Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
File: UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft (raw, json)
Hash identifier: TgcCMu0DrEpTzcwUTE4DNBtDUdIOvwIOqWUB71cBPe4=
Subject key identifier: D1:08:C1:48:DC:C3:2F:B3:BD:E9:82:C2:C2:19:BF:4D:F6:ED:EC:CC
Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
Certificate issuer: /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Certificate serial: 0197B6D726F1723D3E04B7C789DEA873E4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
Manifest number: 1357
Signing time: Sat 28 Jun 2025 14:00:42 +0000
Manifest this update: Sat 28 Jun 2025 14:00:42 +0000
Manifest next update: Sun 29 Jun 2025 14:00:42 +0000
Files and hashes: 1: UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl (hash: 5TKJPcVpnOO5j0suu1bNicgjBrORxv5ZFsUsIHkTa4I=)
2: _a7tAKf339v0StwY-99zGhTqG38.roa (hash: JYQNh/oqUzKN3SGNytd9bNClD0WxhF6t77T6aTG1SXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:26:f1:72:3d:3e:04:b7:c7:89:de:a8:73:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Validity
Not Before: Jun 28 14:00:42 2025 GMT
Not After : Jun 29 14:00:42 2025 GMT
Subject: CN=d108c148dcc32fb3bde982c2c219bf4df6edeccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:3f:72:2a:26:1e:58:7a:70:45:84:32:80:
dd:78:5f:f0:69:c0:ef:fa:53:1a:7e:ea:01:fe:26:
6a:6d:96:64:9d:e2:75:4c:25:3d:58:e3:47:70:f4:
0d:ef:31:af:65:d2:b6:57:7d:02:45:de:ec:6e:a0:
3c:7b:68:34:68:45:1d:ad:e0:f1:9b:1d:a7:bd:c8:
0b:ce:1a:e5:ae:8d:06:0f:94:49:d8:78:2f:3e:46:
1e:25:d0:e0:86:b4:2b:d2:7b:2b:64:20:31:e2:83:
d8:c0:94:a4:fc:cc:6c:59:0c:f6:24:33:59:78:bf:
de:53:bc:0b:d7:c0:93:db:f0:40:3e:38:d2:2e:c7:
d7:03:50:03:38:28:51:32:3d:cd:0b:62:cf:bd:5e:
38:3a:92:f2:01:e8:bf:4a:38:cd:d6:7b:82:24:b1:
69:48:ca:6c:e9:37:f0:c1:2a:07:d4:2e:4b:63:41:
88:87:05:4a:59:a3:a7:eb:eb:42:73:81:ad:2a:5d:
c9:72:49:6d:9a:d6:ca:8b:92:11:f2:60:d2:a5:33:
0c:48:de:76:97:06:2f:be:d6:c1:9b:06:79:4a:64:
43:e6:e4:5c:b6:18:56:a9:5d:15:88:e6:3b:57:ed:
b3:2f:e9:54:da:86:e4:14:15:04:6a:1c:8c:47:0d:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:08:C1:48:DC:C3:2F:B3:BD:E9:82:C2:C2:19:BF:4D:F6:ED:EC:CC
X509v3 Authority Key Identifier:
keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c0:9a:7c:f1:ff:0a:01:41:a0:d8:f7:1b:6d:48:dc:b4:0c:
ad:9d:63:56:a3:84:1a:65:1b:e7:f8:a8:0d:79:49:ff:6c:25:
7e:1d:36:9c:eb:6a:4d:0d:a4:26:83:52:6f:e1:fa:0e:57:6f:
b8:7b:f3:e3:85:33:f1:2b:23:67:ae:16:54:2f:2b:a3:39:1b:
d3:9b:9a:47:8f:1a:cc:e7:ef:b8:d3:26:a1:73:bd:1b:87:ee:
ce:f5:ff:5d:56:c2:9f:40:29:13:1a:af:7e:95:48:2c:25:02:
48:9a:2e:8d:9f:3e:52:e4:6a:51:0c:46:5f:83:0d:82:1c:ec:
13:95:c9:27:98:3f:3a:d2:21:ab:07:73:4c:d4:c5:b8:37:db:
29:20:c6:57:15:8e:7d:a2:01:93:c9:f8:15:d5:cf:2b:66:3f:
04:94:c6:17:1a:d5:3f:4e:4b:32:25:46:95:d3:22:59:43:81:
33:45:f3:4a:62:bd:c4:f9:dd:b3:89:5c:b5:16:d0:0d:2a:4b:
9b:00:85:6f:8e:91:67:90:6d:1b:43:10:a4:34:a7:ae:80:3c:
b5:fe:ef:97:ac:7e:e4:96:2b:56:9f:a1:87:0c:47:84:e6:3f:
33:d4:39:93:4a:f7:79:2f:a2:e0:26:16:0f:4a:4e:fc:44:84:
44:24:10:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21ybxcj0+BLfHid6oc+ShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxM2JkZmVjNTViMDQ4YjBkMmYwM2I0M2JmNjZlM2U2N2U4
NjU1M2YwHhcNMjUwNjI4MTQwMDQyWhcNMjUwNjI5MTQwMDQyWjAzMTEwLwYDVQQD
EyhkMTA4YzE0OGRjYzMyZmIzYmRlOTgyYzJjMjE5YmY0ZGY2ZWRlY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvI/ciomHlh6cEWEMoDdeF/wacDv
+lMafuoB/iZqbZZkneJ1TCU9WONHcPQN7zGvZdK2V30CRd7sbqA8e2g0aEUdreDx
mx2nvcgLzhrlro0GD5RJ2HgvPkYeJdDghrQr0nsrZCAx4oPYwJSk/MxsWQz2JDNZ
eL/eU7wL18CT2/BAPjjSLsfXA1ADOChRMj3NC2LPvV44OpLyAei/SjjN1nuCJLFp
SMps6TfwwSoH1C5LY0GIhwVKWaOn6+tCc4GtKl3JckltmtbKi5IR8mDSpTMMSN52
lwYvvtbBmwZ5SmRD5uRcthhWqV0ViOY7V+2zL+lU2obkFBUEahyMRw0ItwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEIwUjcwy+zvemCwsIZv0327ezMMB8GA1UdIwQY
MBaAFFE73+xVsEiw0vA7Q79m4+Z+hlU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jYmU2OTUtZDJkOS00ZDZmLTg3ZTIt
YTFjY2U2ZjgwY2EzLzEvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jYmU2OTUtZDJkOS00ZDZmLTg3ZTItYTFjY2U2ZjgwY2Ez
LzEvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcCafPH/
CgFBoNj3G21I3LQMrZ1jVqOEGmUb5/ioDXlJ/2wlfh02nOtqTQ2kJoNSb+H6Dldv
uHvz44Uz8SsjZ64WVC8rozkb05uaR48azOfvuNMmoXO9G4fuzvX/XVbCn0ApExqv
fpVILCUCSJoujZ8+UuRqUQxGX4MNghzsE5XJJ5g/OtIhqwdzTNTFuDfbKSDGVxWO
faIBk8n4FdXPK2Y/BJTGFxrVP05LMiVGldMiWUOBM0XzSmK9xPnds4lctRbQDSpL
mwCFb46RZ5BtG0MQpDSnroA8tf7vl6x+5JYrVp+hhwxHhOY/M9Q5k0r3eS+i4CYW
D0pO/ESERCQQhA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:25 2025 by rpki-client