Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File: UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier: 0F6DlSVFNgFh8lHzVp2dVZpA4VS8p9yqtOIiOzbVAh4=
Subject key identifier: 84:58:FE:FB:CD:F8:B7:06:B6:79:08:82:1E:B6:63:EF:1A:C4:6D:02
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 0198D4727667C8E022F1A5703A487E8B1F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number: 10E8
Signing time: Sat 23 Aug 2025 01:02:07 +0000
Manifest this update: Sat 23 Aug 2025 01:02:07 +0000
Manifest next update: Sun 24 Aug 2025 01:02:07 +0000
Files and hashes: 1: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: O6DPRkyWjTkfiJy+ChGNUr3P2Hih5LACW/UluJuusI8=)
2: ZZhPPwqLkt0i32K3myspkarpm7w.roa (hash: I/Su6LLFQ+Dm0Pej9IN4WakV0FZtHq7XZa94FgMwfR8=)
3: _U1q7kl-Gvc0JP4VZVgWjqcMCOs.roa (hash: 3X8IGbj3QMA8V3ptFiyp/tKTSPuKRQ3qYJfTsAQKmxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:76:67:c8:e0:22:f1:a5:70:3a:48:7e:8b:1f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Aug 23 01:02:07 2025 GMT
Not After : Aug 24 01:02:07 2025 GMT
Subject: CN=8458fefbcdf8b706b67908821eb663ef1ac46d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:7f:24:37:cd:ed:b4:ed:8b:a4:cd:04:fc:
ab:ab:ac:23:22:5f:c4:6d:7d:df:cd:af:df:32:f3:
76:3c:45:c1:ff:d4:3f:a9:05:c3:bf:a3:90:b9:0e:
10:49:7a:8a:79:bf:5c:8e:7b:e5:19:99:52:15:78:
b3:20:c2:1a:f0:b9:e9:e9:9a:b5:9a:e7:dd:8a:13:
a2:f4:a5:c6:1c:42:8f:79:1f:24:dc:44:b1:a3:e4:
22:03:e4:4e:96:c5:54:b1:8f:af:84:c8:55:7f:39:
df:47:ba:57:4e:e9:4d:6b:71:5b:11:44:ca:fb:1f:
b1:8e:e5:27:be:07:03:5b:9a:46:ad:6a:b1:bb:9a:
c1:7a:97:aa:7f:f5:56:c3:55:91:4c:11:7e:3a:2d:
bc:5e:62:55:01:d5:41:c6:4f:37:74:1a:be:c2:12:
ea:8a:16:f6:53:d9:88:e3:69:a9:b2:92:d0:01:d7:
7c:08:d0:d0:fe:08:f6:8c:d0:2f:1f:30:f4:5d:07:
57:57:68:b7:2c:9e:8c:1f:b2:dc:2e:2d:da:ec:73:
e7:f6:81:3b:cd:c6:9f:c2:71:51:47:85:1a:ff:9a:
d7:da:f5:55:bd:3d:3a:15:64:05:c5:34:3a:0e:22:
66:16:8c:34:b7:fe:29:b5:39:d6:57:31:bf:1a:27:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:58:FE:FB:CD:F8:B7:06:B6:79:08:82:1E:B6:63:EF:1A:C4:6D:02
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:91:97:ea:5f:9d:d9:33:d1:16:fe:c5:18:b7:c5:8a:90:02:
11:9c:04:04:12:4f:83:b5:f9:ca:97:41:27:2b:94:2b:7d:6c:
eb:13:cd:e1:fc:53:95:66:b0:01:26:cb:cb:5e:d8:46:76:c7:
20:f7:dd:9f:bf:07:73:3f:d6:d3:70:e6:63:73:45:b7:2b:5d:
ee:e9:5e:94:ca:9f:b1:2d:d3:cc:b5:60:78:c6:cf:b7:f3:77:
70:f2:f9:8e:7d:02:a7:fb:3c:a2:45:c3:ff:2b:b6:73:98:0b:
ca:e1:e5:a1:ee:7f:fc:2d:80:4f:57:8d:7d:ac:78:37:ba:6c:
c5:70:18:fe:46:71:2e:48:04:f1:dc:30:1c:26:0e:b8:7c:28:
42:ed:da:47:09:19:af:d3:b7:b6:ee:20:ec:0c:42:e0:82:78:
7a:b9:92:35:9f:eb:4d:25:13:57:44:54:58:bc:86:84:12:c9:
c4:a9:37:3d:e3:ae:d5:23:a3:4e:e5:97:44:c0:27:6e:ad:03:
62:ce:44:80:07:13:ce:e1:02:59:a5:70:d2:78:ed:3b:17:66:
a2:27:9a:75:d8:db:30:20:e8:a5:dc:7d:38:39:a0:18:8a:83:
49:50:8a:05:d0:51:aa:5a:fc:be:e1:9a:fd:a3:1f:23:9a:40:
ad:46:08:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcnZnyOAi8aVwOkh+ix8NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNDUyM2Y4ODExZWJlNWFhMzU5ODUxMWE0OGYzYmFmMDAw
MWE4ZTgwHhcNMjUwODIzMDEwMjA3WhcNMjUwODI0MDEwMjA3WjAzMTEwLwYDVQQD
Eyg4NDU4ZmVmYmNkZjhiNzA2YjY3OTA4ODIxZWI2NjNlZjFhYzQ2ZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwJ/JDfN7bTti6TNBPyrq6wjIl/E
bX3fza/fMvN2PEXB/9Q/qQXDv6OQuQ4QSXqKeb9cjnvlGZlSFXizIMIa8Lnp6Zq1
mufdihOi9KXGHEKPeR8k3ESxo+QiA+ROlsVUsY+vhMhVfznfR7pXTulNa3FbEUTK
+x+xjuUnvgcDW5pGrWqxu5rBepeqf/VWw1WRTBF+Oi28XmJVAdVBxk83dBq+whLq
ihb2U9mI42mpspLQAdd8CNDQ/gj2jNAvHzD0XQdXV2i3LJ6MH7LcLi3a7HPn9oE7
zcafwnFRR4Ua/5rX2vVVvT06FWQFxTQ6DiJmFow0t/4ptTnWVzG/Gife6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRY/vvN+LcGtnkIgh62Y+8axG0CMB8GA1UdIwQY
MBaAFFBFI/iBHr5ao1mFEaSPO68AAajoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjAyM2UtYTM5Ny00NmJiLTk0NjUt
YmYzZjYyYjk1ZjEwLzEvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zYjAyM2UtYTM5Ny00NmJiLTk0NjUtYmYzZjYyYjk1ZjEw
LzEvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZGX6l+d
2TPRFv7FGLfFipACEZwEBBJPg7X5ypdBJyuUK31s6xPN4fxTlWawASbLy17YRnbH
IPfdn78Hcz/W03DmY3NFtytd7ulelMqfsS3TzLVgeMbPt/N3cPL5jn0Cp/s8okXD
/yu2c5gLyuHloe5//C2AT1eNfax4N7psxXAY/kZxLkgE8dwwHCYOuHwoQu3aRwkZ
r9O3tu4g7AxC4IJ4ermSNZ/rTSUTV0RUWLyGhBLJxKk3PeOu1SOjTuWXRMAnbq0D
Ys5EgAcTzuECWaVw0njtOxdmoieaddjbMCDopdx9ODmgGIqDSVCKBdBRqlr8vuGa
/aMfI5pArUYIjA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:07 2025 by rpki-client