Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: AaYZW232ab/DakBdnhRyBNuWUeSOf1ZpmKmuaxop9ME=
Subject key identifier: A4:DB:EA:37:5A:06:F0:E3:E8:EC:BA:D5:24:93:84:19:95:B4:DD:DF
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 0198D4E0707A6D7C652EF4A9C7CC4D6DE3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:15 +0000
Manifest this update: Sat 23 Aug 2025 03:02:15 +0000
Manifest next update: Sun 24 Aug 2025 03:02:15 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: gO+EH5OgmB6l0sPnYq7bi5Nf+WeMpwvRDxqcj/xQ4Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:70:7a:6d:7c:65:2e:f4:a9:c7:cc:4d:6d:e3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Aug 23 03:02:15 2025 GMT
Not After : Aug 24 03:02:15 2025 GMT
Subject: CN=a4dbea375a06f0e3e8ecbad52493841995b4dddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:8f:75:43:b5:a0:d0:e3:04:d8:cf:4f:15:
69:ae:16:f8:43:32:9c:ea:64:32:df:42:a0:a8:c7:
74:77:f5:c1:70:c0:7b:e2:34:16:f6:91:32:aa:3e:
32:7f:a0:1b:75:81:0b:61:b4:29:50:4b:1c:98:0b:
56:12:68:32:e4:3b:d9:77:ea:09:9c:52:8c:1d:2f:
36:68:66:4e:93:be:71:72:eb:c0:80:d8:68:6c:70:
fb:83:83:41:13:da:51:5b:e9:54:6b:51:8d:fe:b9:
a1:48:aa:70:48:c1:0e:4c:03:00:2b:05:b0:49:8a:
c1:eb:e0:44:06:1a:f6:1f:3d:c7:b7:1d:b6:57:19:
7f:db:f0:4a:83:8f:0c:e8:7c:90:43:1a:62:13:fa:
98:f7:55:fa:c6:b0:34:6d:7f:ee:2f:7c:78:84:76:
d4:2d:e2:73:38:84:9f:19:0a:18:84:24:f7:6c:c2:
14:37:5e:24:74:9a:83:e8:5f:d4:2e:23:d8:25:8f:
55:2e:75:1f:f0:2b:fb:5e:32:24:15:68:d2:61:98:
86:36:75:62:b6:74:f6:79:a0:40:0f:7e:2d:9c:73:
7e:89:9e:d7:fa:98:f9:fd:2f:a2:ad:c8:4b:5e:37:
4e:c0:3a:0c:5a:f5:38:71:93:77:a0:43:06:36:c4:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DB:EA:37:5A:06:F0:E3:E8:EC:BA:D5:24:93:84:19:95:B4:DD:DF
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fe:ef:e5:2f:44:b2:6c:ad:69:4b:be:34:bf:87:f2:b8:8c:
2b:52:f0:29:f1:95:b8:f4:56:d2:11:5d:b7:98:21:b7:04:7f:
33:a1:2d:52:91:10:17:a9:67:e2:3d:6f:d0:0a:1e:6b:dc:e6:
75:50:74:e4:3c:c6:70:11:dd:bc:64:f1:11:af:7d:ba:69:5b:
52:91:3a:8a:ce:57:da:d8:ce:46:82:e7:36:45:f2:f5:59:80:
71:42:51:e3:66:b9:3a:b0:cb:c3:b6:29:9d:f1:2e:96:81:3e:
b9:54:39:78:f4:b6:0b:15:de:cc:7a:cf:c0:be:5c:1d:bf:84:
04:2a:9b:f8:95:de:47:80:71:d2:7e:29:93:96:c7:70:bf:53:
6c:f7:18:67:57:6d:f0:30:e0:4f:b4:d7:da:a5:94:f0:68:32:
bc:7c:4a:33:20:f1:b1:e6:69:bf:18:ef:41:38:55:d4:15:e5:
d1:79:64:44:88:d7:9c:15:fd:1f:95:41:1d:a4:9d:71:29:59:
7a:46:b1:50:5c:12:2f:c6:11:d2:5d:82:76:dd:aa:7c:6a:fb:
df:2f:11:07:de:28:4b:91:28:06:96:96:8f:0d:3a:63:da:32:
e7:15:93:65:93:6b:c6:b1:9a:fa:71:1d:89:8a:cb:81:57:6c:
8c:37:6c:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4HB6bXxlLvSpx8xNbeO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMzhiOWE3NjNmNjVjMDI3YWEzZGRhZDg3YzE4OGRhNzhh
NGJkOTcwHhcNMjUwODIzMDMwMjE1WhcNMjUwODI0MDMwMjE1WjAzMTEwLwYDVQQD
EyhhNGRiZWEzNzVhMDZmMGUzZThlY2JhZDUyNDkzODQxOTk1YjRkZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutqPdUO1oNDjBNjPTxVprhb4QzKc
6mQy30KgqMd0d/XBcMB74jQW9pEyqj4yf6AbdYELYbQpUEscmAtWEmgy5DvZd+oJ
nFKMHS82aGZOk75xcuvAgNhobHD7g4NBE9pRW+lUa1GN/rmhSKpwSMEOTAMAKwWw
SYrB6+BEBhr2Hz3Htx22Vxl/2/BKg48M6HyQQxpiE/qY91X6xrA0bX/uL3x4hHbU
LeJzOISfGQoYhCT3bMIUN14kdJqD6F/ULiPYJY9VLnUf8Cv7XjIkFWjSYZiGNnVi
tnT2eaBAD34tnHN+iZ7X+pj5/S+irchLXjdOwDoMWvU4cZN3oEMGNsTMSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTb6jdaBvDj6Oy61SSThBmVtN3fMB8GA1UdIwQY
MBaAFLo4uadj9lwCeqPdrYfBiNp4pL2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEt
NjBmN2Y4N2M3N2U2LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEtNjBmN2Y4N2M3N2U2
LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVP7v5S9E
smytaUu+NL+H8riMK1LwKfGVuPRW0hFdt5ghtwR/M6EtUpEQF6ln4j1v0Aoea9zm
dVB05DzGcBHdvGTxEa99umlbUpE6is5X2tjORoLnNkXy9VmAcUJR42a5OrDLw7Yp
nfEuloE+uVQ5ePS2CxXezHrPwL5cHb+EBCqb+JXeR4Bx0n4pk5bHcL9TbPcYZ1dt
8DDgT7TX2qWU8GgyvHxKMyDxseZpvxjvQThV1BXl0XlkRIjXnBX9H5VBHaSdcSlZ
ekaxUFwSL8YR0l2Cdt2qfGr73y8RB94oS5EoBpaWjw06Y9oy5xWTZZNrxrGa+nEd
iYrLgVdsjDds2g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:14 2025 by rpki-client