Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File: UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier: d3UZoYwc9P3+KepwHEClr4/719JmGkbZYx8QjpZNCOU=
Subject key identifier: 3F:57:6A:A7:1E:A8:86:6D:6D:A9:9A:1F:D8:46:2B:81:94:00:DB:11
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial: 01978EEDB31E3A9E490B70E7632AB43CCB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number: 1533
Signing time: Fri 20 Jun 2025 20:00:31 +0000
Manifest this update: Fri 20 Jun 2025 20:00:31 +0000
Manifest next update: Sat 21 Jun 2025 20:00:31 +0000
Files and hashes: 1: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: AwSf5PjndHOVCNKu/ZhLEnXhqOalYE5kkEICC7Sbivc=)
2: cDqRgVZUzcG8C6S6sy9XaY7R8i4.roa (hash: dXQReZhWlMp7R/f0KCpgMs+DeDxAbD08ZpRugIlwk3I=)
3: fn4qBfRUR0OB50vceznCHU7Je0c.roa (hash: YF9zXgr+C6MTpEPUuY8+DvVCvD+pUWLKC0NueJccgh8=)
4: u67ic7YzK78QcUkHm1snD1e9720.roa (hash: csRqjLRtzYYjHQDBckYWBc6iGrmSXKNq8hQ9btgA+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:ed:b3:1e:3a:9e:49:0b:70:e7:63:2a:b4:3c:cb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
Validity
Not Before: Jun 20 20:00:31 2025 GMT
Not After : Jun 21 20:00:31 2025 GMT
Subject: CN=3f576aa71ea8866d6da99a1fd8462b819400db11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:70:b4:d8:4d:fe:4e:a9:b1:21:20:97:3e:66:
19:f7:ea:32:75:d5:9f:3b:79:dd:08:8f:5f:4c:0f:
26:85:5e:9e:fa:3b:24:9a:39:fd:31:be:88:67:32:
80:39:9f:a4:9f:cd:6e:78:e1:c7:90:e8:5d:27:64:
51:8d:21:14:43:40:88:44:8d:c3:c1:1b:03:32:93:
1a:14:b9:7a:3e:10:4b:84:a1:ff:47:e5:63:99:f0:
71:ed:f0:47:2e:35:19:48:0f:9e:3b:78:ea:f9:50:
1d:48:97:3d:7f:a9:8a:0e:c6:a9:e5:4b:44:79:2c:
bc:5b:80:e4:24:68:fa:c5:c0:f9:05:55:4c:00:e8:
68:90:65:0f:f2:3e:3b:28:d8:44:7a:a2:d3:42:14:
55:ee:5e:5c:3e:4a:9a:a3:df:84:ef:be:d8:ca:e8:
b3:aa:ce:9f:bd:8a:25:99:3c:30:d4:e8:90:41:8a:
cf:25:e8:b7:5f:ce:f2:38:89:4e:45:d1:9d:90:4c:
af:6c:68:54:c3:d5:5b:0e:f2:a3:51:9c:31:78:cb:
0a:ae:45:5c:f8:17:cc:29:48:6b:53:14:13:ef:55:
23:ac:79:ef:89:53:49:6a:ae:53:b9:7c:b8:d2:6b:
2f:4c:c9:8d:21:9d:14:ab:01:14:44:fe:23:49:4c:
5e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:57:6A:A7:1E:A8:86:6D:6D:A9:9A:1F:D8:46:2B:81:94:00:DB:11
X509v3 Authority Key Identifier:
keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7c:36:f1:a3:86:76:f5:2d:07:d2:0a:7d:27:2c:71:78:7d:
24:cb:f7:cd:b4:c3:36:14:29:33:42:bd:a6:09:e5:f1:f6:ff:
65:f7:55:3b:34:cf:a4:49:4d:7b:2b:2e:6d:b9:0e:dd:f1:ec:
5a:bb:04:cb:48:44:56:03:b4:71:4b:10:1d:89:33:b6:cd:87:
da:42:46:3f:54:f4:14:14:3f:b2:d3:8f:cc:d6:81:c3:6d:65:
3c:ea:7b:85:0d:53:11:e3:14:85:4b:7c:97:ed:86:0a:3c:80:
0d:ae:68:f0:2a:07:e1:80:c1:20:0c:8d:68:9b:11:6d:cc:0d:
38:37:1f:12:ba:e2:40:a8:b6:a7:54:13:7d:ad:3a:cf:09:fe:
6b:16:d3:63:0e:fc:7a:21:b7:06:a8:76:75:bc:04:9c:3a:d7:
f4:68:ec:88:92:7e:63:52:9a:1c:3a:40:ee:81:98:b1:e1:97:
13:3e:57:f9:1f:5a:29:2c:84:3c:86:48:cc:2e:05:56:5e:d7:
3f:6c:11:c1:63:83:83:72:12:5c:db:e0:18:cb:8d:de:82:6f:
31:2c:9f:29:a0:71:13:f8:98:64:00:10:7d:d5:64:2a:c2:f7:
a5:c7:52:08:53:2d:53:e2:f0:5f:4c:f6:b5:09:dd:96:0c:a6:
26:29:53:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeO7bMeOp5JC3DnYyq0PMuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTQ1OWMwMjdhODZlMWE1NTcwOWY4NjA5MzdmZTJmODFi
MzEyZjAwHhcNMjUwNjIwMjAwMDMxWhcNMjUwNjIxMjAwMDMxWjAzMTEwLwYDVQQD
EygzZjU3NmFhNzFlYTg4NjZkNmRhOTlhMWZkODQ2MmI4MTk0MDBkYjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnC02E3+TqmxISCXPmYZ9+oyddWf
O3ndCI9fTA8mhV6e+jskmjn9Mb6IZzKAOZ+kn81ueOHHkOhdJ2RRjSEUQ0CIRI3D
wRsDMpMaFLl6PhBLhKH/R+VjmfBx7fBHLjUZSA+eO3jq+VAdSJc9f6mKDsap5UtE
eSy8W4DkJGj6xcD5BVVMAOhokGUP8j47KNhEeqLTQhRV7l5cPkqao9+E777Yyuiz
qs6fvYolmTww1OiQQYrPJei3X87yOIlORdGdkEyvbGhUw9VbDvKjUZwxeMsKrkVc
+BfMKUhrUxQT71UjrHnviVNJaq5TuXy40msvTMmNIZ0UqwEURP4jSUxeswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9XaqceqIZtbamaH9hGK4GUANsRMB8GA1UdIwQY
MBaAFFAUWcAnqG4aVXCfhgk3/i+BsxLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYt
MTYyYjAyYmIxNWJkLzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYtMTYyYjAyYmIxNWJk
LzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXw28aOG
dvUtB9IKfScscXh9JMv3zbTDNhQpM0K9pgnl8fb/ZfdVOzTPpElNeysubbkO3fHs
WrsEy0hEVgO0cUsQHYkzts2H2kJGP1T0FBQ/stOPzNaBw21lPOp7hQ1TEeMUhUt8
l+2GCjyADa5o8CoH4YDBIAyNaJsRbcwNODcfErriQKi2p1QTfa06zwn+axbTYw78
eiG3Bqh2dbwEnDrX9GjsiJJ+Y1KaHDpA7oGYseGXEz5X+R9aKSyEPIZIzC4FVl7X
P2wRwWODg3ISXNvgGMuN3oJvMSyfKaBxE/iYZAAQfdVkKsL3pcdSCFMtU+LwX0z2
tQndlgymJilTpQ==
-----END CERTIFICATE-----
Generated at Fri Jun 20 22:32:15 2025 by rpki-client