Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: cQubQCDuT/VZSuf23JZDWOf9todhK8id6HbPPFkFPhM=
Subject key identifier: 61:18:63:B8:F1:1F:1C:14:9B:E1:CF:BA:62:A8:4E:B8:D0:53:0B:B9
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 0198D73B9D3F1720E5470AE4CAA6273CD3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 04A9
Signing time: Sat 23 Aug 2025 14:01:04 +0000
Manifest this update: Sat 23 Aug 2025 14:01:04 +0000
Manifest next update: Sun 24 Aug 2025 14:01:04 +0000
Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=)
2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: 8W17RMvV9JKoXZbd5H/hxhMp1NuKrlY5wEiQ/g+2ckg=)
3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:9d:3f:17:20:e5:47:0a:e4:ca:a6:27:3c:d3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Aug 23 14:01:04 2025 GMT
Not After : Aug 24 14:01:04 2025 GMT
Subject: CN=611863b8f11f1c149be1cfba62a84eb8d0530bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:73:71:43:30:c7:1c:59:26:c0:3c:29:31:
83:20:f1:28:c1:f0:9b:7e:de:e6:ea:51:55:79:97:
46:35:70:10:12:7a:a9:32:03:7e:92:13:b2:9c:0a:
bc:ee:c9:ea:a2:a2:53:cf:69:26:d7:23:a9:27:32:
45:6a:80:f9:8d:10:12:c9:67:30:e4:ef:ab:3c:f2:
8d:4b:b0:78:2d:7e:55:7f:cb:1b:54:46:68:d2:96:
53:4a:bf:c3:1f:7e:5b:af:d9:20:fb:c4:d4:8f:e3:
ad:71:ef:1f:44:0b:75:e3:07:96:39:98:e3:91:8a:
62:b8:95:78:2a:fc:94:32:f1:ab:5f:b6:88:d2:90:
79:56:40:d3:31:11:8d:ba:4f:1f:1d:4f:52:f0:b9:
d7:fc:95:c8:85:87:fb:8d:6e:28:ba:75:85:69:e9:
bd:0e:e3:93:28:2b:7f:5d:ad:ff:c2:b8:3b:1b:1d:
8c:32:5a:75:d5:1f:6d:f0:3d:0d:f0:2f:44:54:9f:
f5:f9:10:27:f0:51:33:37:e3:74:19:97:d3:76:77:
b0:22:69:3e:d8:f6:66:69:e0:dc:89:cd:56:9b:26:
bc:5c:0f:fc:8f:52:18:fb:75:9e:14:a7:a1:c6:12:
ec:40:1c:06:26:59:90:ae:ad:68:fc:96:b4:be:a3:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:18:63:B8:F1:1F:1C:14:9B:E1:CF:BA:62:A8:4E:B8:D0:53:0B:B9
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e9:3d:db:35:fb:63:8c:63:de:e4:f4:13:93:d3:6b:08:0e:
51:6b:5a:bf:e9:23:29:e2:cf:74:0a:59:cf:aa:ee:a5:54:75:
80:2c:81:e5:32:c4:d9:ea:a6:7f:94:58:4c:b7:5d:55:b2:25:
d3:6c:01:6c:aa:a5:59:52:0d:85:7e:f1:f8:1c:52:b7:f8:c3:
2e:90:de:3e:24:f6:d5:ce:c1:a8:64:46:ab:4e:af:9b:c2:11:
b5:1a:ed:b2:4c:f2:35:cc:5f:05:9f:bc:16:7d:69:be:21:a1:
82:36:6d:ec:b3:7f:cf:e0:27:72:ae:9c:b0:3a:a6:e7:cc:c5:
3c:6b:dd:1e:35:ee:6c:62:ab:24:20:92:2b:5b:d5:12:4f:31:
b3:3d:d9:99:e0:9c:18:c8:3f:85:e3:2d:91:83:33:a7:68:72:
a0:f3:4a:3e:0e:75:7b:90:cc:b1:49:8e:ab:28:d3:3f:82:bf:
80:49:ff:3c:6a:bf:f7:66:f6:2d:c0:e2:21:c6:a9:b2:76:fb:
ad:0a:d6:5d:bb:b8:64:e1:3c:ae:6c:f2:02:ac:83:29:88:bd:
e7:cd:82:62:d8:95:19:1b:5f:60:7e:41:bd:03:d1:8b:b6:22:
c2:9e:00:bf:16:d0:88:86:fb:dc:81:58:63:26:e7:94:ae:ce:
98:b0:85:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO50/FyDlRwrkyqYnPNPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWVjOTNkN2NhNzM3NDRiMmMxZmJiNmRkYTY0NDkzYzJh
NDk1YzEwHhcNMjUwODIzMTQwMTA0WhcNMjUwODI0MTQwMTA0WjAzMTEwLwYDVQQD
Eyg2MTE4NjNiOGYxMWYxYzE0OWJlMWNmYmE2MmE4NGViOGQwNTMwYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE9zcUMwxxxZJsA8KTGDIPEowfCb
ft7m6lFVeZdGNXAQEnqpMgN+khOynAq87snqoqJTz2km1yOpJzJFaoD5jRASyWcw
5O+rPPKNS7B4LX5Vf8sbVEZo0pZTSr/DH35br9kg+8TUj+Otce8fRAt14weWOZjj
kYpiuJV4KvyUMvGrX7aI0pB5VkDTMRGNuk8fHU9S8LnX/JXIhYf7jW4ounWFaem9
DuOTKCt/Xa3/wrg7Gx2MMlp11R9t8D0N8C9EVJ/1+RAn8FEzN+N0GZfTdnewImk+
2PZmaeDcic1Wmya8XA/8j1IY+3WeFKehxhLsQBwGJlmQrq1o/Ja0vqOdSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEYY7jxHxwUm+HPumKoTrjQUwu5MB8GA1UdIwQY
MBaAFFJeyT18pzdEssH7tt2mRJPCpJXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2Et
ODM2NmIxNjRkZDY2LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2EtODM2NmIxNjRkZDY2
LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+k92zX7
Y4xj3uT0E5PTawgOUWtav+kjKeLPdApZz6rupVR1gCyB5TLE2eqmf5RYTLddVbIl
02wBbKqlWVINhX7x+BxSt/jDLpDePiT21c7BqGRGq06vm8IRtRrtskzyNcxfBZ+8
Fn1pviGhgjZt7LN/z+Ancq6csDqm58zFPGvdHjXubGKrJCCSK1vVEk8xsz3ZmeCc
GMg/heMtkYMzp2hyoPNKPg51e5DMsUmOqyjTP4K/gEn/PGq/92b2LcDiIcapsnb7
rQrWXbu4ZOE8rmzyAqyDKYi9582CYtiVGRtfYH5BvQPRi7Yiwp4AvxbQiIb73IFY
YybnlK7OmLCFbA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:28:11 2025 by rpki-client