Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
File: uquipWoMMP2vWTSvh2XB_9E1ekg.mft (raw, json)
Hash identifier: NXpMz4aG8B3qageE2v4pvfc6kJyLGXwr8Pxel8Sf2r4=
Subject key identifier: D2:2F:71:1A:6A:DC:76:03:F3:6E:99:A6:B6:10:DC:B7:75:63:60:85
Authority key identifier: BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
Certificate issuer: /CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Certificate serial: 0197CCBABE6BC7418BD477B044049E9147EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 20:01:19 +0000
Manifest this update: Wed 02 Jul 2025 20:01:19 +0000
Manifest next update: Thu 03 Jul 2025 20:01:19 +0000
Files and hashes: 1: a8-LoFpzpvju-2XWs2Ak1Mj-svc.roa (hash: wRN7eTSTbn3kvEiQSolKkMG8ZX0jIhoh/J7KJ9xpJnI=)
2: uquipWoMMP2vWTSvh2XB_9E1ekg.crl (hash: Ken60HMBUsKRgs3bw6Fh+B06CCN7K45Hkqgd25hRzcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:be:6b:c7:41:8b:d4:77:b0:44:04:9e:91:47:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Validity
Not Before: Jul 2 20:01:19 2025 GMT
Not After : Jul 3 20:01:19 2025 GMT
Subject: CN=d22f711a6adc7603f36e99a6b610dcb775636085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:6a:2e:8f:85:9a:ac:20:62:8e:26:82:d7:
bb:e6:46:c1:32:ea:a2:27:6f:f1:dc:19:36:d8:46:
65:e1:ee:11:99:b4:4e:06:1f:d5:33:c7:3d:84:16:
dd:c6:a2:02:34:f3:44:f0:52:1c:d3:37:f5:a3:81:
8c:53:41:4d:bd:dc:c1:f8:f3:98:a5:49:44:ea:55:
18:07:16:88:0b:50:d0:8e:4c:91:6d:db:c6:26:e5:
56:b4:0a:34:ec:45:4d:02:2c:66:5d:ca:4b:8e:cb:
1d:3f:d8:9a:fb:37:ec:ed:0b:ee:29:5e:60:00:4c:
fc:6c:3e:5c:1e:8d:ad:5f:4f:cd:fc:74:68:cd:ca:
40:e9:16:47:09:b8:e1:01:45:0c:80:b4:75:cf:5e:
80:ee:d0:dc:95:1f:30:6d:7f:69:9f:8b:9d:17:71:
41:12:ca:aa:00:eb:65:f5:be:a4:32:a1:db:05:0e:
d8:cb:20:8e:54:fa:5f:2a:b3:bf:8a:a7:ae:6b:9c:
0a:fd:de:db:67:df:45:68:05:b1:fa:14:51:49:d6:
7b:f6:18:57:da:5a:e4:2f:a4:f1:74:0b:a1:fa:23:
99:69:5e:8c:1b:77:97:15:bf:94:06:bc:13:bf:d8:
bf:44:26:ff:ea:cb:23:fe:c7:33:7c:52:bb:8d:5f:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2F:71:1A:6A:DC:76:03:F3:6E:99:A6:B6:10:DC:B7:75:63:60:85
X509v3 Authority Key Identifier:
keyid:BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:99:67:44:fc:1b:d5:b6:30:3b:94:d5:4a:03:db:f1:a3:8f:
e4:1b:6f:a1:2c:4e:22:d7:9e:88:10:43:1c:7b:86:c7:37:67:
8e:77:08:01:ce:79:25:dd:90:f9:8a:db:7e:6d:13:be:c6:25:
58:f2:19:eb:07:de:c5:a5:c4:2b:f5:81:d3:66:13:a8:c0:10:
67:f0:66:d6:e1:31:9c:1a:57:18:14:a9:5a:6b:b1:44:97:61:
1d:fc:16:51:cb:07:5c:48:64:89:21:c0:49:9d:a4:9b:94:b9:
12:6c:49:56:0a:62:16:f8:f6:aa:99:90:7b:5b:86:41:8a:49:
27:47:95:ac:36:72:b7:b7:6e:05:f1:08:41:5d:9b:e5:4d:b1:
6e:b5:72:7d:22:60:e8:ce:a3:f1:af:9e:88:f4:09:a0:4d:86:
f0:d2:bb:36:bd:8e:cd:a2:d4:11:d7:62:84:aa:a1:d1:45:9b:
27:4b:f5:91:44:31:70:ff:90:8c:fa:d4:28:64:40:c4:5d:25:
34:48:09:fe:21:8e:be:36:aa:ea:17:9c:b4:33:31:5a:5d:df:
bf:79:8b:14:fa:27:56:94:4e:1d:65:20:45:e8:f6:79:39:83:
45:04:8f:f6:5c:f2:98:76:eb:9c:f3:dc:48:3e:a2:b9:05:b2:
21:28:0a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMur5rx0GL1HewRASekUfqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWJhMmE1NmEwYzMwZmRhZjU5MzRhZjg3NjVjMWZmZDEz
NTdhNDgwHhcNMjUwNzAyMjAwMTE5WhcNMjUwNzAzMjAwMTE5WjAzMTEwLwYDVQQD
EyhkMjJmNzExYTZhZGM3NjAzZjM2ZTk5YTZiNjEwZGNiNzc1NjM2MDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzlqLo+FmqwgYo4mgte75kbBMuqi
J2/x3Bk22EZl4e4RmbROBh/VM8c9hBbdxqICNPNE8FIc0zf1o4GMU0FNvdzB+POY
pUlE6lUYBxaIC1DQjkyRbdvGJuVWtAo07EVNAixmXcpLjssdP9ia+zfs7QvuKV5g
AEz8bD5cHo2tX0/N/HRozcpA6RZHCbjhAUUMgLR1z16A7tDclR8wbX9pn4udF3FB
EsqqAOtl9b6kMqHbBQ7YyyCOVPpfKrO/iqeua5wK/d7bZ99FaAWx+hRRSdZ79hhX
2lrkL6TxdAuh+iOZaV6MG3eXFb+UBrwTv9i/RCb/6ssj/sczfFK7jV8rBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIvcRpq3HYD826ZprYQ3Ld1Y2CFMB8GA1UdIwQY
MBaAFLqroqVqDDD9r1k0r4dlwf/RNXpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xOTU0YTYtZGEyMy00OTUyLTljMDkt
MDI0ODY4ZmZkMzE1LzEvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8xOTU0YTYtZGEyMy00OTUyLTljMDktMDI0ODY4ZmZkMzE1
LzEvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5lnRPwb
1bYwO5TVSgPb8aOP5BtvoSxOIteeiBBDHHuGxzdnjncIAc55Jd2Q+Yrbfm0TvsYl
WPIZ6wfexaXEK/WB02YTqMAQZ/Bm1uExnBpXGBSpWmuxRJdhHfwWUcsHXEhkiSHA
SZ2km5S5EmxJVgpiFvj2qpmQe1uGQYpJJ0eVrDZyt7duBfEIQV2b5U2xbrVyfSJg
6M6j8a+eiPQJoE2G8NK7Nr2OzaLUEddihKqh0UWbJ0v1kUQxcP+QjPrUKGRAxF0l
NEgJ/iGOvjaq6hectDMxWl3fv3mLFPonVpROHWUgRej2eTmDRQSP9lzymHbrnPPc
SD6iuQWyISgKWQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 02:48:45 2025 by rpki-client