Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
File: UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json)
Hash identifier: 9ZDyZXE9A+Xo/nyM7mGz86JyMTA/5gFTLpPmqlgndKc=
Subject key identifier: 77:65:63:31:CA:A8:8D:64:53:94:F3:48:C0:B0:4C:EC:14:11:02:FC
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial: 0198D5BC0FFC4CF1A215BD19AE1D3B26458A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
Manifest number: 0468
Signing time: Sat 23 Aug 2025 07:02:08 +0000
Manifest this update: Sat 23 Aug 2025 07:02:08 +0000
Manifest next update: Sun 24 Aug 2025 07:02:08 +0000
Files and hashes: 1: 7spEQVqcL4vrSpVaVj2ZHbdCXAk.roa (hash: fpYq7eNAV/2Q3SZsPHHqVIOf+rVV6huCrpQyiQCeASw=)
2: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: uACdxOa2KrsHKyMt4F+KSj9S59Q7uczjw7Ev/It951c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0f:fc:4c:f1:a2:15:bd:19:ae:1d:3b:26:45:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Validity
Not Before: Aug 23 07:02:08 2025 GMT
Not After : Aug 24 07:02:08 2025 GMT
Subject: CN=77656331caa88d645394f348c0b04cec141102fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:f4:a7:4c:fc:fe:4c:9e:bf:f5:c7:9d:7a:
4a:90:c9:6a:1c:84:e1:24:20:ab:eb:e9:1c:ef:e0:
24:19:fb:23:e9:96:5e:22:be:e0:c5:5c:ca:8e:e9:
16:47:68:25:3c:76:ae:94:15:5c:f1:4c:91:d8:fc:
03:82:94:99:e0:c0:1b:2f:e1:85:3e:3e:e3:85:41:
44:f3:30:4f:0a:94:b8:d5:a7:a1:95:3a:29:ba:23:
9c:85:15:27:6d:93:28:18:5b:f0:be:38:d2:71:39:
21:2d:96:89:00:f4:e8:97:39:77:e5:d3:09:64:2c:
b2:e1:c0:11:96:a2:e1:75:ac:b0:4b:d8:ff:4c:83:
27:5d:f5:fa:aa:a5:bd:90:a0:53:40:54:48:8a:4a:
69:a5:a6:db:88:d4:f7:08:68:be:ca:e3:70:24:cb:
f8:6f:18:23:6e:4b:05:16:68:d3:de:3b:b4:13:e5:
b2:cc:29:3b:77:bf:fe:9b:a5:24:75:19:cf:e1:ab:
85:63:98:67:ce:81:1f:64:a3:63:09:f7:ba:72:4e:
39:c8:c2:0f:39:39:b4:43:e0:89:34:4c:42:52:b4:
c5:81:21:1b:01:3c:f3:95:4b:4f:d7:c0:d8:22:92:
81:db:53:03:ad:d7:c3:3a:59:fb:d9:37:9e:ce:53:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:65:63:31:CA:A8:8D:64:53:94:F3:48:C0:B0:4C:EC:14:11:02:FC
X509v3 Authority Key Identifier:
keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c7:21:f8:96:66:d1:fd:25:79:75:1d:5f:eb:31:8f:e9:4d:
61:86:d5:7a:8d:a1:f0:65:5b:05:04:0f:2b:0d:d8:18:a4:45:
3a:cf:8a:ad:17:4c:a8:e3:c0:f5:58:7d:2c:06:d1:79:30:41:
ef:77:94:b0:4f:4b:c8:c4:f8:dd:f2:1f:16:74:54:05:0c:06:
e8:d3:ec:e9:99:a3:cf:c2:85:81:27:56:a9:d2:0b:4d:cb:80:
c2:87:5b:b8:7d:d6:47:0a:2d:52:c9:01:53:94:b1:20:7f:b0:
8e:56:f7:e3:63:b7:6d:a8:81:62:bb:6d:11:ff:5a:fc:0e:33:
83:81:ce:24:03:f8:fe:74:eb:97:fe:44:b0:af:22:9d:61:9b:
e7:b2:61:9c:5e:7f:b9:29:5f:18:34:84:4b:ad:56:8f:80:90:
23:36:18:04:2a:92:42:1d:33:24:fb:ed:8d:45:c3:16:db:be:
01:75:04:9f:9d:e7:4e:be:3a:ab:fe:a8:c7:ae:62:3d:54:a0:
1b:f7:2b:a1:2f:89:43:19:79:98:b6:c8:35:11:6d:ca:da:56:
5b:08:1a:cc:63:4d:c7:72:f3:06:24:da:1b:30:ba:de:d5:1e:
3d:32:15:07:47:39:74:d1:12:0d:97:d9:78:6f:b8:82:90:fc:
9c:01:2e:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvA/8TPGiFb0Zrh07JkWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMGNlNzgxZGIwZGM3ZTRmOWY0OTQxNDVhMjk1ZTRjY2Ix
MjFjYWUwHhcNMjUwODIzMDcwMjA4WhcNMjUwODI0MDcwMjA4WjAzMTEwLwYDVQQD
Eyg3NzY1NjMzMWNhYTg4ZDY0NTM5NGYzNDhjMGIwNGNlYzE0MTEwMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SL0p0z8/kyev/XHnXpKkMlqHITh
JCCr6+kc7+AkGfsj6ZZeIr7gxVzKjukWR2glPHaulBVc8UyR2PwDgpSZ4MAbL+GF
Pj7jhUFE8zBPCpS41aehlTopuiOchRUnbZMoGFvwvjjScTkhLZaJAPTolzl35dMJ
ZCyy4cARlqLhdaywS9j/TIMnXfX6qqW9kKBTQFRIikpppabbiNT3CGi+yuNwJMv4
bxgjbksFFmjT3ju0E+WyzCk7d7/+m6UkdRnP4auFY5hnzoEfZKNjCfe6ck45yMIP
OTm0Q+CJNExCUrTFgSEbATzzlUtP18DYIpKB21MDrdfDOln72TeezlMlmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdlYzHKqI1kU5TzSMCwTOwUEQL8MB8GA1UdIwQY
MBaAFFEM54HbDcfk+fSUFFopXkzLEhyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVF6bmdkc054LVQ1OUpRVVdpbGVUTXNTSEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zMWZkMTYtNmQwMC00ZDA5LWE4ZDQt
YzFkNmM4ZjMxOWMxLzEvVVF6bmdkc054LVQ1OUpRVVdpbGVUTXNTSEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8zMWZkMTYtNmQwMC00ZDA5LWE4ZDQtYzFkNmM4ZjMxOWMx
LzEvVVF6bmdkc054LVQ1OUpRVVdpbGVUTXNTSEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsch+JZm
0f0leXUdX+sxj+lNYYbVeo2h8GVbBQQPKw3YGKRFOs+KrRdMqOPA9Vh9LAbReTBB
73eUsE9LyMT43fIfFnRUBQwG6NPs6Zmjz8KFgSdWqdILTcuAwodbuH3WRwotUskB
U5SxIH+wjlb342O3baiBYrttEf9a/A4zg4HOJAP4/nTrl/5EsK8inWGb57JhnF5/
uSlfGDSES61Wj4CQIzYYBCqSQh0zJPvtjUXDFtu+AXUEn53nTr46q/6ox65iPVSg
G/croS+JQxl5mLbINRFtytpWWwgazGNNx3LzBiTaGzC63tUePTIVB0c5dNESDZfZ
eG+4gpD8nAEuvQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:20 2025 by rpki-client