Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File: UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier: XCIx1ogBlftEj3sggYr3vdEpElrErxiqLK//OFRr/Xw=
Subject key identifier: D8:40:09:85:E2:16:E7:45:43:D3:5D:73:80:D9:2C:EC:43:7B:AF:26
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 0198D77324E4D70B741AC31BD7D0329085DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number: 03ED
Signing time: Sat 23 Aug 2025 15:01:44 +0000
Manifest this update: Sat 23 Aug 2025 15:01:44 +0000
Manifest next update: Sun 24 Aug 2025 15:01:44 +0000
Files and hashes: 1: Fe3o1H2NZOXORu_5Q3H36pU8vac.roa (hash: ya8j4YYjDXSgsigCjodSN9yQH9BwQm9h+hSBpcdeQQk=)
2: IgamqUciVdLhTEl8qUlCv8gTk2M.roa (hash: qputrlAgmF8QE3+FmBu/iwhtSGf2HPJS8f3o4AngQYQ=)
3: OxnjvwWUCiqbD04iEI8NBnyYtDw.roa (hash: 0+WrmCLNh//XhCaulKTd1Ril/nIlAEF8FUGZmKvO2G4=)
4: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: stJqAFXxwqFULX9LzcpZgoMDk7LiHmfciC97OmC4sYA=)
5: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=)
6: ohgVS6vR-4SGEXaj_tFUb-UB3m0.roa (hash: FUu97z1QXGuNnK2gooake8eelYh7e6wKHA9hoFvMoKQ=)
7: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=)
8: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:24:e4:d7:0b:74:1a:c3:1b:d7:d0:32:90:85:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Aug 23 15:01:44 2025 GMT
Not After : Aug 24 15:01:44 2025 GMT
Subject: CN=d8400985e216e74543d35d7380d92cec437baf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:e1:98:d4:db:75:56:d2:de:0d:c0:8a:9a:
fd:95:de:c3:39:02:bf:8f:8f:b2:36:dd:d8:61:65:
d5:09:95:b5:83:03:0c:44:ad:a3:98:f4:8b:b4:83:
c4:25:a0:df:fc:5b:a3:1d:73:c1:8a:1c:b1:c3:e0:
9b:7e:17:40:ca:3f:fe:e9:bf:b6:f6:5e:ec:e4:bf:
8f:c8:eb:5a:f9:2d:14:79:52:7c:5d:96:ac:cf:24:
1e:ba:f3:d6:20:74:c5:97:3b:e4:d1:94:63:b8:9f:
da:48:fe:7b:84:2f:55:df:4b:ef:ba:e9:fe:a8:ce:
46:b5:4b:eb:85:89:ca:6c:5e:95:83:ac:cc:31:4d:
53:02:f8:a7:88:17:4b:62:dd:ae:d7:bc:af:f9:c3:
1b:53:fb:da:39:71:f1:08:32:0c:59:6d:2d:7b:f1:
54:6b:bc:f7:64:b4:f4:21:af:d3:fc:0d:2e:bb:d0:
fb:b2:5f:3b:4b:48:7b:a3:9a:fb:88:d6:fd:17:00:
6f:a6:75:c2:72:62:2c:5f:25:e2:d7:b6:cc:72:89:
65:73:73:4f:e4:89:6a:69:2d:a6:60:b2:ad:ad:11:
fe:9b:0a:9c:25:10:14:f3:e6:49:ed:4d:15:f4:cc:
9c:60:be:42:d0:3b:0b:6c:59:57:ae:12:2b:7a:60:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:40:09:85:E2:16:E7:45:43:D3:5D:73:80:D9:2C:EC:43:7B:AF:26
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:64:5b:1d:75:3d:37:aa:cf:19:64:2f:64:83:da:ec:5e:2b:
0b:9c:02:0f:97:1d:dd:b3:9d:c0:5f:30:dd:71:24:94:ae:f2:
86:af:a2:ed:df:18:40:cc:42:06:99:07:ba:82:db:d5:ad:42:
79:55:c7:00:60:dc:ef:59:9e:c7:af:48:15:68:3b:68:c7:e7:
ec:9f:09:d8:7a:74:ce:99:06:e5:89:40:a3:0f:92:81:7a:26:
89:c1:8c:d5:40:6f:67:34:4e:47:71:66:d6:72:f6:3e:0a:ae:
f2:05:3c:f0:eb:58:42:d2:a4:79:cf:df:b9:27:b9:99:20:ef:
bd:7f:13:fb:fd:31:ac:5d:99:3e:0c:5f:73:e4:ea:34:ae:bb:
51:88:0c:62:e1:58:7a:27:7a:ee:05:7d:71:8f:31:c3:4f:f1:
50:62:30:fe:20:48:cf:8f:f2:24:4d:7c:63:75:49:5b:6f:77:
28:50:ea:2c:46:ac:1c:2a:5d:c2:87:af:12:fc:a1:7f:dc:47:
14:0d:17:5f:71:93:cc:42:23:21:6e:80:7f:a8:a5:63:6f:a9:
8a:be:42:c1:4e:ca:80:5c:e1:af:54:af:8a:8b:08:9c:1f:7a:
c7:50:60:8b:89:ae:86:88:c3:0c:72:80:33:07:a4:47:8b:29:
ce:1a:c0:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXcyTk1wt0GsMb19AykIXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1
YjEwNjgwHhcNMjUwODIzMTUwMTQ0WhcNMjUwODI0MTUwMTQ0WjAzMTEwLwYDVQQD
EyhkODQwMDk4NWUyMTZlNzQ1NDNkMzVkNzM4MGQ5MmNlYzQzN2JhZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoXhmNTbdVbS3g3Aipr9ld7DOQK/
j4+yNt3YYWXVCZW1gwMMRK2jmPSLtIPEJaDf/FujHXPBihyxw+CbfhdAyj/+6b+2
9l7s5L+PyOta+S0UeVJ8XZaszyQeuvPWIHTFlzvk0ZRjuJ/aSP57hC9V30vvuun+
qM5GtUvrhYnKbF6Vg6zMMU1TAviniBdLYt2u17yv+cMbU/vaOXHxCDIMWW0te/FU
a7z3ZLT0Ia/T/A0uu9D7sl87S0h7o5r7iNb9FwBvpnXCcmIsXyXi17bMcollc3NP
5IlqaS2mYLKtrRH+mwqcJRAU8+ZJ7U0V9MycYL5C0DsLbFlXrhIremBjQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhACYXiFudFQ9Ndc4DZLOxDe68mMB8GA1UdIwQY
MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt
MGY1ZjA5YjJlYjE0LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0
LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmRbHXU9
N6rPGWQvZIPa7F4rC5wCD5cd3bOdwF8w3XEklK7yhq+i7d8YQMxCBpkHuoLb1a1C
eVXHAGDc71mex69IFWg7aMfn7J8J2Hp0zpkG5YlAow+SgXomicGM1UBvZzROR3Fm
1nL2Pgqu8gU88OtYQtKkec/fuSe5mSDvvX8T+/0xrF2ZPgxfc+TqNK67UYgMYuFY
eid67gV9cY8xw0/xUGIw/iBIz4/yJE18Y3VJW293KFDqLEasHCpdwoevEvyhf9xH
FA0XX3GTzEIjIW6Af6ilY2+pir5CwU7KgFzhr1SviosInB96x1Bgi4muhojDDHKA
MwekR4spzhrA6g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:44 2025 by rpki-client