Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: FwQCzSDpXYXMZsbM/zyigIgMXgRQDyQ7LOucgHl3gMA=
Subject key identifier: 97:44:7A:99:A7:6F:B5:C2:A2:36:BE:18:65:79:66:78:12:D9:56:BE
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 0198D5F1A6E4F218077B12971678012BE4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 0EC8
Signing time: Sat 23 Aug 2025 08:00:40 +0000
Manifest this update: Sat 23 Aug 2025 08:00:40 +0000
Manifest next update: Sun 24 Aug 2025 08:00:40 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: f19nGAALKWN8NLDdGFr+gUtOZXWe+nah+68N5hrRs0o=)
2: jhae41lBxgum19Q0YmdVzc2ofw0.roa (hash: x1mZ5Yned7zFdt78wzWndyqBFeaTJjBaYlvrRS6j15I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a6:e4:f2:18:07:7b:12:97:16:78:01:2b:e4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Aug 23 08:00:40 2025 GMT
Not After : Aug 24 08:00:40 2025 GMT
Subject: CN=97447a99a76fb5c2a236be186579667812d956be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c8:08:97:8f:6e:a0:81:05:bc:7f:d4:ce:e8:
8b:5a:24:5b:63:0c:fd:e9:b8:5f:39:24:fd:cf:1e:
79:d1:26:19:10:58:22:16:4b:3b:53:41:20:11:99:
ba:be:8e:aa:da:eb:57:2a:29:9e:ea:e1:16:8a:6f:
e1:04:ce:7f:49:ac:a5:b1:ac:a4:4b:c5:67:96:a3:
a5:c6:cf:fb:90:b0:d3:89:16:7e:90:d5:9e:4c:3e:
80:b6:22:62:a3:30:df:26:88:0e:96:84:33:d1:f7:
63:21:81:57:d2:ec:97:d7:a2:74:c9:2e:2d:9e:45:
80:35:1c:fd:e3:1d:36:f2:0d:61:2c:df:88:96:a9:
7f:9b:10:cb:28:c3:c7:5a:e6:26:f7:bf:f3:6e:58:
5f:c3:d4:35:da:c2:19:17:ce:9c:b4:ae:0b:9e:fd:
b6:a3:02:4c:b1:c9:f1:2a:2d:25:fa:05:8e:94:f2:
60:cc:35:8f:5d:3d:52:1e:91:dd:40:e9:db:91:ab:
a0:51:92:80:45:d5:3a:9f:ae:d5:5e:63:65:62:35:
dd:06:9a:52:7d:2a:10:7c:57:ce:c0:fb:4a:fc:8f:
3c:ab:50:32:f2:c3:51:99:9c:ae:f5:ea:be:ba:f3:
1d:1c:e1:54:94:01:a2:dc:97:e3:3d:88:ce:05:a1:
01:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:44:7A:99:A7:6F:B5:C2:A2:36:BE:18:65:79:66:78:12:D9:56:BE
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:86:02:a0:a3:ab:6f:f4:51:05:52:48:e5:fd:28:fe:ba:b7:
15:33:2c:67:43:8c:49:fd:84:36:8d:a4:67:b4:a6:5a:1e:b7:
e0:30:63:ac:3a:ef:f4:9a:ee:a1:5f:57:3d:58:20:f1:84:28:
b3:5b:f4:aa:95:46:65:77:1e:5b:ff:7b:5b:84:4b:5b:3d:ac:
5b:dc:4b:0f:0a:19:7a:1c:1e:a6:10:f3:e0:fe:49:01:ea:5e:
ae:f6:8b:2c:25:a8:73:18:e2:8f:b2:6f:b5:eb:4f:b1:e4:68:
af:a2:98:25:11:eb:39:4a:0c:c0:d3:00:b4:2d:67:57:14:31:
2d:66:33:2c:1f:0e:d3:e5:e3:3e:d4:a6:64:88:4b:b4:a9:4d:
de:ae:c6:1d:ec:5a:eb:c3:d7:8f:ba:c6:b4:7f:ff:8c:f0:bf:
0a:da:76:e7:8e:b8:5f:d9:4a:6b:5b:8f:db:5a:f8:92:4b:30:
a9:59:06:a2:e0:91:c7:d8:87:6a:0c:95:4a:83:9f:ce:f7:07:
55:d3:5f:12:bb:db:d8:27:b4:d2:3d:7e:d9:12:67:9b:bb:02:
b5:ea:ad:a9:8a:74:50:df:28:18:17:7a:54:df:52:00:20:8a:
1e:1d:c9:e1:05:5b:30:06:7f:de:99:c9:0b:16:b1:ec:48:7d:
83:61:27:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8abk8hgHexKXFngBK+TrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTA0NmRhNzI2YWVmOTliZWI4OGEzMGM4YTZmYWVmZTc1
MjA3NTMwHhcNMjUwODIzMDgwMDQwWhcNMjUwODI0MDgwMDQwWjAzMTEwLwYDVQQD
Eyg5NzQ0N2E5OWE3NmZiNWMyYTIzNmJlMTg2NTc5NjY3ODEyZDk1NmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sgIl49uoIEFvH/UzuiLWiRbYwz9
6bhfOST9zx550SYZEFgiFks7U0EgEZm6vo6q2utXKime6uEWim/hBM5/Saylsayk
S8VnlqOlxs/7kLDTiRZ+kNWeTD6AtiJiozDfJogOloQz0fdjIYFX0uyX16J0yS4t
nkWANRz94x028g1hLN+Ilql/mxDLKMPHWuYm97/zblhfw9Q12sIZF86ctK4Lnv22
owJMscnxKi0l+gWOlPJgzDWPXT1SHpHdQOnbkaugUZKARdU6n67VXmNlYjXdBppS
fSoQfFfOwPtK/I88q1Ay8sNRmZyu9eq+uvMdHOFUlAGi3JfjPYjOBaEBmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdEepmnb7XCoja+GGV5ZngS2Va+MB8GA1UdIwQY
MBaAFFBQRtpyau+ZvriKMMim+u/nUgdTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgt
MjgyZmEyYzAxMTUzLzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgtMjgyZmEyYzAxMTUz
LzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4YCoKOr
b/RRBVJI5f0o/rq3FTMsZ0OMSf2ENo2kZ7SmWh634DBjrDrv9JruoV9XPVgg8YQo
s1v0qpVGZXceW/97W4RLWz2sW9xLDwoZehwephDz4P5JAepervaLLCWocxjij7Jv
tetPseRor6KYJRHrOUoMwNMAtC1nVxQxLWYzLB8O0+XjPtSmZIhLtKlN3q7GHexa
68PXj7rGtH//jPC/Ctp25464X9lKa1uP21r4kkswqVkGouCRx9iHagyVSoOfzvcH
VdNfErvb2Ce00j1+2RJnm7sCteqtqYp0UN8oGBd6VN9SACCKHh3J4QVbMAZ/3pnJ
Cxax7Eh9g2EnPA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:39 2025 by rpki-client