Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: AoD+C4X1fMdZBK4VskbtKrJWEJqLF4pkW8DPcqjUeJM=
Subject key identifier: 62:49:A4:C2:33:63:5F:A4:D2:7B:7C:C8:47:CD:2C:60:34:F8:A3:03
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 0197CACC6E80B5D17BF0D3EBB1EA2D85A53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 050B
Signing time: Wed 02 Jul 2025 11:01:24 +0000
Manifest this update: Wed 02 Jul 2025 11:01:24 +0000
Manifest next update: Thu 03 Jul 2025 11:01:24 +0000
Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=)
2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: ptcOUQGrtYhU9PqFnPAHZDLfxyhhKihXh6+luE3sxHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:6e:80:b5:d1:7b:f0:d3:eb:b1:ea:2d:85:a5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Jul 2 11:01:24 2025 GMT
Not After : Jul 3 11:01:24 2025 GMT
Subject: CN=6249a4c233635fa4d27b7cc847cd2c6034f8a303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:bb:24:4b:34:c2:ba:6c:ae:4c:be:b8:d8:
7e:0c:0e:03:b0:4d:6d:c0:2b:78:c5:9d:a5:99:ef:
ea:7e:09:86:ee:c0:7c:b1:51:c7:2b:6f:d9:22:00:
04:a8:7c:4e:0d:9e:8e:1f:a0:80:71:c7:3d:79:8e:
b8:29:81:0a:4a:00:0d:e0:7f:3f:97:3a:1a:4c:47:
12:14:4a:01:56:2d:68:55:c7:ef:79:26:1b:c0:95:
14:76:79:c5:48:ac:40:13:41:f0:f0:e1:c3:d3:c0:
39:e6:b5:da:aa:7b:f6:9e:61:ef:4a:7d:3d:f8:64:
0e:8a:ac:2e:f3:4c:0f:0d:3e:7c:48:86:a0:de:c0:
f7:c7:13:dc:71:01:58:29:90:69:cd:9a:70:c0:f3:
92:66:a8:22:d0:12:9c:05:16:e1:32:73:a2:cc:16:
da:aa:da:f2:71:76:a4:47:7a:d9:e6:e2:da:81:0a:
af:e0:91:fe:d6:01:6a:86:5e:2f:60:fa:46:a9:f2:
61:e0:77:c7:b6:3e:60:5a:1b:59:51:4e:31:13:66:
2e:1e:1b:72:e7:ef:dd:6d:a9:d7:b3:7f:f4:6c:26:
59:d4:51:de:cd:d5:15:c7:59:0b:c9:00:22:d1:8d:
ff:09:59:6f:06:c2:0a:84:3e:e8:ec:a2:c7:54:17:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:49:A4:C2:33:63:5F:A4:D2:7B:7C:C8:47:CD:2C:60:34:F8:A3:03
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c4:8c:29:ee:3e:22:12:b4:52:6b:30:72:d3:a7:14:68:b1:
e0:5f:58:a2:ac:53:5f:00:33:d1:7c:4b:78:39:5d:55:68:97:
ee:36:de:21:a0:c3:85:27:a6:4f:76:9e:18:d7:b7:71:2e:23:
ed:83:3b:27:20:1b:88:99:71:56:0d:93:15:37:8e:c5:85:56:
3e:dd:3c:ed:dd:5a:ed:cb:d9:e3:0f:98:15:4a:17:5a:99:ff:
8a:34:72:bc:bd:69:d6:e5:4a:00:5a:c1:f3:25:0d:bf:d5:7c:
e4:64:ce:c9:34:d2:ec:fe:c0:71:a3:31:a0:41:40:25:7f:45:
53:68:01:59:82:2e:80:34:8c:03:36:cb:21:74:ca:e1:79:3d:
93:6d:b7:bb:e1:77:ff:f6:11:50:14:bf:b5:17:f4:ff:df:75:
07:bd:5a:29:26:42:e0:16:d0:21:00:ac:4b:eb:65:f5:ce:7a:
d0:50:14:66:da:4c:3c:26:79:c4:c3:d3:85:97:bd:cc:42:3a:
f4:cc:b2:06:49:ec:a2:8d:57:32:b4:a4:c3:91:a5:f7:ef:5b:
da:45:d6:d6:26:7c:3b:4c:4a:ee:35:3f:fd:dc:a5:e2:b2:84:
cb:02:6a:51:74:9b:69:c1:c3:4f:98:03:07:20:2d:ed:32:12:
70:2c:fb:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKzG6AtdF78NPrseothaU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OTUxYzg1MTRiN2RkMjFiMzMzYWJiMzNjYWNhM2M0ZGFl
OWQ3MDkwHhcNMjUwNzAyMTEwMTI0WhcNMjUwNzAzMTEwMTI0WjAzMTEwLwYDVQQD
Eyg2MjQ5YTRjMjMzNjM1ZmE0ZDI3YjdjYzg0N2NkMmM2MDM0ZjhhMzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CS7JEs0wrpsrky+uNh+DA4DsE1t
wCt4xZ2lme/qfgmG7sB8sVHHK2/ZIgAEqHxODZ6OH6CAccc9eY64KYEKSgAN4H8/
lzoaTEcSFEoBVi1oVcfveSYbwJUUdnnFSKxAE0Hw8OHD08A55rXaqnv2nmHvSn09
+GQOiqwu80wPDT58SIag3sD3xxPccQFYKZBpzZpwwPOSZqgi0BKcBRbhMnOizBba
qtrycXakR3rZ5uLagQqv4JH+1gFqhl4vYPpGqfJh4HfHtj5gWhtZUU4xE2YuHhty
5+/dbanXs3/0bCZZ1FHezdUVx1kLyQAi0Y3/CVlvBsIKhD7o7KLHVBdqlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJJpMIzY1+k0nt8yEfNLGA0+KMDMB8GA1UdIwQY
MBaAFLiVHIUUt90hszOrszyso8Ta6dcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQt
OGNkNzk1MjdlNTMwLzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQtOGNkNzk1MjdlNTMw
LzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMSMKe4+
IhK0UmswctOnFGix4F9YoqxTXwAz0XxLeDldVWiX7jbeIaDDhSemT3aeGNe3cS4j
7YM7JyAbiJlxVg2TFTeOxYVWPt087d1a7cvZ4w+YFUoXWpn/ijRyvL1p1uVKAFrB
8yUNv9V85GTOyTTS7P7AcaMxoEFAJX9FU2gBWYIugDSMAzbLIXTK4Xk9k223u+F3
//YRUBS/tRf0/991B71aKSZC4BbQIQCsS+tl9c560FAUZtpMPCZ5xMPThZe9zEI6
9MyyBknsoo1XMrSkw5Gl9+9b2kXW1iZ8O0xK7jU//dyl4rKEywJqUXSbacHDT5gD
ByAt7TIScCz7PQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 16:06:13 2025 by rpki-client