Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier: c63p/xeVfbEy00hjKmq/mEc9NE2/sdPkm8pZwaIBMdA=
Subject key identifier: 8E:D6:CB:0F:5A:F6:2D:01:EE:C1:9A:03:31:2D:52:A6:01:E9:E7:90
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 0198D4A782F3357ACF88DB94A21279963132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number: 0DA4
Signing time: Sat 23 Aug 2025 02:00:04 +0000
Manifest this update: Sat 23 Aug 2025 02:00:04 +0000
Manifest next update: Sun 24 Aug 2025 02:00:04 +0000
Files and hashes: 1: KrWaj3PmGUr__R-XWPo-LvjSSzE.roa (hash: D32/8FWqAF1z0NVQywtDopSVNiH+dneRDeaovNlaE+U=)
2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: 4ws4FKdxB0X8e2/DO9Rs9Of9zOayURmL3aAy/dzs1JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:82:f3:35:7a:cf:88:db:94:a2:12:79:96:31:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: Aug 23 02:00:04 2025 GMT
Not After : Aug 24 02:00:04 2025 GMT
Subject: CN=8ed6cb0f5af62d01eec19a03312d52a601e9e790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:78:ec:23:45:dc:a2:bd:b8:08:8d:49:70:
c7:f9:b2:61:33:50:fe:e8:65:2e:62:0d:3a:1b:c8:
7a:5f:aa:01:70:fe:35:07:c1:38:b1:b8:2f:3a:b8:
bd:4d:93:97:39:8f:cc:cf:f5:51:b6:f3:7c:a3:cf:
f2:db:a9:38:32:ae:c2:15:57:c1:f4:e3:9a:ad:3d:
31:eb:8c:41:4f:0b:50:62:be:a3:7b:aa:be:dd:b8:
e8:14:80:87:80:5f:74:15:04:a7:ba:0b:95:48:87:
57:97:6c:73:7b:71:c0:d4:d5:4e:7a:0a:ce:d6:c6:
e9:b7:03:40:6c:74:60:ac:2d:11:a6:89:5b:db:d4:
33:75:f1:fb:15:89:82:76:0a:53:1d:3d:49:16:94:
c1:a4:cf:8e:84:40:ae:43:cb:a7:cf:41:c3:b7:6e:
8a:a4:28:dc:22:99:d2:be:46:e2:4f:71:26:b2:8e:
40:e1:c5:ae:07:50:af:b6:3c:9f:b1:50:ff:53:e9:
25:49:3a:dd:ac:62:a9:55:0e:89:61:8b:42:16:7a:
9f:91:05:75:b6:bb:4d:d5:c0:59:ef:40:3b:2a:3a:
65:7a:a4:1e:04:61:c3:29:eb:41:d9:95:87:ff:a3:
44:a7:ce:9a:05:5a:fa:69:51:72:42:1a:b4:ea:15:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D6:CB:0F:5A:F6:2D:01:EE:C1:9A:03:31:2D:52:A6:01:E9:E7:90
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:18:cf:02:32:6d:92:5d:22:73:8f:06:43:25:eb:6c:4f:44:
9a:b1:f3:08:1b:9b:a3:99:8e:c0:50:73:c3:03:dc:3c:b6:66:
74:72:34:bc:bb:da:bc:24:1f:80:27:db:54:57:fd:ef:5a:0f:
41:c1:b7:a8:29:f6:d2:11:44:84:ec:ce:fc:20:61:ed:83:1e:
7f:6a:42:08:6b:5d:4d:e4:47:04:b4:e8:44:6f:3e:8f:3c:0b:
f4:e1:33:49:30:b5:6e:33:a1:ec:62:f9:da:ad:7e:56:92:f2:
a6:d8:ae:3a:bf:68:de:c0:6d:20:5d:33:76:61:79:f8:7c:12:
32:37:7b:29:e0:a8:1c:7f:f9:86:a2:88:b4:a7:e3:ef:45:6f:
e3:4c:f6:cb:58:fe:fa:12:18:fb:4e:c3:8e:e1:49:e3:60:45:
c0:64:f0:05:e5:67:45:ff:f4:c7:9e:44:2a:60:72:bf:ad:78:
b4:e1:28:d8:26:0b:00:b5:4e:ec:65:39:60:99:f1:f2:97:a4:
c5:d0:02:dd:99:1a:e8:4a:e6:fd:98:2c:61:a3:37:37:50:10:
1c:2a:55:4a:37:20:c1:df:cb:bc:37:a3:59:88:6a:b3:d5:38:
03:a3:32:e7:49:3b:03:09:e1:22:ee:19:b2:10:9f:0f:20:00:
11:32:ae:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp4LzNXrPiNuUohJ5ljEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTlkYjdmMmMyZTNiM2FiZDhiZjQxNWYwY2UxZmZmMzM0
MzI5ZWMwHhcNMjUwODIzMDIwMDA0WhcNMjUwODI0MDIwMDA0WjAzMTEwLwYDVQQD
Eyg4ZWQ2Y2IwZjVhZjYyZDAxZWVjMTlhMDMzMTJkNTJhNjAxZTllNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5147CNF3KK9uAiNSXDH+bJhM1D+
6GUuYg06G8h6X6oBcP41B8E4sbgvOri9TZOXOY/Mz/VRtvN8o8/y26k4Mq7CFVfB
9OOarT0x64xBTwtQYr6je6q+3bjoFICHgF90FQSnuguVSIdXl2xze3HA1NVOegrO
1sbptwNAbHRgrC0Rpolb29QzdfH7FYmCdgpTHT1JFpTBpM+OhECuQ8unz0HDt26K
pCjcIpnSvkbiT3Emso5A4cWuB1CvtjyfsVD/U+klSTrdrGKpVQ6JYYtCFnqfkQV1
trtN1cBZ70A7KjpleqQeBGHDKetB2ZWH/6NEp86aBVr6aVFyQhq06hVRnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7Wyw9a9i0B7sGaAzEtUqYB6eeQMB8GA1UdIwQY
MBaAFLhZ238sLjs6vYv0FfDOH/8zQynsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZWI3YzMtZTM0YS00ZmJjLTkyNzIt
NGMxYzU3YTgxZmZkLzEvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZWI3YzMtZTM0YS00ZmJjLTkyNzItNGMxYzU3YTgxZmZk
LzEvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBjPAjJt
kl0ic48GQyXrbE9EmrHzCBubo5mOwFBzwwPcPLZmdHI0vLvavCQfgCfbVFf971oP
QcG3qCn20hFEhOzO/CBh7YMef2pCCGtdTeRHBLToRG8+jzwL9OEzSTC1bjOh7GL5
2q1+VpLyptiuOr9o3sBtIF0zdmF5+HwSMjd7KeCoHH/5hqKItKfj70Vv40z2y1j+
+hIY+07DjuFJ42BFwGTwBeVnRf/0x55EKmByv614tOEo2CYLALVO7GU5YJnx8pek
xdAC3Zka6Erm/ZgsYaM3N1AQHCpVSjcgwd/LvDejWYhqs9U4A6My50k7AwnhIu4Z
shCfDyAAETKubw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:13 2025 by rpki-client