Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
File: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json)
Hash identifier: UKFEgLujCub+fg5T/jEfbu4TT59czjqaYiBBXyEqzOs=
Subject key identifier: 7C:76:46:1F:96:E5:4C:83:52:70:1E:C7:C0:D6:A6:A8:43:55:EE:7D
Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
Certificate issuer: /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Certificate serial: 0198D5BBBA60A9A24B1CCA0C4F30BE104D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
Manifest number: 0FEA
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: 5wn1MUshvBmc6ME2IzD6zIe1XZE.roa (hash: QLmy/h6humsEGtFs5Q8B+FIkOzKvZzOF/LsQEEuh7mQ=)
2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: M8EqaEPx+v45z6IIXPlSuWExIBuAjSxllZMLwSp2RTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ba:60:a9:a2:4b:1c:ca:0c:4f:30:be:10:4d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=7c76461f96e54c8352701ec7c0d6a6a84355ee7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:5c:08:92:26:9a:1d:63:1e:7b:19:d4:95:
ce:3b:25:66:e7:11:7f:42:95:3f:db:e9:95:ac:f8:
04:a8:6e:aa:f5:99:16:e2:43:4b:c6:2d:67:7f:13:
cb:ea:45:af:e7:59:85:a8:95:39:e3:cc:53:95:45:
b2:c6:38:2d:4c:a8:2a:c1:ab:60:8a:c8:31:34:33:
8a:e2:a4:94:82:23:a6:cd:d6:24:a7:8c:36:36:c6:
05:17:d0:ad:ba:c1:de:be:29:6b:ed:5d:2f:6d:ae:
98:e0:0f:a5:18:01:a5:43:85:6f:52:90:33:ee:22:
3f:55:0f:74:80:7c:4f:05:93:2d:d2:50:3c:67:aa:
3f:c6:ff:7b:ed:cc:63:7a:92:2e:7f:d5:53:3a:32:
a6:58:ef:bc:11:f7:ca:a5:46:fd:e4:db:53:65:37:
f4:c1:00:ef:10:68:74:99:f3:17:ed:37:15:13:58:
f6:a0:02:49:1f:f9:e3:6f:bb:f3:a4:8b:5d:9c:e9:
e9:d5:01:31:86:e6:86:f0:37:34:d9:5f:ad:6d:3d:
45:e7:96:f7:eb:22:2b:af:bd:52:1c:95:7a:96:f5:
26:d6:a8:38:52:ca:ef:07:af:25:a4:8c:a8:f2:77:
dd:2b:08:5c:38:81:3f:75:81:9b:df:39:3d:4f:1e:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:46:1F:96:E5:4C:83:52:70:1E:C7:C0:D6:A6:A8:43:55:EE:7D
X509v3 Authority Key Identifier:
keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:70:4d:24:69:61:40:c7:13:1d:cc:37:d8:d8:86:93:0c:4b:
ac:7c:1e:79:e2:16:46:2b:9e:25:b9:dd:0c:30:c1:23:a1:6d:
91:f5:0e:13:3c:11:a1:e3:fa:2a:a2:c6:ca:07:d9:0f:47:32:
21:8d:8d:76:5b:ec:e2:94:e3:76:97:3a:ff:28:2b:b8:72:83:
ec:1f:97:62:3a:aa:13:53:bb:bc:7d:e5:15:60:e7:bd:c6:b1:
57:25:18:ab:fe:5e:2e:1a:f1:05:78:9c:f1:5a:81:c1:b1:e5:
a4:7c:65:1a:cd:01:7e:9b:49:a8:4b:6e:66:3c:03:e4:a5:bf:
98:4e:65:92:48:06:c1:31:e7:11:47:05:58:2a:27:55:c5:13:
c0:ba:d7:ea:73:81:d1:f9:8a:0a:7b:50:00:b0:45:09:b9:85:
0a:ee:fb:8f:81:d9:f6:bd:67:3d:29:57:ee:2a:c3:70:92:18:
02:18:24:6f:15:ae:4e:fd:e2:cb:06:7d:c2:83:bc:7e:a8:e5:
de:a8:4f:e8:82:ce:0d:98:be:d6:35:d9:83:87:98:05:1e:98:
24:9d:06:e9:92:55:0a:77:51:c0:c7:e0:3c:99:42:60:33:94:
61:dc:6b:f9:21:14:e3:52:c6:ff:2b:a5:66:14:5c:3d:f9:be:
8d:4a:2a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7pgqaJLHMoMTzC+EE0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjJiODVhMWQyYzUxZDk5MDY5Y2EzYTVhZmY1MmVjYzZh
OWFhYjQwHhcNMjUwODIzMDcwMTQ2WhcNMjUwODI0MDcwMTQ2WjAzMTEwLwYDVQQD
Eyg3Yzc2NDYxZjk2ZTU0YzgzNTI3MDFlYzdjMGQ2YTZhODQzNTVlZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UpcCJImmh1jHnsZ1JXOOyVm5xF/
QpU/2+mVrPgEqG6q9ZkW4kNLxi1nfxPL6kWv51mFqJU548xTlUWyxjgtTKgqwatg
isgxNDOK4qSUgiOmzdYkp4w2NsYFF9CtusHevilr7V0vba6Y4A+lGAGlQ4VvUpAz
7iI/VQ90gHxPBZMt0lA8Z6o/xv977cxjepIuf9VTOjKmWO+8EffKpUb95NtTZTf0
wQDvEGh0mfMX7TcVE1j2oAJJH/njb7vzpItdnOnp1QExhuaG8Dc02V+tbT1F55b3
6yIrr71SHJV6lvUm1qg4UsrvB68lpIyo8nfdKwhcOIE/dYGb3zk9Tx4AfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHx2Rh+W5UyDUnAex8DWpqhDVe59MB8GA1UdIwQY
MBaAFLhiuFodLFHZkGnKOlr/UuzGqaq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2Yt
Mjc4ZmQ0NzVmM2ZiLzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2YtMjc4ZmQ0NzVmM2Zi
LzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3BNJGlh
QMcTHcw32NiGkwxLrHweeeIWRiueJbndDDDBI6FtkfUOEzwRoeP6KqLGygfZD0cy
IY2Ndlvs4pTjdpc6/ygruHKD7B+XYjqqE1O7vH3lFWDnvcaxVyUYq/5eLhrxBXic
8VqBwbHlpHxlGs0BfptJqEtuZjwD5KW/mE5lkkgGwTHnEUcFWConVcUTwLrX6nOB
0fmKCntQALBFCbmFCu77j4HZ9r1nPSlX7irDcJIYAhgkbxWuTv3iywZ9woO8fqjl
3qhP6ILODZi+1jXZg4eYBR6YJJ0G6ZJVCndRwMfgPJlCYDOUYdxr+SEU41LG/yul
ZhRcPfm+jUoq1Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:36 2025 by rpki-client