Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
File: Uuopd4vrKAAYKU4jlcv6AELI94o.mft (raw, json)
Hash identifier: yTCOYNC0zkdBSAVTvQfa9PINHY6bBq9+Dv773SyZFDU=
Subject key identifier: 9A:52:7B:7A:6A:D7:F4:CE:2E:70:19:2F:5C:02:32:A6:5A:A6:94:5B
Authority key identifier: 52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
Certificate issuer: /CN=52ea29778beb280018294e2395cbfa0042c8f78a
Certificate serial: 0198D473C456573F9634E27D92877F2C9AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
Manifest number: 0871
Signing time: Sat 23 Aug 2025 01:03:33 +0000
Manifest this update: Sat 23 Aug 2025 01:03:33 +0000
Manifest next update: Sun 24 Aug 2025 01:03:33 +0000
Files and hashes: 1: Uuopd4vrKAAYKU4jlcv6AELI94o.crl (hash: B0E2Dvacce1W+Dt5VM3f5j7FMAY9QM9rUVJm9k8+SZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c4:56:57:3f:96:34:e2:7d:92:87:7f:2c:9a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ea29778beb280018294e2395cbfa0042c8f78a
Validity
Not Before: Aug 23 01:03:33 2025 GMT
Not After : Aug 24 01:03:33 2025 GMT
Subject: CN=9a527b7a6ad7f4ce2e70192f5c0232a65aa6945b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:2c:70:a1:de:6e:b5:78:6d:9d:f2:3a:c7:
b9:50:0c:23:fd:df:ae:96:8f:15:be:15:40:25:cc:
30:bf:c6:e3:24:6d:90:48:97:4a:8b:a6:1c:09:81:
ae:eb:1a:53:e9:6e:7d:80:5a:af:87:7c:6c:45:6b:
e2:32:2e:ee:8f:52:de:a0:db:5e:23:fb:d9:e3:0d:
d9:41:6f:1d:b7:05:e3:68:ef:e7:84:6f:25:a5:29:
42:99:37:bd:1b:9c:7c:55:16:95:8b:c8:5b:a2:9d:
9d:85:07:aa:c4:ce:41:1b:00:69:ca:1c:96:a3:1a:
56:b6:01:20:16:cf:75:9b:6f:dd:69:94:68:2b:25:
95:72:d2:02:29:ba:0f:0d:60:68:ac:94:20:5b:a6:
32:a4:38:f6:62:c6:0c:bb:61:4a:9e:9e:af:1a:87:
fc:9d:23:de:bd:45:6b:f4:84:f0:1c:fe:84:75:b0:
d2:b1:11:5a:b0:85:d0:d3:17:e8:b5:07:d7:c0:7f:
8d:ca:63:4d:de:f4:19:e1:96:97:3c:f0:22:d5:fe:
4b:6f:fb:c1:49:d6:62:40:6b:35:e1:8f:e5:5b:32:
33:88:7c:d4:d8:22:4a:e8:98:b0:2e:f1:b0:51:87:
54:db:a6:a0:4e:85:10:6e:bf:fa:84:7b:1b:2e:19:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:52:7B:7A:6A:D7:F4:CE:2E:70:19:2F:5C:02:32:A6:5A:A6:94:5B
X509v3 Authority Key Identifier:
keyid:52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:08:5d:b3:bc:19:b1:e8:07:da:34:b9:21:63:62:4c:a2:b6:
7f:23:36:d6:24:49:fd:36:0b:1a:19:a6:4a:4e:b2:cb:8c:df:
07:9a:c4:f4:b5:b7:7b:36:70:a2:79:d2:90:29:f0:91:31:39:
b4:cb:98:2b:c8:82:1f:c9:b0:6b:a7:c5:e0:71:0e:07:cb:cb:
4c:32:7e:b3:9d:d3:27:f4:f9:85:2c:6c:94:f7:f4:66:85:2a:
28:03:a6:8a:91:6e:b0:17:b3:fc:75:a0:32:68:80:b2:35:71:
42:81:e8:49:b5:8d:de:00:eb:db:ad:59:d2:83:25:07:ec:24:
88:43:44:2d:fe:14:44:ee:ca:c9:6e:92:77:d8:dc:48:cb:95:
2d:3c:b1:6e:87:86:23:9b:8d:4c:83:92:2b:60:43:7b:2f:a9:
24:2a:bf:22:61:26:80:6e:a5:76:80:3a:ad:6a:07:e6:5f:d2:
76:da:20:56:79:bc:9b:76:57:8f:96:80:71:41:da:00:ec:47:
a7:61:34:e8:b4:7f:0d:35:d6:77:3d:50:fc:86:bc:9e:80:4c:
70:77:19:3c:61:c4:69:55:92:60:e3:1b:e1:be:56:c3:fd:0e:
40:11:10:40:af:c5:5e:0f:1d:61:53:94:91:44:1c:89:cf:54:
46:60:d7:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc8RWVz+WNOJ9kod/LJrwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZWEyOTc3OGJlYjI4MDAxODI5NGUyMzk1Y2JmYTAwNDJj
OGY3OGEwHhcNMjUwODIzMDEwMzMzWhcNMjUwODI0MDEwMzMzWjAzMTEwLwYDVQQD
Eyg5YTUyN2I3YTZhZDdmNGNlMmU3MDE5MmY1YzAyMzJhNjVhYTY5NDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NsscKHebrV4bZ3yOse5UAwj/d+u
lo8VvhVAJcwwv8bjJG2QSJdKi6YcCYGu6xpT6W59gFqvh3xsRWviMi7uj1LeoNte
I/vZ4w3ZQW8dtwXjaO/nhG8lpSlCmTe9G5x8VRaVi8hbop2dhQeqxM5BGwBpyhyW
oxpWtgEgFs91m2/daZRoKyWVctICKboPDWBorJQgW6YypDj2YsYMu2FKnp6vGof8
nSPevUVr9ITwHP6EdbDSsRFasIXQ0xfotQfXwH+NymNN3vQZ4ZaXPPAi1f5Lb/vB
SdZiQGs14Y/lWzIziHzU2CJK6JiwLvGwUYdU26agToUQbr/6hHsbLhmY8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpSe3pq1/TOLnAZL1wCMqZappRbMB8GA1UdIwQY
MBaAFFLqKXeL6ygAGClOI5XL+gBCyPeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNzdjZjAtOTA1YS00YTg5LWE3NWUt
OWY5OTYxZGMzODUxLzEvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNzdjZjAtOTA1YS00YTg5LWE3NWUtOWY5OTYxZGMzODUx
LzEvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwAhds7wZ
segH2jS5IWNiTKK2fyM21iRJ/TYLGhmmSk6yy4zfB5rE9LW3ezZwonnSkCnwkTE5
tMuYK8iCH8mwa6fF4HEOB8vLTDJ+s53TJ/T5hSxslPf0ZoUqKAOmipFusBez/HWg
MmiAsjVxQoHoSbWN3gDr261Z0oMlB+wkiENELf4URO7KyW6Sd9jcSMuVLTyxboeG
I5uNTIOSK2BDey+pJCq/ImEmgG6ldoA6rWoH5l/SdtogVnm8m3ZXj5aAcUHaAOxH
p2E06LR/DTXWdz1Q/Ia8noBMcHcZPGHEaVWSYOMb4b5Ww/0OQBEQQK/FXg8dYVOU
kUQcic9URmDXCQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:39 2025 by rpki-client