Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
File: uquipWoMMP2vWTSvh2XB_9E1ekg.mft (raw, json)
Hash identifier: QAU0zgPUcTf0kELLOjvnQGzkJzU6eCx6fdr2JEpGhi0=
Subject key identifier: 21:A1:C3:CC:9F:6F:22:67:62:96:8A:5C:7B:57:36:3D:92:9C:F5:1F
Authority key identifier: BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
Certificate issuer: /CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Certificate serial: 019771F6106A031CB67A88C0B9B7617E1C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 05:00:40 +0000
Manifest this update: Sun 15 Jun 2025 05:00:40 +0000
Manifest next update: Mon 16 Jun 2025 05:00:40 +0000
Files and hashes: 1: a8-LoFpzpvju-2XWs2Ak1Mj-svc.roa (hash: wRN7eTSTbn3kvEiQSolKkMG8ZX0jIhoh/J7KJ9xpJnI=)
2: uquipWoMMP2vWTSvh2XB_9E1ekg.crl (hash: q9/9xA5QjusVTVCQDkYA+Y+laHW5Xxn860Y7YMPIQ0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:10:6a:03:1c:b6:7a:88:c0:b9:b7:61:7e:1c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Validity
Not Before: Jun 15 05:00:40 2025 GMT
Not After : Jun 16 05:00:40 2025 GMT
Subject: CN=21a1c3cc9f6f226762968a5c7b57363d929cf51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:35:89:d8:3b:6f:b1:a4:dc:54:94:9d:0f:
85:65:de:31:67:b3:82:ad:5b:5e:35:48:eb:da:9e:
49:ae:b0:76:88:55:91:fe:ab:2b:fd:87:2f:08:d3:
b0:a2:b7:07:a3:47:d8:41:c3:2d:03:8c:31:fb:7d:
04:5a:2a:4a:a4:9f:33:80:25:3e:75:fb:c6:db:ad:
c9:e2:63:36:4b:7e:ed:5f:95:b7:3e:0f:04:f5:3c:
58:27:a5:f9:20:85:e5:95:2b:27:47:ca:a1:5b:84:
af:fe:8c:f3:1d:1d:b9:ff:4e:92:12:29:44:54:c3:
74:93:b1:6c:67:2e:13:6e:b0:31:16:3d:a8:f5:df:
21:72:57:97:5e:41:63:b6:d7:d6:1d:be:91:10:28:
46:5a:34:be:21:f9:06:94:0c:75:42:17:29:87:86:
cb:8c:a1:cc:6c:fa:00:dd:12:77:a2:76:d7:a0:d1:
39:3e:61:d5:71:bc:f7:3e:9f:a6:b8:57:75:e6:0d:
aa:1d:ff:15:db:4f:ec:81:9e:0b:84:72:5e:7c:35:
dc:1e:b6:54:db:01:52:9d:10:f3:d9:46:9b:03:2c:
dd:7b:93:f3:f6:d8:75:9d:24:fa:8f:de:d8:71:fb:
a9:b6:ac:3a:05:6d:97:fb:23:59:d1:3d:2c:ec:53:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A1:C3:CC:9F:6F:22:67:62:96:8A:5C:7B:57:36:3D:92:9C:F5:1F
X509v3 Authority Key Identifier:
keyid:BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f5:e0:a3:82:6a:c0:e7:f7:23:22:e3:b9:8a:5b:06:78:8f:
f1:90:5b:72:cd:71:4c:1b:0a:45:3a:95:56:2c:78:93:3d:17:
23:dd:da:1d:38:27:65:be:c1:58:25:93:3c:7c:7f:f4:29:9a:
6e:ee:56:39:c0:d7:82:f1:02:cd:2c:d7:9c:b4:1e:ea:4b:37:
ed:3b:db:b9:66:c7:05:e0:69:29:be:cd:b9:3c:c6:5b:26:02:
65:ad:48:e0:b6:4b:73:72:e0:9d:9a:74:41:55:a9:3c:95:b5:
01:02:20:47:a5:73:08:35:76:56:1d:b7:a2:9b:6f:36:fc:be:
ef:38:04:90:24:37:4b:ae:3a:45:f0:ea:0b:0a:eb:43:e1:56:
87:bb:1a:e1:f8:ad:d9:8d:40:cc:37:7c:fe:9b:78:8b:d5:02:
39:3e:2c:9d:10:2c:3e:8f:82:2c:d8:f0:58:6f:6c:d7:8f:26:
ed:07:9b:85:a9:e6:19:7f:b3:38:85:4f:4e:73:bc:7f:f4:e2:
11:cc:1c:42:20:c1:2f:69:b0:80:ca:af:7b:4f:fc:4e:de:03:
56:b7:63:62:97:50:ad:24:28:63:03:da:d8:da:aa:88:c7:e5:
c8:15:ca:03:73:29:95:6c:53:4e:a2:b6:c5:85:1d:28:a3:52:
36:ca:86:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9hBqAxy2eojAubdhfhyJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWJhMmE1NmEwYzMwZmRhZjU5MzRhZjg3NjVjMWZmZDEz
NTdhNDgwHhcNMjUwNjE1MDUwMDQwWhcNMjUwNjE2MDUwMDQwWjAzMTEwLwYDVQQD
EygyMWExYzNjYzlmNmYyMjY3NjI5NjhhNWM3YjU3MzYzZDkyOWNmNTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7M1idg7b7Gk3FSUnQ+FZd4xZ7OC
rVteNUjr2p5JrrB2iFWR/qsr/YcvCNOworcHo0fYQcMtA4wx+30EWipKpJ8zgCU+
dfvG263J4mM2S37tX5W3Pg8E9TxYJ6X5IIXllSsnR8qhW4Sv/ozzHR25/06SEilE
VMN0k7FsZy4TbrAxFj2o9d8hcleXXkFjttfWHb6REChGWjS+IfkGlAx1Qhcph4bL
jKHMbPoA3RJ3onbXoNE5PmHVcbz3Pp+muFd15g2qHf8V20/sgZ4LhHJefDXcHrZU
2wFSnRDz2UabAyzde5Pz9th1nST6j97Ycfuptqw6BW2X+yNZ0T0s7FPkUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGhw8yfbyJnYpaKXHtXNj2SnPUfMB8GA1UdIwQY
MBaAFLqroqVqDDD9r1k0r4dlwf/RNXpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xOTU0YTYtZGEyMy00OTUyLTljMDkt
MDI0ODY4ZmZkMzE1LzEvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8xOTU0YTYtZGEyMy00OTUyLTljMDktMDI0ODY4ZmZkMzE1
LzEvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/Xgo4Jq
wOf3IyLjuYpbBniP8ZBbcs1xTBsKRTqVVix4kz0XI93aHTgnZb7BWCWTPHx/9Cma
bu5WOcDXgvECzSzXnLQe6ks37TvbuWbHBeBpKb7NuTzGWyYCZa1I4LZLc3LgnZp0
QVWpPJW1AQIgR6VzCDV2Vh23optvNvy+7zgEkCQ3S646RfDqCwrrQ+FWh7sa4fit
2Y1AzDd8/pt4i9UCOT4snRAsPo+CLNjwWG9s148m7QebhanmGX+zOIVPTnO8f/Ti
EcwcQiDBL2mwgMqve0/8Tt4DVrdjYpdQrSQoYwPa2NqqiMflyBXKA3MplWxTTqK2
xYUdKKNSNsqGYw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:04:23 2025 by rpki-client