Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: C8y5aNKOx8DVioyn6Usp+tTaiecu7OqBpjCmJZojgUM=
Subject key identifier: 58:4D:62:16:5C:A8:43:7B:F8:5D:C5:68:91:A0:C3:1B:58:90:13:5E
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 0198D5BC4E700F6DD579FB8D6B6B84D4CF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 160F
Signing time: Sat 23 Aug 2025 07:02:24 +0000
Manifest this update: Sat 23 Aug 2025 07:02:24 +0000
Manifest next update: Sun 24 Aug 2025 07:02:24 +0000
Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: Jb+OKhQcfD91TCXu0ApbcwdE+rdJyHD72YsL/Gk5fGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4e:70:0f:6d:d5:79:fb:8d:6b:6b:84:d4:cf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Aug 23 07:02:24 2025 GMT
Not After : Aug 24 07:02:24 2025 GMT
Subject: CN=584d62165ca8437bf85dc56891a0c31b5890135e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:dd:a9:b3:65:79:de:d9:5f:18:ac:56:e7:
bc:e4:ce:9e:fc:f9:5e:4a:09:21:90:49:53:67:d8:
1f:98:16:e5:54:ef:8d:f0:38:84:4a:7f:4a:3f:1d:
46:15:ca:67:be:32:4d:02:56:b8:43:39:11:08:31:
0e:6f:d3:65:a2:5c:5c:f7:27:1a:d7:b1:4e:38:1f:
a7:f0:5b:c4:d3:d1:69:d8:77:cc:3c:1a:d3:4e:9b:
64:fa:10:b9:99:37:a1:fb:37:be:1c:a8:7b:a4:87:
cb:ce:d1:93:22:e5:4b:66:7d:32:99:04:67:5e:ff:
6f:4b:9c:70:50:c6:75:3a:65:ed:f6:3e:da:43:f0:
18:7d:da:14:1c:16:97:41:ab:cb:41:07:6f:33:ab:
e6:1d:90:07:e8:ec:31:b5:86:bd:08:bb:6c:f9:47:
67:0f:c9:ba:3d:0e:9d:9b:b9:88:70:95:e1:14:c7:
36:db:04:51:a8:99:36:05:2b:92:58:3d:84:58:89:
d2:0a:89:84:3f:84:7d:17:34:06:30:4f:bb:75:01:
80:e3:76:49:ab:58:d9:40:47:60:51:ef:8a:dc:dc:
a3:87:aa:9d:ea:e6:ba:bc:e0:bc:12:2b:30:46:43:
77:d9:87:d2:49:e6:62:63:0c:b3:7e:42:02:f5:57:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4D:62:16:5C:A8:43:7B:F8:5D:C5:68:91:A0:C3:1B:58:90:13:5E
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:95:a5:f5:70:45:3e:00:39:88:4e:ff:04:0c:38:63:30:4c:
36:4a:49:cd:fa:63:25:b7:74:37:d0:61:3f:48:77:34:dd:e4:
56:88:01:b9:54:88:55:0e:62:d3:39:75:cf:5e:60:e3:29:95:
76:e3:73:2c:12:69:87:be:57:45:42:69:7b:58:70:44:61:9b:
40:87:41:2b:bd:a3:a6:5f:66:6d:34:d0:e2:55:ae:35:a1:82:
90:83:86:0d:a5:4c:bb:d9:bc:9f:3c:60:c2:61:1a:c3:a7:d4:
27:34:5c:fe:eb:a0:a7:d7:b0:bc:72:4b:bd:64:65:fb:6c:41:
00:13:ec:c0:f1:7d:45:d4:93:5b:02:e6:f0:7f:f5:26:5f:75:
04:67:ab:ad:2a:59:e0:2a:c2:48:a1:42:dc:a0:f8:4a:c3:b0:
62:21:d8:22:85:32:7d:26:6a:0e:39:bb:32:e6:1c:6f:12:d0:
17:bf:ee:74:d7:a6:19:65:b6:fe:c8:57:88:74:a1:a8:f0:af:
66:59:7f:a0:84:bc:e9:ba:82:67:10:9c:3b:60:94:6a:7b:b0:
8c:09:69:5e:e0:f4:6a:1e:f7:32:e4:4c:71:5b:cf:ec:3e:f5:
c9:67:f5:66:03:f1:82:70:57:a0:dc:53:dd:0e:f1:bc:59:0b:
7f:b0:93:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvE5wD23VefuNa2uE1M94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDIzYjFlNmMwN2U2MmFmMmQyZTdlYjZkZTA4OTNiMDkx
MTlhYmIwHhcNMjUwODIzMDcwMjI0WhcNMjUwODI0MDcwMjI0WjAzMTEwLwYDVQQD
Eyg1ODRkNjIxNjVjYTg0MzdiZjg1ZGM1Njg5MWEwYzMxYjU4OTAxMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjODdqbNled7ZXxisVue85M6e/Ple
SgkhkElTZ9gfmBblVO+N8DiESn9KPx1GFcpnvjJNAla4QzkRCDEOb9Nlolxc9yca
17FOOB+n8FvE09Fp2HfMPBrTTptk+hC5mTeh+ze+HKh7pIfLztGTIuVLZn0ymQRn
Xv9vS5xwUMZ1OmXt9j7aQ/AYfdoUHBaXQavLQQdvM6vmHZAH6OwxtYa9CLts+Udn
D8m6PQ6dm7mIcJXhFMc22wRRqJk2BSuSWD2EWInSComEP4R9FzQGME+7dQGA43ZJ
q1jZQEdgUe+K3Nyjh6qd6ua6vOC8EiswRkN32YfSSeZiYwyzfkIC9VfonwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhNYhZcqEN7+F3FaJGgwxtYkBNeMB8GA1UdIwQY
MBaAFLjSOx5sB+Yq8tLn623giTsJEZq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMt
NjkwNjFlZjJjNDk5LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMtNjkwNjFlZjJjNDk5
LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5Wl9XBF
PgA5iE7/BAw4YzBMNkpJzfpjJbd0N9BhP0h3NN3kVogBuVSIVQ5i0zl1z15g4ymV
duNzLBJph75XRUJpe1hwRGGbQIdBK72jpl9mbTTQ4lWuNaGCkIOGDaVMu9m8nzxg
wmEaw6fUJzRc/uugp9ewvHJLvWRl+2xBABPswPF9RdSTWwLm8H/1Jl91BGerrSpZ
4CrCSKFC3KD4SsOwYiHYIoUyfSZqDjm7MuYcbxLQF7/udNemGWW2/shXiHShqPCv
Zll/oIS86bqCZxCcO2CUanuwjAlpXuD0ah73MuRMcVvP7D71yWf1ZgPxgnBXoNxT
3Q7xvFkLf7CTow==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:04 2025 by rpki-client