Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: Jh4dcecQ1yYHGOJfmugw8IQbfAgiudX4Lqejm+L51Fw=
Subject key identifier: 96:14:4E:8C:72:0F:B1:94:EB:87:46:34:CB:2E:36:DB:4E:19:E4:43
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 0198D404A08D2568B749506946024F270593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 1522
Signing time: Fri 22 Aug 2025 23:02:09 +0000
Manifest this update: Fri 22 Aug 2025 23:02:09 +0000
Manifest next update: Sat 23 Aug 2025 23:02:09 +0000
Files and hashes: 1: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (hash: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=)
2: hT840T8mica095PLsmh6UJWn1xw.roa (hash: BtlUar+Qm61Tys6a6+qj8yTMdU/uS3Pp3uWg+aNGVWY=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: 944fZbrWxlCB23Kl9+XhDdTITl07XZgbbzkjz9jJi/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:a0:8d:25:68:b7:49:50:69:46:02:4f:27:05:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Aug 22 23:02:09 2025 GMT
Not After : Aug 23 23:02:09 2025 GMT
Subject: CN=96144e8c720fb194eb874634cb2e36db4e19e443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:1d:16:63:56:d2:71:d3:1e:4b:28:4d:bd:
53:a0:5c:21:b2:b6:89:3d:94:88:25:de:bc:84:d1:
48:bb:fc:16:10:3b:4a:3d:f4:92:6c:54:34:2e:3c:
d4:a9:31:94:9d:a3:6e:fb:e6:ce:0f:cc:88:03:2c:
75:67:f0:37:64:a8:26:7f:d9:8d:67:ac:00:81:de:
a3:75:d7:ce:4f:09:d7:dc:a9:66:df:1c:b5:a6:62:
62:64:c3:d0:38:76:61:fb:28:e6:41:4d:89:5c:1a:
55:58:1b:90:51:d0:40:eb:25:56:6b:06:a6:08:73:
52:99:31:95:fd:18:db:c8:fb:62:14:86:eb:ee:da:
b2:c0:1b:fc:e2:fa:bd:cd:00:73:3c:96:6e:f4:8a:
5f:ca:8c:d9:58:ee:fe:57:30:0b:10:3d:1d:46:4c:
ee:e7:78:c5:cc:10:2d:c4:05:22:ac:90:d7:29:28:
74:64:e6:d9:73:97:cd:b4:a2:42:a7:8a:e1:e5:b4:
64:5a:8e:1e:d0:ee:25:c6:74:90:1d:3e:82:16:09:
07:c3:47:f8:f0:b4:5d:63:22:76:99:ac:79:35:60:
1f:4f:61:92:e3:42:64:60:af:1d:38:00:03:8b:b7:
b3:4f:43:b8:65:c6:d8:ed:e7:48:91:d3:46:29:e9:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:14:4E:8C:72:0F:B1:94:EB:87:46:34:CB:2E:36:DB:4E:19:E4:43
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:83:0d:59:ff:6e:d6:4e:76:f0:f8:f1:1d:54:d9:eb:ab:61:
aa:ad:e7:9b:72:4a:14:53:a5:6f:77:d1:de:7d:19:cf:05:6c:
8c:07:53:4f:69:bd:96:94:b6:59:05:7e:92:47:65:73:9e:b1:
c8:43:7a:36:9c:52:ef:a1:30:b2:db:17:e9:5f:f6:be:04:5e:
c5:0c:3c:eb:f1:b3:f4:7b:e0:5a:eb:a9:43:ca:6e:12:b2:f5:
6e:d8:97:21:fd:cc:c7:74:1c:6b:e0:da:1d:ab:03:5a:c9:75:
16:f9:ce:89:f5:2b:5f:1a:e0:a9:1f:6d:12:c7:3e:b0:36:f2:
f3:8d:ee:cf:6d:88:1f:74:0a:b8:51:eb:d8:33:34:4e:b1:1a:
97:a8:40:1b:06:ed:b4:48:27:a5:ba:f6:fa:bf:fb:99:ff:43:
03:f9:eb:3e:79:a7:d4:e7:9a:9d:ba:9b:30:d9:36:a8:e8:b4:
53:a0:23:1b:95:48:c2:d3:3c:17:1a:ac:d2:cb:c9:76:05:42:
17:3e:8c:fe:e8:02:7d:02:52:6b:f2:31:d7:47:9c:e8:e2:57:
c9:6b:24:17:bf:b2:19:1b:5d:0a:25:8b:f6:36:e3:47:c0:79:
c3:1b:39:3e:73:fd:0e:05:7d:8e:f0:5f:ff:76:b6:fd:cd:07:
20:8b:f8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBKCNJWi3SVBpRgJPJwWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNDQyYmRkYTJhMzUzMjBhOTZkODA2YmYxNjhkNWI4NGE3
NmQ0MjYwHhcNMjUwODIyMjMwMjA5WhcNMjUwODIzMjMwMjA5WjAzMTEwLwYDVQQD
Eyg5NjE0NGU4YzcyMGZiMTk0ZWI4NzQ2MzRjYjJlMzZkYjRlMTllNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqEdFmNW0nHTHksoTb1ToFwhsraJ
PZSIJd68hNFIu/wWEDtKPfSSbFQ0LjzUqTGUnaNu++bOD8yIAyx1Z/A3ZKgmf9mN
Z6wAgd6jddfOTwnX3Klm3xy1pmJiZMPQOHZh+yjmQU2JXBpVWBuQUdBA6yVWawam
CHNSmTGV/RjbyPtiFIbr7tqywBv84vq9zQBzPJZu9IpfyozZWO7+VzALED0dRkzu
53jFzBAtxAUirJDXKSh0ZObZc5fNtKJCp4rh5bRkWo4e0O4lxnSQHT6CFgkHw0f4
8LRdYyJ2max5NWAfT2GS40JkYK8dOAADi7ezT0O4ZcbY7edIkdNGKekKNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYUToxyD7GU64dGNMsuNttOGeRDMB8GA1UdIwQY
MBaAFK1EK92io1MgqW2Aa/Fo1bhKdtQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclVRcjNhS2pVeUNwYllCcjhXalZ1RXAyMUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9kZDY3MmQtZTk4MC00ZGNhLTkxOTUt
ODU5ZGJjYTM4NzE0LzEvclVRcjNhS2pVeUNwYllCcjhXalZ1RXAyMUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9kZDY3MmQtZTk4MC00ZGNhLTkxOTUtODU5ZGJjYTM4NzE0
LzEvclVRcjNhS2pVeUNwYllCcjhXalZ1RXAyMUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoMNWf9u
1k528PjxHVTZ66thqq3nm3JKFFOlb3fR3n0ZzwVsjAdTT2m9lpS2WQV+kkdlc56x
yEN6NpxS76EwstsX6V/2vgRexQw86/Gz9HvgWuupQ8puErL1btiXIf3Mx3Qca+Da
HasDWsl1FvnOifUrXxrgqR9tEsc+sDby843uz22IH3QKuFHr2DM0TrEal6hAGwbt
tEgnpbr2+r/7mf9DA/nrPnmn1OeanbqbMNk2qOi0U6AjG5VIwtM8Fxqs0svJdgVC
Fz6M/ugCfQJSa/Ix10ec6OJXyWskF7+yGRtdCiWL9jbjR8B5wxs5PnP9DgV9jvBf
/3a2/c0HIIv4NQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:04 2025 by rpki-client