
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: 6uJ4IrJFt+VVlnnkSwixtV3nmU987Yr6bASV0ROA06g=
Subject key identifier: 96:A9:2A:ED:61:63:57:7C:69:30:26:8C:A5:CF:41:3F:F4:D1:FA:26
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 0197B7B357A862920DB8600BE0A1E42DFBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:13 +0000
Manifest this update: Sat 28 Jun 2025 18:01:13 +0000
Manifest next update: Sun 29 Jun 2025 18:01:13 +0000
Files and hashes: 1: IwWglmhS5Zmc1TAwKCoGnND82Hg.roa (hash: yxdnz39K/r0yEcsRsb6jG3Fu9Th+zv6+zwScMkcw/2k=)
2: Slwbbwyy2R4DXhMszcmZSafHRLM.roa (hash: hGzmzAgGBljAorRZaTCZ/rFSgBsMkWs+ukGHvQ5mFco=)
3: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: IQWrcHoNvBI3four9nEU3sRk+HAl4o92x+84WVRcaSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:57:a8:62:92:0d:b8:60:0b:e0:a1:e4:2d:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Jun 28 18:01:13 2025 GMT
Not After : Jun 29 18:01:13 2025 GMT
Subject: CN=96a92aed6163577c6930268ca5cf413ff4d1fa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:b0:9d:69:6e:60:5c:84:33:00:16:bf:d7:
8a:77:b9:04:be:c2:b4:50:03:f8:ad:55:75:75:4f:
10:1b:17:b1:9c:d0:39:78:1f:55:47:65:c6:c3:73:
82:97:67:3f:b0:4c:ee:95:bb:ae:c4:e3:4d:ec:28:
5b:fa:ab:9b:9b:0f:5c:d8:5e:da:2d:d5:cd:e7:cb:
57:3d:40:6c:80:3a:3e:54:16:97:04:5d:ba:6b:dd:
d2:0a:9a:16:4b:3a:84:1f:de:bd:5c:96:be:37:05:
a5:bf:80:13:8c:93:8e:53:03:2b:d0:b0:36:f5:38:
e1:d4:fc:7e:bc:d3:03:0d:0e:7f:2e:58:b0:07:91:
b3:ea:13:26:36:3f:f2:d8:fa:15:a8:e8:ef:22:27:
c1:d7:e7:21:6e:66:c4:c9:9c:cb:89:6c:02:83:aa:
4b:81:66:7d:30:6b:2c:13:56:df:a1:2a:e1:94:c0:
a8:3d:30:89:62:7a:f0:f9:b3:a2:a6:d7:65:2b:b8:
78:90:bc:05:0e:4d:27:e9:81:c0:2c:d9:5b:cb:67:
71:a4:fd:cb:71:60:33:30:ab:37:df:6d:46:b4:bd:
13:57:5b:ae:48:c4:a1:a1:cd:97:4b:d1:96:f5:07:
f7:56:44:40:94:b0:10:b1:8e:e9:8e:53:c2:eb:0b:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A9:2A:ED:61:63:57:7C:69:30:26:8C:A5:CF:41:3F:F4:D1:FA:26
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6a:a0:13:b9:86:c4:b2:64:d7:b2:c2:86:73:ba:70:95:6f:
a2:e4:2c:9f:b6:df:2c:7d:97:aa:c1:41:07:90:8f:e6:38:3a:
cb:5a:2f:d2:37:99:96:a5:cd:70:37:26:ec:36:f8:42:d0:9e:
25:2d:2e:97:84:1b:b5:b4:bb:16:85:27:2c:65:ed:81:48:2b:
62:58:e3:73:46:4d:34:21:c7:ce:89:c6:87:a4:bb:a2:1c:a8:
43:96:f1:a0:48:8e:cf:af:c5:cc:e6:c6:5b:3b:b4:f3:97:4a:
8f:58:ac:7c:32:e3:1c:9d:c8:b1:d3:f2:2e:97:5e:fe:f6:3e:
99:09:ea:bb:02:ec:d8:ca:d5:0f:27:66:28:f2:f8:31:e7:22:
ce:a7:ea:3f:a1:83:53:10:d9:a3:4d:40:18:5a:6a:ff:9f:d3:
f7:7c:d9:1c:c5:14:88:af:c4:81:cc:24:4c:d7:ff:35:34:40:
b5:51:4d:ab:dc:cb:b3:69:d3:05:8d:d8:17:67:11:66:90:40:
f2:65:97:d0:7c:d6:24:d9:31:97:62:87:4a:0e:82:0c:f6:5a:
1c:93:3e:4c:95:d5:dd:7a:38:71:4b:de:92:67:8d:cb:5b:73:
3b:bb:c4:e1:87:e8:56:5f:25:5b:a3:f8:bd:50:c9:b7:5c:e6:
fe:dc:ea:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1eoYpINuGAL4KHkLfvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTY1OTBhMGVhZjQ4ZGYyYjFhZTIzYjlkNTU5ZTljYWMy
NTk5N2UwHhcNMjUwNjI4MTgwMTEzWhcNMjUwNjI5MTgwMTEzWjAzMTEwLwYDVQQD
Eyg5NmE5MmFlZDYxNjM1NzdjNjkzMDI2OGNhNWNmNDEzZmY0ZDFmYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPWwnWluYFyEMwAWv9eKd7kEvsK0
UAP4rVV1dU8QGxexnNA5eB9VR2XGw3OCl2c/sEzulbuuxONN7Chb+qubmw9c2F7a
LdXN58tXPUBsgDo+VBaXBF26a93SCpoWSzqEH969XJa+NwWlv4ATjJOOUwMr0LA2
9Tjh1Px+vNMDDQ5/LliwB5Gz6hMmNj/y2PoVqOjvIifB1+chbmbEyZzLiWwCg6pL
gWZ9MGssE1bfoSrhlMCoPTCJYnrw+bOiptdlK7h4kLwFDk0n6YHALNlby2dxpP3L
cWAzMKs3321GtL0TV1uuSMShoc2XS9GW9Qf3VkRAlLAQsY7pjlPC6wsXxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJapKu1hY1d8aTAmjKXPQT/00fomMB8GA1UdIwQY
MBaAFFMWWQoOr0jfKxriO51VnpysJZl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhaWkNnNnZTTjhyR3VJN25WV2VuS3dsbVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mOWRkMWMtMzE3Yi00MWMxLThmY2It
N2Q5ZWFiZWUxNWFjLzEvVXhaWkNnNnZTTjhyR3VJN25WV2VuS3dsbVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mOWRkMWMtMzE3Yi00MWMxLThmY2ItN2Q5ZWFiZWUxNWFj
LzEvVXhaWkNnNnZTTjhyR3VJN25WV2VuS3dsbVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGqgE7mG
xLJk17LChnO6cJVvouQsn7bfLH2XqsFBB5CP5jg6y1ov0jeZlqXNcDcm7Db4QtCe
JS0ul4QbtbS7FoUnLGXtgUgrYljjc0ZNNCHHzonGh6S7ohyoQ5bxoEiOz6/FzObG
Wzu085dKj1isfDLjHJ3IsdPyLpde/vY+mQnquwLs2MrVDydmKPL4MecizqfqP6GD
UxDZo01AGFpq/5/T93zZHMUUiK/EgcwkTNf/NTRAtVFNq9zLs2nTBY3YF2cRZpBA
8mWX0HzWJNkxl2KHSg6CDPZaHJM+TJXV3Xo4cUvekmeNy1tzO7vE4YfoVl8lW6P4
vVDJt1zm/tzq1g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:40 2025 by rpki-client