Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File: UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier: ZUKKIEGq5/nsgFMUDaijw4fa3K1JX3bvz+d01GVzwXM=
Subject key identifier: 46:EC:46:70:3F:20:24:F7:78:9F:C4:D2:42:ED:5A:84:33:42:10:AA
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 0198D6612EB075C152A69D1F762A676201AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: KkYiM3e0iOAnAg_yFBFSK_bjJl8.roa (hash: 5A5Vdre+g6oCjMH5zABiFnTSkWahsDuZjsJoxbwHMo0=)
2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: 4uXWQD2/Gx1htR+7+nUNQ5Ryk8NafakjEkfn/e5IacQ=)
3: _Q23PPlL8v2niGzmSooSDUdLWSk.roa (hash: 8JwVrSvS2kxaZsRD1vVjitt0fjw3hWWmjxqgx0yIUoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2e:b0:75:c1:52:a6:9d:1f:76:2a:67:62:01:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=46ec46703f2024f7789fc4d242ed5a84334210aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:d4:ba:ec:c1:64:c8:ac:c2:54:38:7d:39:
0b:96:cd:36:26:e4:cf:8f:1e:c7:de:a0:52:4a:98:
b9:80:44:df:51:8c:f8:a2:bd:05:85:43:84:cc:51:
c0:13:79:26:50:62:65:04:67:95:6d:7d:fc:d4:1c:
ee:50:15:82:30:8b:7b:7b:40:ff:e9:a6:2f:48:21:
f6:1f:cf:f1:df:40:c5:10:f9:05:57:c6:db:b0:31:
2d:f1:29:0b:cd:a4:10:f8:52:76:ee:64:8b:ac:68:
53:27:21:4f:d3:d1:2b:8f:0b:c5:60:b2:fc:eb:4b:
7d:74:d7:b3:26:64:23:9f:4a:b8:aa:f4:8b:2a:27:
77:23:c8:f4:67:17:96:39:69:d2:9f:76:90:3f:e2:
23:0a:80:d8:9e:d3:6c:1e:be:f1:7d:da:74:ab:ab:
87:fc:b5:d5:28:ea:ee:94:dd:c1:e7:a3:f0:f8:36:
74:7c:02:c8:31:c9:54:b6:1d:08:87:42:5c:e6:8f:
f7:eb:f7:69:8b:23:be:5d:cb:2e:9b:83:04:26:ef:
93:23:72:0a:15:48:1b:60:32:16:3f:7a:10:d1:59:
d9:1f:7f:45:bd:3b:d3:c8:3d:d1:8b:e9:76:d6:2e:
23:26:3d:06:e4:11:d5:3d:68:73:41:87:4f:79:fd:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EC:46:70:3F:20:24:F7:78:9F:C4:D2:42:ED:5A:84:33:42:10:AA
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8a:52:71:56:9f:97:84:68:e0:35:70:07:ad:8d:14:ff:95:
b1:6d:56:66:4b:e8:81:dd:75:75:6c:42:64:8c:b8:b5:f7:0b:
19:02:47:89:63:51:80:90:70:f1:ae:05:89:8c:da:32:f3:67:
6c:fe:b3:56:52:9e:57:8f:f2:22:9e:8a:c4:fd:fa:bd:56:f0:
33:71:b1:a4:0a:ff:25:5c:6f:93:0f:fc:41:c2:2a:3b:4e:e4:
a4:6f:f8:4b:bc:27:98:b1:9e:ac:e0:e9:f4:54:b5:fa:8f:31:
20:46:59:67:09:7f:84:00:d3:e2:62:59:34:c6:df:7e:2f:9c:
6e:fc:ee:ea:5d:45:2c:c4:eb:eb:05:e1:06:a9:03:3d:2a:a9:
04:da:83:1a:58:d1:23:36:50:63:30:01:22:de:d5:04:08:59:
a7:b6:14:b5:db:db:0b:40:8e:46:e2:78:89:0b:7c:b3:17:9d:
e1:74:22:ac:38:6d:d4:f2:9a:19:8c:ef:a2:e4:e2:49:5d:80:
ac:99:0a:90:8f:13:7b:a2:5b:af:a0:ac:a3:c0:3e:96:15:79:
e6:e1:09:2e:47:9e:f2:96:a8:cf:58:e9:bc:6a:98:7a:c4:41:
1a:5f:61:46:54:82:21:bc:55:6b:a4:28:7e:3d:9f:a6:a6:94:
6b:49:0e:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYS6wdcFSpp0fdipnYgGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTY3MTJjY2ZhODc3YWJiNzYwY2I3N2UyNzA0MTc3NGNi
MDQ3MzkwHhcNMjUwODIzMTAwMjI5WhcNMjUwODI0MTAwMjI5WjAzMTEwLwYDVQQD
Eyg0NmVjNDY3MDNmMjAyNGY3Nzg5ZmM0ZDI0MmVkNWE4NDMzNDIxMGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUzUuuzBZMiswlQ4fTkLls02JuTP
jx7H3qBSSpi5gETfUYz4or0FhUOEzFHAE3kmUGJlBGeVbX381BzuUBWCMIt7e0D/
6aYvSCH2H8/x30DFEPkFV8bbsDEt8SkLzaQQ+FJ27mSLrGhTJyFP09ErjwvFYLL8
60t9dNezJmQjn0q4qvSLKid3I8j0ZxeWOWnSn3aQP+IjCoDYntNsHr7xfdp0q6uH
/LXVKOrulN3B56Pw+DZ0fALIMclUth0Ih0Jc5o/36/dpiyO+Xcsum4MEJu+TI3IK
FUgbYDIWP3oQ0VnZH39FvTvTyD3Ri+l21i4jJj0G5BHVPWhzQYdPef12IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbsRnA/ICT3eJ/E0kLtWoQzQhCqMB8GA1UdIwQY
MBaAFFBWcSzPqHert2DLd+JwQXdMsEc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZaeExNLW9kNnUzWU10MzRuQkJkMHl3UnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84ZDc5OGEtNzNkNy00NGJhLTk3ZGIt
Zjg0YjYwNTIxZGY1LzEvVUZaeExNLW9kNnUzWU10MzRuQkJkMHl3UnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84ZDc5OGEtNzNkNy00NGJhLTk3ZGItZjg0YjYwNTIxZGY1
LzEvVUZaeExNLW9kNnUzWU10MzRuQkJkMHl3UnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYpScVaf
l4Ro4DVwB62NFP+VsW1WZkvogd11dWxCZIy4tfcLGQJHiWNRgJBw8a4FiYzaMvNn
bP6zVlKeV4/yIp6KxP36vVbwM3GxpAr/JVxvkw/8QcIqO07kpG/4S7wnmLGerODp
9FS1+o8xIEZZZwl/hADT4mJZNMbffi+cbvzu6l1FLMTr6wXhBqkDPSqpBNqDGljR
IzZQYzABIt7VBAhZp7YUtdvbC0CORuJ4iQt8sxed4XQirDht1PKaGYzvouTiSV2A
rJkKkI8Te6Jbr6Cso8A+lhV55uEJLkee8paoz1jpvGqYesRBGl9hRlSCIbxVa6Qo
fj2fpqaUa0kOrw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:37 2025 by rpki-client