b:8d:16:
e8:5d:9d:4d:47:0c:ac:46:02:d6:f6:ee:be:70:7a:d9:c3:27:
f7:f3:3e:9a:d5:7a:b4:d7:a4:6a:37:9d:a8:cb:cd:ed:e0:dc:
0f:8c:84:5c:e6:d0:7f:f2:d3:cb:db:84:d1:5b:d5:51:db:76:
01:ae:99:cc:cf:33:5f:2c:cd:22:ab:40:86:01:c1:a8:77:10:
e1:e6:ff:62:10:3f:ac:eb:6a:7a:42:fa:d7:f3:76:7f:05:b3:
0a:de:cb:ba:49:aa:0d:04:4f:67:ba:e9:95:2b:86:d2:d9:4a:
91:fa:3c:2a:62:b9:f4:9c:02:7d:63:86:b0:ee:61:5d:f5:9b:
e0:70:3d:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nZZOh5R83+lfjbifGb40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjUwODA1MTkwMzAxWhcNMjUwODA2MTkwMzAxWjAzMTEwLwYDVQQD
Eyg3ZjI5ZTFlYTE1NDcxMDc1ZjIyNGZhNTk2YThhZDlkYjAzMTg3NzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruH1pZRaEC4CxRB03JECwgjzkZcQ
WntHpecF+eTZc38o2rxk28ZJSoYEvKtJ+j/GlZGHxBrx+aesA2d3KBupbC3NOCWR
LZwcvKtKTaGKtkmHFhXE/nL7spGG931tWiJGwXLYjNaf5XkBWqww5BeJCRWvo5Uq
buuugurGnNQBrKqsmvyt5PztJFXSxCwOEQLZGf8Ics82n0kG5EXp/tE4M+JkI6Q7
qqk2sq4/lT1oBzgera6R6YGGFi4R80erusaKmPsTi80MiXV0Fi3mpftNDMuM2RDi
GBCspbQBFwdk83XKYFu2f8T5ErED7EssHLUpEa3GukV4PIoDiZc/XR1LsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8p4eoVRxB18iT6WWqK2dsDGHdmMB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgGp/i9z
zEmQtcXykZsZ7fPgR1ojHs4JhBukBiLFd4XCZOt58npfc+/YlRd/p6U3dZIZz2WQ
nwoHU5JPmg5PcShjYi1KOBvZfrJquxkz3o6xsLSdre6RRDENKQHqqxrrP2pAVHE+
4TiS/tqhT+Du8D4nmPuI9p2v6ii6K40W6F2dTUcMrEYC1vbuvnB62cMn9/M+mtV6
tNekajedqMvN7eDcD4yEXObQf/LTy9uE0VvVUdt2Aa6ZzM8zXyzNIqtAhgHBqHcQ
4eb/YhA/rOtqekL61/N2fwWzCt7LukmqDQRPZ7rplSuG0tlKkfo8KmK59JwCfWOG
sO5hXfWb4HA93A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:02:01 2025 by rpki-client