Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
File: UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json)
Hash identifier: 3RHDAWT+6cHxt1sjXXDGuiOrSyNDEU9Onj5k42mZrrI=
Subject key identifier: 92:C8:54:EA:7C:5A:9A:EF:E0:C0:E0:1F:48:79:F9:7A:81:18:97:DA
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 0198D515C8B253B7C6EA062F740FF7D02D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
Manifest number: 15CB
Signing time: Sat 23 Aug 2025 04:00:31 +0000
Manifest this update: Sat 23 Aug 2025 04:00:31 +0000
Manifest next update: Sun 24 Aug 2025 04:00:31 +0000
Files and hashes: 1: Dfg_6uPZGIobbDBwacwC_EIGO5Q.roa (hash: MNEfy6R5nPCa8pOdBJiq9jk5hqQVJGf5oHPySiSroIg=)
2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: Y9JbvXgveZV9dDqDfk0QWBFcXl00hjjRbByK8hl9Pes=)
3: uHo3NllV-K3w1G6p5rG7wnxalyc.roa (hash: 9Ww2h+p6zLKhFMgiZaAelr6XnjDP//hoNtiBUG9Lei4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c8:b2:53:b7:c6:ea:06:2f:74:0f:f7:d0:2d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: Aug 23 04:00:31 2025 GMT
Not After : Aug 24 04:00:31 2025 GMT
Subject: CN=92c854ea7c5a9aefe0c0e01f4879f97a811897da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:d1:2d:b3:b3:7b:a6:03:85:b6:ab:85:fb:
a1:db:37:b9:a5:29:46:05:dc:48:65:21:71:1e:07:
3c:b0:b9:fd:35:6e:35:de:d2:d0:32:6f:01:c8:aa:
37:47:35:1f:3c:5b:b7:b8:21:42:47:cc:ed:0b:ef:
71:0a:12:cb:d5:2a:0a:8e:93:9e:2c:51:05:95:15:
03:0c:12:07:ec:c5:74:e4:62:43:5e:1e:ea:d1:48:
1e:c4:a9:a4:07:73:2b:07:07:b9:f4:2d:67:bc:d5:
9f:2f:0e:a6:f9:ad:8b:6a:95:a9:42:f5:22:c8:c6:
cf:13:77:e2:3d:58:91:c9:21:db:d5:7f:6e:15:90:
f4:b3:e2:85:d6:36:c0:f0:d5:08:9d:0b:d0:cf:bb:
12:0d:ed:18:bd:33:e0:0a:a7:aa:ec:f7:c8:0e:ab:
a6:12:8f:ed:d7:37:16:35:96:1f:d5:d5:10:69:57:
d1:08:d6:cc:f7:93:3a:04:70:ec:97:37:ba:aa:f5:
13:9c:d0:8b:c2:52:f5:b7:a4:95:1f:d3:f1:75:24:
62:5d:cb:f2:9e:41:69:4e:64:71:3f:81:33:a6:d7:
fd:e9:34:26:cd:db:8c:f4:6a:fa:be:42:5a:29:00:
70:b5:ba:50:2d:ee:b6:f1:59:76:20:1b:c8:b5:d7:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C8:54:EA:7C:5A:9A:EF:E0:C0:E0:1F:48:79:F9:7A:81:18:97:DA
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:52:1d:c4:38:49:ea:56:b0:9e:64:37:83:6f:88:d1:d5:45:
f5:51:b7:f6:2c:20:a8:53:67:ce:d8:1a:5b:55:7c:1a:a5:8a:
f2:49:dc:a9:a0:f3:84:40:be:90:77:60:ef:37:ca:49:cd:ab:
90:3b:51:e0:32:aa:f6:13:9b:97:c9:bc:91:d8:1e:33:21:cc:
6e:c3:7e:20:96:7c:52:c7:25:e1:75:90:73:e3:91:94:31:78:
fd:21:1c:6c:34:50:60:49:3c:18:a9:5f:9b:c1:41:db:6e:4b:
30:56:0e:9f:c5:f3:8c:04:50:44:3e:39:d6:0c:77:17:19:32:
4a:9b:71:f9:1b:5d:f1:4e:cd:64:4b:0d:b3:d7:56:ce:de:0a:
28:55:f7:5f:90:56:62:29:c8:9f:a5:86:6e:a5:59:88:b0:14:
70:d1:af:96:5a:66:3f:60:b8:e3:fd:ef:63:70:1d:68:67:2d:
2c:ca:e7:7b:eb:8b:d5:0c:b7:09:2f:90:21:78:3c:53:b0:14:
86:d1:b7:85:77:dc:2d:3f:95:81:14:e2:8f:8f:fe:90:bc:2d:
96:77:26:12:75:cd:83:90:c2:f2:e9:c0:3e:18:56:32:75:67:
20:a7:03:8e:28:d8:4c:26:a1:b5:b5:59:99:95:33:8a:df:26:
a9:5c:ed:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFciyU7fG6gYvdA/30C0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZWIwM2QyMTE5OTZlOTlhNDllM2MzZjljZTRiM2YyYTE1
NzIzYzUwHhcNMjUwODIzMDQwMDMxWhcNMjUwODI0MDQwMDMxWjAzMTEwLwYDVQQD
Eyg5MmM4NTRlYTdjNWE5YWVmZTBjMGUwMWY0ODc5Zjk3YTgxMTg5N2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4nRLbOze6YDhbarhfuh2ze5pSlG
BdxIZSFxHgc8sLn9NW413tLQMm8ByKo3RzUfPFu3uCFCR8ztC+9xChLL1SoKjpOe
LFEFlRUDDBIH7MV05GJDXh7q0UgexKmkB3MrBwe59C1nvNWfLw6m+a2LapWpQvUi
yMbPE3fiPViRySHb1X9uFZD0s+KF1jbA8NUInQvQz7sSDe0YvTPgCqeq7PfIDqum
Eo/t1zcWNZYf1dUQaVfRCNbM95M6BHDslze6qvUTnNCLwlL1t6SVH9PxdSRiXcvy
nkFpTmRxP4Ezptf96TQmzduM9Gr6vkJaKQBwtbpQLe628Vl2IBvItdd42wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLIVOp8Wprv4MDgH0h5+XqBGJfaMB8GA1UdIwQY
MBaAFFLrA9IRmW6ZpJ48P5zks/KhVyPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVzRDBoR1picG1rbmp3X25PU3o4cUZYSThVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NjY3NmEtM2JhYy00YjZkLWE2Mzgt
OTZjZDQyZjBmOTViLzEvVXVzRDBoR1picG1rbmp3X25PU3o4cUZYSThVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82NjY3NmEtM2JhYy00YjZkLWE2MzgtOTZjZDQyZjBmOTVi
LzEvVXVzRDBoR1picG1rbmp3X25PU3o4cUZYSThVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1IdxDhJ
6lawnmQ3g2+I0dVF9VG39iwgqFNnztgaW1V8GqWK8kncqaDzhEC+kHdg7zfKSc2r
kDtR4DKq9hObl8m8kdgeMyHMbsN+IJZ8Uscl4XWQc+ORlDF4/SEcbDRQYEk8GKlf
m8FB225LMFYOn8XzjARQRD451gx3FxkySptx+Rtd8U7NZEsNs9dWzt4KKFX3X5BW
YinIn6WGbqVZiLAUcNGvllpmP2C44/3vY3AdaGctLMrne+uL1Qy3CS+QIXg8U7AU
htG3hXfcLT+VgRTij4/+kLwtlncmEnXNg5DC8unAPhhWMnVnIKcDjijYTCahtbVZ
mZUzit8mqVztJA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:23 2025 by rpki-client