Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: 4bcAc4rUKVimSaZ5h2D/HP6gaNGj+oLAXVc6zQb+pXY=
Subject key identifier: A2:13:23:74:1F:2A:A4:CC:4F:2E:71:CF:BD:40:EE:3B:2E:D1:D6:BC
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 0197BAEBDE51586FBA3CC1D0A047982FA210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0817
Signing time: Sun 29 Jun 2025 09:01:49 +0000
Manifest this update: Sun 29 Jun 2025 09:01:49 +0000
Manifest next update: Mon 30 Jun 2025 09:01:49 +0000
Files and hashes: 1: hcpelkMB3HLp2KFjx3F4u7p7QiA.roa (hash: 61+3xEVQzTEIYSViuJWqNAx3iaX+tJlcGs9MEnOKcRg=)
2: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: Iaiag+wq+WsMbBK50qBuEfG1q7+uEki2hnqCD0DfK7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:de:51:58:6f:ba:3c:c1:d0:a0:47:98:2f:a2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Jun 29 09:01:49 2025 GMT
Not After : Jun 30 09:01:49 2025 GMT
Subject: CN=a21323741f2aa4cc4f2e71cfbd40ee3b2ed1d6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:fc:eb:64:97:90:cc:ca:19:5e:54:50:9c:
93:c2:7f:08:65:f8:b4:4c:18:34:99:b4:4d:6c:b5:
96:30:90:2b:50:b1:5f:ba:22:bb:8b:d0:59:5f:e4:
ce:d1:cf:e7:6e:1f:7a:c5:2f:ea:de:1b:fe:c3:b5:
7b:8e:ea:ed:05:a9:1a:67:4b:33:5e:32:2f:a5:6f:
99:31:77:6e:b9:b3:19:01:78:ae:e7:10:5f:dd:f4:
ec:8b:22:36:9f:c0:c4:08:00:f6:df:d1:c4:73:21:
ee:f1:ff:98:d2:0d:97:ab:2e:95:98:4c:63:2d:99:
6b:ca:11:1d:ef:60:a5:f6:58:f4:66:7b:62:7a:41:
5b:b2:70:75:30:90:a0:ee:ef:e8:ba:f7:b8:d2:17:
88:ae:8e:74:dd:4c:03:e3:ab:9f:c1:d0:e8:32:16:
40:90:16:e8:09:ea:7e:9e:14:11:0f:04:2a:5e:b4:
7f:40:f8:f6:d3:c0:a2:8a:34:ca:c7:07:78:22:fd:
18:d0:c3:f5:42:be:16:44:9a:1e:91:ba:00:ef:3d:
f4:0b:00:90:cc:92:57:3c:f7:4e:00:7f:65:a0:58:
07:e4:cb:ab:49:0d:dc:7e:b7:5f:e7:8d:95:a2:c0:
19:d2:f0:05:c1:be:ef:6a:6d:02:3d:75:59:fd:4f:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:13:23:74:1F:2A:A4:CC:4F:2E:71:CF:BD:40:EE:3B:2E:D1:D6:BC
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:28:09:30:f4:e7:86:99:e0:f9:0c:48:5f:4b:15:5c:cc:1b:
bf:68:a4:f0:0e:f6:ea:dd:b2:57:b2:1b:bf:d9:c3:d6:96:70:
aa:fd:2b:52:b6:1b:d0:da:3e:5d:c4:a8:6b:3f:bb:24:a3:60:
10:23:e0:ea:c6:b0:ac:f1:77:87:70:19:84:38:a7:08:f8:eb:
3b:4b:f2:d8:50:1e:68:82:c4:62:b3:a7:96:5d:a3:69:69:e9:
b1:6a:53:90:63:22:2a:03:59:33:c8:5d:f4:2b:bd:71:1f:8a:
c7:da:5f:10:9b:27:91:e8:43:06:86:5d:27:bf:ec:34:d1:58:
ac:93:c2:be:4e:09:47:9f:d9:ee:67:e8:33:72:96:2a:a0:44:
f7:ef:c6:2b:cd:b3:b7:0e:dd:f7:b5:e5:a8:b2:ce:3d:1f:49:
cb:0a:8f:d9:e4:3f:75:74:c4:7e:3c:a6:ce:a5:4a:f2:6b:63:
36:23:b2:36:be:a5:a9:e8:c8:87:54:5b:23:04:f4:ba:a9:c7:
d6:03:54:af:b2:8e:8f:69:3e:28:13:bc:3a:a0:2d:04:25:8f:
4c:6d:84:ca:e3:f3:f3:b3:10:02:5f:9f:75:4e:ca:92:45:36:
bd:f1:25:c4:0d:24:c2:01:ff:76:53:6f:51:5a:71:18:e5:e0:
f1:81:67:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6695RWG+6PMHQoEeYL6IQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NzJiZDQ5ZDU1MWI0YWRhNWJkNmJiNjk1NjE4YTc5NDUx
YWQzNGUwHhcNMjUwNjI5MDkwMTQ5WhcNMjUwNjMwMDkwMTQ5WjAzMTEwLwYDVQQD
EyhhMjEzMjM3NDFmMmFhNGNjNGYyZTcxY2ZiZDQwZWUzYjJlZDFkNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf/862SXkMzKGV5UUJyTwn8IZfi0
TBg0mbRNbLWWMJArULFfuiK7i9BZX+TO0c/nbh96xS/q3hv+w7V7jurtBakaZ0sz
XjIvpW+ZMXduubMZAXiu5xBf3fTsiyI2n8DECAD239HEcyHu8f+Y0g2Xqy6VmExj
LZlryhEd72Cl9lj0ZntiekFbsnB1MJCg7u/ouve40heIro503UwD46ufwdDoMhZA
kBboCep+nhQRDwQqXrR/QPj208CiijTKxwd4Iv0Y0MP1Qr4WRJoekboA7z30CwCQ
zJJXPPdOAH9loFgH5MurSQ3cfrdf542VosAZ0vAFwb7vam0CPXVZ/U9QkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKITI3QfKqTMTy5xz71A7jsu0da8MB8GA1UdIwQY
MBaAFLlyvUnVUbStpb1rtpVhinlFGtNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mZTA3YjctZjQ2NC00ZTY3LTgyOTkt
Y2E1ZTY4NTQzOGEyLzEvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mZTA3YjctZjQ2NC00ZTY3LTgyOTktY2E1ZTY4NTQzOGEy
LzEvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHygJMPTn
hpng+QxIX0sVXMwbv2ik8A726t2yV7Ibv9nD1pZwqv0rUrYb0No+XcSoaz+7JKNg
ECPg6sawrPF3h3AZhDinCPjrO0vy2FAeaILEYrOnll2jaWnpsWpTkGMiKgNZM8hd
9Cu9cR+Kx9pfEJsnkehDBoZdJ7/sNNFYrJPCvk4JR5/Z7mfoM3KWKqBE9+/GK82z
tw7d97XlqLLOPR9JywqP2eQ/dXTEfjymzqVK8mtjNiOyNr6lqejIh1RbIwT0uqnH
1gNUr7KOj2k+KBO8OqAtBCWPTG2EyuPz87MQAl+fdU7KkkU2vfElxA0kwgH/dlNv
UVpxGOXg8YFnSQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:31:07 2025 by rpki-client