Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: g1/P47CENjrzCqoD5TcNDg7nas+QqCY/LL7/ihZRO8M=
Subject key identifier: 40:22:60:71:54:63:20:E5:D0:C5:A7:E2:8F:90:68:03:D5:8F:C6:93
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 0198D4745AD9713E38D5D970A9B5D90D683A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 01:04:11 +0000
Manifest this update: Sat 23 Aug 2025 01:04:11 +0000
Manifest next update: Sun 24 Aug 2025 01:04:11 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: LeHut8dSRSTCms9A3A6RaHzNQxfZ0VhQAX/+kcipuxQ=)
2: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (hash: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=)
3: fwxt0QHyh3ttD260VFCya7TU-1s.roa (hash: 9i1HvobHCHHVWkd92tpYtwhAF4c8uqpeWhFp9/w1WdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:5a:d9:71:3e:38:d5:d9:70:a9:b5:d9:0d:68:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Aug 23 01:04:11 2025 GMT
Not After : Aug 24 01:04:11 2025 GMT
Subject: CN=40226071546320e5d0c5a7e28f906803d58fc693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:6d:48:d8:1e:a1:8b:f5:52:17:d7:b9:99:
93:af:06:2e:17:72:a3:b2:e4:ab:6e:49:42:1d:a6:
61:77:1d:31:09:e0:97:5d:92:76:4b:93:48:a9:18:
c9:18:1d:2a:c8:d6:7d:1f:de:c1:d1:19:d9:83:32:
5b:3b:47:bf:ee:25:98:42:ed:90:82:c1:8f:f0:cb:
9b:14:bc:66:f5:e6:6e:7a:84:de:94:30:30:fa:17:
da:c9:30:b8:e4:20:c9:42:7a:de:4e:5e:0b:ff:31:
12:8a:88:e0:2a:6f:e0:8f:c7:d5:03:aa:c4:d4:97:
7e:e0:ce:5a:c1:e8:29:b3:7d:39:73:0d:88:31:65:
fb:07:fb:a3:65:ec:77:24:19:55:7a:41:cc:00:30:
c6:d9:a7:22:7f:bc:52:29:6d:19:00:a9:a1:6b:d8:
73:39:f0:bf:25:8f:93:8a:7d:14:6c:69:7e:57:1c:
c7:23:f8:57:76:9f:01:1e:89:29:f0:74:87:28:df:
53:70:4c:34:9c:2d:3b:98:16:4a:ab:c4:3b:da:23:
35:95:dc:5b:23:04:58:8d:bc:44:e0:b2:88:3c:21:
46:d7:7b:0f:af:bf:9a:4e:28:41:73:80:8f:06:15:
bc:a8:8a:82:7e:94:39:d6:e9:4e:2b:d3:47:7e:b5:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:60:71:54:63:20:E5:D0:C5:A7:E2:8F:90:68:03:D5:8F:C6:93
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:70:3d:6e:74:35:ea:3b:c0:bc:d7:13:4c:29:d5:78:d6:d6:
13:62:11:3b:15:11:d6:b5:c8:50:c8:58:f8:d5:a0:6f:eb:3a:
93:31:11:a8:b0:63:77:82:b8:b3:df:6f:b1:bd:aa:b3:ba:4d:
b3:b6:2d:67:a6:af:2b:0a:b9:62:75:43:09:6d:aa:bb:45:c4:
67:50:f6:20:50:88:3a:1b:2e:99:03:9b:33:75:ee:4c:2a:20:
73:90:25:32:52:51:df:87:10:1c:ee:bb:dc:62:c7:bc:e3:97:
50:a7:97:3e:37:c2:49:21:b4:fe:9c:47:0e:ef:c5:56:85:f5:
39:a9:c2:d8:21:6f:87:54:e2:7a:81:06:e6:f1:a4:1c:d9:65:
84:0d:7d:80:03:72:7b:c2:37:40:c5:d6:60:e8:1e:5b:c9:ac:
98:d5:f0:8c:3b:05:29:c6:11:27:6a:46:55:3e:7e:42:b2:ed:
0c:bf:f0:7d:1a:e0:01:94:05:64:73:b4:90:cf:09:a1:14:13:
2f:51:08:38:64:22:26:e0:76:e4:b8:0e:2e:0b:5a:fa:6e:cc:
9d:5d:aa:af:e3:91:2f:74:47:83:8f:5e:a2:fd:f8:d9:67:9f:
1d:1d:43:c9:ef:63:f9:88:79:d2:d7:c9:b8:4d:ec:76:68:cf:
d3:5b:30:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdFrZcT441dlwqbXZDWg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZDRhYzMyMDk2NWFiNDk5MTEwODUwMWEwNjAyYTY4OTNl
NjNmZWMwHhcNMjUwODIzMDEwNDExWhcNMjUwODI0MDEwNDExWjAzMTEwLwYDVQQD
Eyg0MDIyNjA3MTU0NjMyMGU1ZDBjNWE3ZTI4ZjkwNjgwM2Q1OGZjNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiBtSNgeoYv1UhfXuZmTrwYuF3Kj
suSrbklCHaZhdx0xCeCXXZJ2S5NIqRjJGB0qyNZ9H97B0RnZgzJbO0e/7iWYQu2Q
gsGP8MubFLxm9eZueoTelDAw+hfayTC45CDJQnreTl4L/zESiojgKm/gj8fVA6rE
1Jd+4M5awegps305cw2IMWX7B/ujZex3JBlVekHMADDG2acif7xSKW0ZAKmha9hz
OfC/JY+Tin0UbGl+VxzHI/hXdp8BHokp8HSHKN9TcEw0nC07mBZKq8Q72iM1ldxb
IwRYjbxE4LKIPCFG13sPr7+aTihBc4CPBhW8qIqCfpQ51ulOK9NHfrVJdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAiYHFUYyDl0MWn4o+QaAPVj8aTMB8GA1UdIwQY
MBaAFFDUrDIJZatJkRCFAaBgKmiT5j/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTkt
YmEwMzIzMjM3NDRjLzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTktYmEwMzIzMjM3NDRj
LzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHA9bnQ1
6jvAvNcTTCnVeNbWE2IROxUR1rXIUMhY+NWgb+s6kzERqLBjd4K4s99vsb2qs7pN
s7YtZ6avKwq5YnVDCW2qu0XEZ1D2IFCIOhsumQObM3XuTCogc5AlMlJR34cQHO67
3GLHvOOXUKeXPjfCSSG0/pxHDu/FVoX1OanC2CFvh1TieoEG5vGkHNllhA19gANy
e8I3QMXWYOgeW8msmNXwjDsFKcYRJ2pGVT5+QrLtDL/wfRrgAZQFZHO0kM8JoRQT
L1EIOGQiJuB25LgOLgta+m7MnV2qr+ORL3RHg49eov342WefHR1Dye9j+Yh50tfJ
uE3sdmjP01swIw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:46 2025 by rpki-client