Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
File: uRnpYSLyg4FcGlb-zDSUR6KInNk.mft (raw, json)
Hash identifier: fkR62JM1OxWsvD40Q1eQFfvWsBLYj9esSN84/lC6sUI=
Subject key identifier: 3F:07:95:D8:8B:B1:FB:17:05:64:B1:C7:73:45:54:75:85:16:A6:E2
Authority key identifier: B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
Certificate issuer: /CN=b919e96122f283815c1a56fecc349447a2889cd9
Certificate serial: 019A711318A70DCC7676967E0731315AC368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
Manifest number: 11D6
Signing time: Tue 11 Nov 2025 04:01:08 +0000
Manifest this update: Tue 11 Nov 2025 04:01:08 +0000
Manifest next update: Wed 12 Nov 2025 04:01:08 +0000
Files and hashes: 1: 1-MaedZu_m2J3pWIOqbXmZ-5pEX0.roa (hash: dPci77SNKVZK5CdTXGzc0O0bUg3hSGh13BoBG3kcUXI=)
2: uRnpYSLyg4FcGlb-zDSUR6KInNk.crl (hash: Hl0gvTLIfjgY6Z7tbXVz97HRtdM/o+TGWvBXkYTP74Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:18:a7:0d:cc:76:76:96:7e:07:31:31:5a:c3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b919e96122f283815c1a56fecc349447a2889cd9
Validity
Not Before: Nov 11 04:01:08 2025 GMT
Not After : Nov 12 04:01:08 2025 GMT
Subject: CN=3f0795d88bb1fb170564b1c7734554758516a6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:f3:b5:ce:b2:2d:b1:c9:a0:7e:56:66:98:
05:e0:31:b3:31:2a:54:d6:8c:cf:e3:74:de:f5:a7:
6b:b3:d1:52:0c:14:a0:c2:a0:f1:16:da:d2:90:3a:
fa:82:b9:14:1e:72:55:3c:e2:d3:49:83:b3:39:16:
63:c4:98:9f:f0:1b:59:bd:71:bb:f5:80:1e:dc:46:
a5:e1:35:3b:16:70:16:64:c9:be:8a:32:cd:c8:46:
62:d6:62:b6:18:a5:ef:57:5f:4b:c6:47:fd:27:cc:
f3:ca:55:71:7c:bb:8d:65:e2:ca:e6:75:a6:ef:ab:
be:da:62:6e:c6:45:90:cd:2f:20:5b:fe:eb:d4:3c:
61:25:21:77:01:a5:47:2b:2f:60:0c:8f:fb:86:c7:
44:b2:a7:fd:47:6c:36:c6:f3:88:b5:97:cd:24:5f:
a5:ca:eb:1e:b0:91:79:c0:67:82:85:19:a9:80:e0:
16:f7:98:3f:4d:16:c8:c9:04:4c:1c:4a:c4:db:f0:
1c:e7:28:e9:f9:2f:7f:25:98:0c:fe:4a:60:9f:73:
e4:55:50:59:8d:0d:ff:87:16:4f:8f:fa:b7:e9:d6:
0e:55:3f:fa:cc:76:e3:bf:33:d8:c5:21:0e:19:34:
ca:cd:a7:b5:5f:10:61:a1:fb:06:a1:89:9e:bd:ba:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:07:95:D8:8B:B1:FB:17:05:64:B1:C7:73:45:54:75:85:16:A6:E2
X509v3 Authority Key Identifier:
keyid:B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:98:5b:b9:37:32:51:4d:f4:eb:4b:6d:40:44:8f:5c:64:a9:
8a:a7:13:49:fe:9e:66:2a:b2:23:d9:79:cc:d3:36:0a:7a:42:
94:e6:73:5a:c8:bd:4f:2b:ca:03:25:4e:fb:09:79:94:f3:66:
c7:36:1f:7d:b6:c9:fe:5f:05:c9:0e:20:16:ab:fd:52:b8:72:
e2:b3:c0:55:bb:fa:26:c3:94:e5:9d:0a:51:a3:98:ef:96:a0:
95:62:64:a0:ce:6f:88:e0:59:a5:c3:7e:9c:06:1e:68:9d:eb:
20:97:f7:ab:8e:31:35:34:e4:c7:09:7b:df:b3:5d:fe:65:a3:
f3:e2:93:be:be:11:59:aa:84:d4:02:51:f7:9b:a3:42:e7:69:
62:4a:44:37:d8:29:7c:a7:85:f2:3f:e5:50:a1:37:f0:bb:4a:
f3:e9:31:88:49:43:db:99:4a:c1:99:39:6f:44:44:9e:c1:01:
61:2b:53:b2:b0:74:09:86:44:90:4d:50:27:5b:38:b8:00:19:
29:7d:86:17:2f:4c:9c:73:69:a8:d3:36:7a:b4:49:fd:a6:4e:
d5:06:32:d5:41:2f:67:63:73:46:67:38:4b:95:28:d1:ab:ea:
b2:92:41:4f:ba:55:8b:bd:62:a0:49:76:29:4b:66:ca:28:91:
0a:73:56:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxExinDcx2dpZ+BzExWsNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTllOTYxMjJmMjgzODE1YzFhNTZmZWNjMzQ5NDQ3YTI4
ODljZDkwHhcNMjUxMTExMDQwMTA4WhcNMjUxMTEyMDQwMTA4WjAzMTEwLwYDVQQD
EygzZjA3OTVkODhiYjFmYjE3MDU2NGIxYzc3MzQ1NTQ3NTg1MTZhNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEjztc6yLbHJoH5WZpgF4DGzMSpU
1ozP43Te9adrs9FSDBSgwqDxFtrSkDr6grkUHnJVPOLTSYOzORZjxJif8BtZvXG7
9YAe3Eal4TU7FnAWZMm+ijLNyEZi1mK2GKXvV19Lxkf9J8zzylVxfLuNZeLK5nWm
76u+2mJuxkWQzS8gW/7r1DxhJSF3AaVHKy9gDI/7hsdEsqf9R2w2xvOItZfNJF+l
yusesJF5wGeChRmpgOAW95g/TRbIyQRMHErE2/Ac5yjp+S9/JZgM/kpgn3PkVVBZ
jQ3/hxZPj/q36dYOVT/6zHbjvzPYxSEOGTTKzae1XxBhofsGoYmevbrLGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8HldiLsfsXBWSxx3NFVHWFFqbiMB8GA1UdIwQY
MBaAFLkZ6WEi8oOBXBpW/sw0lEeiiJzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMGVmNTktMDhiOC00ZDZkLTg3Mzgt
NWNlYzM2ZmY4ZTczLzEvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lMGVmNTktMDhiOC00ZDZkLTg3MzgtNWNlYzM2ZmY4ZTcz
LzEvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZhbuTcy
UU3060ttQESPXGSpiqcTSf6eZiqyI9l5zNM2CnpClOZzWsi9TyvKAyVO+wl5lPNm
xzYffbbJ/l8FyQ4gFqv9Urhy4rPAVbv6JsOU5Z0KUaOY75aglWJkoM5viOBZpcN+
nAYeaJ3rIJf3q44xNTTkxwl737Nd/mWj8+KTvr4RWaqE1AJR95ujQudpYkpEN9gp
fKeF8j/lUKE38LtK8+kxiElD25lKwZk5b0REnsEBYStTsrB0CYZEkE1QJ1s4uAAZ
KX2GFy9MnHNpqNM2erRJ/aZO1QYy1UEvZ2NzRmc4S5Uo0avqspJBT7pVi71ioEl2
KUtmyiiRCnNW6w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:45 2025 by rpki-client