Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: v9/oeYq0X0eoxO3pqb/9pFpasbEKUEmNxBaDbjzYSss=
Subject key identifier: 6A:7D:9F:E5:44:1D:AD:1E:C5:88:B6:FF:49:AF:5D:B8:F9:ED:49:F5
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 0197B7EA7934B4D6673529860BD17B1F734D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 1588
Signing time: Sat 28 Jun 2025 19:01:26 +0000
Manifest this update: Sat 28 Jun 2025 19:01:26 +0000
Manifest next update: Sun 29 Jun 2025 19:01:26 +0000
Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: 56eXU8nNGug28BeXQq5xy0hv6/7inPdmzBqODpEtxVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:79:34:b4:d6:67:35:29:86:0b:d1:7b:1f:73:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Jun 28 19:01:26 2025 GMT
Not After : Jun 29 19:01:26 2025 GMT
Subject: CN=6a7d9fe5441dad1ec588b6ff49af5db8f9ed49f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:c4:d2:aa:e3:94:76:2b:53:59:4c:6d:9f:
f5:74:e5:c7:5d:9a:12:50:1f:9c:ed:b8:b0:93:15:
43:41:46:ae:a5:ae:77:fb:44:60:32:94:0b:cf:95:
6b:44:eb:4c:ad:95:b9:29:f6:e2:7d:01:ee:38:89:
e9:23:ff:31:38:2d:16:24:2f:73:6b:24:9f:5f:f1:
93:88:06:67:61:1d:28:3e:92:ec:fe:8b:ca:eb:96:
78:e9:6a:ab:f8:78:03:05:1c:a7:1c:e2:46:36:de:
8c:76:e6:8e:a8:97:a8:3f:2a:7d:b2:e7:c2:94:48:
5d:bf:bb:44:57:5b:32:c8:e6:27:14:28:61:d5:52:
41:c1:72:86:6b:8f:9e:f6:79:e2:db:fc:a9:b7:71:
42:64:f5:19:61:a0:5b:18:41:da:fd:fe:71:63:f1:
a6:09:2d:a0:2e:f0:d5:23:b2:c7:c0:69:c8:4b:a9:
ff:c0:42:05:95:e8:7c:fc:ec:9e:17:f8:bd:b0:45:
5e:23:02:1c:04:41:9f:8b:5d:2c:bd:97:b7:e0:6a:
e1:96:ad:09:b8:ee:1c:7c:61:d1:48:e3:95:4c:4f:
77:4a:9c:06:47:ea:49:3e:8a:78:5d:15:c5:3f:0d:
32:2d:b6:7d:87:fb:4d:66:7d:12:b7:70:76:1f:ea:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7D:9F:E5:44:1D:AD:1E:C5:88:B6:FF:49:AF:5D:B8:F9:ED:49:F5
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f6:70:8e:67:01:40:07:e6:9d:4d:50:30:9b:d4:c3:aa:7d:
0f:64:28:30:a3:4b:d3:f5:8a:a4:c2:0d:1c:2f:07:8d:da:cf:
3a:95:c2:54:ce:86:e8:1e:f5:fe:00:b3:f8:28:a7:99:20:f1:
c8:2f:75:96:2b:22:9e:07:a6:52:a2:cc:5e:c2:60:1b:b1:f6:
4a:f0:71:79:78:b5:0d:ec:71:c6:6f:b8:79:70:a3:80:ce:22:
ba:1d:51:ac:e1:e8:10:af:bd:0e:0e:ca:e6:5a:73:c4:23:7c:
b6:1d:23:39:13:e0:a0:50:3f:70:10:3a:3e:9a:3a:65:46:05:
64:97:d9:de:0a:da:a5:01:3e:3d:9a:00:e8:7f:eb:f2:a6:a7:
e0:07:03:54:05:9c:2b:9f:b6:7d:16:85:f9:4a:5f:8b:98:b1:
0c:4d:58:57:34:7b:83:f4:e6:d2:31:7e:bd:ae:7d:05:78:ec:
f6:d9:0a:1d:90:6b:5f:b9:3a:cd:ca:bf:f7:04:3f:55:23:97:
ed:e6:a8:d4:4e:01:5f:58:f8:ee:d5:8e:fe:84:27:56:ea:01:
b5:c5:27:35:c2:96:f7:80:36:0b:58:25:cd:a4:34:fe:cf:10:
f4:2d:f9:e0:cb:9a:90:57:a3:6b:9a:1d:b1:f5:24:cf:3f:56:
e0:5e:b5:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36nk0tNZnNSmGC9F7H3NNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzkwYjEzYzllZjRhZmNmZDA4MTI0MTExZTZmNjNkYzMw
MTY1YWEwHhcNMjUwNjI4MTkwMTI2WhcNMjUwNjI5MTkwMTI2WjAzMTEwLwYDVQQD
Eyg2YTdkOWZlNTQ0MWRhZDFlYzU4OGI2ZmY0OWFmNWRiOGY5ZWQ0OWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LLE0qrjlHYrU1lMbZ/1dOXHXZoS
UB+c7biwkxVDQUaupa53+0RgMpQLz5VrROtMrZW5KfbifQHuOInpI/8xOC0WJC9z
aySfX/GTiAZnYR0oPpLs/ovK65Z46Wqr+HgDBRynHOJGNt6MduaOqJeoPyp9sufC
lEhdv7tEV1syyOYnFChh1VJBwXKGa4+e9nni2/ypt3FCZPUZYaBbGEHa/f5xY/Gm
CS2gLvDVI7LHwGnIS6n/wEIFleh8/OyeF/i9sEVeIwIcBEGfi10svZe34Grhlq0J
uO4cfGHRSOOVTE93SpwGR+pJPop4XRXFPw0yLbZ9h/tNZn0St3B2H+qLWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGp9n+VEHa0exYi2/0mvXbj57Un1MB8GA1UdIwQY
MBaAFFM5CxPJ70r8/QgSQRHm9j3DAWWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAt
MzNkN2FjMzcwOTc5LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAtMzNkN2FjMzcwOTc5
LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvZwjmcB
QAfmnU1QMJvUw6p9D2QoMKNL0/WKpMINHC8HjdrPOpXCVM6G6B71/gCz+CinmSDx
yC91lisingemUqLMXsJgG7H2SvBxeXi1Dexxxm+4eXCjgM4iuh1RrOHoEK+9Dg7K
5lpzxCN8th0jORPgoFA/cBA6Ppo6ZUYFZJfZ3grapQE+PZoA6H/r8qan4AcDVAWc
K5+2fRaF+Upfi5ixDE1YVzR7g/Tm0jF+va59BXjs9tkKHZBrX7k6zcq/9wQ/VSOX
7eao1E4BX1j47tWO/oQnVuoBtcUnNcKW94A2C1glzaQ0/s8Q9C354MuakFeja5od
sfUkzz9W4F61EQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:10 2025 by rpki-client