Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
File: UHx3C7awjctNbqmwyWJyrzpvnHE.mft (raw, json)
Hash identifier: x/pWXQKmEMUUUM8vBeo+EQYtocoLHK2ujLA4zcltFH0=
Subject key identifier: 9F:96:4D:89:49:71:A9:61:0C:D0:37:BC:A5:57:24:BE:C6:51:DC:12
Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Certificate issuer: /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Certificate serial: 0198D69881575BC482C10EA904A0B27A4A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
Manifest number: 011B
Signing time: Sat 23 Aug 2025 11:02:55 +0000
Manifest this update: Sat 23 Aug 2025 11:02:55 +0000
Manifest next update: Sun 24 Aug 2025 11:02:55 +0000
Files and hashes: 1: 7vKO7KJon2U-PLT4fG2hAFvhGko.roa (hash: zjVmGhrF2p6uK4Xne1JZdTjHYFdY+pPfwr5U6yqo03M=)
2: EdaEcdzfZKUU8pzTsayBRrh8XNY.roa (hash: O3+hPZUQsLmn/0ZqbZYW7yg/F0HNHy5aqWBZDmT4tfM=)
3: UHx3C7awjctNbqmwyWJyrzpvnHE.crl (hash: dW4hP/gteQX0SDyeENRRPGIHng/zW9z1xJC3cTOMPIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:81:57:5b:c4:82:c1:0e:a9:04:a0:b2:7a:4a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Validity
Not Before: Aug 23 11:02:55 2025 GMT
Not After : Aug 24 11:02:55 2025 GMT
Subject: CN=9f964d894971a9610cd037bca55724bec651dc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:83:4e:74:36:7a:45:77:bf:77:96:df:30:
94:48:61:c5:87:29:93:a6:c5:31:09:54:ac:36:d9:
6b:98:fa:df:b5:ae:e0:05:3f:18:82:d8:bc:bc:00:
2c:ac:31:90:0c:6b:c8:8c:92:b3:c1:ed:5a:2d:e6:
83:ac:9c:b2:f3:df:45:9f:9e:92:b8:87:eb:a1:48:
21:42:81:d6:5d:dc:58:e6:43:4c:59:58:54:ef:08:
ee:d9:77:43:8d:6d:46:fe:c8:a7:38:c1:64:f6:fc:
b6:64:76:dc:a8:ae:50:5a:5c:3e:71:d8:3c:37:55:
24:6e:91:84:13:31:00:8e:ac:85:f5:45:e1:75:0a:
14:9f:f2:c1:3e:e8:67:f7:dd:7c:51:d5:60:d5:9a:
80:4c:e8:9c:21:5c:48:89:f3:8b:1c:f1:a6:f7:bc:
3b:d0:cd:58:00:c5:40:06:76:5f:75:81:c5:f0:d1:
42:e1:90:bc:6a:75:0e:c5:01:0c:8b:08:c2:bc:99:
83:8d:88:f0:a7:d2:ef:8d:89:55:fe:50:34:69:84:
bb:41:01:fa:65:6b:20:39:a6:40:f6:a9:b1:39:80:
26:aa:e2:22:93:2b:ef:e8:3a:e4:73:42:b4:29:59:
9a:ec:92:f4:99:20:90:ab:6d:ef:ab:f7:f7:84:f9:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:96:4D:89:49:71:A9:61:0C:D0:37:BC:A5:57:24:BE:C6:51:DC:12
X509v3 Authority Key Identifier:
keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e9:e0:7f:79:7e:a0:cf:de:e9:bb:c0:00:60:9d:d7:89:09:
40:09:45:1a:08:1f:ca:50:ab:d1:2d:2e:12:fb:95:cc:dc:58:
3d:41:76:7f:a4:9b:07:36:57:ce:b7:67:54:93:2a:a5:1e:62:
36:ad:d6:1f:85:cb:d2:69:33:89:81:40:24:94:da:16:12:9a:
4e:9f:f5:0b:b8:d5:be:65:cc:a5:6b:96:0e:d4:cc:b5:9f:fe:
7b:05:e2:4e:5a:62:dd:dd:a1:b9:ca:3b:73:c9:e9:16:df:03:
02:bb:49:68:c4:45:9b:ce:4a:32:d5:1a:72:55:5f:11:61:74:
60:a7:6f:cf:36:b9:09:02:5c:79:ac:eb:67:e6:a6:50:8d:fa:
49:12:61:70:82:ca:a1:c7:f9:37:01:7e:0f:5a:9d:99:95:8d:
27:31:10:33:cf:7f:8c:b2:e3:fc:8c:37:d7:62:b1:fe:51:c1:
1f:f2:b4:dd:a1:1a:bb:5d:44:51:16:13:fb:43:da:2f:df:40:
58:5c:89:ab:5a:ad:cc:a3:c7:77:ce:0b:d6:45:4f:77:c4:3a:
e5:1e:a5:35:b1:b7:46:63:a5:d0:54:16:a6:3a:2a:74:5d:57:
1d:88:be:b7:d3:ea:e8:5a:c9:e9:5e:e4:2c:8c:97:22:53:f2:
f8:42:b4:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmIFXW8SCwQ6pBKCyekqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwN2M3NzBiYjZiMDhkY2I0ZDZlYTliMGM5NjI3MmFmM2E2
ZjljNzEwHhcNMjUwODIzMTEwMjU1WhcNMjUwODI0MTEwMjU1WjAzMTEwLwYDVQQD
Eyg5Zjk2NGQ4OTQ5NzFhOTYxMGNkMDM3YmNhNTU3MjRiZWM2NTFkYzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkCDTnQ2ekV3v3eW3zCUSGHFhymT
psUxCVSsNtlrmPrfta7gBT8Ygti8vAAsrDGQDGvIjJKzwe1aLeaDrJyy899Fn56S
uIfroUghQoHWXdxY5kNMWVhU7wju2XdDjW1G/sinOMFk9vy2ZHbcqK5QWlw+cdg8
N1UkbpGEEzEAjqyF9UXhdQoUn/LBPuhn9918UdVg1ZqATOicIVxIifOLHPGm97w7
0M1YAMVABnZfdYHF8NFC4ZC8anUOxQEMiwjCvJmDjYjwp9LvjYlV/lA0aYS7QQH6
ZWsgOaZA9qmxOYAmquIikyvv6Drkc0K0KVma7JL0mSCQq23vq/f3hPkqMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+WTYlJcalhDNA3vKVXJL7GUdwSMB8GA1UdIwQY
MBaAFFB8dwu2sI3LTW6psMlicq86b5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUh4M0M3YXdqY3ROYnFtd3lXSnlyenB2bkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi81ZjE1MTEtMTBmYy00M2U3LWE4ZTAt
NThiNzliYzliY2M3LzEvVUh4M0M3YXdqY3ROYnFtd3lXSnlyenB2bkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi81ZjE1MTEtMTBmYy00M2U3LWE4ZTAtNThiNzliYzliY2M3
LzEvVUh4M0M3YXdqY3ROYnFtd3lXSnlyenB2bkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOngf3l+
oM/e6bvAAGCd14kJQAlFGggfylCr0S0uEvuVzNxYPUF2f6SbBzZXzrdnVJMqpR5i
Nq3WH4XL0mkziYFAJJTaFhKaTp/1C7jVvmXMpWuWDtTMtZ/+ewXiTlpi3d2huco7
c8npFt8DArtJaMRFm85KMtUaclVfEWF0YKdvzza5CQJceazrZ+amUI36SRJhcILK
ocf5NwF+D1qdmZWNJzEQM89/jLLj/Iw312Kx/lHBH/K03aEau11EURYT+0PaL99A
WFyJq1qtzKPHd84L1kVPd8Q65R6lNbG3RmOl0FQWpjoqdF1XHYi+t9Pq6FrJ6V7k
LIyXIlPy+EK0Ig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:56 2025 by rpki-client