Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier: FkyLSIZDBkNNyp+pRXkQObjSFLA4FFaxpc1EmsP0qCU=
Subject key identifier: 1A:61:18:25:4A:7F:BD:EC:43:D3:B1:2E:AA:1D:04:EE:30:D8:D0:9A
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 0198D66076CE5E904B07E0A49839666662CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number: 0C7B
Signing time: Sat 23 Aug 2025 10:01:42 +0000
Manifest this update: Sat 23 Aug 2025 10:01:42 +0000
Manifest next update: Sun 24 Aug 2025 10:01:42 +0000
Files and hashes: 1: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: 6Ua+2FNbfXQaMiODx7ew7bmIJEi0V+OXw6cSgMP4vcs=)
2: yBgRtAUy9SDMB2oNfVg6DWBcxdo.roa (hash: th+et5jSmKPB56Gge2PfFSgmFKaHL/juuWVdT7KzSfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:76:ce:5e:90:4b:07:e0:a4:98:39:66:66:62:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: Aug 23 10:01:42 2025 GMT
Not After : Aug 24 10:01:42 2025 GMT
Subject: CN=1a6118254a7fbdec43d3b12eaa1d04ee30d8d09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:1a:be:ae:86:5d:7d:7d:dd:5f:af:49:94:
fc:44:3b:83:6c:72:88:01:4b:91:22:84:c2:c3:9c:
e5:a3:36:61:fa:3a:da:10:d1:ca:00:71:f4:4a:a2:
84:8f:84:33:6f:58:b9:4b:a3:ab:35:22:a8:ce:39:
d2:39:de:b8:48:57:8e:2d:59:cf:cf:69:52:a8:94:
92:9d:cd:9c:03:ed:0b:06:60:04:e1:ce:1f:c3:d2:
36:27:3a:6f:cf:30:3a:3d:8f:52:55:33:af:a2:a5:
96:f3:5f:87:39:d0:0a:af:a7:e0:a2:0d:26:7c:51:
55:a2:3c:3f:13:d4:78:9c:44:e3:3d:ef:4b:c0:b4:
10:0c:b0:8d:d3:f5:07:d7:35:2b:32:c8:4f:36:4e:
15:ce:a8:3e:2e:c3:da:2b:44:9f:24:6c:6e:00:40:
37:a1:6c:c1:07:6c:17:bb:32:65:2b:14:bf:5e:63:
58:7c:ed:5e:c0:00:19:90:e6:92:1b:07:f8:dd:bc:
0a:ef:63:e6:11:59:54:9f:e9:fc:fe:26:34:97:6c:
90:dd:f1:61:9f:b1:95:b5:d3:3b:7f:55:99:78:b3:
4d:b0:b6:68:da:2b:8a:c6:c1:e0:eb:91:b0:a1:f6:
dd:6a:20:12:0a:3f:9e:33:98:18:f1:ec:07:87:01:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:61:18:25:4A:7F:BD:EC:43:D3:B1:2E:AA:1D:04:EE:30:D8:D0:9A
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e0:99:a0:9b:09:fb:eb:09:99:31:67:dc:f7:14:c2:9c:05:
e5:0d:e0:89:53:cf:80:a5:25:68:e0:f7:1a:68:55:45:c7:51:
01:1d:52:77:ef:86:7d:a5:eb:fb:ee:80:d0:9e:24:40:53:22:
9d:39:0c:ab:5e:6c:23:36:ab:8f:86:71:56:b1:90:96:f1:78:
b7:01:86:15:80:c2:02:87:2f:2e:06:26:7c:d2:76:02:59:f3:
91:d4:1a:88:d2:64:dc:af:3b:e2:48:a0:60:20:c1:79:39:1b:
66:8f:93:ce:08:4b:23:75:23:bd:2f:fd:be:89:4f:0e:2f:a2:
17:89:40:79:92:19:e0:18:29:c5:2c:0f:d5:20:a3:bf:7b:10:
4b:ae:58:23:8c:a1:42:0c:2f:7a:d8:40:50:6a:04:b8:6b:ed:
8e:52:dc:30:b6:54:7c:2b:c4:9f:17:79:5b:32:2a:f9:e5:de:
ba:ae:2f:17:d1:2d:fb:9d:97:0e:de:29:99:54:41:53:a0:c6:
75:59:10:c3:76:f0:0e:d1:b9:ab:8b:cc:db:6a:5a:9f:28:a2:
e1:6a:40:18:7e:4d:73:c8:9f:76:13:dc:bc:0b:0b:41:4d:45:
f3:5a:b4:9e:a4:b8:f9:1b:cc:2f:d0:1e:18:94:c9:ef:44:c9:
33:82:f8:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYHbOXpBLB+CkmDlmZmLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMWNlZjZmOWU5ZWRjNDVlM2NkMjhlZjQwMjUxOTc5NTJk
NDYwZTkwHhcNMjUwODIzMTAwMTQyWhcNMjUwODI0MTAwMTQyWjAzMTEwLwYDVQQD
EygxYTYxMTgyNTRhN2ZiZGVjNDNkM2IxMmVhYTFkMDRlZTMwZDhkMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15Uavq6GXX193V+vSZT8RDuDbHKI
AUuRIoTCw5zlozZh+jraENHKAHH0SqKEj4Qzb1i5S6OrNSKozjnSOd64SFeOLVnP
z2lSqJSSnc2cA+0LBmAE4c4fw9I2JzpvzzA6PY9SVTOvoqWW81+HOdAKr6fgog0m
fFFVojw/E9R4nETjPe9LwLQQDLCN0/UH1zUrMshPNk4Vzqg+LsPaK0SfJGxuAEA3
oWzBB2wXuzJlKxS/XmNYfO1ewAAZkOaSGwf43bwK72PmEVlUn+n8/iY0l2yQ3fFh
n7GVtdM7f1WZeLNNsLZo2iuKxsHg65GwofbdaiASCj+eM5gY8ewHhwEVgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBphGCVKf73sQ9OxLqodBO4w2NCaMB8GA1UdIwQY
MBaAFLoc72+entxF480o70AlGXlS1GDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWh6dmI1NmUzRVhqelNqdlFDVVplVkxVWU9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yMWQ2NjMtNjg3NC00ODljLWFiOWUt
ZDljYTAzZTY2ZmZiLzEvdWh6dmI1NmUzRVhqelNqdlFDVVplVkxVWU9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yMWQ2NjMtNjg3NC00ODljLWFiOWUtZDljYTAzZTY2ZmZi
LzEvdWh6dmI1NmUzRVhqelNqdlFDVVplVkxVWU9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheCZoJsJ
++sJmTFn3PcUwpwF5Q3giVPPgKUlaOD3GmhVRcdRAR1Sd++GfaXr++6A0J4kQFMi
nTkMq15sIzarj4ZxVrGQlvF4twGGFYDCAocvLgYmfNJ2AlnzkdQaiNJk3K874kig
YCDBeTkbZo+TzghLI3UjvS/9volPDi+iF4lAeZIZ4BgpxSwP1SCjv3sQS65YI4yh
QgwvethAUGoEuGvtjlLcMLZUfCvEnxd5WzIq+eXeuq4vF9Et+52XDt4pmVRBU6DG
dVkQw3bwDtG5q4vM22panyii4WpAGH5Nc8ifdhPcvAsLQU1F81q0nqS4+RvML9Ae
GJTJ70TJM4L45Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:21:03 2025 by rpki-client