Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
File: UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft (raw, json)
Hash identifier: fgPWqV2EG51C+qA4IAx5pwy2xabSBefRk/K5Y+iz05Y=
Subject key identifier: 48:47:CD:CB:CA:82:BB:82:D9:0F:72:14:30:E1:3C:6B:B5:4F:82:FF
Authority key identifier: 51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
Certificate issuer: /CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Certificate serial: 0198D65F082072D6281B3FD92D84E3B4B45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
Manifest number: 12DC
Signing time: Sat 23 Aug 2025 10:00:08 +0000
Manifest this update: Sat 23 Aug 2025 10:00:08 +0000
Manifest next update: Sun 24 Aug 2025 10:00:08 +0000
Files and hashes: 1: UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl (hash: fhVXXcm8QyiX2dDoCgqOSNuZGZb9lqR25EhLyzLaj08=)
2: mh18CeMUKX0D009-9mGv8SAvgKs.roa (hash: zVhE4BkupXg5srZAaYXqVFIMgkPQ0zgGIp7W/596OI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:08:20:72:d6:28:1b:3f:d9:2d:84:e3:b4:b4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Validity
Not Before: Aug 23 10:00:08 2025 GMT
Not After : Aug 24 10:00:08 2025 GMT
Subject: CN=4847cdcbca82bb82d90f721430e13c6bb54f82ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:9e:8a:f8:ff:23:e1:c7:64:03:81:9d:7b:
e0:c1:49:80:58:f1:b1:fe:80:88:2f:b1:99:ba:29:
1f:a1:5f:60:35:7e:ee:7d:c8:40:b8:67:4e:69:7b:
1d:4e:f4:4b:b5:2e:b9:04:57:63:b9:19:0f:53:25:
13:5f:f2:ac:5a:84:88:bc:1e:0d:1d:a0:85:9e:89:
e1:56:68:0d:db:76:b0:04:fc:10:9e:26:57:45:a3:
54:25:aa:7b:2c:2d:46:e6:66:f5:bc:e9:69:a6:f8:
8e:27:63:c9:10:da:2e:b0:4d:3e:75:86:33:ba:72:
bd:49:7c:34:6e:a3:db:b3:5a:d2:b9:72:ee:fb:2a:
df:ba:41:5c:db:f3:9b:37:d3:5d:f6:5c:c4:3a:75:
1c:4e:7d:8a:eb:cd:fc:25:28:f2:cf:31:aa:ca:b4:
a7:06:65:a0:d2:4d:c4:58:46:7d:95:d4:84:e2:12:
66:4e:0f:91:9c:43:f6:0b:f3:4c:6c:14:ef:6f:e5:
76:6c:e4:a5:4a:53:3a:35:1c:0c:75:4b:1e:40:2e:
d9:36:11:fb:aa:3a:69:d4:ba:c6:0e:2f:c6:37:f6:
45:9b:a7:56:47:2a:8e:ca:ba:2b:7f:cb:a7:91:29:
ce:c3:e3:f6:7d:4f:21:dc:a6:12:9a:ba:4b:80:e8:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:CD:CB:CA:82:BB:82:D9:0F:72:14:30:E1:3C:6B:B5:4F:82:FF
X509v3 Authority Key Identifier:
keyid:51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3c:a3:ed:14:73:d5:35:18:dc:8a:35:29:09:9c:c4:d3:3d:
2f:f7:23:c8:40:41:13:88:b5:ea:91:39:2a:3e:30:64:d3:f4:
15:f1:67:24:c5:74:dd:43:02:24:ba:f1:f7:9b:e3:7a:83:17:
a5:e7:f1:0d:18:0b:fa:2a:e0:31:5b:69:ff:dc:37:62:8b:10:
e4:e0:af:a2:a9:13:53:10:ef:00:d6:37:fa:bd:5a:28:ea:9b:
8b:b7:11:12:25:74:9b:00:54:99:9f:ba:1b:cf:0b:2b:a8:29:
05:0f:30:27:be:cf:ca:f5:33:b3:d2:31:79:35:22:c3:08:28:
58:c5:06:e5:36:34:75:28:b0:63:41:62:f5:bb:ff:11:c5:c7:
bb:45:b4:e2:63:a5:b4:b3:7f:ad:d1:70:d2:b3:7b:39:7f:bc:
36:ad:19:e1:6e:f8:e5:45:3a:c8:60:24:41:53:86:70:aa:6f:
7c:56:0b:02:e9:e8:b8:4c:ad:52:6c:e0:4c:cb:04:60:f1:a5:
26:d7:33:ab:5a:c2:96:47:dc:4c:63:c1:94:47:59:cf:26:34:
3f:71:74:9e:6d:80:92:13:ab:d4:14:26:93:6c:8c:4c:9e:2a:
1a:e5:b9:0c:3c:7b:51:f0:9f:bb:78:88:1d:43:ae:91:e5:85:
c8:78:94:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXwggctYoGz/ZLYTjtLRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTU5MWU1NDkwM2QyZjllYTg0MGExNDY5NTViYTM0NTll
MzNlYTEwHhcNMjUwODIzMTAwMDA4WhcNMjUwODI0MTAwMDA4WjAzMTEwLwYDVQQD
Eyg0ODQ3Y2RjYmNhODJiYjgyZDkwZjcyMTQzMGUxM2M2YmI1NGY4MmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmCeivj/I+HHZAOBnXvgwUmAWPGx
/oCIL7GZuikfoV9gNX7ufchAuGdOaXsdTvRLtS65BFdjuRkPUyUTX/KsWoSIvB4N
HaCFnonhVmgN23awBPwQniZXRaNUJap7LC1G5mb1vOlppviOJ2PJENousE0+dYYz
unK9SXw0bqPbs1rSuXLu+yrfukFc2/ObN9Nd9lzEOnUcTn2K6838JSjyzzGqyrSn
BmWg0k3EWEZ9ldSE4hJmTg+RnEP2C/NMbBTvb+V2bOSlSlM6NRwMdUseQC7ZNhH7
qjpp1LrGDi/GN/ZFm6dWRyqOyrorf8unkSnOw+P2fU8h3KYSmrpLgOg8owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhHzcvKgruC2Q9yFDDhPGu1T4L/MB8GA1UdIwQY
MBaAFFHlkeVJA9L56oQKFGlVujRZ4z6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83MWE3NDgtYjJiYy00NzI4LTllZjAt
YTY5Y2Q5ZDE1ZTMxLzEvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83MWE3NDgtYjJiYy00NzI4LTllZjAtYTY5Y2Q5ZDE1ZTMx
LzEvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDyj7RRz
1TUY3Io1KQmcxNM9L/cjyEBBE4i16pE5Kj4wZNP0FfFnJMV03UMCJLrx95vjeoMX
pefxDRgL+irgMVtp/9w3YosQ5OCvoqkTUxDvANY3+r1aKOqbi7cREiV0mwBUmZ+6
G88LK6gpBQ8wJ77PyvUzs9IxeTUiwwgoWMUG5TY0dSiwY0Fi9bv/EcXHu0W04mOl
tLN/rdFw0rN7OX+8Nq0Z4W745UU6yGAkQVOGcKpvfFYLAunouEytUmzgTMsEYPGl
Jtczq1rClkfcTGPBlEdZzyY0P3F0nm2AkhOr1BQmk2yMTJ4qGuW5DDx7UfCfu3iI
HUOukeWFyHiUMA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:22 2025 by rpki-client