Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier: P6ksMwp3hyTewIwl2i+WpUc1UNt0WXeOFEatQGDQj5M=
Subject key identifier: CC:69:91:D6:0A:29:16:FA:F5:BA:EE:49:7B:3C:1B:49:95:3E:92:A5
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial: 0198D65FBEE463E8BC4C61B5F04B142DBC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 10:00:55 +0000
Manifest this update: Sat 23 Aug 2025 10:00:55 +0000
Manifest next update: Sun 24 Aug 2025 10:00:55 +0000
Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: 6xwA6MYrYXcWFZUhwj84NIO2vlzbeRjbRQUKt6Bvc1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:be:e4:63:e8:bc:4c:61:b5:f0:4b:14:2d:bc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
Validity
Not Before: Aug 23 10:00:55 2025 GMT
Not After : Aug 24 10:00:55 2025 GMT
Subject: CN=cc6991d60a2916faf5baee497b3c1b49953e92a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b7:80:aa:96:9f:be:60:39:4a:32:57:61:a0:
55:eb:77:17:26:c7:10:ca:38:a2:78:e7:81:79:63:
6a:74:e2:c8:19:6b:75:60:b9:f6:ea:f1:18:1d:fd:
46:16:3d:dc:38:00:36:ea:0f:1a:eb:94:3d:cb:dd:
42:e7:ec:87:1b:0a:92:d2:86:8f:a5:bb:ec:26:3d:
4d:fe:c1:7e:b8:00:0e:4a:d6:99:6e:86:82:73:c9:
63:3e:24:de:7c:4e:81:80:d5:1a:73:b1:58:03:25:
4f:53:46:be:3e:44:4a:36:89:0a:f9:29:c0:81:7c:
2f:e6:07:94:f1:c4:5a:64:c3:9e:07:db:c2:43:59:
35:cd:42:b0:9b:1f:ba:36:9a:b6:17:0a:77:ca:d8:
08:e2:a2:ff:eb:35:0d:5e:6a:94:06:41:80:14:72:
21:24:d4:10:29:47:69:29:88:f0:df:b9:d2:0d:db:
72:f0:3b:28:e0:16:6a:c7:38:b3:dd:1f:1a:f8:97:
33:e9:cb:c3:bb:3e:00:c4:73:d5:a7:54:da:6a:05:
03:ea:cc:9c:37:be:4e:24:23:99:7b:a9:9c:47:51:
b7:7e:65:ca:5e:e6:24:cc:c7:18:71:aa:60:05:b6:
1a:c8:a6:cd:aa:18:ca:ef:25:fb:7b:fe:16:ee:b0:
d7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:69:91:D6:0A:29:16:FA:F5:BA:EE:49:7B:3C:1B:49:95:3E:92:A5
X509v3 Authority Key Identifier:
keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:aa:83:c8:c5:db:7b:55:5f:6a:88:fa:8d:41:88:51:06:cc:
59:43:55:24:39:d1:e1:3e:6a:cf:61:77:65:0a:4a:9b:8d:84:
f6:43:89:a8:3e:a1:3a:17:8c:7a:47:28:4c:13:65:c7:ae:65:
2d:e3:59:30:49:35:7f:5a:76:f2:5e:bd:53:8b:80:88:5d:05:
ac:58:e2:3a:4a:52:36:f3:59:50:f1:57:a0:e4:e2:a1:fc:06:
6d:8a:fd:44:c0:5c:00:b1:a7:5c:42:57:23:96:71:f0:f2:1d:
98:27:d4:94:4f:cc:bb:08:74:32:4a:8f:d6:69:0d:0b:a2:94:
ac:9f:e3:d1:f8:d1:35:78:e7:e3:df:3e:52:ba:e6:82:23:13:
23:02:85:b8:90:cb:50:93:1f:2f:d5:33:4d:61:70:41:24:ce:
d3:7c:ef:84:4c:ac:60:4d:4b:9e:12:a4:6a:d2:5e:51:2d:58:
ec:72:50:05:98:76:db:1d:91:4d:c4:d7:39:25:d9:44:5d:92:
95:a7:7b:45:bc:79:79:bc:4e:b5:0d:30:c8:27:10:4b:0a:48:
7a:c4:d6:49:10:63:9c:2d:7b:f0:50:d7:8b:32:54:97:a1:8a:
15:e1:92:54:1f:30:87:46:94:51:1e:5c:bc:9a:0f:27:a6:99:
50:25:8f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX77kY+i8TGG18EsULbydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOTg1NjdhMDM5ZTVjY2UyM2VlOTM3NDA5NmVlZDU3YmJi
YTI5OGUwHhcNMjUwODIzMTAwMDU1WhcNMjUwODI0MTAwMDU1WjAzMTEwLwYDVQQD
EyhjYzY5OTFkNjBhMjkxNmZhZjViYWVlNDk3YjNjMWI0OTk1M2U5MmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7reAqpafvmA5SjJXYaBV63cXJscQ
yjiieOeBeWNqdOLIGWt1YLn26vEYHf1GFj3cOAA26g8a65Q9y91C5+yHGwqS0oaP
pbvsJj1N/sF+uAAOStaZboaCc8ljPiTefE6BgNUac7FYAyVPU0a+PkRKNokK+SnA
gXwv5geU8cRaZMOeB9vCQ1k1zUKwmx+6Npq2Fwp3ytgI4qL/6zUNXmqUBkGAFHIh
JNQQKUdpKYjw37nSDdty8Dso4BZqxziz3R8a+Jcz6cvDuz4AxHPVp1TaagUD6syc
N75OJCOZe6mcR1G3fmXKXuYkzMcYcapgBbYayKbNqhjK7yX7e/4W7rDXPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxpkdYKKRb69bruSXs8G0mVPpKlMB8GA1UdIwQY
MBaAFFGYVnoDnlzOI+6TdAlu7Ve7uimOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82Njc5YTktMDkzZi00YmMzLWEzZDQt
ODhhYTgxNDg2NzgzLzEvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82Njc5YTktMDkzZi00YmMzLWEzZDQtODhhYTgxNDg2Nzgz
LzEvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6qDyMXb
e1Vfaoj6jUGIUQbMWUNVJDnR4T5qz2F3ZQpKm42E9kOJqD6hOheMekcoTBNlx65l
LeNZMEk1f1p28l69U4uAiF0FrFjiOkpSNvNZUPFXoOTiofwGbYr9RMBcALGnXEJX
I5Zx8PIdmCfUlE/Muwh0MkqP1mkNC6KUrJ/j0fjRNXjn498+UrrmgiMTIwKFuJDL
UJMfL9UzTWFwQSTO03zvhEysYE1LnhKkatJeUS1Y7HJQBZh22x2RTcTXOSXZRF2S
lad7Rbx5ebxOtQ0wyCcQSwpIesTWSRBjnC178FDXizJUl6GKFeGSVB8wh0aUUR5c
vJoPJ6aZUCWPYA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:53 2025 by rpki-client