Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: uCPqyla+j6P9xA2nRwUHg53/pBiQdrps2TLU/GxNems=
Subject key identifier: FA:1E:12:C6:42:C5:BD:07:D3:20:16:B3:72:98:42:C6:DD:85:FD:10
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 0198D5F158EEF8479FEAEC9779FDD4E8AC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0C99
Signing time: Sat 23 Aug 2025 08:00:20 +0000
Manifest this update: Sat 23 Aug 2025 08:00:20 +0000
Manifest next update: Sun 24 Aug 2025 08:00:20 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: 590hI9kYGkYN+n4FyjdDLDVOX1N+/dAQ9faJnJQlYVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:58:ee:f8:47:9f:ea:ec:97:79:fd:d4:e8:ac:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Aug 23 08:00:20 2025 GMT
Not After : Aug 24 08:00:20 2025 GMT
Subject: CN=fa1e12c642c5bd07d32016b3729842c6dd85fd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:1d:d0:35:52:9b:1e:2f:fb:64:e8:e2:31:
6b:fe:2b:77:c2:fe:c3:2f:c2:8f:c9:f6:ce:91:da:
8a:81:f9:02:38:b7:05:83:75:2a:ce:b2:26:db:e0:
d8:6f:7f:98:9d:cb:21:32:28:98:ce:15:18:ec:84:
1d:5d:1e:c4:7d:3c:44:6d:d8:12:08:9f:51:a4:4f:
2e:a5:c7:db:98:f9:44:d3:af:aa:8d:22:3f:ce:a5:
dd:eb:1c:ae:0c:3b:87:84:e2:65:5b:af:9f:9b:66:
bf:41:86:86:e6:e4:32:3e:52:76:89:77:bf:4d:b3:
b6:4a:bd:56:cd:f2:68:6e:a6:8f:ca:6c:a7:b4:b8:
6c:f5:58:b0:4f:04:f3:03:75:53:38:9b:16:19:07:
c1:c5:a3:ee:80:d8:47:44:e0:29:1b:90:34:b9:1c:
28:d9:fc:f8:d0:4b:1f:dd:0f:74:b2:ab:63:be:da:
41:9c:3d:a3:54:98:2f:e6:0d:bf:20:0a:4c:54:f2:
29:e3:18:71:04:df:3d:34:0b:da:77:a1:f0:52:82:
d4:38:4e:c6:3e:d0:24:58:b6:05:01:85:a9:00:dc:
56:20:1d:b3:cf:e1:69:71:77:e5:cd:1f:60:0f:e0:
d3:ec:90:10:90:41:02:9f:4f:18:f6:87:a8:ba:ca:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1E:12:C6:42:C5:BD:07:D3:20:16:B3:72:98:42:C6:DD:85:FD:10
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1e:6e:dd:3b:66:a6:c0:d6:42:0a:67:67:bc:10:c4:02:9a:
02:b1:a1:a3:37:06:3d:26:12:b6:bf:86:2d:d6:02:6e:e2:23:
04:3b:7b:9b:6b:d3:6a:ab:d0:1e:d0:ef:94:a1:9b:1e:10:79:
f0:ec:4a:8c:68:82:35:37:7f:16:67:a3:7e:b0:92:bf:80:fd:
d0:50:82:08:e9:c1:eb:66:ed:7d:a1:08:6b:16:12:ad:36:91:
fe:85:a8:4c:b7:78:74:47:09:78:03:ef:b1:d1:ef:24:83:19:
80:a8:8a:24:07:bd:52:8d:e2:eb:3d:a5:cc:27:bd:d4:37:67:
08:22:82:0a:2d:e9:cb:ba:84:76:3a:21:2e:8c:f0:0c:35:0e:
a6:c0:28:87:df:55:40:2d:8b:28:84:d0:b1:85:88:09:d2:1d:
69:fa:1a:69:0d:56:73:3c:24:45:73:99:b7:1a:68:c4:87:00:
14:11:3a:6d:ee:bb:58:e2:da:6a:89:cc:90:cd:fe:ef:24:47:
5f:cd:70:77:a2:18:de:5a:4c:c8:64:85:8b:31:95:4f:93:80:
d6:4e:c7:72:35:98:1d:40:e4:d2:72:53:9c:88:78:c1:72:45:
b1:4d:7a:dc:21:0b:5e:f0:8a:1f:fa:1e:22:12:78:72:95:ed:
7b:1a:9a:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Vju+Eef6uyXef3U6Kw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWIzNjEzOTQ2ODNlNGYyNDM5N2NmYzhmMjNlYWIyYzY4
MjhkZWEwHhcNMjUwODIzMDgwMDIwWhcNMjUwODI0MDgwMDIwWjAzMTEwLwYDVQQD
EyhmYTFlMTJjNjQyYzViZDA3ZDMyMDE2YjM3Mjk4NDJjNmRkODVmZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCkd0DVSmx4v+2To4jFr/it3wv7D
L8KPyfbOkdqKgfkCOLcFg3UqzrIm2+DYb3+YncshMiiYzhUY7IQdXR7EfTxEbdgS
CJ9RpE8upcfbmPlE06+qjSI/zqXd6xyuDDuHhOJlW6+fm2a/QYaG5uQyPlJ2iXe/
TbO2Sr1WzfJobqaPymyntLhs9ViwTwTzA3VTOJsWGQfBxaPugNhHROApG5A0uRwo
2fz40Esf3Q90sqtjvtpBnD2jVJgv5g2/IApMVPIp4xhxBN89NAvad6HwUoLUOE7G
PtAkWLYFAYWpANxWIB2zz+FpcXflzR9gD+DT7JAQkEECn08Y9oeouspWmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoeEsZCxb0H0yAWs3KYQsbdhf0QMB8GA1UdIwQY
MBaAFLmrNhOUaD5PJDl8/I8j6rLGgo3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDct
ZGRmZWI0MjRhZGY1LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDctZGRmZWI0MjRhZGY1
LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFh5u3Ttm
psDWQgpnZ7wQxAKaArGhozcGPSYStr+GLdYCbuIjBDt7m2vTaqvQHtDvlKGbHhB5
8OxKjGiCNTd/FmejfrCSv4D90FCCCOnB62btfaEIaxYSrTaR/oWoTLd4dEcJeAPv
sdHvJIMZgKiKJAe9Uo3i6z2lzCe91DdnCCKCCi3py7qEdjohLozwDDUOpsAoh99V
QC2LKITQsYWICdIdafoaaQ1WczwkRXOZtxpoxIcAFBE6be67WOLaaonMkM3+7yRH
X81wd6IY3lpMyGSFizGVT5OA1k7HcjWYHUDk0nJTnIh4wXJFsU163CELXvCKH/oe
IhJ4cpXtexqapA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:37 2025 by rpki-client