Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
File: UgO7TxlYEfjXcjygGgsv-963Whs.mft (raw, json)
Hash identifier: iQFZCoHs5iP2COWYvRjsPNOFlbalMRBi4Ls0VFCQ6UA=
Subject key identifier: E1:40:09:D1:46:76:24:3F:F1:73:6F:0C:4F:B5:08:F5:FF:5E:5C:68
Authority key identifier: 52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
Certificate issuer: /CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Certificate serial: 0198D6CD30409738FAFCE3874BF2F4713AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
Manifest number: 027F
Signing time: Sat 23 Aug 2025 12:00:28 +0000
Manifest this update: Sat 23 Aug 2025 12:00:28 +0000
Manifest next update: Sun 24 Aug 2025 12:00:28 +0000
Files and hashes: 1: UgO7TxlYEfjXcjygGgsv-963Whs.crl (hash: pWD9iF43yPL3KISKQqChnlgtm3Zn3gcTVimsUzqd93w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:30:40:97:38:fa:fc:e3:87:4b:f2:f4:71:3a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Validity
Not Before: Aug 23 12:00:28 2025 GMT
Not After : Aug 24 12:00:28 2025 GMT
Subject: CN=e14009d14676243ff1736f0c4fb508f5ff5e5c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:8a:28:51:8f:3b:eb:73:6c:6a:45:c8:7c:
88:a8:b5:61:53:c0:84:ef:4c:51:fa:36:08:78:a3:
37:b8:c3:16:e9:5a:03:37:8a:61:5d:ea:1b:dc:8a:
61:2c:a6:d6:ed:bc:95:7c:54:eb:5c:6e:7a:c7:57:
59:9f:77:38:42:ec:df:35:5f:3b:db:77:d3:b4:6e:
c8:47:3c:e6:9a:09:84:5a:f7:02:c0:03:a8:b0:3c:
2d:55:c2:83:5c:ca:12:7e:e3:48:e7:a7:3c:84:b5:
80:38:4f:2d:1d:b1:c3:e7:44:94:13:6a:ba:72:db:
2a:13:ec:2f:16:3f:e7:67:a4:48:f5:81:c1:dc:47:
c1:1e:74:ef:eb:a5:36:41:d5:7e:a0:f9:2b:7f:b3:
42:49:de:cf:41:2c:69:db:4c:59:5c:62:c7:47:09:
3f:5b:1c:3a:84:15:a5:94:eb:99:2c:91:4b:9f:6d:
d5:dd:c7:4c:20:8e:04:b4:7a:e2:04:e2:1c:e3:e1:
a4:8f:06:08:96:18:ef:c1:6e:89:45:42:9c:cb:62:
22:72:ff:55:8c:5a:55:52:6e:27:ad:5f:fd:c3:65:
f9:5f:23:22:1e:d4:07:3c:ac:ac:48:8c:25:2c:f6:
1c:b5:a7:de:1a:6e:d2:2d:86:f2:85:50:21:b5:cf:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:40:09:D1:46:76:24:3F:F1:73:6F:0C:4F:B5:08:F5:FF:5E:5C:68
X509v3 Authority Key Identifier:
keyid:52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:66:d3:ce:61:2d:52:6f:0e:72:c8:3a:02:81:49:7b:19:4d:
1a:b8:72:3d:77:ec:2a:0c:07:22:b2:b9:42:a8:ad:f3:70:92:
78:b1:7d:31:05:7c:39:94:12:53:3e:b1:d7:fc:07:3f:38:5b:
5f:63:5f:56:ea:2b:59:7f:1e:51:e7:25:fb:20:4b:ab:24:18:
79:95:6a:56:0a:21:38:a8:40:68:b9:18:1f:b7:44:ab:13:e5:
c4:c4:bc:05:3d:f0:69:2a:e1:85:a1:c0:36:df:f2:18:e9:64:
a1:b6:b3:7b:7a:de:b8:6a:ef:48:18:d4:90:d1:06:1e:20:eb:
50:cf:24:bb:d3:dc:31:9b:19:6a:e0:f7:53:7f:16:3d:76:01:
37:3e:7a:d0:25:0c:08:52:fa:dc:60:f3:10:bd:74:3f:f3:9a:
17:97:db:b9:e6:b7:6d:f8:fc:26:b2:3e:f8:00:68:4d:16:d0:
53:bb:ed:22:6e:9a:9b:7f:ca:b9:fc:98:68:49:5f:8a:dd:d0:
e4:ce:a5:f7:72:f1:e4:76:bb:e0:5d:57:fd:ee:f4:0e:9f:94:
79:48:c4:33:e1:40:b7:9f:e1:1d:3f:e4:9b:27:93:dd:c5:fd:
33:5e:e1:be:c1:82:1e:a8:4c:d6:e8:9c:ec:82:6a:06:41:8a:
5e:8e:b0:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzTBAlzj6/OOHS/L0cTrrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMDNiYjRmMTk1ODExZjhkNzcyM2NhMDFhMGIyZmZiZGVi
NzVhMWIwHhcNMjUwODIzMTIwMDI4WhcNMjUwODI0MTIwMDI4WjAzMTEwLwYDVQQD
EyhlMTQwMDlkMTQ2NzYyNDNmZjE3MzZmMGM0ZmI1MDhmNWZmNWU1YzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlWKKFGPO+tzbGpFyHyIqLVhU8CE
70xR+jYIeKM3uMMW6VoDN4phXeob3IphLKbW7byVfFTrXG56x1dZn3c4QuzfNV87
23fTtG7IRzzmmgmEWvcCwAOosDwtVcKDXMoSfuNI56c8hLWAOE8tHbHD50SUE2q6
ctsqE+wvFj/nZ6RI9YHB3EfBHnTv66U2QdV+oPkrf7NCSd7PQSxp20xZXGLHRwk/
Wxw6hBWllOuZLJFLn23V3cdMII4EtHriBOIc4+GkjwYIlhjvwW6JRUKcy2Iicv9V
jFpVUm4nrV/9w2X5XyMiHtQHPKysSIwlLPYctafeGm7SLYbyhVAhtc95SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFACdFGdiQ/8XNvDE+1CPX/XlxoMB8GA1UdIwQY
MBaAFFIDu08ZWBH413I8oBoLL/vet1obMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWdPN1R4bFlFZmpYY2p5Z0dnc3YtOTYzV2hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wYTkyYTEtZTU5NC00MWVlLTg1NWMt
MmJhNmEwMjJkNGM5LzEvVWdPN1R4bFlFZmpYY2p5Z0dnc3YtOTYzV2hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wYTkyYTEtZTU5NC00MWVlLTg1NWMtMmJhNmEwMjJkNGM5
LzEvVWdPN1R4bFlFZmpYY2p5Z0dnc3YtOTYzV2hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2bTzmEt
Um8Ocsg6AoFJexlNGrhyPXfsKgwHIrK5Qqit83CSeLF9MQV8OZQSUz6x1/wHPzhb
X2NfVuorWX8eUecl+yBLqyQYeZVqVgohOKhAaLkYH7dEqxPlxMS8BT3waSrhhaHA
Nt/yGOlkobaze3reuGrvSBjUkNEGHiDrUM8ku9PcMZsZauD3U38WPXYBNz560CUM
CFL63GDzEL10P/OaF5fbuea3bfj8JrI++ABoTRbQU7vtIm6am3/KufyYaElfit3Q
5M6l93Lx5Ha74F1X/e70Dp+UeUjEM+FAt5/hHT/kmyeT3cX9M17hvsGCHqhM1uic
7IJqBkGKXo6wpw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:22:30 2025 by rpki-client