Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
File: UEBzuGGe_AcFK57ftcy2Gx9c54E.mft (raw, json)
Hash identifier: WcwMEA0PUb5ignclUCBeZXuS6B/PT4pGkFSyLUHQcA4=
Subject key identifier: B0:39:E5:E6:4A:46:81:FE:B1:65:80:A1:96:F6:E4:77:9F:C2:CE:96
Authority key identifier: 50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
Certificate issuer: /CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Certificate serial: 0197B77C5C1ACF2536992F198A8FB6008FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:09 +0000
Manifest this update: Sat 28 Jun 2025 17:01:09 +0000
Manifest next update: Sun 29 Jun 2025 17:01:09 +0000
Files and hashes: 1: L4_tSMK5k5kqqbJMWxeueMUP_mA.roa (hash: 9KNzXq4Jj1Ie5L/sgRkqWPLj6rBqACEfWOxUaBMMoF8=)
2: MpgfzBZcCwpGmCHQXOGgVC0SBbw.roa (hash: l1OVDxtg0CoOASKjwgQu29p5CMY+5ES/VliOBwP9wAQ=)
3: UEBzuGGe_AcFK57ftcy2Gx9c54E.crl (hash: d92sV6pNJ+Ef5qZfhayPfomg18zbFYkj9IF4xDo3A0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5c:1a:cf:25:36:99:2f:19:8a:8f:b6:00:8f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Validity
Not Before: Jun 28 17:01:09 2025 GMT
Not After : Jun 29 17:01:09 2025 GMT
Subject: CN=b039e5e64a4681feb16580a196f6e4779fc2ce96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:df:b0:98:26:ae:b2:7e:7e:5d:0b:1d:96:
3c:be:19:9e:e2:4e:18:b2:83:e5:a1:a9:2d:1b:fc:
c5:aa:45:76:7c:28:6c:26:81:5d:20:9b:8b:02:d6:
42:5f:fb:19:ef:f1:cc:37:b5:05:42:52:7c:71:82:
42:23:6c:e3:b3:17:87:92:4c:58:4b:b7:42:1b:e3:
74:77:87:65:86:f1:80:bf:65:ee:a6:ef:92:c0:1e:
01:cb:37:e8:82:33:a0:b5:c1:59:b8:1c:f5:e2:f7:
70:71:1b:0d:2e:06:35:3d:41:3e:ba:dc:88:ff:f3:
ca:34:2b:29:11:09:d3:56:b3:52:1b:e4:47:39:d9:
2d:39:3a:5f:2a:95:10:ea:d4:1b:5e:cf:c0:88:84:
8f:ff:69:a5:98:62:c4:da:33:f0:b9:da:cc:8b:1d:
ca:ef:87:de:57:d6:2c:0c:0d:51:2e:bd:e8:f3:2c:
f0:5e:84:60:0a:57:f5:bb:c7:93:0b:d0:31:b9:c9:
fb:49:74:b2:de:da:8c:9d:db:5f:fc:b8:ac:c6:ff:
8c:bc:a3:36:68:55:03:df:f1:1b:47:26:9b:18:bd:
f8:56:8f:4d:17:b7:74:7e:1a:80:27:74:ca:37:a6:
b8:2d:8f:cd:8d:7d:74:1d:a1:58:71:dc:68:a3:77:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:39:E5:E6:4A:46:81:FE:B1:65:80:A1:96:F6:E4:77:9F:C2:CE:96
X509v3 Authority Key Identifier:
keyid:50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:39:57:d4:71:58:9e:d6:86:f3:21:a0:b8:89:75:53:df:9f:
09:46:a2:7f:04:f5:20:fd:fe:8d:a0:61:a1:23:6d:e9:b4:ff:
76:3f:85:2f:e8:94:ed:25:64:38:23:35:a5:a4:0d:42:62:85:
e0:10:01:42:5a:61:78:a4:7c:89:ad:09:e9:3f:de:86:db:28:
c8:4f:25:26:96:90:91:48:f7:98:b0:e6:e0:73:c3:51:c2:c7:
2f:d7:08:2e:ef:59:96:a2:1b:62:51:66:37:08:5d:c0:07:3b:
36:96:69:8b:82:02:69:46:5c:88:b9:da:31:5c:cf:9e:de:80:
c7:6e:ab:fe:d0:70:1e:0b:a9:24:49:d2:ad:81:f3:fc:0b:30:
91:65:4d:f2:ab:66:67:65:1b:6e:f2:8f:0d:c6:ca:53:fb:b8:
f2:7e:74:81:95:8e:6f:be:bb:3c:ad:d3:5c:bc:f0:51:76:bf:
5a:23:de:39:78:a9:a0:39:c5:48:bc:33:e3:f4:3b:4c:05:22:
62:33:b8:7c:d0:31:8d:df:73:21:e2:c9:b6:cf:cc:d0:ed:33:
28:f9:23:a6:f3:28:a8:b4:89:d6:73:7b:f1:c9:d0:b1:f7:c3:
90:b9:49:d2:a1:73:b1:45:18:e4:a6:cd:53:4c:8b:48:ec:5d:
4a:55:62:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fFwazyU2mS8Zio+2AI+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNDA3M2I4NjE5ZWZjMDcwNTJiOWVkZmI1Y2NiNjFiMWY1
Y2U3ODEwHhcNMjUwNjI4MTcwMTA5WhcNMjUwNjI5MTcwMTA5WjAzMTEwLwYDVQQD
EyhiMDM5ZTVlNjRhNDY4MWZlYjE2NTgwYTE5NmY2ZTQ3NzlmYzJjZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0jfsJgmrrJ+fl0LHZY8vhme4k4Y
soPloaktG/zFqkV2fChsJoFdIJuLAtZCX/sZ7/HMN7UFQlJ8cYJCI2zjsxeHkkxY
S7dCG+N0d4dlhvGAv2Xupu+SwB4ByzfogjOgtcFZuBz14vdwcRsNLgY1PUE+utyI
//PKNCspEQnTVrNSG+RHOdktOTpfKpUQ6tQbXs/AiISP/2mlmGLE2jPwudrMix3K
74feV9YsDA1RLr3o8yzwXoRgClf1u8eTC9Axucn7SXSy3tqMndtf/Lisxv+MvKM2
aFUD3/EbRyabGL34Vo9NF7d0fhqAJ3TKN6a4LY/NjX10HaFYcdxoo3dTrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA55eZKRoH+sWWAoZb25Hefws6WMB8GA1UdIwQY
MBaAFFBAc7hhnvwHBSue37XMthsfXOeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUVCenVHR2VfQWNGSzU3ZnRjeTJHeDljNTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81NzIxYjktZjkzMS00ZmM2LTljMzQt
ZDcxN2NmM2NjMTU1LzEvVUVCenVHR2VfQWNGSzU3ZnRjeTJHeDljNTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC81NzIxYjktZjkzMS00ZmM2LTljMzQtZDcxN2NmM2NjMTU1
LzEvVUVCenVHR2VfQWNGSzU3ZnRjeTJHeDljNTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjlX1HFY
ntaG8yGguIl1U9+fCUaifwT1IP3+jaBhoSNt6bT/dj+FL+iU7SVkOCM1paQNQmKF
4BABQlpheKR8ia0J6T/ehtsoyE8lJpaQkUj3mLDm4HPDUcLHL9cILu9ZlqIbYlFm
NwhdwAc7NpZpi4ICaUZciLnaMVzPnt6Ax26r/tBwHgupJEnSrYHz/AswkWVN8qtm
Z2UbbvKPDcbKU/u48n50gZWOb767PK3TXLzwUXa/WiPeOXipoDnFSLwz4/Q7TAUi
YjO4fNAxjd9zIeLJts/M0O0zKPkjpvMoqLSJ1nN78cnQsffDkLlJ0qFzsUUY5KbN
U0yLSOxdSlVijQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:50 2025 by rpki-client