Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
File: UUxVK7lETAD5Ty8FlMujUvwsu7w.mft (raw, json)
Hash identifier: pVervmPRYlnG2ZG+aCq/C8dDs/G4TE1RBivjrJKGFU4=
Subject key identifier: E3:EC:CC:D1:3A:44:42:0E:4C:80:94:CB:57:7F:F0:14:88:06:EE:09
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Certificate issuer: /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial: 0198D4A847F96D33D8D58202C1B91A7D8D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:54 +0000
Manifest this update: Sat 23 Aug 2025 02:00:54 +0000
Manifest next update: Sun 24 Aug 2025 02:00:54 +0000
Files and hashes: 1: UUxVK7lETAD5Ty8FlMujUvwsu7w.crl (hash: B60MniDgh4KjVhnGetFEXWj0ky6zncaa9yyj42Rqlvs=)
2: xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa (hash: Pf5kik5m7cGGBhNkzoxIAzTv7Y7VAUUsC50OhLmpfJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:47:f9:6d:33:d8:d5:82:02:c1:b9:1a:7d:8d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Validity
Not Before: Aug 23 02:00:54 2025 GMT
Not After : Aug 24 02:00:54 2025 GMT
Subject: CN=e3ecccd13a44420e4c8094cb577ff0148806ee09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:a4:f5:a5:f9:aa:fa:19:6f:28:7c:b0:a7:
85:44:af:48:c8:de:ad:81:9e:a5:86:1e:82:82:e6:
e1:08:d6:ee:ef:5e:d0:fa:0f:24:04:16:2c:ed:55:
e0:4e:ba:0f:c1:f1:01:f2:b2:ef:3b:2e:8f:8d:0f:
38:9f:3b:fd:e5:86:63:bf:00:e9:b8:d3:83:0e:0f:
64:a3:d0:90:f0:92:ca:81:70:da:73:4c:e5:cf:9f:
10:54:ee:22:f2:82:50:6c:2d:86:e0:a8:53:54:7f:
f0:f2:1b:9a:dc:5e:74:b3:b9:ae:36:89:7c:5f:73:
73:ac:6a:1f:98:dc:c0:3f:84:25:bf:09:20:66:a6:
5d:22:fc:2d:b6:38:28:c4:d5:d5:28:ce:f4:af:8d:
a9:43:19:54:18:93:83:23:d9:dd:ef:f7:be:54:12:
ba:ad:a7:03:e9:2a:c1:38:76:6c:cf:1b:5e:57:22:
bd:13:2c:21:40:2e:91:5c:0f:b5:98:63:bc:d3:b4:
4d:e0:51:49:40:67:e8:cb:d0:b6:25:f1:1a:77:b0:
4c:9a:e9:ca:f7:e8:4e:2f:d4:f0:31:1d:26:6b:b8:
03:bd:2f:8a:89:f2:38:f6:13:e0:e6:9d:32:53:7c:
33:38:89:dd:ea:7c:d7:e4:fd:80:71:f5:50:a0:6c:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EC:CC:D1:3A:44:42:0E:4C:80:94:CB:57:7F:F0:14:88:06:EE:09
X509v3 Authority Key Identifier:
keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8b:9d:20:2b:b9:3a:5a:c7:e6:67:46:96:4b:12:73:5e:dd:
39:5c:e4:28:0f:f8:d2:18:79:3d:dc:b7:fc:1d:69:17:2d:a4:
8b:e5:04:16:3c:3f:f3:56:b3:7b:89:b8:67:74:4a:e1:f5:88:
16:41:11:92:05:e9:0d:82:b6:ac:95:28:e3:6b:d4:9b:0f:4e:
84:48:af:b2:90:83:e9:a2:d4:62:ed:72:55:6b:de:2e:e4:3c:
ec:c8:c6:cb:8c:be:99:4c:94:cf:29:70:21:d7:c2:cb:3a:ae:
73:9a:ee:f8:a8:f8:65:a3:1f:96:b3:43:37:56:ab:aa:32:15:
7e:1d:24:36:5b:69:cc:fb:32:40:0a:90:e8:d9:9b:95:86:16:
6c:18:e2:23:6f:f5:9c:66:60:88:35:6e:48:e9:11:07:7e:87:
01:11:5b:1e:77:d0:b9:1f:31:ed:45:ab:46:ac:ff:8a:fc:75:
0b:2c:53:f0:b8:31:71:14:37:6b:09:13:6a:22:d8:3f:85:3f:
d8:22:ac:4d:f3:2f:03:89:b0:0b:4f:3f:dd:f5:81:dc:98:de:
20:81:0b:fd:8e:87:75:bd:a4:2b:bf:27:ad:0c:da:67:94:91:
4d:2b:0d:9c:75:c7:3c:ad:23:56:7d:0a:fd:6c:e0:9a:fa:63:
82:37:93:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqEf5bTPY1YICwbkafY0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNGM1NTJiYjk0NDRjMDBmOTRmMmYwNTk0Y2JhMzUyZmMy
Y2JiYmMwHhcNMjUwODIzMDIwMDU0WhcNMjUwODI0MDIwMDU0WjAzMTEwLwYDVQQD
EyhlM2VjY2NkMTNhNDQ0MjBlNGM4MDk0Y2I1NzdmZjAxNDg4MDZlZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHWk9aX5qvoZbyh8sKeFRK9IyN6t
gZ6lhh6CgubhCNbu717Q+g8kBBYs7VXgTroPwfEB8rLvOy6PjQ84nzv95YZjvwDp
uNODDg9ko9CQ8JLKgXDac0zlz58QVO4i8oJQbC2G4KhTVH/w8hua3F50s7muNol8
X3NzrGofmNzAP4QlvwkgZqZdIvwttjgoxNXVKM70r42pQxlUGJODI9nd7/e+VBK6
racD6SrBOHZszxteVyK9EywhQC6RXA+1mGO807RN4FFJQGfoy9C2JfEad7BMmunK
9+hOL9TwMR0ma7gDvS+KifI49hPg5p0yU3wzOInd6nzX5P2AcfVQoGwXwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPszNE6REIOTICUy1d/8BSIBu4JMB8GA1UdIwQY
MBaAFFFMVSu5REwA+U8vBZTLo1L8LLu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVV4Vks3bEVUQUQ1VHk4RmxNdWpVdndzdTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84YjBiMTktZmJmYS00MzU3LWIyOTAt
OWVhNzUxZDU5YWI3LzEvVVV4Vks3bEVUQUQ1VHk4RmxNdWpVdndzdTd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS84YjBiMTktZmJmYS00MzU3LWIyOTAtOWVhNzUxZDU5YWI3
LzEvVVV4Vks3bEVUQUQ1VHk4RmxNdWpVdndzdTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYudICu5
OlrH5mdGlksSc17dOVzkKA/40hh5Pdy3/B1pFy2ki+UEFjw/81aze4m4Z3RK4fWI
FkERkgXpDYK2rJUo42vUmw9OhEivspCD6aLUYu1yVWveLuQ87MjGy4y+mUyUzylw
IdfCyzquc5ru+Kj4ZaMflrNDN1arqjIVfh0kNltpzPsyQAqQ6NmblYYWbBjiI2/1
nGZgiDVuSOkRB36HARFbHnfQuR8x7UWrRqz/ivx1CyxT8LgxcRQ3awkTaiLYP4U/
2CKsTfMvA4mwC08/3fWB3JjeIIEL/Y6Hdb2kK78nrQzaZ5SRTSsNnHXHPK0jVn0K
/WzgmvpjgjeTBQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:34 2025 by rpki-client