Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
File: UPLWshZg-tH2Di350L18bM-VwxE.mft (raw, json)
Hash identifier: eOeOO319WSc5Aw7Wgx5wf0jhI4pRJJAVVfiAPMxwlQ0=
Subject key identifier: 77:19:E6:52:73:EB:97:CC:BB:10:AC:EF:86:D6:33:05:85:75:74:1B
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial: 0197B82140CB2B2F4383F07C185D8A5CEF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 20:01:16 +0000
Manifest this update: Sat 28 Jun 2025 20:01:16 +0000
Manifest next update: Sun 29 Jun 2025 20:01:16 +0000
Files and hashes: 1: 680g9QNm1e-ThM3i1QaScS4bSbw.roa (hash: npGuthO7au6knt0v4xQS1R1nwKbXpzRRvDz8rwf17yQ=)
2: UPLWshZg-tH2Di350L18bM-VwxE.crl (hash: ri5ExABO9wtILwRG4rrFKLLsMjQuGTTHUto2KjgUUXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:40:cb:2b:2f:43:83:f0:7c:18:5d:8a:5c:ef:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Validity
Not Before: Jun 28 20:01:16 2025 GMT
Not After : Jun 29 20:01:16 2025 GMT
Subject: CN=7719e65273eb97ccbb10acef86d633058575741b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:0e:fd:35:55:75:2c:d3:44:16:f9:9a:44:
a5:6f:a3:6b:57:6b:cd:a4:5a:3a:34:02:3d:62:d1:
75:46:d8:0f:78:21:b5:2e:56:43:08:be:69:73:1e:
3f:58:e0:ff:25:f6:19:c8:6b:43:11:0a:b4:7b:0c:
75:95:00:a5:4e:30:e3:74:bf:ee:54:4d:6c:3c:37:
d4:21:bf:76:0f:d4:18:d2:ca:ca:1c:ef:0e:35:ab:
a1:47:03:ce:de:6d:5e:db:7b:36:2c:42:1c:d9:de:
cf:6a:bf:e8:d2:76:16:2e:5e:4a:1b:92:b9:d4:d1:
5b:ab:7a:9d:f2:5e:25:be:5a:c1:75:0b:cf:f4:33:
b8:f3:f6:f5:b0:05:ab:11:d3:2d:47:e9:af:66:d9:
cf:26:cd:70:f6:90:d0:88:37:22:e7:0c:e8:29:ba:
1d:9b:ff:af:d7:8a:90:c8:4a:5a:fa:e3:19:81:28:
47:7b:4c:a4:63:99:35:cf:ac:8c:24:94:8f:3d:91:
cd:0c:15:3b:37:68:5e:77:d9:00:b9:06:01:42:2e:
6b:39:d1:54:07:44:c1:82:8d:53:2c:2c:11:3b:d9:
e1:81:e4:65:78:a2:75:1a:23:ba:42:52:fa:51:cd:
13:a1:33:97:dc:08:38:e9:9e:69:4f:f3:d2:2d:53:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:19:E6:52:73:EB:97:CC:BB:10:AC:EF:86:D6:33:05:85:75:74:1B
X509v3 Authority Key Identifier:
keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:84:5a:35:ac:8b:59:cb:0d:5a:5b:9a:cd:9f:30:0c:f7:6a:
8a:22:a3:20:1b:d5:71:fb:79:a0:74:41:3a:cd:b1:f2:4e:c4:
4b:cb:63:15:6a:de:66:ee:25:a9:c1:71:e9:85:cd:59:83:86:
89:c0:08:ad:c5:07:f3:df:23:10:ee:f2:90:c2:c0:c0:29:bd:
ed:7d:24:6a:a4:2a:fd:d4:05:ad:8e:39:60:57:72:f7:bb:9c:
87:4b:d3:02:92:f4:45:8f:3f:23:83:ef:35:7d:27:9a:52:9e:
e5:12:51:c1:16:a6:09:d1:93:d5:b3:e6:43:b0:0b:f5:fb:a5:
f6:6a:5f:52:eb:3d:ed:77:fd:5b:e8:c4:cb:3b:25:fb:67:68:
c0:98:c1:3f:7c:60:eb:75:41:a1:d8:b7:f1:22:68:0c:08:9d:
50:c8:1e:39:b9:2b:2c:b5:14:9f:6a:ab:f7:36:b3:a0:5c:69:
3f:84:49:8e:99:bc:b4:02:06:81:02:74:db:08:40:02:d8:8c:
8e:d8:58:be:7b:91:12:d1:5f:d8:57:ad:a8:84:38:74:16:c0:
8f:b3:78:b7:f1:34:eb:e1:eb:51:06:a6:6a:cc:44:0f:0d:c7:
88:53:7b:08:ed:eb:08:d1:5b:fd:0d:21:c5:40:be:db:ff:72:
c4:54:35:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IUDLKy9Dg/B8GF2KXO8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZjJkNmIyMTY2MGZhZDFmNjBlMmRmOWQwYmQ3YzZjY2Y5
NWMzMTEwHhcNMjUwNjI4MjAwMTE2WhcNMjUwNjI5MjAwMTE2WjAzMTEwLwYDVQQD
Eyg3NzE5ZTY1MjczZWI5N2NjYmIxMGFjZWY4NmQ2MzMwNTg1NzU3NDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ4O/TVVdSzTRBb5mkSlb6NrV2vN
pFo6NAI9YtF1RtgPeCG1LlZDCL5pcx4/WOD/JfYZyGtDEQq0ewx1lQClTjDjdL/u
VE1sPDfUIb92D9QY0srKHO8ONauhRwPO3m1e23s2LEIc2d7Par/o0nYWLl5KG5K5
1NFbq3qd8l4lvlrBdQvP9DO48/b1sAWrEdMtR+mvZtnPJs1w9pDQiDci5wzoKbod
m/+v14qQyEpa+uMZgShHe0ykY5k1z6yMJJSPPZHNDBU7N2hed9kAuQYBQi5rOdFU
B0TBgo1TLCwRO9nhgeRleKJ1GiO6QlL6Uc0ToTOX3Ag46Z5pT/PSLVMLiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcZ5lJz65fMuxCs74bWMwWFdXQbMB8GA1UdIwQY
MBaAFFDy1rIWYPrR9g4t+dC9fGzPlcMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYt
YWIzZGQ1ZGM2NzA5LzEvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYtYWIzZGQ1ZGM2NzA5
LzEvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4RaNayL
WcsNWluazZ8wDPdqiiKjIBvVcft5oHRBOs2x8k7ES8tjFWreZu4lqcFx6YXNWYOG
icAIrcUH898jEO7ykMLAwCm97X0kaqQq/dQFrY45YFdy97uch0vTApL0RY8/I4Pv
NX0nmlKe5RJRwRamCdGT1bPmQ7AL9ful9mpfUus97Xf9W+jEyzsl+2dowJjBP3xg
63VBodi38SJoDAidUMgeObkrLLUUn2qr9zazoFxpP4RJjpm8tAIGgQJ02whAAtiM
jthYvnuREtFf2FetqIQ4dBbAj7N4t/E06+HrUQamasxEDw3HiFN7CO3rCNFb/Q0h
xUC+2/9yxFQ1uw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:39 2025 by rpki-client