Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File: UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier: 98+RChgCNKIWSuDxSP1sjp+MK8NAzO7SsJnEFLWi2Qc=
Subject key identifier: 42:FA:78:77:06:36:56:F5:AD:58:AF:1C:34:48:4F:62:9B:E4:26:67
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 0197B6A157E190137456F9A4C14950E9B1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:56 +0000
Manifest this update: Sat 28 Jun 2025 13:01:56 +0000
Manifest next update: Sun 29 Jun 2025 13:01:56 +0000
Files and hashes: 1: JhOM2pckb8nFdq5Y2DwyyvABDcw.roa (hash: /pw012qMM2N9wpV1EMngiWd9fhFOR9+5XLur4rjuVfs=)
2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: ZMytcymGUl85kHtfsEockXc327igV3iR3+NVcx+KxAM=)
3: pSWgXuERRm1Au1teAh3DmpY14k0.roa (hash: EnWqTAmFjlN0INK78CFEhUf7qBxCnt1KXQVV4wR/100=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:57:e1:90:13:74:56:f9:a4:c1:49:50:e9:b1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Jun 28 13:01:56 2025 GMT
Not After : Jun 29 13:01:56 2025 GMT
Subject: CN=42fa7877063656f5ad58af1c34484f629be42667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fd:92:5d:18:c4:42:14:98:56:85:54:e1:c1:
9a:d4:4e:a9:5b:f1:f5:60:dc:2a:cf:9c:73:5d:26:
ff:7e:b2:fc:f5:6e:99:60:7c:0e:e1:ff:ca:e6:b1:
c0:c9:8c:57:3c:17:ac:d9:22:94:c1:98:32:fc:94:
4f:9d:69:7e:04:a1:66:ae:f9:ca:1b:b2:a9:d5:ff:
ae:f0:d5:4c:21:9a:97:b0:79:89:cd:f3:a3:3c:8d:
90:d3:f8:b9:37:df:5f:af:43:08:1d:4f:b8:c2:f1:
82:9d:28:cb:76:ab:dd:67:97:2b:0e:42:03:5a:50:
db:ca:8d:cb:4d:8c:7c:f6:a1:a3:2e:39:e0:36:80:
26:fe:e5:6f:18:78:c4:3f:c8:f9:af:94:c0:cb:51:
1d:c6:5c:f6:71:1b:76:14:06:b0:9d:e8:fe:3c:aa:
b4:2b:96:3d:bc:e7:3f:6a:11:0f:9d:1f:96:a0:d9:
84:91:92:e1:97:6d:5c:81:32:08:d1:95:3d:2e:62:
21:81:2e:70:be:33:17:93:c3:8e:44:6a:f4:66:44:
c2:a0:62:37:93:c3:52:59:50:5f:0f:b0:64:26:2d:
9c:bf:da:79:42:49:a0:34:a7:d5:ab:cf:4d:52:04:
1a:c2:95:50:02:4b:b9:a8:d9:35:6b:51:02:30:9c:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FA:78:77:06:36:56:F5:AD:58:AF:1C:34:48:4F:62:9B:E4:26:67
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:09:38:f9:9e:5b:42:22:4c:00:f8:84:21:81:a5:6e:58:e4:
53:e6:5f:6d:16:f8:e7:bc:53:f3:57:53:a5:e7:a2:e1:8e:b0:
34:a5:f3:83:50:3e:0a:a2:b7:d9:8e:d4:6a:7e:ca:16:09:a2:
9b:a3:d6:f4:5a:4b:b4:97:f3:e5:fa:4a:ec:67:33:f4:7f:0b:
db:9e:a5:2f:e0:ec:6d:85:71:77:b3:55:fa:06:2a:79:72:6a:
20:7d:21:d3:68:1e:0d:c1:aa:14:fb:c6:53:eb:13:c8:40:96:
64:9b:4e:c6:af:0d:49:c2:48:ef:26:b6:9c:24:fb:b0:18:c4:
90:62:a3:7e:28:b7:f0:33:c4:b9:7f:4b:c6:35:cb:0f:66:24:
24:c7:39:34:b5:8b:42:04:86:14:04:3b:58:82:2e:5b:15:f1:
3d:65:2c:cf:7a:7e:e8:16:ef:58:5d:de:a3:8f:d8:58:56:39:
14:1a:8a:6d:f8:88:bb:a3:d2:d7:5e:65:f2:0a:3c:14:de:bd:
9d:f0:0d:36:da:30:de:b0:bc:5f:e4:b1:94:da:bc:ee:f7:36:
1e:ca:f7:03:99:ed:97:58:e8:5d:a3:a9:60:61:20:af:3c:1a:
54:2d:46:2f:0b:29:be:e0:6a:56:a4:b2:eb:a1:4a:7e:71:16:
0e:38:10:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oVfhkBN0VvmkwUlQ6bGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMGRiMTcxNTA1MjI1M2JmNTIzZjE0MGI5ZjU2MzdhMTFk
NWU5YWYwHhcNMjUwNjI4MTMwMTU2WhcNMjUwNjI5MTMwMTU2WjAzMTEwLwYDVQQD
Eyg0MmZhNzg3NzA2MzY1NmY1YWQ1OGFmMWMzNDQ4NGY2MjliZTQyNjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/2SXRjEQhSYVoVU4cGa1E6pW/H1
YNwqz5xzXSb/frL89W6ZYHwO4f/K5rHAyYxXPBes2SKUwZgy/JRPnWl+BKFmrvnK
G7Kp1f+u8NVMIZqXsHmJzfOjPI2Q0/i5N99fr0MIHU+4wvGCnSjLdqvdZ5crDkID
WlDbyo3LTYx89qGjLjngNoAm/uVvGHjEP8j5r5TAy1Edxlz2cRt2FAawnej+PKq0
K5Y9vOc/ahEPnR+WoNmEkZLhl21cgTII0ZU9LmIhgS5wvjMXk8OORGr0ZkTCoGI3
k8NSWVBfD7BkJi2cv9p5QkmgNKfVq89NUgQawpVQAku5qNk1a1ECMJxGvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL6eHcGNlb1rVivHDRIT2Kb5CZnMB8GA1UdIwQY
MBaAFFANsXFQUiU79SPxQLn1Y3oR1emvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUEyeGNWQlNKVHYxSV9GQXVmVmplaEhWNmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xZjdiYWQtZTVkZC00ZTUyLWIwZDQt
OGY1Yzk4NjdlOTk4LzEvVUEyeGNWQlNKVHYxSV9GQXVmVmplaEhWNmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xZjdiYWQtZTVkZC00ZTUyLWIwZDQtOGY1Yzk4NjdlOTk4
LzEvVUEyeGNWQlNKVHYxSV9GQXVmVmplaEhWNmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwk4+Z5b
QiJMAPiEIYGlbljkU+ZfbRb457xT81dTpeei4Y6wNKXzg1A+CqK32Y7Uan7KFgmi
m6PW9FpLtJfz5fpK7Gcz9H8L256lL+DsbYVxd7NV+gYqeXJqIH0h02geDcGqFPvG
U+sTyECWZJtOxq8NScJI7ya2nCT7sBjEkGKjfii38DPEuX9LxjXLD2YkJMc5NLWL
QgSGFAQ7WIIuWxXxPWUsz3p+6BbvWF3eo4/YWFY5FBqKbfiIu6PS115l8go8FN69
nfANNtow3rC8X+SxlNq87vc2Hsr3A5ntl1joXaOpYGEgrzwaVC1GLwspvuBqVqSy
66FKfnEWDjgQ1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:22 2025 by rpki-client