Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: Rp9bdRCC5eZV0CsHEqlF4SGznn02CuSX8g4MwTWMjK4=
Subject key identifier: 2E:F2:22:B7:C0:8E:F3:2A:DA:98:21:F7:39:2B:74:7A:C7:1A:43:57
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 0198D54DC5CED5E45F2685784E6146C72115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 0595
Signing time: Sat 23 Aug 2025 05:01:40 +0000
Manifest this update: Sat 23 Aug 2025 05:01:40 +0000
Manifest next update: Sun 24 Aug 2025 05:01:40 +0000
Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=)
2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: xx4oxCa9ZPPg0Ij0N9uAgvNrI7qM0K2Dpw/6Qt2RG90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c5:ce:d5:e4:5f:26:85:78:4e:61:46:c7:21:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Aug 23 05:01:40 2025 GMT
Not After : Aug 24 05:01:40 2025 GMT
Subject: CN=2ef222b7c08ef32ada9821f7392b747ac71a4357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:49:1a:1a:43:e2:11:dc:8b:61:ea:9d:8c:
56:35:d1:e3:8e:f2:7b:df:04:c9:d3:f2:00:50:71:
ab:58:87:40:c9:5f:1d:cf:b2:db:af:5e:7e:e9:e2:
57:7d:34:d1:3f:75:cf:2d:ae:23:f4:55:d9:88:4e:
a0:12:c9:9e:24:30:df:73:37:84:f0:bb:f9:1c:d9:
1d:8b:cf:61:b1:ef:94:cb:d4:1e:ec:13:e5:f3:3f:
0c:c9:e9:b5:98:7e:9c:18:d6:1d:bb:b9:84:cb:dd:
c1:5b:9c:c1:6f:ac:aa:f3:86:ba:c9:0c:47:54:fa:
95:1f:61:7e:2a:6e:12:82:64:66:71:f2:0a:1d:f1:
ac:aa:cb:34:ad:eb:ec:f2:39:8b:b1:2f:0c:14:93:
18:7d:39:d4:28:30:8c:64:f5:68:c3:7f:ee:0d:44:
21:a6:8c:3b:b3:24:ad:03:46:56:21:cf:cb:d2:2f:
46:46:72:20:7b:68:cd:b5:b7:09:aa:eb:18:07:25:
fd:39:25:de:f6:e9:6e:27:36:d8:7e:87:a3:3a:d5:
6f:40:99:d6:ee:cd:1a:47:63:fb:0a:38:ea:8f:42:
a8:47:8d:cf:98:3e:11:e5:f0:44:f4:65:37:0b:b4:
41:31:64:4b:c4:74:f3:fb:a6:a3:c2:da:c7:e6:6b:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F2:22:B7:C0:8E:F3:2A:DA:98:21:F7:39:2B:74:7A:C7:1A:43:57
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:91:c6:2f:b8:41:03:28:4c:6d:98:9e:eb:a8:c1:0d:ed:e6:
92:24:f2:bc:57:9d:9e:2c:8a:87:be:9c:ce:62:22:14:11:fd:
05:c9:28:73:e4:9b:8b:6b:ae:97:74:2c:40:84:6c:8f:3c:26:
2c:91:16:19:e6:aa:16:5e:ab:0f:bd:9c:a1:99:27:7c:e1:3a:
27:d1:d5:03:a6:f4:b8:65:48:35:0c:88:5e:85:a5:b0:46:77:
3c:44:d9:34:88:d6:8e:81:14:c7:5a:8c:f4:6a:a5:e2:96:96:
09:7b:9a:54:9c:4d:79:c8:67:03:25:c1:34:37:f0:81:1f:12:
74:3e:62:46:ca:ed:01:7b:87:f3:5e:79:ac:3a:44:9d:40:22:
d4:2c:24:a5:9a:b7:44:4f:84:e6:6d:dd:63:ec:f8:a6:5a:d8:
dc:db:44:f7:6a:c1:e9:ed:5a:09:e8:a9:9b:24:66:e9:64:4d:
90:f9:c6:18:34:da:e7:38:cf:3c:1b:1b:af:f8:95:af:6d:c5:
64:a6:9d:4f:63:ad:3b:7e:0d:b3:a1:ae:e5:a8:a7:e4:67:5e:
d3:ba:f9:e9:3f:7c:7f:68:f7:e3:c2:50:93:8d:83:88:aa:16:
2d:06:94:08:1b:1f:f8:d1:a5:98:ec:60:9d:16:b3:7b:36:02:
8f:c7:0c:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcXO1eRfJoV4TmFGxyEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OTUxYzg1MTRiN2RkMjFiMzMzYWJiMzNjYWNhM2M0ZGFl
OWQ3MDkwHhcNMjUwODIzMDUwMTQwWhcNMjUwODI0MDUwMTQwWjAzMTEwLwYDVQQD
EygyZWYyMjJiN2MwOGVmMzJhZGE5ODIxZjczOTJiNzQ3YWM3MWE0MzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0glJGhpD4hHci2HqnYxWNdHjjvJ7
3wTJ0/IAUHGrWIdAyV8dz7Lbr15+6eJXfTTRP3XPLa4j9FXZiE6gEsmeJDDfczeE
8Lv5HNkdi89hse+Uy9Qe7BPl8z8Myem1mH6cGNYdu7mEy93BW5zBb6yq84a6yQxH
VPqVH2F+Km4SgmRmcfIKHfGsqss0revs8jmLsS8MFJMYfTnUKDCMZPVow3/uDUQh
pow7syStA0ZWIc/L0i9GRnIge2jNtbcJqusYByX9OSXe9uluJzbYfoejOtVvQJnW
7s0aR2P7Cjjqj0KoR43PmD4R5fBE9GU3C7RBMWRLxHTz+6ajwtrH5ms2ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7yIrfAjvMq2pgh9zkrdHrHGkNXMB8GA1UdIwQY
MBaAFLiVHIUUt90hszOrszyso8Ta6dcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQt
OGNkNzk1MjdlNTMwLzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQtOGNkNzk1MjdlNTMw
LzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJHGL7hB
AyhMbZie66jBDe3mkiTyvFedniyKh76czmIiFBH9Bckoc+Sbi2uul3QsQIRsjzwm
LJEWGeaqFl6rD72coZknfOE6J9HVA6b0uGVINQyIXoWlsEZ3PETZNIjWjoEUx1qM
9Gql4paWCXuaVJxNechnAyXBNDfwgR8SdD5iRsrtAXuH8155rDpEnUAi1CwkpZq3
RE+E5m3dY+z4plrY3NtE92rB6e1aCeipmyRm6WRNkPnGGDTa5zjPPBsbr/iVr23F
ZKadT2OtO34Ns6Gu5ain5Gde07r56T98f2j348JQk42DiKoWLQaUCBsf+NGlmOxg
nRazezYCj8cM5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:01 2025 by rpki-client