Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
File: UEBzuGGe_AcFK57ftcy2Gx9c54E.mft (raw, json)
Hash identifier: CZiO8WJkWAGF+4GfqVIvYTQtsSh5oGJ2YDUW3x6eVmk=
Subject key identifier: 86:D0:29:49:6F:15:F3:50:29:67:E3:9C:17:2C:FE:46:E7:66:35:2A
Authority key identifier: 50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
Certificate issuer: /CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Certificate serial: 0198D54E502927388B748746ABAEA066190E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: L4_tSMK5k5kqqbJMWxeueMUP_mA.roa (hash: 9KNzXq4Jj1Ie5L/sgRkqWPLj6rBqACEfWOxUaBMMoF8=)
2: MpgfzBZcCwpGmCHQXOGgVC0SBbw.roa (hash: l1OVDxtg0CoOASKjwgQu29p5CMY+5ES/VliOBwP9wAQ=)
3: UEBzuGGe_AcFK57ftcy2Gx9c54E.crl (hash: lO7TxzuoOwDFCzS+moWbqBSrGSnUoTZpsVfozvdvy3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:50:29:27:38:8b:74:87:46:ab:ae:a0:66:19:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=86d029496f15f3502967e39c172cfe46e766352a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cd:3b:6a:ed:5f:10:bf:f4:66:a1:95:9c:8a:
17:fc:7b:a9:1a:8e:c1:b4:10:45:8e:bf:99:d2:29:
04:f4:6d:d5:34:75:b2:40:f8:d1:3b:e0:56:b3:e6:
f0:65:02:a2:86:0d:3f:69:f3:9b:81:b3:2d:f7:1c:
c0:02:09:69:68:fe:a5:47:0c:a1:1c:22:f4:3a:9b:
a6:47:e0:22:d9:50:df:92:81:0d:5c:78:f2:38:4d:
e8:c1:56:cb:c6:ed:ab:ba:24:c4:55:bf:f0:cb:61:
f5:d3:5d:78:6b:f9:30:4d:73:44:a1:6c:6e:49:47:
29:45:2f:8b:fd:f7:b6:90:56:1a:de:e8:19:74:5f:
66:74:a8:23:fd:98:c4:8d:f3:5a:b6:97:71:88:3b:
3f:3d:e1:5b:00:50:73:b2:80:26:30:7c:94:ce:df:
33:0d:ed:61:b0:7a:29:1f:18:6f:31:06:f6:47:ea:
ba:b2:ce:38:a3:78:02:41:3d:07:f8:2a:ab:c2:e6:
15:21:f6:a6:dd:74:ff:81:b2:b2:35:48:c9:3e:4f:
25:c1:44:42:7a:1f:79:6b:2e:14:31:43:a6:99:29:
a9:4b:49:50:27:00:dd:d6:d7:87:c9:34:43:e5:0a:
7e:5e:63:32:fa:73:96:51:86:66:72:f8:a8:0b:83:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:29:49:6F:15:F3:50:29:67:E3:9C:17:2C:FE:46:E7:66:35:2A
X509v3 Authority Key Identifier:
keyid:50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7f:fa:5a:dd:6d:7c:11:c2:28:29:35:0e:8b:a3:94:b5:e1:
88:78:81:bc:2a:86:c0:23:16:8e:3c:bf:76:6c:96:cd:b9:1d:
2b:a0:58:29:64:de:e9:f1:b0:b2:5f:a4:c1:1d:3b:aa:dd:85:
e4:0f:36:f0:a8:86:63:44:f2:be:05:40:a4:3a:63:8b:cc:ff:
be:f9:9f:02:b1:09:3e:dd:c3:c8:11:4e:f8:8c:e3:70:9a:90:
b2:cc:5f:37:54:fe:db:89:a5:b6:10:1c:7d:fc:98:f0:b3:02:
ad:d8:39:de:d4:e8:f1:5d:0c:75:94:dc:cc:0f:56:ed:61:02:
86:34:da:a4:5d:fe:36:e6:17:56:50:40:d9:ec:a9:b6:cc:df:
8a:c7:8d:c0:ee:f2:93:e8:4c:29:7c:8e:32:23:dd:c6:c0:e9:
23:63:78:b3:c1:08:b7:5a:7e:ba:40:6a:37:e9:0d:fb:ef:4f:
5b:ab:41:48:d2:e4:fb:9d:9a:8a:2a:d0:d0:f5:f9:06:f7:95:
20:16:27:21:60:82:1a:f5:44:63:6b:cc:2d:67:6d:6a:d0:5e:
b7:0b:2e:57:54:6b:ec:6b:39:50:2f:c7:8b:01:12:e6:bb:b1:
ef:98:04:64:ca:df:db:39:e4:b6:9f:b7:5c:1f:b3:40:7d:3a:
16:5f:77:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTlApJziLdIdGq66gZhkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNDA3M2I4NjE5ZWZjMDcwNTJiOWVkZmI1Y2NiNjFiMWY1
Y2U3ODEwHhcNMjUwODIzMDUwMjE1WhcNMjUwODI0MDUwMjE1WjAzMTEwLwYDVQQD
Eyg4NmQwMjk0OTZmMTVmMzUwMjk2N2UzOWMxNzJjZmU0NmU3NjYzNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8s07au1fEL/0ZqGVnIoX/HupGo7B
tBBFjr+Z0ikE9G3VNHWyQPjRO+BWs+bwZQKihg0/afObgbMt9xzAAglpaP6lRwyh
HCL0OpumR+Ai2VDfkoENXHjyOE3owVbLxu2ruiTEVb/wy2H10114a/kwTXNEoWxu
SUcpRS+L/fe2kFYa3ugZdF9mdKgj/ZjEjfNatpdxiDs/PeFbAFBzsoAmMHyUzt8z
De1hsHopHxhvMQb2R+q6ss44o3gCQT0H+CqrwuYVIfam3XT/gbKyNUjJPk8lwURC
eh95ay4UMUOmmSmpS0lQJwDd1teHyTRD5Qp+XmMy+nOWUYZmcvioC4OfowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbQKUlvFfNQKWfjnBcs/kbnZjUqMB8GA1UdIwQY
MBaAFFBAc7hhnvwHBSue37XMthsfXOeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUVCenVHR2VfQWNGSzU3ZnRjeTJHeDljNTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81NzIxYjktZjkzMS00ZmM2LTljMzQt
ZDcxN2NmM2NjMTU1LzEvVUVCenVHR2VfQWNGSzU3ZnRjeTJHeDljNTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC81NzIxYjktZjkzMS00ZmM2LTljMzQtZDcxN2NmM2NjMTU1
LzEvVUVCenVHR2VfQWNGSzU3ZnRjeTJHeDljNTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3/6Wt1t
fBHCKCk1DoujlLXhiHiBvCqGwCMWjjy/dmyWzbkdK6BYKWTe6fGwsl+kwR07qt2F
5A828KiGY0TyvgVApDpji8z/vvmfArEJPt3DyBFO+IzjcJqQssxfN1T+24mlthAc
ffyY8LMCrdg53tTo8V0MdZTczA9W7WEChjTapF3+NuYXVlBA2eyptszfiseNwO7y
k+hMKXyOMiPdxsDpI2N4s8EIt1p+ukBqN+kN++9PW6tBSNLk+52aiirQ0PX5BveV
IBYnIWCCGvVEY2vMLWdtatBetwsuV1Rr7Gs5UC/HiwES5rux75gEZMrf2znktp+3
XB+zQH06Fl93ng==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:22 2025 by rpki-client