
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
File: UuQA66N5CiRc2rS05nu01gu-e0A.mft (raw, json)
Hash identifier: zEvqN1owvZNl5t4OeKiEBQBQH+SMyvarnyX8nBXCzEE=
Subject key identifier: DF:4C:77:CD:68:77:BD:2E:C7:80:81:24:BB:5A:48:A6:E5:42:E1:67
Authority key identifier: 52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
Certificate issuer: /CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Certificate serial: 0198D7E133A8BDF081C9001B65A3FF5DD86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
Manifest number: 0EA0
Signing time: Sat 23 Aug 2025 17:01:56 +0000
Manifest this update: Sat 23 Aug 2025 17:01:56 +0000
Manifest next update: Sun 24 Aug 2025 17:01:56 +0000
Files and hashes: 1: UuQA66N5CiRc2rS05nu01gu-e0A.crl (hash: oPZ22P2aPypFFuacXP1Z2EPxocJZaGpLJpEnztNj6iw=)
2: rtVpNZa3L_NWvprN4f-UPAZwfTo.roa (hash: 2HzqWuMhkSfDBFXNVGHFl9K4DvsafbSLLfoHlblLKUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:33:a8:bd:f0:81:c9:00:1b:65:a3:ff:5d:d8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Validity
Not Before: Aug 23 17:01:56 2025 GMT
Not After : Aug 24 17:01:56 2025 GMT
Subject: CN=df4c77cd6877bd2ec7808124bb5a48a6e542e167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:8d:12:03:db:53:8a:27:50:02:ac:ed:e6:
3f:7a:e7:6e:6f:d1:88:ec:31:b5:e7:60:c0:e4:b2:
65:46:ea:73:70:c0:a6:af:2f:b5:ad:cf:53:db:9e:
7b:aa:d1:66:a9:d7:f7:67:5c:2a:a4:3b:5a:77:d9:
de:8a:f8:66:51:fe:0a:4c:19:b2:8e:e8:a9:eb:3f:
0a:88:4a:6c:69:1a:53:1c:03:7e:c6:fb:95:98:22:
44:ff:9d:7e:be:eb:6a:4c:5d:ad:a5:a6:b7:32:be:
dc:a0:28:01:b2:86:7f:2f:8f:56:52:c5:1a:8e:15:
a2:d2:a8:4b:fd:59:27:2b:ad:41:8c:31:08:3c:42:
52:03:dd:e4:f0:b6:d9:28:56:91:c3:03:63:78:ad:
31:7b:75:92:f1:bb:95:85:66:97:3f:bc:52:b7:18:
c4:18:e3:c0:de:72:f4:96:ac:52:26:4c:6c:ac:47:
b8:6e:83:4a:6b:12:d9:2f:c6:11:d5:1e:ab:55:e6:
93:f2:0f:75:c1:f6:08:0d:4d:3c:c0:52:f9:a7:5d:
02:af:ec:2f:1e:2c:1f:1f:15:97:e2:c3:95:ae:fc:
36:19:42:30:bf:c3:82:7f:02:01:5d:b4:62:32:16:
c1:32:47:52:11:f6:b7:92:85:2f:85:aa:8e:40:29:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4C:77:CD:68:77:BD:2E:C7:80:81:24:BB:5A:48:A6:E5:42:E1:67
X509v3 Authority Key Identifier:
keyid:52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c0:9e:b8:f7:b7:83:45:bb:7f:5f:9c:8b:5e:1e:0b:5d:b0:
6c:7f:41:b9:b3:b6:4e:ad:eb:95:1c:f6:f1:f3:ec:de:a4:5b:
cd:2b:90:cd:d1:e8:1e:9d:24:8f:dc:ae:fe:9e:69:c6:1a:2f:
22:34:33:8f:b3:83:9a:53:cc:8c:33:52:da:6d:af:60:ff:21:
05:8b:95:2d:55:fa:76:ed:1a:4b:da:06:5a:05:81:dc:fe:4c:
9a:8c:f1:f1:3d:cb:27:7a:0f:af:49:1c:8a:98:30:c4:b6:f8:
5e:f6:cb:53:0a:1b:db:c7:62:4b:d0:91:1f:0d:53:95:a9:0c:
a3:ab:87:cd:6c:5f:55:10:86:2d:2f:87:16:d3:44:28:39:33:
a8:00:6f:f8:36:69:23:23:51:a4:43:2c:8a:59:3d:96:95:a3:
f2:dd:38:9b:4b:f6:a3:4a:2a:a7:df:73:62:60:6a:6f:d1:8f:
f8:54:0e:b1:4d:0a:c0:54:c8:e0:de:bb:99:37:49:a5:29:5f:
9e:0f:18:03:89:6a:81:6b:06:4d:07:72:33:73:38:e7:eb:ba:
c5:b2:26:fc:96:bb:fb:f8:bb:5d:bc:a6:36:49:69:e4:cf:63:
29:31:ef:c1:55:36:a2:fc:56:f9:5a:a4:ed:a4:af:b9:f6:8e:
cf:8a:ca:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4TOovfCByQAbZaP/XdhsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTQwMGViYTM3OTBhMjQ1Y2RhYjRiNGU2N2JiNGQ2MGJi
ZTdiNDAwHhcNMjUwODIzMTcwMTU2WhcNMjUwODI0MTcwMTU2WjAzMTEwLwYDVQQD
EyhkZjRjNzdjZDY4NzdiZDJlYzc4MDgxMjRiYjVhNDhhNmU1NDJlMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVSNEgPbU4onUAKs7eY/eudub9GI
7DG152DA5LJlRupzcMCmry+1rc9T2557qtFmqdf3Z1wqpDtad9neivhmUf4KTBmy
juip6z8KiEpsaRpTHAN+xvuVmCJE/51+vutqTF2tpaa3Mr7coCgBsoZ/L49WUsUa
jhWi0qhL/VknK61BjDEIPEJSA93k8LbZKFaRwwNjeK0xe3WS8buVhWaXP7xStxjE
GOPA3nL0lqxSJkxsrEe4boNKaxLZL8YR1R6rVeaT8g91wfYIDU08wFL5p10Cr+wv
HiwfHxWX4sOVrvw2GUIwv8OCfwIBXbRiMhbBMkdSEfa3koUvhaqOQCl35QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9Md81od70ux4CBJLtaSKblQuFnMB8GA1UdIwQY
MBaAFFLkAOujeQokXNq0tOZ7tNYLvntAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVRQTY2TjVDaVJjMnJTMDVudTAxZ3UtZTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lM2QxOWYtMjhmYi00NWNiLWFmZTAt
Zjk3YWQzMDQ0ZTAyLzEvVXVRQTY2TjVDaVJjMnJTMDVudTAxZ3UtZTBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lM2QxOWYtMjhmYi00NWNiLWFmZTAtZjk3YWQzMDQ0ZTAy
LzEvVXVRQTY2TjVDaVJjMnJTMDVudTAxZ3UtZTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMCeuPe3
g0W7f1+ci14eC12wbH9BubO2Tq3rlRz28fPs3qRbzSuQzdHoHp0kj9yu/p5pxhov
IjQzj7ODmlPMjDNS2m2vYP8hBYuVLVX6du0aS9oGWgWB3P5Mmozx8T3LJ3oPr0kc
ipgwxLb4XvbLUwob28diS9CRHw1TlakMo6uHzWxfVRCGLS+HFtNEKDkzqABv+DZp
IyNRpEMsilk9lpWj8t04m0v2o0oqp99zYmBqb9GP+FQOsU0KwFTI4N67mTdJpSlf
ng8YA4lqgWsGTQdyM3M45+u6xbIm/Ja7+/i7XbymNklp5M9jKTHvwVU2ovxW+Vqk
7aSvufaOz4rKUw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:33:00 2025 by rpki-client