Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: y8glidRTAm//HXfHygPpUHRrsUx4xAIxLEEBv+o1I6E=
Subject key identifier: 10:DD:58:7E:29:69:7A:51:6F:2D:EB:78:C8:A7:22:8E:7B:72:72:25
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 0197CA271951D31275714F699EEFF76CE0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 1405
Signing time: Wed 02 Jul 2025 08:00:49 +0000
Manifest this update: Wed 02 Jul 2025 08:00:49 +0000
Manifest next update: Thu 03 Jul 2025 08:00:49 +0000
Files and hashes: 1: IM6r8Vy5YHoyXyrG0YWQO1y86_8.roa (hash: a/N8LPUFKCIvtIEZH79ZouBUE0NB9h98S7ZsPO78Flo=)
2: L-UL84iTdhGXNCHCMqVVcOcr6hs.roa (hash: QnJcvue6UQb7BHpfJTDH/p4MoochOz0FfQRFCz3sets=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: mJxV1SW5j7rK3c9P52uk4OXtPiqekTmUZe6oymETf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:19:51:d3:12:75:71:4f:69:9e:ef:f7:6c:e0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Jul 2 08:00:49 2025 GMT
Not After : Jul 3 08:00:49 2025 GMT
Subject: CN=10dd587e29697a516f2deb78c8a7228e7b727225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:60:34:2f:cd:82:a4:c1:4b:9c:10:42:5a:
e7:72:de:59:37:ef:67:42:ff:11:e3:61:00:a6:83:
5c:ff:a1:4d:1a:28:73:fa:6d:b2:ae:45:f3:fa:d9:
80:be:2f:63:46:b1:52:3d:d4:4a:13:ef:27:a7:37:
8a:72:10:12:cd:18:17:7f:94:91:14:3e:e7:72:91:
56:12:d8:57:af:a2:5d:5e:63:61:76:0c:75:5c:eb:
18:0b:11:64:dc:6f:26:c7:b6:eb:d4:5c:7e:fc:38:
8f:3b:07:b1:96:36:4c:96:1d:b4:3c:31:59:91:73:
0b:fc:c6:5f:28:e9:e1:2b:56:ad:0a:24:9e:7f:65:
e1:dc:f0:ad:76:2d:1b:9d:80:c5:4f:72:36:7a:4c:
93:30:2a:16:8c:42:59:ec:22:5e:e4:60:d2:72:80:
4f:e8:dc:7f:0b:f2:e7:bf:b6:00:0c:8e:3e:55:88:
bc:65:e8:fa:94:86:0c:b4:32:87:eb:ef:1a:10:c3:
4c:de:2a:3a:b7:d1:ac:fc:24:b5:43:66:5e:5a:ec:
87:fa:b5:26:59:db:3a:9e:40:59:78:9e:12:36:e3:
c3:f7:5d:e9:36:f1:23:aa:c7:a3:84:b4:97:ae:e6:
05:67:ec:f7:ff:44:e7:6e:82:56:e2:d4:a8:4f:a2:
71:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DD:58:7E:29:69:7A:51:6F:2D:EB:78:C8:A7:22:8E:7B:72:72:25
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ad:c8:4e:31:9e:92:76:17:fb:5c:7f:0f:3b:1d:20:94:fb:
15:06:ba:4e:5b:8b:1a:ad:84:c1:e1:ee:ca:6d:ef:44:91:db:
89:21:0a:9e:c3:c4:56:26:e0:f3:45:78:cb:3c:c5:1b:6c:93:
0b:e2:dc:9c:c4:ab:b0:52:f9:b1:61:fa:e0:83:15:39:c4:fa:
8b:2f:c0:3a:d0:12:a7:44:df:01:20:f8:0c:2b:77:b8:a7:65:
99:39:85:51:ed:68:44:3e:e6:04:c4:bb:5f:5d:c0:23:72:65:
2f:70:00:a6:fc:c4:a0:3c:96:d7:0c:c1:70:66:9f:ab:75:59:
11:3f:99:d6:f2:36:2a:2a:a1:88:f1:a7:66:ac:ff:1f:12:a0:
20:c2:21:db:d3:2e:dc:44:3c:a8:94:b0:ea:b0:3a:56:64:a3:
de:da:46:20:7f:ef:9a:fa:76:03:7c:2b:f1:25:a7:d9:93:47:
1b:dd:83:ce:39:e4:6f:95:12:68:1e:9a:7d:ea:14:30:49:90:
dd:33:12:1d:13:3b:95:0f:53:d3:e8:1e:4c:e3:f7:74:93:37:
6c:55:76:57:1d:e5:40:36:96:41:43:2e:44:76:aa:11:8e:83:
10:d0:ca:24:20:8e:25:c7:3c:45:73:96:d3:e0:69:1e:e0:a9:
af:a4:84:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKJxlR0xJ1cU9pnu/3bOCrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmZkMTIzY2I5M2UyNGUwMjVmOTUyODQyMTA4NDAyOTU4
ZDRhNGMwHhcNMjUwNzAyMDgwMDQ5WhcNMjUwNzAzMDgwMDQ5WjAzMTEwLwYDVQQD
EygxMGRkNTg3ZTI5Njk3YTUxNmYyZGViNzhjOGE3MjI4ZTdiNzI3MjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJVgNC/NgqTBS5wQQlrnct5ZN+9n
Qv8R42EApoNc/6FNGihz+m2yrkXz+tmAvi9jRrFSPdRKE+8npzeKchASzRgXf5SR
FD7ncpFWEthXr6JdXmNhdgx1XOsYCxFk3G8mx7br1Fx+/DiPOwexljZMlh20PDFZ
kXML/MZfKOnhK1atCiSef2Xh3PCtdi0bnYDFT3I2ekyTMCoWjEJZ7CJe5GDScoBP
6Nx/C/Lnv7YADI4+VYi8Zej6lIYMtDKH6+8aEMNM3io6t9Gs/CS1Q2ZeWuyH+rUm
Wds6nkBZeJ4SNuPD913pNvEjqsejhLSXruYFZ+z3/0TnboJW4tSoT6JxiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDdWH4paXpRby3reMinIo57cnIlMB8GA1UdIwQY
MBaAFLv/0SPLk+JOAl+VKEIQhAKVjUpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjIt
YWM0YTQwNjE3NDZkLzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjItYWM0YTQwNjE3NDZk
LzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARa3ITjGe
knYX+1x/DzsdIJT7FQa6TluLGq2EweHuym3vRJHbiSEKnsPEVibg80V4yzzFG2yT
C+LcnMSrsFL5sWH64IMVOcT6iy/AOtASp0TfASD4DCt3uKdlmTmFUe1oRD7mBMS7
X13AI3JlL3AApvzEoDyW1wzBcGafq3VZET+Z1vI2KiqhiPGnZqz/HxKgIMIh29Mu
3EQ8qJSw6rA6VmSj3tpGIH/vmvp2A3wr8SWn2ZNHG92Dzjnkb5USaB6afeoUMEmQ
3TMSHRM7lQ9T0+geTOP3dJM3bFV2Vx3lQDaWQUMuRHaqEY6DENDKJCCOJcc8RXOW
0+BpHuCpr6SEmg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:32:54 2025 by rpki-client