Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File: UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier: /lVXt3apAfsra3NVfruagLdKGJUWNTcaQv8xjhZsODw=
Subject key identifier: 09:82:0A:2D:90:5C:11:88:F3:EB:07:0C:B5:72:CA:56:1C:A8:81:8C
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial: 0197B5FBFA1ABE847DE80FF1DCF0528B4C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number: 57
Signing time: Sat 28 Jun 2025 10:01:19 +0000
Manifest this update: Sat 28 Jun 2025 10:01:19 +0000
Manifest next update: Sun 29 Jun 2025 10:01:19 +0000
Files and hashes: 1: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: sNCQ01k+K1GayX9G6EwnMWEyOwZ82wv6FrrPNmZCOT0=)
2: hYC4G8-iHx18TcNgOVJpoymqlWE.roa (hash: krKVVMmbuUgfZ2ydkNUzq9SZ3lwhV/h03o//k4Y/uHM=)
3: jwS8BYVyHmc8BIbLl_GpRDxb_fw.roa (hash: 0vGJk8zdxED0U8VXXJSNZD+4l1MurWavnTSCf1SPtXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:fa:1a:be:84:7d:e8:0f:f1:dc:f0:52:8b:4c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Validity
Not Before: Jun 28 10:01:19 2025 GMT
Not After : Jun 29 10:01:19 2025 GMT
Subject: CN=09820a2d905c1188f3eb070cb572ca561ca8818c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:0c:20:dc:4f:4f:d8:75:29:39:49:f0:f2:
85:6c:2b:69:9f:e9:b1:15:b4:1a:f4:c4:75:f8:42:
c8:e2:22:ff:b9:2b:ee:bd:5a:ea:07:3c:eb:a0:a8:
c6:3c:21:96:d5:85:10:9e:04:48:06:9a:f6:ed:01:
92:73:95:07:21:81:c7:da:7d:e6:7f:0f:f4:84:fb:
e5:8d:67:5f:98:e8:e0:d6:2e:86:37:c5:90:c4:08:
33:b7:d6:77:e6:f2:af:30:78:de:c6:c6:cc:b5:12:
15:55:b2:31:10:39:a9:62:a4:1e:25:8d:a8:32:01:
79:f4:ee:7f:ac:64:2f:a8:c8:f7:7d:c5:9f:53:a0:
00:14:06:e6:99:4f:92:1a:1b:26:6d:1d:d0:0d:c8:
c4:55:85:1e:0d:a6:5d:3a:ab:27:1e:7d:3c:ba:f7:
a6:63:ce:25:f0:a9:e3:29:da:e8:9e:fa:0b:00:d2:
16:f8:65:94:44:fa:b8:ca:d0:48:9d:ce:d0:49:9b:
6c:24:67:5d:49:e0:43:4a:b9:9e:ac:a2:f8:eb:9b:
2f:2a:28:5e:80:56:03:a5:d9:ce:46:82:b7:c6:4a:
0e:83:55:e1:9f:e2:74:7d:f2:f4:a4:cf:d0:b5:12:
91:d0:9b:e0:89:a4:72:18:24:be:89:3f:ba:e1:f7:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:82:0A:2D:90:5C:11:88:F3:EB:07:0C:B5:72:CA:56:1C:A8:81:8C
X509v3 Authority Key Identifier:
keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:52:b3:98:9c:82:36:84:74:cb:5b:36:70:60:28:07:ac:80:
32:f9:07:d4:60:cb:8a:6d:20:82:2a:2a:fe:b4:f8:63:44:c9:
dd:82:03:0f:b5:68:3f:ab:54:15:73:d8:72:29:17:80:c1:65:
c5:a8:1d:5c:db:20:ad:83:ce:10:cd:c8:44:d8:96:9c:73:0d:
75:3d:2f:e8:8e:ff:cb:1b:ba:fe:06:e2:b5:51:8f:68:a2:bf:
0a:b3:3c:a8:3b:d3:e5:e0:b1:a8:c3:f3:c1:01:d1:99:dd:5d:
d8:94:b7:16:30:e5:39:bb:4a:36:14:39:ad:e5:71:f9:bc:e6:
79:5e:99:40:02:fa:fc:4f:7f:00:ef:4c:67:fd:e7:78:6a:77:
4a:43:c3:68:d4:93:8c:b7:f7:4d:fa:27:c3:e2:ce:4c:cf:87:
95:dd:2b:3a:42:d1:8e:89:f6:fc:52:68:17:60:19:5f:56:45:
c6:00:23:44:fb:9a:93:f9:12:7b:51:c8:65:17:ec:9f:ff:f9:
e0:e0:91:db:40:56:04:1f:e8:26:c5:1c:25:29:b7:4b:bb:24:
d3:67:92:46:79:a7:8b:bd:48:de:a1:a2:b1:3f:5c:86:78:e9:
ef:a2:49:3a:6b:8f:d7:b7:23:d2:33:9e:7d:fe:2c:08:23:3b:
61:73:b2:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+/oavoR96A/x3PBSi0woMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjJjNDAxY2U1YzllODgxY2Q5YTNiZThlZmVjNjAwMjJk
YTBlYjYwHhcNMjUwNjI4MTAwMTE5WhcNMjUwNjI5MTAwMTE5WjAzMTEwLwYDVQQD
EygwOTgyMGEyZDkwNWMxMTg4ZjNlYjA3MGNiNTcyY2E1NjFjYTg4MThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysYMINxPT9h1KTlJ8PKFbCtpn+mx
FbQa9MR1+ELI4iL/uSvuvVrqBzzroKjGPCGW1YUQngRIBpr27QGSc5UHIYHH2n3m
fw/0hPvljWdfmOjg1i6GN8WQxAgzt9Z35vKvMHjexsbMtRIVVbIxEDmpYqQeJY2o
MgF59O5/rGQvqMj3fcWfU6AAFAbmmU+SGhsmbR3QDcjEVYUeDaZdOqsnHn08uvem
Y84l8KnjKdronvoLANIW+GWURPq4ytBInc7QSZtsJGddSeBDSrmerKL465svKihe
gFYDpdnORoK3xkoOg1Xhn+J0ffL0pM/QtRKR0JvgiaRyGCS+iT+64feK0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmCCi2QXBGI8+sHDLVyylYcqIGMMB8GA1UdIwQY
MBaAFFGyxAHOXJ6IHNmjvo7+xgAi2g62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMt
OTRkMWIxZDE2Yjg1LzEvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMtOTRkMWIxZDE2Yjg1
LzEvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVKzmJyC
NoR0y1s2cGAoB6yAMvkH1GDLim0ggioq/rT4Y0TJ3YIDD7VoP6tUFXPYcikXgMFl
xagdXNsgrYPOEM3IRNiWnHMNdT0v6I7/yxu6/gbitVGPaKK/CrM8qDvT5eCxqMPz
wQHRmd1d2JS3FjDlObtKNhQ5reVx+bzmeV6ZQAL6/E9/AO9MZ/3neGp3SkPDaNST
jLf3Tfonw+LOTM+Hld0rOkLRjon2/FJoF2AZX1ZFxgAjRPuak/kSe1HIZRfsn//5
4OCR20BWBB/oJsUcJSm3S7sk02eSRnmni71I3qGisT9chnjp76JJOmuP17cj0jOe
ff4sCCM7YXOyWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:38 2025 by rpki-client