Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
File: UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft (raw, json)
Hash identifier: TauMiE/CGANvYq+gAjOo+k2TbkZnGb+EV3gs2JII+xs=
Subject key identifier: CA:90:E9:0D:C6:2A:63:8A:72:40:EE:9F:4E:5C:2E:28:32:98:D8:9A
Authority key identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF
Certificate issuer: /CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
Certificate serial: 0197B6A212EED45C78F1BE201F08305CF5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
Manifest number: 1316
Signing time: Sat 28 Jun 2025 13:02:44 +0000
Manifest this update: Sat 28 Jun 2025 13:02:44 +0000
Manifest next update: Sun 29 Jun 2025 13:02:44 +0000
Files and hashes: 1: MggUNL8VW9yE4LnaTyr5YJxrDwU.roa (hash: GpA5vo0L4EKCpZl/rQZR5bRixQFok1LnqW2Xg8KUiaQ=)
2: UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl (hash: AzXIQzc4POhUt2SvDuuPZ0Q14F7jKF37uVB+jMjjbKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:12:ee:d4:5c:78:f1:be:20:1f:08:30:5c:f5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
Validity
Not Before: Jun 28 13:02:44 2025 GMT
Not After : Jun 29 13:02:44 2025 GMT
Subject: CN=ca90e90dc62a638a7240ee9f4e5c2e283298d89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:36:e9:72:f3:73:39:6c:7a:cf:e4:12:7e:
17:1b:f1:2a:83:d3:64:b2:32:2c:78:06:7b:40:d1:
43:eb:f3:45:5a:d6:34:74:d5:e5:a2:3c:7e:7c:40:
0d:e8:3d:8e:c3:99:77:9a:d4:28:1d:7a:6f:aa:ba:
38:e5:4e:19:07:e4:d1:4c:b1:f2:a6:cb:e0:b4:a2:
50:78:1b:ba:68:2a:4c:19:b7:2e:81:52:b9:09:93:
d0:2b:7e:f4:e2:ac:f8:dc:b4:71:93:ce:f1:55:f1:
b8:d4:2d:e3:8f:81:6c:01:1d:a0:64:92:31:22:f6:
ec:ec:55:c5:38:3b:d3:6a:ff:7b:2d:ac:94:5e:c1:
e0:b9:b4:0d:d8:f1:fc:95:38:04:67:9f:17:e8:30:
07:9c:da:04:28:34:3e:43:e8:90:de:86:8d:42:70:
70:ba:b3:a3:58:70:6a:f4:b2:d0:cd:bb:0c:7f:d7:
75:f7:62:9b:6b:bb:2b:50:44:11:cd:20:c8:3f:f5:
7e:02:4c:52:56:82:2b:50:6b:18:99:dd:c7:02:ce:
db:89:5a:85:8e:5f:e1:d1:4d:3e:c8:f6:d2:e1:b2:
b7:9f:c3:7e:ff:7a:85:70:9a:54:43:8c:91:f7:c1:
6d:6c:d4:b4:5c:1f:6f:9f:04:9c:96:fd:04:66:66:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:90:E9:0D:C6:2A:63:8A:72:40:EE:9F:4E:5C:2E:28:32:98:D8:9A
X509v3 Authority Key Identifier:
keyid:52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:58:f7:d9:55:eb:61:0a:cc:83:c1:92:99:c4:82:95:40:2b:
28:e2:7a:55:1a:85:d4:70:d2:6c:eb:36:fc:6b:76:89:a1:58:
e7:77:1c:78:ec:ef:01:cb:29:67:6a:52:9d:1f:4c:d6:81:e1:
a2:95:8a:b3:26:83:4d:ae:15:70:c8:9f:f9:87:cc:5b:09:50:
ff:39:e7:82:12:d7:aa:68:e1:8a:40:14:0a:dc:e3:23:af:7d:
4c:8e:bd:99:7c:a6:8f:66:8f:a5:b8:f9:30:3e:ea:a5:0b:d1:
d2:2b:70:d6:be:5a:1d:04:56:52:77:de:6e:73:3a:15:c7:90:
8d:7b:2c:ac:08:fa:82:2a:fd:a5:ac:56:5c:07:b4:ed:7f:03:
7c:0b:df:30:cc:ed:cb:e4:3f:1e:b5:48:b8:4d:36:b2:06:96:
fd:ca:0e:c0:1d:7d:30:b6:74:d7:b6:69:75:3c:d8:20:43:f7:
10:a6:4f:fd:22:bb:dd:f9:f3:f7:6e:fe:75:60:99:fd:9e:cf:
e4:6e:08:2e:2d:90:15:76:27:f6:1c:0a:a6:ef:7e:f4:72:76:
7a:6f:19:72:a5:29:02:3b:96:23:c3:f5:81:a7:a1:26:a3:d2:
02:e4:e6:3d:fe:92:96:89:69:0d:89:0f:30:4e:35:fa:eb:b9:
93:8b:30:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ohLu1Fx48b4gHwgwXPXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzJkNDRkOWUwOGM4NzNkYjM1YzAyMTUxY2E0NGFlNTRi
NGI4YWYwHhcNMjUwNjI4MTMwMjQ0WhcNMjUwNjI5MTMwMjQ0WjAzMTEwLwYDVQQD
EyhjYTkwZTkwZGM2MmE2MzhhNzI0MGVlOWY0ZTVjMmUyODMyOThkODlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHs26XLzczlses/kEn4XG/Eqg9Nk
sjIseAZ7QNFD6/NFWtY0dNXlojx+fEAN6D2Ow5l3mtQoHXpvqro45U4ZB+TRTLHy
psvgtKJQeBu6aCpMGbcugVK5CZPQK3704qz43LRxk87xVfG41C3jj4FsAR2gZJIx
Ivbs7FXFODvTav97LayUXsHgubQN2PH8lTgEZ58X6DAHnNoEKDQ+Q+iQ3oaNQnBw
urOjWHBq9LLQzbsMf9d192Kba7srUEQRzSDIP/V+AkxSVoIrUGsYmd3HAs7biVqF
jl/h0U0+yPbS4bK3n8N+/3qFcJpUQ4yR98FtbNS0XB9vnwSclv0EZmZAxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqQ6Q3GKmOKckDun05cLigymNiaMB8GA1UdIwQY
MBaAFFIy1E2eCMhz2zXAIVHKRK5UtLivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpMVVRaNEl5SFBiTmNBaFVjcEVybFMwdUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84YjQwMGQtMWU4ZS00MGRhLWIxZDYt
YTY1NDFjZWIxZTQzLzEvVWpMVVRaNEl5SFBiTmNBaFVjcEVybFMwdUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi84YjQwMGQtMWU4ZS00MGRhLWIxZDYtYTY1NDFjZWIxZTQz
LzEvVWpMVVRaNEl5SFBiTmNBaFVjcEVybFMwdUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1j32VXr
YQrMg8GSmcSClUArKOJ6VRqF1HDSbOs2/Gt2iaFY53cceOzvAcspZ2pSnR9M1oHh
opWKsyaDTa4VcMif+YfMWwlQ/znnghLXqmjhikAUCtzjI699TI69mXymj2aPpbj5
MD7qpQvR0itw1r5aHQRWUnfebnM6FceQjXssrAj6gir9paxWXAe07X8DfAvfMMzt
y+Q/HrVIuE02sgaW/coOwB19MLZ017ZpdTzYIEP3EKZP/SK73fnz927+dWCZ/Z7P
5G4ILi2QFXYn9hwKpu9+9HJ2em8ZcqUpAjuWI8P1gaehJqPSAuTmPf6SlolpDYkP
ME41+uu5k4swFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:24 2025 by rpki-client