Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
File: UVGCTBK9Pir3qYdSSnozqPGdgec.mft (raw, json)
Hash identifier: L8Gmtvsa4Byczo0msYskUiKExPX5n6d9FYE/ZFombdU=
Subject key identifier: 53:C4:C1:9B:F5:A8:41:FB:A1:35:8B:E8:89:BF:01:11:B5:F9:BA:A2
Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
Certificate issuer: /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Certificate serial: 0198D5F1456273BC219A62E7961E4202486C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
Manifest number: 04DD
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: UVGCTBK9Pir3qYdSSnozqPGdgec.crl (hash: HmBvfXjFxAtMQRrEaS2Ra9D5u1etkmDig1f3gEMN6fo=)
2: hoKUli4aEbPshio3YAyMPjWDD2I.roa (hash: LNDSOjwwI6zC2MtTLAkS/ZIKuOM2hHGHi/FcaWDSdts=)
3: tUM5Da4MUfst5wIsOOsmpEfOGwE.roa (hash: MdmE8eHJCOCphCmCHkgM1nje81dzkujZLukjT6aTqIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:45:62:73:bc:21:9a:62:e7:96:1e:42:02:48:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=53c4c19bf5a841fba1358be889bf0111b5f9baa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:bb:34:4a:b9:bb:c6:71:42:40:f8:b4:4a:
eb:cf:3a:b2:89:92:87:79:a4:e4:2a:97:61:da:4e:
a9:1d:21:d1:a5:16:04:ee:c9:31:8d:80:17:be:b0:
81:22:97:fb:bd:13:51:e0:e4:cd:a0:c7:a0:56:ab:
33:c2:84:7a:0e:20:3e:de:d4:a3:48:60:fc:a8:eb:
2d:d5:2f:50:6a:e3:04:52:09:7c:f9:e8:11:9d:ec:
85:c0:aa:20:ba:71:48:70:09:c8:ae:c8:c2:cf:cf:
08:e6:5c:43:02:b4:fc:74:05:21:00:d6:dd:7a:85:
9f:f1:aa:0c:3b:9b:8f:a3:ac:a7:ff:10:00:db:50:
15:ad:45:79:d7:09:f7:28:50:97:40:c6:7e:84:15:
18:9d:95:e7:82:79:ae:25:31:c9:8e:83:e9:01:00:
d7:fe:46:3d:01:b6:66:c8:65:1e:d9:2d:30:39:66:
f3:cc:5e:76:97:2a:3d:ef:d6:7a:7f:af:5a:f2:37:
e1:2c:e3:f9:81:0a:52:4d:70:01:e1:3e:72:6c:cc:
9b:b9:56:2a:14:c9:8f:2f:92:36:df:72:b5:c1:1f:
f0:f7:18:db:3a:9c:f6:69:81:66:21:e0:53:eb:9c:
fc:5d:06:48:09:d9:64:ce:b3:08:49:50:6c:b3:ef:
95:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C4:C1:9B:F5:A8:41:FB:A1:35:8B:E8:89:BF:01:11:B5:F9:BA:A2
X509v3 Authority Key Identifier:
keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:59:67:07:49:bd:c3:90:40:ea:08:2d:23:b5:2c:d8:2f:d3:
8c:e6:36:2c:d5:1d:5c:8f:96:a2:5d:ba:ca:5b:dc:e3:29:c0:
6a:01:56:b6:79:00:1e:65:d3:7e:30:95:73:34:9b:32:d8:d6:
d4:50:72:72:30:2e:bf:a8:fb:63:71:b8:0d:7b:7f:86:be:ac:
28:94:c6:6c:cf:ab:d9:e0:fa:d0:da:75:c8:8d:fc:82:22:37:
ec:18:15:e1:e6:57:7c:3a:ae:33:d9:f4:e1:b0:0c:16:84:d9:
43:65:52:77:0c:aa:cb:65:89:c0:3f:fe:82:45:05:a0:35:d1:
c3:01:3c:e5:aa:4f:97:13:11:bb:4e:e3:78:c1:44:f3:be:69:
7d:b7:96:27:fa:8c:dd:2c:78:c6:79:1a:21:87:23:a3:5b:ce:
be:a4:a7:63:49:ca:6e:c8:7d:a3:03:ac:1c:e3:c0:ff:d7:50:
24:6e:5b:66:70:89:52:34:f2:45:d0:fa:92:35:89:df:80:d6:
d8:64:62:cc:97:cd:29:54:b0:b1:1f:61:d1:fa:92:9e:e5:c7:
92:96:8c:83:51:f6:27:9e:a7:67:c4:58:2a:ec:31:2c:ee:da:
a9:c6:41:9a:e5:b6:39:6b:18:c1:a2:bc:40:16:48:27:89:eb:
dd:67:98:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8UVic7whmmLnlh5CAkhsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNTE4MjRjMTJiZDNlMmFmN2E5ODc1MjRhN2EzM2E4ZjE5
ZDgxZTcwHhcNMjUwODIzMDgwMDE1WhcNMjUwODI0MDgwMDE1WjAzMTEwLwYDVQQD
Eyg1M2M0YzE5YmY1YTg0MWZiYTEzNThiZTg4OWJmMDExMWI1ZjliYWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYK7NEq5u8ZxQkD4tErrzzqyiZKH
eaTkKpdh2k6pHSHRpRYE7skxjYAXvrCBIpf7vRNR4OTNoMegVqszwoR6DiA+3tSj
SGD8qOst1S9QauMEUgl8+egRneyFwKogunFIcAnIrsjCz88I5lxDArT8dAUhANbd
eoWf8aoMO5uPo6yn/xAA21AVrUV51wn3KFCXQMZ+hBUYnZXngnmuJTHJjoPpAQDX
/kY9AbZmyGUe2S0wOWbzzF52lyo979Z6f69a8jfhLOP5gQpSTXAB4T5ybMybuVYq
FMmPL5I233K1wR/w9xjbOpz2aYFmIeBT65z8XQZICdlkzrMISVBss++VDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPEwZv1qEH7oTWL6Im/ARG1+bqiMB8GA1UdIwQY
MBaAFFFRgkwSvT4q96mHUkp6M6jxnYHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVZHQ1RCSzlQaXIzcVlkU1Nub3pxUEdkZ2VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85NGQ0ODUtNWQxOS00NmJjLWIzMzYt
ZmFhZmU0NzhiZGNlLzEvVVZHQ1RCSzlQaXIzcVlkU1Nub3pxUEdkZ2VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC85NGQ0ODUtNWQxOS00NmJjLWIzMzYtZmFhZmU0NzhiZGNl
LzEvVVZHQ1RCSzlQaXIzcVlkU1Nub3pxUEdkZ2VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVlnB0m9
w5BA6ggtI7Us2C/TjOY2LNUdXI+Wol26ylvc4ynAagFWtnkAHmXTfjCVczSbMtjW
1FBycjAuv6j7Y3G4DXt/hr6sKJTGbM+r2eD60Np1yI38giI37BgV4eZXfDquM9n0
4bAMFoTZQ2VSdwyqy2WJwD/+gkUFoDXRwwE85apPlxMRu07jeMFE875pfbeWJ/qM
3Sx4xnkaIYcjo1vOvqSnY0nKbsh9owOsHOPA/9dQJG5bZnCJUjTyRdD6kjWJ34DW
2GRizJfNKVSwsR9h0fqSnuXHkpaMg1H2J56nZ8RYKuwxLO7aqcZBmuW2OWsYwaK8
QBZIJ4nr3WeYog==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:43 2025 by rpki-client