Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File: Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier: ARjtEUQi1QtjgiXpSqgAjV6GXOMjBWQkANEwSDtwz7Q=
Subject key identifier: D5:66:4D:DA:2D:45:4D:4A:7B:6C:01:3D:C0:8F:B6:0F:5B:E8:8D:EB
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer: /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial: 0197B6D75894FE2C0AC36DFBAAF237405D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number: 0C1F
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: 6U9v2b9_H16oPmmsjyxvxUr0E3s.roa (hash: vTyGtdDSUJCCG+RyWL7dyY03BLe4INjU/wmtj3pLFUM=)
2: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: qEJz0n5eCzr/RvmwOgQsGALPlllLT2ftshtVn5skMXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:58:94:fe:2c:0a:c3:6d:fb:aa:f2:37:40:5d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=d5664dda2d454d4a7b6c013dc08fb60f5be88deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:d2:cc:37:1d:e8:5e:f0:c9:8b:fa:50:db:
f5:cf:f0:94:f2:3e:fb:c1:1e:63:ae:8f:05:16:f2:
2a:d1:b2:47:71:c7:aa:fe:bc:3f:b1:a7:04:8b:e8:
d5:ff:35:15:da:44:a6:85:08:c1:ae:d7:31:6f:67:
cf:be:69:18:40:7d:db:3b:3a:65:50:c0:48:bd:11:
db:0f:aa:a9:a1:e7:02:a3:4a:5f:d8:9f:01:c3:87:
1b:1e:a4:04:d2:07:21:f0:d5:ac:f6:70:11:5f:4e:
b3:da:6a:4d:89:ef:59:be:31:64:1c:d2:47:fa:b5:
2a:1a:7c:c8:36:a4:c7:1c:e3:be:35:92:6c:1f:47:
93:9f:79:27:08:ae:eb:12:01:4b:84:16:f7:03:a5:
2e:2a:86:04:84:b5:9e:3c:dd:af:a6:75:0e:5c:9a:
27:dd:48:ca:55:92:56:ce:e3:ea:c8:d8:52:37:62:
dd:50:24:3a:4c:99:8a:96:d6:09:fb:56:5e:6d:42:
9a:77:15:0c:c9:2e:1d:ba:cd:f8:9e:01:96:3b:0a:
5d:8d:b5:bf:d1:b4:42:a2:ac:21:7e:ff:34:47:97:
e4:98:2a:49:4f:37:35:15:27:b4:3e:34:72:72:9b:
fd:4b:45:dc:75:48:17:47:90:d6:ef:6d:cd:9c:12:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:66:4D:DA:2D:45:4D:4A:7B:6C:01:3D:C0:8F:B6:0F:5B:E8:8D:EB
X509v3 Authority Key Identifier:
keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4a:0f:ce:75:83:67:09:07:0f:6e:37:48:0e:ed:5e:72:df:
5c:77:ee:b2:18:69:dd:8e:9e:44:e0:dd:a6:09:82:3d:6e:9b:
54:78:ee:a3:a2:9f:31:f6:be:10:50:c9:d6:72:a7:6f:70:fa:
67:1d:70:4f:81:0a:c3:f7:f3:42:90:63:35:c2:ff:65:5d:7e:
4a:ab:b3:98:d1:cc:3a:64:a7:02:72:e3:e5:35:8c:90:eb:af:
10:b7:1c:71:eb:3e:90:ed:e0:8e:02:0e:05:e5:1d:1b:2e:27:
29:7a:87:8c:36:00:85:df:22:3e:dc:ee:e5:f9:08:90:23:64:
40:01:30:ef:22:fe:b7:5c:0e:27:e9:d3:58:96:cf:74:ca:8f:
6c:40:7b:fd:d3:0c:51:ab:71:2a:b3:f7:83:9a:d9:8f:0a:6b:
5d:7d:b9:95:50:6b:96:1e:61:eb:bc:26:60:cc:9c:c5:97:e2:
72:1a:f2:4f:9a:85:cb:53:95:97:2c:13:dd:80:1d:7a:08:2c:
9b:f1:89:58:0b:00:f7:e6:41:3b:c5:3b:13:b6:1d:63:67:78:
f1:fa:c3:86:2b:96:05:b7:72:af:2a:22:c4:cd:59:e9:75:10:
d7:0e:fc:5d:17:b5:8e:f8:ce:dd:25:94:5e:b6:45:97:3f:60:
96:7e:51:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe211iU/iwKw237qvI3QF0eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxY2Y3MzJhOGE3NDM5ZTkyODBmMjNlZjU3ODQ5ODE0YWYx
OTVhZTAwHhcNMjUwNjI4MTQwMDU1WhcNMjUwNjI5MTQwMDU1WjAzMTEwLwYDVQQD
EyhkNTY2NGRkYTJkNDU0ZDRhN2I2YzAxM2RjMDhmYjYwZjViZTg4ZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WXSzDcd6F7wyYv6UNv1z/CU8j77
wR5jro8FFvIq0bJHcceq/rw/sacEi+jV/zUV2kSmhQjBrtcxb2fPvmkYQH3bOzpl
UMBIvRHbD6qpoecCo0pf2J8Bw4cbHqQE0gch8NWs9nARX06z2mpNie9ZvjFkHNJH
+rUqGnzINqTHHOO+NZJsH0eTn3knCK7rEgFLhBb3A6UuKoYEhLWePN2vpnUOXJon
3UjKVZJWzuPqyNhSN2LdUCQ6TJmKltYJ+1ZebUKadxUMyS4dus34ngGWOwpdjbW/
0bRCoqwhfv80R5fkmCpJTzc1FSe0PjRycpv9S0XcdUgXR5DW723NnBJccwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVmTdotRU1Ke2wBPcCPtg9b6I3rMB8GA1UdIwQY
MBaAFFHPcyqKdDnpKA8j71eEmBSvGVrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWM5ektvcDBPZWtvRHlQdlY0U1lGSzhaV3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85YTY2MzgtYzhmZC00M2NmLWIxYzQt
YjA3MWM3ZWZkOTE1LzEvVWM5ektvcDBPZWtvRHlQdlY0U1lGSzhaV3VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85YTY2MzgtYzhmZC00M2NmLWIxYzQtYjA3MWM3ZWZkOTE1
LzEvVWM5ektvcDBPZWtvRHlQdlY0U1lGSzhaV3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0oPznWD
ZwkHD243SA7tXnLfXHfushhp3Y6eRODdpgmCPW6bVHjuo6KfMfa+EFDJ1nKnb3D6
Zx1wT4EKw/fzQpBjNcL/ZV1+SquzmNHMOmSnAnLj5TWMkOuvELccces+kO3gjgIO
BeUdGy4nKXqHjDYAhd8iPtzu5fkIkCNkQAEw7yL+t1wOJ+nTWJbPdMqPbEB7/dMM
UatxKrP3g5rZjwprXX25lVBrlh5h67wmYMycxZfichryT5qFy1OVlywT3YAdeggs
m/GJWAsA9+ZBO8U7E7YdY2d48frDhiuWBbdyryoixM1Z6XUQ1w78XRe1jvjO3SWU
XrZFlz9gln5RGg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:11 2025 by rpki-client