Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
File: UJw4zD6qNVb6OaIvMNwbpINv6J8.mft (raw, json)
Hash identifier: sSua9IVVnxfR/aP+QXMkah4C7KRHhOzLlLA6T7JI+gQ=
Subject key identifier: DE:08:32:61:6A:91:1C:2B:BE:81:27:CA:C1:4C:2F:04:20:D9:C0:04
Authority key identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
Certificate issuer: /CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Certificate serial: 0198D473F00C455B0A73997FCB1B18735713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:03:44 +0000
Manifest this update: Sat 23 Aug 2025 01:03:44 +0000
Manifest next update: Sun 24 Aug 2025 01:03:44 +0000
Files and hashes: 1: UJw4zD6qNVb6OaIvMNwbpINv6J8.crl (hash: Bwt+JXmpdU7VG7MipbKy1pwbUy6kiJ6Jb6o2T+VQ9Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f0:0c:45:5b:0a:73:99:7f:cb:1b:18:73:57:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Validity
Not Before: Aug 23 01:03:44 2025 GMT
Not After : Aug 24 01:03:44 2025 GMT
Subject: CN=de0832616a911c2bbe8127cac14c2f0420d9c004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:44:06:47:ca:45:d5:d3:2a:c9:42:b0:1e:
43:0e:0a:9a:f5:51:c0:d5:43:43:ef:63:c1:22:6b:
a0:ca:29:94:46:9e:66:0e:34:3f:5d:76:3b:80:1d:
ba:a7:81:96:cf:c5:1d:1a:45:8a:86:2b:bd:10:94:
59:b2:c0:07:02:d5:49:7a:d5:ed:c0:24:81:c0:8c:
ee:56:63:0a:0a:3a:c4:a5:f8:13:a1:f5:3b:e3:a1:
e0:dd:cb:23:ca:a2:ca:9d:c3:70:8a:6d:8d:e0:a1:
9e:70:79:fe:50:b3:38:35:93:99:7e:a2:93:1f:b3:
59:6a:d0:f2:92:d4:16:d9:3d:f9:83:6c:8b:e5:93:
87:ed:06:65:4b:8b:89:20:63:80:2a:1d:27:e9:b6:
81:24:1f:24:bd:02:84:93:5d:a3:b1:d4:3f:fc:aa:
ce:03:c9:3c:0c:46:ab:6e:54:61:6a:f3:0a:34:11:
aa:04:51:6b:6f:5f:95:83:6f:fd:53:0d:ba:47:8c:
bd:4a:2c:95:75:3c:2f:e4:0a:c0:7c:8a:c0:fe:c2:
49:f5:a8:ce:bd:d3:d8:3f:35:a7:7c:04:d3:09:40:
af:14:1c:00:65:8f:b7:a7:f2:b4:52:36:e4:b9:96:
18:99:b9:71:cb:98:ce:64:5d:2f:dc:d7:1b:18:1c:
ef:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:08:32:61:6A:91:1C:2B:BE:81:27:CA:C1:4C:2F:04:20:D9:C0:04
X509v3 Authority Key Identifier:
keyid:50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c8:e7:b4:58:f6:df:48:f8:e2:2b:23:d9:29:50:09:1c:f6:
9a:31:3f:48:80:8a:43:af:8b:c9:40:0c:3e:59:d8:af:de:07:
2b:82:1f:cb:ac:0f:25:56:30:1b:3b:04:85:b9:c5:76:0e:a4:
8a:76:58:c7:31:41:0c:7b:c5:e3:b8:3c:a5:bd:33:0f:2f:d6:
c9:66:9f:de:31:88:71:77:5f:97:81:df:a7:65:47:61:34:b2:
8a:ce:af:8a:37:6f:b1:b2:dc:2d:8d:b0:37:6d:29:3c:04:67:
3a:be:2d:dd:18:f2:a1:d5:a8:e2:74:ea:35:ff:99:69:ed:db:
7f:57:61:f8:57:26:fa:4d:2b:fd:2f:91:71:4b:84:2e:ba:21:
09:cc:20:c2:b6:22:6f:6e:57:06:1e:5d:de:c5:9c:67:f1:00:
24:7e:46:4c:8f:a6:68:76:e9:f1:aa:b2:41:93:69:14:60:1f:
b3:e6:49:16:0c:db:16:da:a7:8b:f1:ff:a2:7a:7a:28:47:4e:
11:5d:05:bf:89:d2:98:2c:c4:73:6e:99:47:51:2d:a7:d9:76:
12:f7:51:78:42:ff:ff:fd:34:ef:53:99:26:9e:b7:76:86:e2:
49:dc:e8:33:3f:0a:a8:ff:58:8b:06:0f:dd:32:13:3d:f3:75:
dd:aa:3c:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc/AMRVsKc5l/yxsYc1cTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWMzOGNjM2VhYTM1NTZmYTM5YTIyZjMwZGMxYmE0ODM2
ZmU4OWYwHhcNMjUwODIzMDEwMzQ0WhcNMjUwODI0MDEwMzQ0WjAzMTEwLwYDVQQD
EyhkZTA4MzI2MTZhOTExYzJiYmU4MTI3Y2FjMTRjMmYwNDIwZDljMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvVEBkfKRdXTKslCsB5DDgqa9VHA
1UND72PBImugyimURp5mDjQ/XXY7gB26p4GWz8UdGkWKhiu9EJRZssAHAtVJetXt
wCSBwIzuVmMKCjrEpfgTofU746Hg3csjyqLKncNwim2N4KGecHn+ULM4NZOZfqKT
H7NZatDyktQW2T35g2yL5ZOH7QZlS4uJIGOAKh0n6baBJB8kvQKEk12jsdQ//KrO
A8k8DEarblRhavMKNBGqBFFrb1+Vg2/9Uw26R4y9SiyVdTwv5ArAfIrA/sJJ9ajO
vdPYPzWnfATTCUCvFBwAZY+3p/K0UjbkuZYYmblxy5jOZF0v3NcbGBzvOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4IMmFqkRwrvoEnysFMLwQg2cAEMB8GA1UdIwQY
MBaAFFCcOMw+qjVW+jmiLzDcG6SDb+ifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp3NHpENnFOVmI2T2FJdk1Od2JwSU52Nko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9mYjAwZWMtYmFiZC00MTcyLThkNGQt
MmE2NGY5OWJhZjVmLzEvVUp3NHpENnFOVmI2T2FJdk1Od2JwSU52Nko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9mYjAwZWMtYmFiZC00MTcyLThkNGQtMmE2NGY5OWJhZjVm
LzEvVUp3NHpENnFOVmI2T2FJdk1Od2JwSU52Nko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsjntFj2
30j44isj2SlQCRz2mjE/SICKQ6+LyUAMPlnYr94HK4Ify6wPJVYwGzsEhbnFdg6k
inZYxzFBDHvF47g8pb0zDy/WyWaf3jGIcXdfl4Hfp2VHYTSyis6vijdvsbLcLY2w
N20pPARnOr4t3RjyodWo4nTqNf+Zae3bf1dh+Fcm+k0r/S+RcUuELrohCcwgwrYi
b25XBh5d3sWcZ/EAJH5GTI+maHbp8aqyQZNpFGAfs+ZJFgzbFtqni/H/onp6KEdO
EV0Fv4nSmCzEc26ZR1Etp9l2EvdReEL///0071OZJp63dobiSdzoMz8KqP9YiwYP
3TITPfN13ao8Tg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:22 2025 by rpki-client