Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
File: uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft (raw, json)
Hash identifier: FoHgAAa+UBhckA0afjfAb47k1ABwNMbtukXRTj0jx78=
Subject key identifier: 74:5E:FD:E6:38:54:55:F1:86:1B:C0:C4:08:BB:45:9B:35:9F:9F:7D
Authority key identifier: BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
Certificate issuer: /CN=bafd79b6dd85290fef6169a44e426107d274651a
Certificate serial: 0198D6604B05008069301C8B3296BBA38996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
Manifest number: 053A
Signing time: Sat 23 Aug 2025 10:01:31 +0000
Manifest this update: Sat 23 Aug 2025 10:01:31 +0000
Manifest next update: Sun 24 Aug 2025 10:01:31 +0000
Files and hashes: 1: 6CYEFdNOzyIbBisD1D5M9NGwi4c.roa (hash: TPBGKST5Y+J6z2fr0kA62OOn3rCc61+iQygU8zg4rmY=)
2: RfapQx5kz-KcEUJBDhqlf36XGPk.roa (hash: 5esPSUrHtO9ZpdIa9TheJp5LPtvTGdoUIoS8FI2YC2U=)
3: uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl (hash: OWre4apunVrg1iRLa0N7OAtrOaVuvT+fch8lLCJwJN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4b:05:00:80:69:30:1c:8b:32:96:bb:a3:89:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafd79b6dd85290fef6169a44e426107d274651a
Validity
Not Before: Aug 23 10:01:31 2025 GMT
Not After : Aug 24 10:01:31 2025 GMT
Subject: CN=745efde6385455f1861bc0c408bb459b359f9f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:77:f3:cc:8a:8b:3b:17:43:f3:1f:87:80:
4e:f5:02:9b:0c:54:d2:6c:6e:3e:16:05:48:53:1c:
11:6a:9f:98:d2:c5:6d:08:40:25:93:b7:d5:83:37:
ea:ae:e5:34:9d:35:aa:30:e7:8a:bc:6e:d1:fb:24:
bd:7b:14:2b:89:e6:dc:74:69:48:fe:6b:81:8f:65:
42:94:0a:1b:9f:d5:f1:93:65:b3:25:fc:63:94:5f:
2e:25:31:df:c9:8c:c8:4d:89:90:f2:ed:70:85:71:
58:d9:c5:6f:af:f9:9e:ee:ee:81:18:36:e1:1b:38:
35:b7:63:73:da:6c:d1:18:5f:30:fa:c7:81:fa:cb:
c8:92:c8:82:59:7c:39:fb:60:7d:81:76:25:b2:b9:
3a:8e:7f:15:e2:77:81:bb:d2:07:4d:27:b1:0b:75:
df:32:b4:65:a2:f6:57:27:bf:dd:7c:8c:f6:2c:3f:
c5:ab:b4:ac:d6:37:c1:bf:a4:fa:9e:10:48:1c:77:
0d:72:47:cb:5f:e4:42:e3:77:9b:46:a7:21:3f:a3:
64:d8:dd:42:b8:58:57:80:b6:d8:b3:41:27:61:20:
3e:b4:78:30:f3:d4:79:5b:e3:75:41:c0:17:10:f9:
75:ed:63:43:65:09:bf:a6:20:a3:df:b0:af:22:d1:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:FD:E6:38:54:55:F1:86:1B:C0:C4:08:BB:45:9B:35:9F:9F:7D
X509v3 Authority Key Identifier:
keyid:BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:83:6c:80:a0:74:17:01:3e:58:d4:da:c9:00:33:58:05:d6:
50:e8:df:67:9b:9e:1f:ae:c6:4b:4f:e9:78:10:68:7e:20:fa:
a6:17:ab:ed:d1:f7:3b:3f:48:86:81:06:36:e6:13:0e:94:82:
3d:99:55:c2:01:f2:e4:17:eb:40:8b:09:a4:59:e1:a3:d8:c5:
32:27:64:ed:15:22:56:32:30:89:e3:8e:6f:c8:9a:bb:bc:7c:
70:6b:0b:cc:c8:b7:00:1a:74:99:84:fc:64:2f:d5:47:70:58:
e7:1f:75:cc:9b:b7:c7:96:02:af:95:80:d6:97:99:f9:1a:7c:
bc:70:70:a8:76:da:03:e0:c9:73:9f:5c:59:ce:d7:d7:d3:a3:
35:ec:a7:fd:ae:fd:90:f3:cb:4c:13:72:f1:8a:2d:f5:86:e3:
f4:4c:e3:4c:08:33:cc:46:24:26:27:29:a9:d1:c2:92:73:b3:
2f:80:d6:f6:6b:01:9f:34:9b:70:fb:b9:b8:b1:c2:71:6b:3e:
e7:44:d6:e8:a0:7c:1a:59:16:c9:d5:c2:40:5a:09:46:72:cb:
65:8c:63:ed:18:91:4b:4b:45:9b:a2:37:f1:5a:04:42:dc:32:
0a:e3:34:c1:45:ef:cd:81:11:91:ae:2b:e4:02:16:07:ef:74:
32:a4:85:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYEsFAIBpMByLMpa7o4mWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhZmQ3OWI2ZGQ4NTI5MGZlZjYxNjlhNDRlNDI2MTA3ZDI3
NDY1MWEwHhcNMjUwODIzMTAwMTMxWhcNMjUwODI0MTAwMTMxWjAzMTEwLwYDVQQD
Eyg3NDVlZmRlNjM4NTQ1NWYxODYxYmMwYzQwOGJiNDU5YjM1OWY5ZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16t388yKizsXQ/Mfh4BO9QKbDFTS
bG4+FgVIUxwRap+Y0sVtCEAlk7fVgzfqruU0nTWqMOeKvG7R+yS9exQriebcdGlI
/muBj2VClAobn9Xxk2WzJfxjlF8uJTHfyYzITYmQ8u1whXFY2cVvr/me7u6BGDbh
Gzg1t2Nz2mzRGF8w+seB+svIksiCWXw5+2B9gXYlsrk6jn8V4neBu9IHTSexC3Xf
MrRlovZXJ7/dfIz2LD/Fq7Ss1jfBv6T6nhBIHHcNckfLX+RC43ebRqchP6Nk2N1C
uFhXgLbYs0EnYSA+tHgw89R5W+N1QcAXEPl17WNDZQm/piCj37CvItGW+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRe/eY4VFXxhhvAxAi7RZs1n599MB8GA1UdIwQY
MBaAFLr9ebbdhSkP72FppE5CYQfSdGUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXYxNXR0MkZLUV92WVdta1RrSmhCOUowWlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNjlhMjEtZjNjMS00M2I5LWFkZTUt
ODY5NmE5NjA0NGYyLzEvdXYxNXR0MkZLUV92WVdta1RrSmhCOUowWlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xNjlhMjEtZjNjMS00M2I5LWFkZTUtODY5NmE5NjA0NGYy
LzEvdXYxNXR0MkZLUV92WVdta1RrSmhCOUowWlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4NsgKB0
FwE+WNTayQAzWAXWUOjfZ5ueH67GS0/peBBofiD6pher7dH3Oz9IhoEGNuYTDpSC
PZlVwgHy5BfrQIsJpFnho9jFMidk7RUiVjIwieOOb8iau7x8cGsLzMi3ABp0mYT8
ZC/VR3BY5x91zJu3x5YCr5WA1peZ+Rp8vHBwqHbaA+DJc59cWc7X19OjNeyn/a79
kPPLTBNy8Yot9Ybj9EzjTAgzzEYkJicpqdHCknOzL4DW9msBnzSbcPu5uLHCcWs+
50TW6KB8GlkWydXCQFoJRnLLZYxj7RiRS0tFm6I38VoEQtwyCuM0wUXvzYERka4r
5AIWB+90MqSFdA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:34:41 2025 by rpki-client