Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier: RurIhl145hUAswx30nZSb0YHDLo157MR/Ewzq/HJJuU=
Subject key identifier: A6:FA:A6:D1:B0:74:0A:57:53:FC:DD:59:30:CF:5A:06:C3:42:5A:0F
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial: 0197C1C8B2BF7D2DCD457718DC9E16F438B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number: 0727
Signing time: Mon 30 Jun 2025 17:00:44 +0000
Manifest this update: Mon 30 Jun 2025 17:00:44 +0000
Manifest next update: Tue 01 Jul 2025 17:00:44 +0000
Files and hashes: 1: gMULOubFLE1zJi0rMg32uHnZqCc.roa (hash: /wj2BLXMxaW2bHG7pTwC6aLckJJ+DGWw6dwVOt+QePs=)
2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: Q6rRdj9PMYf7VEjO7xk6mAwJEkBUeToiS0x3LCHDwug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c8:b2:bf:7d:2d:cd:45:77:18:dc:9e:16:f4:38:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
Validity
Not Before: Jun 30 17:00:44 2025 GMT
Not After : Jul 1 17:00:44 2025 GMT
Subject: CN=a6faa6d1b0740a5753fcdd5930cf5a06c3425a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:12:97:32:2c:5f:22:c4:a5:0e:89:0d:14:
fc:49:ac:6f:af:1d:a1:89:5a:08:d2:94:b8:fb:d5:
22:1f:60:70:af:47:9e:83:2f:61:ac:6f:10:39:4b:
53:f1:7c:51:5a:a9:db:34:13:5e:c0:a5:aa:ee:f4:
c1:7e:85:b6:55:fb:23:66:07:0a:16:c3:e3:ab:4a:
7c:ac:d0:89:1f:85:90:d8:9c:d0:54:6b:72:13:5e:
8e:18:9a:8c:0c:e3:4e:a7:41:d8:56:15:20:75:09:
9b:b0:c1:13:56:54:04:4c:e3:c6:7b:8c:23:b7:12:
d6:1f:72:b6:a4:33:58:d7:fb:18:58:b1:b8:2d:c8:
3a:0b:6e:0f:9b:24:68:1b:ed:0d:e7:cd:34:75:83:
9a:8e:74:38:01:73:af:d2:ee:0e:44:80:44:8a:6c:
ae:75:e3:6b:91:bf:de:21:4b:fe:1f:59:5c:84:7a:
26:02:ae:fe:06:88:ef:bd:29:f3:d2:69:c2:c2:6b:
a4:45:1a:bd:d1:24:7e:6a:f1:46:1e:80:4e:e2:a8:
b6:bb:e0:f9:1c:78:3d:33:8f:6b:1f:ed:43:1a:21:
e8:f4:1f:1c:6d:88:cb:6f:6f:23:38:b7:0c:a4:d4:
ab:bf:5e:e0:1b:79:ca:87:32:e7:1f:3f:b0:fa:c4:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FA:A6:D1:B0:74:0A:57:53:FC:DD:59:30:CF:5A:06:C3:42:5A:0F
X509v3 Authority Key Identifier:
keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:43:15:67:49:88:39:a1:0f:cf:2f:f1:1b:61:d7:c6:63:a5:
e7:03:4a:37:b0:2c:51:78:c7:ef:a1:ee:e9:02:a6:7e:74:73:
1a:84:c7:1d:60:a0:ee:e9:03:dd:8d:60:26:7f:4a:ba:6c:e5:
de:75:65:64:a6:53:df:83:08:e3:14:e0:ef:13:11:88:3a:72:
f0:f4:5e:1e:92:d5:d5:04:62:fb:5d:35:fe:f8:78:f9:4b:b0:
10:36:50:4b:00:c8:fd:c5:f1:fb:6b:ef:01:51:c1:46:f9:a4:
5d:28:5f:95:55:b8:92:a3:48:7a:21:3a:ed:86:de:be:3e:10:
b1:9b:be:ce:a4:b9:12:e8:2e:dc:4a:0d:48:d1:09:15:e5:be:
02:22:55:d3:31:ec:8f:55:4e:b1:c0:b0:e5:1b:80:88:6c:d4:
70:0a:3e:da:3a:0b:77:81:ce:7d:af:98:20:f2:65:6b:40:4b:
d0:99:c3:c1:cd:35:6d:16:e6:7e:1e:c6:ec:c2:21:59:f9:2e:
8c:9e:41:63:6e:5b:fe:88:0c:4d:d8:e7:5d:ab:8d:0a:fc:fc:
9a:a1:99:40:85:c5:14:46:bf:ac:07:28:bb:cf:82:8c:fc:e2:
34:44:f8:60:71:1d:78:c2:ac:84:bb:28:4c:27:e3:56:a9:e8:
79:50:3c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfByLK/fS3NRXcY3J4W9Di4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTUwMjM5N2RkNjQzOWMwNjhiZDA1M2YyODE4N2RkNzc1
NzQ1NzgwHhcNMjUwNjMwMTcwMDQ0WhcNMjUwNzAxMTcwMDQ0WjAzMTEwLwYDVQQD
EyhhNmZhYTZkMWIwNzQwYTU3NTNmY2RkNTkzMGNmNWEwNmMzNDI1YTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto8SlzIsXyLEpQ6JDRT8Saxvrx2h
iVoI0pS4+9UiH2Bwr0eegy9hrG8QOUtT8XxRWqnbNBNewKWq7vTBfoW2VfsjZgcK
FsPjq0p8rNCJH4WQ2JzQVGtyE16OGJqMDONOp0HYVhUgdQmbsMETVlQETOPGe4wj
txLWH3K2pDNY1/sYWLG4Lcg6C24PmyRoG+0N5800dYOajnQ4AXOv0u4ORIBEimyu
deNrkb/eIUv+H1lchHomAq7+BojvvSnz0mnCwmukRRq90SR+avFGHoBO4qi2u+D5
HHg9M49rH+1DGiHo9B8cbYjLb28jOLcMpNSrv17gG3nKhzLnHz+w+sT9xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb6ptGwdApXU/zdWTDPWgbDQloPMB8GA1UdIwQY
MBaAFI/lAjl91kOcBovQU/KBh913V0V4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1VQ09YM1dRNXdHaTlCVDhvR0gzWGRYUlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jZTQ2NzEtM2Y0My00MzNmLTg0NDUt
YmQ4MDQ3NTc2MmQ1LzEvai1VQ09YM1dRNXdHaTlCVDhvR0gzWGRYUlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jZTQ2NzEtM2Y0My00MzNmLTg0NDUtYmQ4MDQ3NTc2MmQ1
LzEvai1VQ09YM1dRNXdHaTlCVDhvR0gzWGRYUlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0MVZ0mI
OaEPzy/xG2HXxmOl5wNKN7AsUXjH76Hu6QKmfnRzGoTHHWCg7ukD3Y1gJn9Kumzl
3nVlZKZT34MI4xTg7xMRiDpy8PReHpLV1QRi+101/vh4+UuwEDZQSwDI/cXx+2vv
AVHBRvmkXShflVW4kqNIeiE67Ybevj4QsZu+zqS5Eugu3EoNSNEJFeW+AiJV0zHs
j1VOscCw5RuAiGzUcAo+2joLd4HOfa+YIPJla0BL0JnDwc01bRbmfh7G7MIhWfku
jJ5BY25b/ogMTdjnXauNCvz8mqGZQIXFFEa/rAcou8+CjPziNET4YHEdeMKshLso
TCfjVqnoeVA8Aw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:51:06 2025 by rpki-client