Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: KI+/Ks28xAvYlCsloyQQs14cwkDFd2y8RUOrPXScTVQ=
Subject key identifier: 1C:9F:E1:8D:E7:87:64:36:39:57:3D:DE:E4:02:48:30:64:D2:68:61
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 0198D65F87D93011D5B5E11C696ADDB472A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:41 +0000
Manifest this update: Sat 23 Aug 2025 10:00:41 +0000
Manifest next update: Sun 24 Aug 2025 10:00:41 +0000
Files and hashes: 1: 20jWiNa9lpRbt6Z9H39OkMSzDj0.roa (hash: ycgKPEXuVp6S/jba9lnIlg52vzn3ozObwHjih623JU0=)
2: Z6HFahWFFQZoRakyttCStfHboiI.roa (hash: Zw2JYkod1FG2LmToml/rEnl9fqbRcjF21ljWrCU4l0U=)
3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: D2GYaNvaiKgB7MBFx95lbQBG7XbwuP6Pj+iW58cGzT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:87:d9:30:11:d5:b5:e1:1c:69:6a:dd:b4:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Aug 23 10:00:41 2025 GMT
Not After : Aug 24 10:00:41 2025 GMT
Subject: CN=1c9fe18de787643639573ddee402483064d26861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:25:ca:94:ae:dd:97:21:76:17:17:29:f6:
01:67:26:9b:c9:c8:7e:6b:ab:00:51:e7:38:6c:13:
08:18:39:31:0d:9b:f2:5c:9c:2f:da:27:94:5a:a3:
78:95:b6:fb:ac:3a:16:dc:87:bb:55:8d:89:be:4f:
01:8a:f5:eb:20:ad:c9:82:b9:25:b4:b0:43:a4:1e:
02:42:e7:93:f5:82:11:b7:b2:46:c5:09:56:3f:94:
d3:04:80:18:e7:f5:e2:4c:96:bd:32:52:f5:1e:d9:
96:41:00:73:15:5b:c6:85:1e:8a:2a:eb:96:97:b8:
1b:7b:83:6a:1a:05:95:07:db:72:b9:3e:e8:1a:59:
2c:41:f2:8d:ed:42:c4:c9:d6:23:93:66:4f:22:3e:
00:4c:ac:d5:a3:e3:9f:d5:6e:6c:76:1d:c0:23:2e:
44:f6:02:2c:c7:ac:b0:27:c9:2f:86:b4:20:4e:55:
6e:8b:a6:29:80:3d:99:a8:eb:40:f4:0a:82:87:17:
e6:ab:bf:df:32:c6:d6:cd:3b:62:73:5b:12:7d:7b:
ab:38:b7:3c:65:db:30:60:f0:db:47:51:25:c2:08:
1a:67:ba:f0:80:8e:ff:19:6d:9a:39:89:28:93:a7:
fc:b5:a6:cc:44:ba:10:b1:bd:07:bc:eb:09:7b:1b:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9F:E1:8D:E7:87:64:36:39:57:3D:DE:E4:02:48:30:64:D2:68:61
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6e:37:50:48:35:e3:b8:93:22:58:e3:b7:e4:e6:78:04:0b:
9d:82:ae:2d:37:a7:d0:47:8f:94:94:32:22:ac:f8:f7:c0:44:
4b:91:f9:54:61:a4:68:69:bf:4d:5e:21:e8:ca:77:70:99:ad:
61:07:52:14:a3:ad:3d:01:8c:19:1b:06:a4:7a:dd:34:6a:2c:
2d:dc:31:3d:84:7a:bb:c3:3c:43:37:f2:c0:94:2d:f4:bb:b9:
e2:d3:db:c6:7f:33:4c:29:22:9f:34:39:6d:4a:6e:29:bf:b7:
63:dd:4d:61:86:97:aa:d9:4f:3e:cf:2e:75:24:b9:34:f8:9e:
a4:5c:6a:14:a1:2b:e6:cc:0a:67:75:8f:d4:4a:d7:0e:47:34:
1c:52:e8:c6:d1:72:2b:cb:0e:63:27:96:d2:e1:33:17:44:3d:
f2:f7:e1:8a:7d:3d:6a:72:28:70:df:04:a9:d8:d9:9b:49:61:
14:1e:3f:2d:a5:69:52:18:14:45:22:0f:e0:39:bb:42:7d:d0:
0e:ef:ea:b5:91:1d:84:f1:85:a8:1e:99:b0:8b:1a:ea:ce:1e:
ac:77:96:eb:6c:cb:cb:d8:4d:ce:ce:7b:7b:20:d7:9b:ba:63:
b0:95:ff:57:23:3d:a7:a5:c9:f3:08:ab:b6:39:f1:f2:a4:30:
18:d6:08:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX4fZMBHVteEcaWrdtHKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MDMyYmRiMTI4Yzg2ZTAwYjIxYzc3OTU5YTgwMTFjNDBk
MDY1MGMwHhcNMjUwODIzMTAwMDQxWhcNMjUwODI0MTAwMDQxWjAzMTEwLwYDVQQD
EygxYzlmZTE4ZGU3ODc2NDM2Mzk1NzNkZGVlNDAyNDgzMDY0ZDI2ODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw4lypSu3ZchdhcXKfYBZyabych+
a6sAUec4bBMIGDkxDZvyXJwv2ieUWqN4lbb7rDoW3Ie7VY2Jvk8BivXrIK3Jgrkl
tLBDpB4CQueT9YIRt7JGxQlWP5TTBIAY5/XiTJa9MlL1HtmWQQBzFVvGhR6KKuuW
l7gbe4NqGgWVB9tyuT7oGlksQfKN7ULEydYjk2ZPIj4ATKzVo+Of1W5sdh3AIy5E
9gIsx6ywJ8kvhrQgTlVui6YpgD2ZqOtA9AqChxfmq7/fMsbWzTtic1sSfXurOLc8
ZdswYPDbR1ElwggaZ7rwgI7/GW2aOYkok6f8tabMRLoQsb0HvOsJexsI4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByf4Y3nh2Q2OVc93uQCSDBk0mhhMB8GA1UdIwQY
MBaAFLkDK9sSjIbgCyHHeVmoARxA0GUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iY2IwM2QtMWMxMS00NTE2LWE4OGYt
ZmU4NDZmNzVkMTcwLzEvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iY2IwM2QtMWMxMS00NTE2LWE4OGYtZmU4NDZmNzVkMTcw
LzEvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKG43UEg1
47iTIljjt+TmeAQLnYKuLTen0EePlJQyIqz498BES5H5VGGkaGm/TV4h6Mp3cJmt
YQdSFKOtPQGMGRsGpHrdNGosLdwxPYR6u8M8QzfywJQt9Lu54tPbxn8zTCkinzQ5
bUpuKb+3Y91NYYaXqtlPPs8udSS5NPiepFxqFKEr5swKZ3WP1ErXDkc0HFLoxtFy
K8sOYyeW0uEzF0Q98vfhin09anIocN8EqdjZm0lhFB4/LaVpUhgURSIP4Dm7Qn3Q
Du/qtZEdhPGFqB6ZsIsa6s4erHeW62zLy9hNzs57eyDXm7pjsJX/VyM9p6XJ8wir
tjnx8qQwGNYI0Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:54 2025 by rpki-client