Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File: A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier: +xwGnhHy9giRAke5KDQxjYM5EClP4Ee4S7TTJ8Gaurk=
Subject key identifier: C4:BE:11:A0:A1:2E:BC:6B:E1:FD:7D:95:AE:C3:70:86:7D:93:2B:B7
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer: /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial: 0197B6A0CCCCEF6B75AEFE7EB7343BA64172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number: 0D38
Signing time: Sat 28 Jun 2025 13:01:20 +0000
Manifest this update: Sat 28 Jun 2025 13:01:20 +0000
Manifest next update: Sun 29 Jun 2025 13:01:20 +0000
Files and hashes: 1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: TXjl45jbYuozgxjJcrYSeWdkV8MlchIC4Mh5Ky1Hzl8=)
2: wb2OCWtGLle_xoyfZiBAYXNRWQs.roa (hash: jJCn7p2i4Vby2gq7zMJi72HG/QhIugyd+as1pSv/rmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cc:cc:ef:6b:75:ae:fe:7e:b7:34:3b:a6:41:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Validity
Not Before: Jun 28 13:01:20 2025 GMT
Not After : Jun 29 13:01:20 2025 GMT
Subject: CN=c4be11a0a12ebc6be1fd7d95aec370867d932bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:82:17:fd:08:fb:b4:ad:e9:34:0f:a2:9d:
29:2a:5a:1d:19:a9:9f:bd:b1:e2:fc:39:b9:97:ae:
89:48:80:0f:1d:56:6f:0d:5b:4f:37:11:6b:98:a2:
ac:06:ac:7b:eb:26:bb:d2:71:b0:36:93:97:99:5c:
85:f4:3d:06:c7:69:19:3a:f3:82:c6:ae:8e:bd:80:
bb:97:ad:e8:9a:45:30:b1:e0:49:5f:84:50:a7:c3:
4f:4a:b5:ad:f9:c6:e0:31:63:ac:fb:71:78:91:1a:
2b:f8:64:91:24:12:40:14:4d:68:20:80:f1:6f:f4:
c8:12:09:f1:7e:e7:62:bf:b0:f6:96:4d:10:a7:63:
7d:47:f2:c1:89:16:3e:4a:70:39:59:0c:ef:f0:57:
69:82:a2:6e:3f:e1:24:9b:56:05:b6:73:4e:9b:ed:
60:e5:e7:ec:67:11:be:0f:7c:e4:2f:0b:23:c7:db:
02:42:30:ce:0e:a8:13:36:2a:4c:8c:13:58:f5:06:
83:d9:93:dc:7d:57:7f:6b:65:d8:db:85:6e:18:0d:
ec:51:1c:1d:ff:3c:f8:5e:cd:f5:73:4d:2a:8a:37:
66:35:ac:58:86:80:93:11:d0:f8:9d:a5:a8:f8:26:
85:fd:84:fb:6d:dd:e0:47:89:4c:00:5f:16:67:42:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:11:A0:A1:2E:BC:6B:E1:FD:7D:95:AE:C3:70:86:7D:93:2B:B7
X509v3 Authority Key Identifier:
keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e9:9a:90:74:8b:0a:e4:dc:2e:dc:f4:26:91:a6:dd:07:c5:
12:10:81:ee:0b:40:51:bc:a3:ba:44:e8:0d:4e:72:30:8e:b8:
87:8a:fd:5f:1f:0f:3c:5b:1b:08:f6:08:ca:99:b4:2d:0b:55:
c2:8f:f8:ad:15:a2:36:33:47:aa:94:e6:d5:d8:8c:d6:e0:95:
e0:27:55:82:6b:ca:9f:10:6f:d6:e0:23:41:1d:1e:49:a2:3f:
91:3f:b4:9d:8f:3f:8e:42:c4:57:e4:04:de:09:1c:bf:f2:17:
ee:fe:7a:bd:1a:a3:7b:63:e8:3f:42:1f:fb:81:fd:a7:ec:95:
22:bb:16:69:6a:b5:06:18:8b:d9:fe:15:8f:84:66:44:32:51:
4b:9c:d2:b7:5a:c8:e7:77:af:30:6a:86:16:59:d9:92:22:1e:
8c:6c:06:8e:78:77:95:fa:21:56:e5:1b:dc:9b:52:34:56:ad:
da:ae:7d:7a:d4:42:5f:b0:04:56:32:09:96:38:3c:41:57:a2:
6d:e9:b7:6e:00:f6:59:ff:62:0a:d7:ee:94:ec:26:93:96:80:
7d:42:81:d7:e0:63:ee:15:bb:8d:ac:08:f9:1a:10:a5:ea:98:
25:b1:c1:7f:81:09:66:11:a8:35:18:fb:13:8e:65:be:0d:c1:
ea:b3:33:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oMzM72t1rv5+tzQ7pkFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWJiMDAxNTI4MjgxNzM0YmY1Yzk0YmM0YmVmNmY2ZTk5
YTM3N2UwHhcNMjUwNjI4MTMwMTIwWhcNMjUwNjI5MTMwMTIwWjAzMTEwLwYDVQQD
EyhjNGJlMTFhMGExMmViYzZiZTFmZDdkOTVhZWMzNzA4NjdkOTMyYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0SCF/0I+7St6TQPop0pKlodGamf
vbHi/Dm5l66JSIAPHVZvDVtPNxFrmKKsBqx76ya70nGwNpOXmVyF9D0Gx2kZOvOC
xq6OvYC7l63omkUwseBJX4RQp8NPSrWt+cbgMWOs+3F4kRor+GSRJBJAFE1oIIDx
b/TIEgnxfudiv7D2lk0Qp2N9R/LBiRY+SnA5WQzv8FdpgqJuP+Ekm1YFtnNOm+1g
5efsZxG+D3zkLwsjx9sCQjDODqgTNipMjBNY9QaD2ZPcfVd/a2XY24VuGA3sURwd
/zz4Xs31c00qijdmNaxYhoCTEdD4naWo+CaF/YT7bd3gR4lMAF8WZ0LQpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS+EaChLrxr4f19la7DcIZ9kyu3MB8GA1UdIwQY
MBaAFAPrsAFSgoFzS/XJS8S+9vbpmjd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZDNmNTEtYWY3My00MDQ1LWEwZjEt
ZWFiODI4ZWNhNDViLzEvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZDNmNTEtYWY3My00MDQ1LWEwZjEtZWFiODI4ZWNhNDVi
LzEvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+makHSL
CuTcLtz0JpGm3QfFEhCB7gtAUbyjukToDU5yMI64h4r9Xx8PPFsbCPYIypm0LQtV
wo/4rRWiNjNHqpTm1diM1uCV4CdVgmvKnxBv1uAjQR0eSaI/kT+0nY8/jkLEV+QE
3gkcv/IX7v56vRqje2PoP0If+4H9p+yVIrsWaWq1BhiL2f4Vj4RmRDJRS5zSt1rI
53evMGqGFlnZkiIejGwGjnh3lfohVuUb3JtSNFat2q59etRCX7AEVjIJljg8QVei
bem3bgD2Wf9iCtfulOwmk5aAfUKB1+Bj7hW7jawI+RoQpeqYJbHBf4EJZhGoNRj7
E45lvg3B6rMzkg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:13 2025 by rpki-client