Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier: o1+Kut+D5R1R9vgap+uqbrufKFqainnCbtS7TZsoPTQ=
Subject key identifier: 00:22:0E:2E:96:54:8A:B4:FF:2B:ED:B5:1F:E0:88:F0:ED:85:B6:48
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 0199C532B09FEAA7048D70ECCF3FBC7514D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number: 0DEE
Signing time: Wed 08 Oct 2025 19:00:57 +0000
Manifest this update: Wed 08 Oct 2025 19:00:57 +0000
Manifest next update: Thu 09 Oct 2025 19:00:57 +0000
Files and hashes: 1: 3eC8nP2y0M7Dk50w-cz0uqTipws.roa (hash: oL1pIlz/bhILnljMZOEBWQ6dy5AQHNGyWJuSJLm2sWA=)
2: DKKUdW46_6zXz80AQeVOjRiUJ4A.roa (hash: xKACAtSTQQnsNmsto4dOmpcxKzakaVi9kzieeQlXs5g=)
3: mj78j7-0AeevMahy3Oa3oEUR37o.roa (hash: GV37V8PynELJMOdG95g3RGrNY37XlDLhQkTKeFw+n+A=)
4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: +GQzd66qb3uamTfhQ2/sFrfKajLEu7n2WCkaGdaluNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:32:b0:9f:ea:a7:04:8d:70:ec:cf:3f:bc:75:14:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Oct 8 19:00:57 2025 GMT
Not After : Oct 9 19:00:57 2025 GMT
Subject: CN=00220e2e96548ab4ff2bedb51fe088f0ed85b648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:3f:fb:47:8d:dd:a2:ab:6f:02:76:a3:82:
03:87:8e:16:0c:43:9d:f3:b1:23:04:95:24:e6:90:
34:df:bb:78:22:ef:18:13:1c:eb:d8:af:ef:37:9e:
98:95:1f:2d:56:c1:45:40:fe:d2:72:03:a0:b4:2e:
0f:3a:dc:9b:bd:7a:f4:ab:94:3e:93:e7:e5:e7:6e:
46:50:7d:0f:1d:7b:54:c9:25:75:d8:d0:8f:c8:8b:
a8:29:00:56:af:04:7a:0f:40:37:e4:3f:6e:fc:c7:
10:2a:92:23:8c:26:13:10:f5:f0:0c:cb:43:9d:a3:
56:35:cb:ed:ba:46:38:98:ef:62:04:f3:f8:36:cd:
bf:d2:8e:b0:00:22:64:c3:e3:fc:1d:f1:e5:30:f1:
e1:00:e8:3d:bc:ec:d4:56:c0:79:54:35:db:de:eb:
f6:3c:0d:3a:93:d9:62:59:1a:e5:86:65:7e:58:8f:
49:a7:b1:c6:ca:0a:e3:2f:cf:71:b8:24:d9:d2:8e:
19:d3:83:76:36:96:c5:d5:c8:ba:76:70:43:1d:59:
1f:67:b2:9b:41:5a:c8:fe:1c:6c:ff:4b:72:28:6f:
e6:a6:bc:0c:f2:01:1a:74:01:d1:8c:45:db:da:e8:
7f:2a:bd:b5:ec:7b:30:12:2b:30:50:3d:91:6b:5c:
3a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:22:0E:2E:96:54:8A:B4:FF:2B:ED:B5:1F:E0:88:F0:ED:85:B6:48
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:47:20:9e:83:88:2f:e9:ef:13:a6:e7:18:2f:54:68:1d:68:
7b:db:d4:0a:27:fc:51:5d:3f:01:61:ca:dd:53:ef:f8:37:96:
21:17:6b:04:c7:b5:de:54:b3:8c:df:21:97:5a:c9:5c:08:9e:
ea:61:2b:54:89:23:42:16:28:44:25:cf:aa:9c:9c:b1:e7:67:
34:77:11:f3:36:b3:d2:99:9e:e1:63:ee:4e:60:58:a3:14:19:
34:8f:2e:15:7a:ba:4f:43:db:49:c5:be:68:78:f6:ac:80:7b:
27:3e:05:4f:29:cc:a5:71:21:87:19:f5:7f:31:51:f5:e9:3d:
c3:84:bb:37:1e:43:7e:8c:c0:4e:dc:38:af:36:f7:c5:21:8d:
56:98:61:b7:66:4a:a4:e3:93:4e:8e:a0:1d:d7:c5:64:75:85:
68:aa:6a:4c:30:5c:10:e9:df:e1:74:9c:af:2c:a4:9b:07:cc:
f1:6d:8b:dc:d3:7c:28:c0:5e:96:fd:86:29:fc:4b:00:13:b9:
29:07:55:8c:34:94:d3:9d:96:cf:5e:80:5a:5a:a7:7f:11:fc:
31:8d:1d:a7:69:d2:90:96:da:72:84:d4:3c:96:53:bf:a5:2c:
97:72:d1:d5:1d:6e:0f:78:36:7b:6e:c4:bf:8d:91:63:73:53:
e8:c3:c4:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnFMrCf6qcEjXDszz+8dRTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODg2MWUxN2ViZWQ1Nzk1MGZmMzJjN2IzNzdmYzQzMDQx
M2RiZTQwHhcNMjUxMDA4MTkwMDU3WhcNMjUxMDA5MTkwMDU3WjAzMTEwLwYDVQQD
EygwMDIyMGUyZTk2NTQ4YWI0ZmYyYmVkYjUxZmUwODhmMGVkODViNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRc/+0eN3aKrbwJ2o4IDh44WDEOd
87EjBJUk5pA037t4Iu8YExzr2K/vN56YlR8tVsFFQP7ScgOgtC4POtybvXr0q5Q+
k+fl525GUH0PHXtUySV12NCPyIuoKQBWrwR6D0A35D9u/McQKpIjjCYTEPXwDMtD
naNWNcvtukY4mO9iBPP4Ns2/0o6wACJkw+P8HfHlMPHhAOg9vOzUVsB5VDXb3uv2
PA06k9liWRrlhmV+WI9Jp7HGygrjL89xuCTZ0o4Z04N2NpbF1ci6dnBDHVkfZ7Kb
QVrI/hxs/0tyKG/mprwM8gEadAHRjEXb2uh/Kr217HswEiswUD2Ra1w6KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAiDi6WVIq0/yvttR/giPDthbZIMB8GA1UdIwQY
MBaAFLqIYeF+vtV5UP8yx7N3/EMEE9vkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2Yt
MTBmZGNhMzg1ZWE0LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2YtMTBmZGNhMzg1ZWE0
LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUcgnoOI
L+nvE6bnGC9UaB1oe9vUCif8UV0/AWHK3VPv+DeWIRdrBMe13lSzjN8hl1rJXAie
6mErVIkjQhYoRCXPqpycsednNHcR8zaz0pme4WPuTmBYoxQZNI8uFXq6T0PbScW+
aHj2rIB7Jz4FTynMpXEhhxn1fzFR9ek9w4S7Nx5DfozATtw4rzb3xSGNVphht2ZK
pOOTTo6gHdfFZHWFaKpqTDBcEOnf4XScryykmwfM8W2L3NN8KMBelv2GKfxLABO5
KQdVjDSU052Wz16AWlqnfxH8MY0dp2nSkJbacoTUPJZTv6Usl3LR1R1uD3g2e27E
v42RY3NT6MPElA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:25:08 2025 by rpki-client