Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File: UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier: yzyvGlsFaRX23VXGvLbNOkq6KnDthxxcq9z3L5qlTTY=
Subject key identifier: D7:06:58:62:2E:F1:ED:37:E0:30:4E:BF:E5:F8:36:C0:AF:D9:88:BE
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer: /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial: 0198D697EDF5C25DC4A3C4CF508DBAC24978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number: 0580
Signing time: Sat 23 Aug 2025 11:02:17 +0000
Manifest this update: Sat 23 Aug 2025 11:02:17 +0000
Manifest next update: Sun 24 Aug 2025 11:02:17 +0000
Files and hashes: 1: 0siOn8oVbOzVCasVDaPzmYX1tbc.roa (hash: SBMJ/e1Sts5wpcL+aFgVksq/m8nr6hq1VOYBzLKdoWI=)
2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: TOZi1gJ6Z0I9PDMfYgFLcXvQrpTfb2BcDXxYrZudHQM=)
3: jgvyflC9cxUvuv1ddomja9gsSes.roa (hash: 5URFyBRZ0uEAXpl92dbXCwRyKauPGInl6RJ5C4/n3ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ed:f5:c2:5d:c4:a3:c4:cf:50:8d:ba:c2:49:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Validity
Not Before: Aug 23 11:02:17 2025 GMT
Not After : Aug 24 11:02:17 2025 GMT
Subject: CN=d70658622ef1ed37e0304ebfe5f836c0afd988be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:d2:3c:b5:9b:c5:12:89:f0:4c:4c:2a:52:
b7:78:28:ce:46:47:a0:74:6c:40:31:dd:13:cb:fa:
c4:27:60:b6:e2:ca:45:95:61:d3:29:5e:5b:36:3a:
50:ff:e7:2d:16:6a:56:7f:f0:9c:1a:fd:b8:99:17:
a7:84:37:31:23:aa:f4:ac:d2:2c:27:2b:01:86:d5:
57:bb:a1:4f:0e:f6:8a:54:b8:ff:1b:ed:ad:0c:f7:
50:21:57:cb:c9:9d:9a:24:35:da:c5:bc:53:f6:9b:
64:2c:b3:69:60:39:d6:ca:01:17:d5:89:87:64:13:
c6:41:e4:5f:8c:e3:58:e6:72:20:39:31:73:56:65:
03:ca:15:fa:29:0f:39:ba:ff:26:a9:7f:eb:d9:ea:
b4:d1:0b:13:db:82:6f:2f:c2:8b:af:99:57:bc:75:
2a:44:eb:c5:89:ad:65:2a:e6:cf:79:c4:a4:ac:dc:
eb:f0:bb:a4:da:ff:66:14:f4:ce:f2:cb:d7:52:49:
b5:52:ca:24:f0:89:d6:4b:95:6a:a8:34:91:86:89:
7f:27:3d:1d:88:ad:b4:c0:16:e5:e0:5d:5a:d1:3d:
dd:2f:6a:96:52:ab:c0:41:43:64:6a:35:ba:bf:86:
ce:00:1e:61:65:00:52:b7:bf:7c:6a:cf:28:4a:2e:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:58:62:2E:F1:ED:37:E0:30:4E:BF:E5:F8:36:C0:AF:D9:88:BE
X509v3 Authority Key Identifier:
keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:77:ba:07:84:a1:92:26:a2:34:b6:8b:1c:09:aa:f6:00:e7:
35:ee:24:a3:57:d8:91:82:65:b7:87:fa:58:a0:0b:6f:24:cf:
6b:68:79:c3:23:96:86:68:83:00:4b:15:ac:54:9e:70:91:be:
5c:ab:6f:dc:87:ca:a7:f9:c9:e9:97:ba:93:bb:11:fa:b1:6c:
ab:6f:a7:d8:82:88:12:12:fe:8b:c7:be:dc:ab:d9:42:dc:75:
25:49:09:15:07:05:24:7a:a3:cb:bf:7a:21:db:48:b6:04:c9:
8d:f5:78:6e:73:84:18:fe:ec:64:e1:55:29:45:be:2c:7d:37:
e1:27:b6:c7:ab:c5:60:fb:55:ef:7a:26:cd:98:33:bb:de:3d:
28:3f:ce:c5:8b:d2:20:5e:8a:8b:46:7e:7b:49:74:c8:b1:da:
2f:7f:01:08:fe:ef:a0:35:43:47:29:12:6f:0e:a8:60:15:25:
e6:06:e1:25:00:3b:a3:72:1a:85:cf:ce:64:e7:dc:b4:29:46:
ef:ab:18:d8:95:92:5f:61:26:af:30:59:d9:7c:31:17:96:ce:
6f:30:26:c2:0e:ef:e1:c7:9a:d7:bb:53:9e:b7:30:af:c1:19:
df:b4:a7:f0:57:1b:8f:a6:6a:29:22:24:81:fb:18:78:e6:38:
39:61:76:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWl+31wl3Eo8TPUI26wkl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMmMzN2U3ZWNiNTliNjY3ZmE4MmVjZjA5M2U1ZWQ4NzY2
MWE4ZTIwHhcNMjUwODIzMTEwMjE3WhcNMjUwODI0MTEwMjE3WjAzMTEwLwYDVQQD
EyhkNzA2NTg2MjJlZjFlZDM3ZTAzMDRlYmZlNWY4MzZjMGFmZDk4OGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHnSPLWbxRKJ8ExMKlK3eCjORkeg
dGxAMd0Ty/rEJ2C24spFlWHTKV5bNjpQ/+ctFmpWf/CcGv24mRenhDcxI6r0rNIs
JysBhtVXu6FPDvaKVLj/G+2tDPdQIVfLyZ2aJDXaxbxT9ptkLLNpYDnWygEX1YmH
ZBPGQeRfjONY5nIgOTFzVmUDyhX6KQ85uv8mqX/r2eq00QsT24JvL8KLr5lXvHUq
ROvFia1lKubPecSkrNzr8Luk2v9mFPTO8svXUkm1Usok8InWS5VqqDSRhol/Jz0d
iK20wBbl4F1a0T3dL2qWUqvAQUNkajW6v4bOAB5hZQBSt798as8oSi6F2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcGWGIu8e034DBOv+X4NsCv2Yi+MB8GA1UdIwQY
MBaAFFAsN+fstZtmf6guzwk+Xth2YajiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUN3MzUteTFtMlpfcUM3UENUNWUySFpocU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iNWY2YWYtM2M4My00Y2I1LWI1ZWIt
YmExNDg0M2M1NDljLzEvVUN3MzUteTFtMlpfcUM3UENUNWUySFpocU9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iNWY2YWYtM2M4My00Y2I1LWI1ZWItYmExNDg0M2M1NDlj
LzEvVUN3MzUteTFtMlpfcUM3UENUNWUySFpocU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3e6B4Sh
kiaiNLaLHAmq9gDnNe4ko1fYkYJlt4f6WKALbyTPa2h5wyOWhmiDAEsVrFSecJG+
XKtv3IfKp/nJ6Ze6k7sR+rFsq2+n2IKIEhL+i8e+3KvZQtx1JUkJFQcFJHqjy796
IdtItgTJjfV4bnOEGP7sZOFVKUW+LH034Se2x6vFYPtV73omzZgzu949KD/OxYvS
IF6Ki0Z+e0l0yLHaL38BCP7voDVDRykSbw6oYBUl5gbhJQA7o3Iahc/OZOfctClG
76sY2JWSX2EmrzBZ2XwxF5bObzAmwg7v4cea17tTnrcwr8EZ37Sn8Fcbj6ZqKSIk
gfsYeOY4OWF2Wg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:16:51 2025 by rpki-client