
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
File: uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft (raw, json)
Hash identifier: JDK9WngoISnkC1JOC2OrtiV5VnL5W1myhLdSUXb+otY=
Subject key identifier: 95:2E:CA:F4:29:8B:F8:23:92:E8:1C:E9:90:0B:F3:C2:CE:CF:6D:FE
Authority key identifier: BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
Certificate issuer: /CN=bb24311c1ec0673c50497924c202a13d212659b6
Certificate serial: 0198D5834E2E3967DF101B27A99D2B334064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
Manifest number: 0581
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl (hash: e8HUHfaBRgeIpM+xIklXLZNnmYdJdq+9eRnOrzMiF48=)
2: v258OvpTjeTGa9nj7XVSV8d0bA0.roa (hash: zeqjbwUFGVgiPWTdMolQ6HqxRrkUBi59wIsSlb2gw2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4e:2e:39:67:df:10:1b:27:a9:9d:2b:33:40:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb24311c1ec0673c50497924c202a13d212659b6
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=952ecaf4298bf82392e81ce9900bf3c2cecf6dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:7c:67:87:98:ca:98:7d:0e:93:2f:52:85:
8c:78:26:9e:2a:7f:dd:e3:ea:65:0a:b4:16:41:b9:
47:43:4b:09:0a:c0:ae:e8:d9:62:d9:e0:dd:e7:01:
ce:9b:d9:d6:9f:2b:fe:03:60:c1:38:e0:ce:de:94:
89:6b:65:bf:18:32:cb:70:b1:06:5a:ef:de:d3:cc:
15:01:ae:0a:6d:9e:5c:a6:07:ab:50:0b:3c:01:f1:
6f:93:14:bd:23:bf:3a:76:94:aa:74:6d:8a:4b:94:
95:5f:2a:35:98:3b:0d:e5:e6:b4:7d:a6:4c:0e:d5:
41:e7:d2:92:c4:d2:bd:3e:ac:ec:4e:c4:e6:e5:0f:
4c:8b:88:96:0b:a4:69:9f:0d:d0:60:80:90:7c:be:
94:f0:eb:0a:2c:05:c0:48:7d:dd:87:f9:0d:f2:19:
6a:e2:db:b1:64:d5:29:a1:73:56:28:06:c7:f5:cf:
58:16:aa:90:1c:0a:9d:05:4d:5a:31:11:f9:36:fa:
9d:eb:33:54:59:70:53:c1:76:08:18:0a:2c:b5:18:
99:4e:37:2a:cc:c9:b8:61:9b:37:a2:eb:db:6b:6e:
38:2e:97:44:bb:38:07:6c:65:dc:d5:9d:89:5f:6e:
84:8c:b8:5b:f3:7e:f8:a6:de:6b:7e:e5:2f:dc:32:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2E:CA:F4:29:8B:F8:23:92:E8:1C:E9:90:0B:F3:C2:CE:CF:6D:FE
X509v3 Authority Key Identifier:
keyid:BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c4:5a:e9:82:4e:3f:0e:d6:56:08:05:ef:4a:0e:6e:83:a0:
95:81:d0:fd:a6:10:5f:f1:4a:ae:24:3d:2a:2c:ab:2c:de:b2:
a9:3d:7b:ce:f2:fd:57:61:b7:66:f6:45:c0:f3:aa:9b:84:c9:
80:c1:c8:c0:96:43:6a:50:55:b7:1f:4d:cb:91:22:31:33:c3:
06:a5:76:c5:94:b0:d3:bc:d9:28:bf:96:1c:f1:3d:c8:d1:d1:
01:73:61:91:97:ee:94:cd:5c:f8:13:95:a1:3d:8c:73:00:1b:
ea:95:91:18:f6:8b:67:7d:06:e1:f2:d5:c0:c9:23:f7:de:b9:
7a:65:1f:91:00:88:ea:b0:04:d3:fa:98:88:43:61:86:b5:9c:
d7:95:0c:da:10:ec:22:a5:2f:f0:36:d0:0e:d3:74:21:70:13:
1f:8a:ac:84:49:6e:38:5a:58:79:4f:ac:43:76:6a:b3:34:64:
5f:0b:fb:dd:97:cb:36:6d:85:df:d0:fb:22:db:7a:9a:20:30:
f4:e6:f8:bf:60:b2:03:41:d2:0f:e5:42:66:cd:33:da:e5:76:
1e:54:e7:55:c9:3e:c8:75:46:5a:50:bc:c1:60:b6:e8:f2:de:
91:2e:76:30:cc:2b:b7:fd:e5:43:00:82:0a:c4:1c:9f:55:dd:
94:92:7f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg04uOWffEBsnqZ0rM0BkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMjQzMTFjMWVjMDY3M2M1MDQ5NzkyNGMyMDJhMTNkMjEy
NjU5YjYwHhcNMjUwODIzMDYwMDA4WhcNMjUwODI0MDYwMDA4WjAzMTEwLwYDVQQD
Eyg5NTJlY2FmNDI5OGJmODIzOTJlODFjZTk5MDBiZjNjMmNlY2Y2ZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulp8Z4eYyph9DpMvUoWMeCaeKn/d
4+plCrQWQblHQ0sJCsCu6Nli2eDd5wHOm9nWnyv+A2DBOODO3pSJa2W/GDLLcLEG
Wu/e08wVAa4KbZ5cpgerUAs8AfFvkxS9I786dpSqdG2KS5SVXyo1mDsN5ea0faZM
DtVB59KSxNK9PqzsTsTm5Q9Mi4iWC6Rpnw3QYICQfL6U8OsKLAXASH3dh/kN8hlq
4tuxZNUpoXNWKAbH9c9YFqqQHAqdBU1aMRH5Nvqd6zNUWXBTwXYIGAostRiZTjcq
zMm4YZs3ouvba244LpdEuzgHbGXc1Z2JX26EjLhb8374pt5rfuUv3DKQjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUuyvQpi/gjkugc6ZAL88LOz23+MB8GA1UdIwQY
MBaAFLskMRwewGc8UEl5JMICoT0hJlm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXlReEhCN0FaenhRU1hra3dnS2hQU0VtV2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iNGMwODUtOWI4Yi00MzBmLWEzNzct
MGE3ZjZjY2E2YmVhLzEvdXlReEhCN0FaenhRU1hra3dnS2hQU0VtV2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iNGMwODUtOWI4Yi00MzBmLWEzNzctMGE3ZjZjY2E2YmVh
LzEvdXlReEhCN0FaenhRU1hra3dnS2hQU0VtV2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMRa6YJO
Pw7WVggF70oOboOglYHQ/aYQX/FKriQ9KiyrLN6yqT17zvL9V2G3ZvZFwPOqm4TJ
gMHIwJZDalBVtx9Ny5EiMTPDBqV2xZSw07zZKL+WHPE9yNHRAXNhkZfulM1c+BOV
oT2McwAb6pWRGPaLZ30G4fLVwMkj9965emUfkQCI6rAE0/qYiENhhrWc15UM2hDs
IqUv8DbQDtN0IXATH4qshEluOFpYeU+sQ3ZqszRkXwv73ZfLNm2F39D7Itt6miAw
9Ob4v2CyA0HSD+VCZs0z2uV2HlTnVck+yHVGWlC8wWC26PLekS52MMwrt/3lQwCC
CsQcn1XdlJJ/VQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:28 2025 by rpki-client