Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: J3ZAr7SGe5QPiWSJFnQTcYcd7VZTYRZUTR9E5ENMwXk=
Subject key identifier: E9:25:CE:A3:18:E5:19:C8:33:F3:67:94:11:28:59:7B:CF:AD:20:54
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 019A2930BE19181A5BF098B23C7445FA698B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0B97
Signing time: Tue 28 Oct 2025 05:00:51 +0000
Manifest this update: Tue 28 Oct 2025 05:00:51 +0000
Manifest next update: Wed 29 Oct 2025 05:00:51 +0000
Files and hashes: 1: HgzDmPqeZBdX21PHNQn3j0-FDSk.roa (hash: jL+abeK7Dj613IZkXcAHwX1ldRNUAWLyPE0MF0XmQTs=)
2: JmahROWNlzzWLOhj6faRjwc1jmM.roa (hash: 8En7I8LLB7AUar/hMjwx3dkXSNApjPuQ8H4paRvFqeg=)
3: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: 2cYS/b5VvBy98xfYU6lLRN8PcbhME/2THPq9PvoXgoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:be:19:18:1a:5b:f0:98:b2:3c:74:45:fa:69:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Oct 28 05:00:51 2025 GMT
Not After : Oct 29 05:00:51 2025 GMT
Subject: CN=e925cea318e519c833f367941128597bcfad2054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:53:9b:c1:bb:8e:50:82:f7:63:fa:e8:3a:32:
cd:a7:fb:d0:5e:99:13:1d:cd:e2:75:8e:92:c4:6e:
63:03:6f:70:ca:dd:67:c4:75:44:4e:bf:d6:b7:2e:
01:07:ef:95:96:ba:40:45:aa:04:7f:87:fa:23:da:
ae:6d:d6:d9:d3:55:0f:49:ce:a9:db:be:b0:0f:95:
c3:93:5a:80:cd:84:b6:8c:1a:5e:e5:a7:ac:d6:44:
f9:f0:73:ef:0a:3d:0f:ff:2e:71:c2:25:65:ba:7b:
26:95:46:3e:13:74:b9:72:45:83:9e:98:57:75:f8:
b7:a1:44:fb:97:b6:eb:33:97:0e:9a:29:53:90:d1:
ab:39:7e:13:d5:ae:33:5a:21:2b:f6:80:b4:04:9b:
89:d7:50:12:dd:45:a6:29:ab:b3:7e:e6:b4:ad:1b:
10:7c:90:10:3c:e6:b9:a6:3d:d5:c5:b9:74:22:c2:
4b:6f:50:02:9a:7c:1f:81:13:8c:64:00:b2:53:94:
a7:77:e7:2b:a6:2a:1a:76:25:02:d9:24:c8:58:6e:
e8:71:c6:99:11:0b:15:a2:24:d0:84:ec:3c:be:47:
2c:dd:9e:d0:d9:a1:6d:55:c1:e4:d3:d8:e4:71:f6:
0a:ac:dc:d4:7f:69:e0:13:64:54:1f:90:f9:8f:d7:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:25:CE:A3:18:E5:19:C8:33:F3:67:94:11:28:59:7B:CF:AD:20:54
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:04:87:36:3a:2c:7a:0b:24:cb:45:1c:14:97:f1:68:0c:09:
59:cf:38:cc:0b:bb:33:79:33:9f:2a:88:61:0b:7f:31:53:4a:
a3:91:4c:24:a6:e3:81:d0:8e:c9:a0:5f:df:aa:ac:34:ba:a6:
32:3a:7a:d0:fa:88:72:8b:0f:a6:96:20:a5:5b:5d:a9:0c:6b:
c6:15:4b:86:f0:9e:43:27:c0:38:48:be:8e:35:d4:49:45:44:
d4:fb:d0:da:7d:d4:18:34:df:e7:72:e6:7d:d3:3c:b3:fb:fe:
0e:11:b1:26:27:c9:ac:8b:d4:37:07:31:f5:4d:55:ab:75:af:
e7:5f:0e:70:e4:d4:7f:36:8c:51:a1:74:43:fd:56:de:46:c6:
86:1d:a6:94:59:81:96:dc:8e:f4:c2:4c:60:77:14:04:36:51:
9e:63:22:a5:b1:90:93:b8:18:8f:89:da:72:e1:c9:70:38:39:
49:f2:b1:a4:50:11:39:14:ed:19:a3:50:3c:23:b4:d0:9b:26:
df:7c:39:e5:bc:e4:a9:7b:a8:74:45:cf:d1:d2:53:86:05:57:
7a:38:c1:f5:c1:69:6f:6f:a6:64:6e:b1:9d:54:b8:e9:9d:df:
4b:97:e9:ee:7c:e5:65:d7:29:5c:f4:a1:e4:c1:e5:e2:f7:fd:
64:68:42:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopML4ZGBpb8JiyPHRF+mmLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2VlZTJkNmQ3YTUwYzkyNDk5ZGExYTIxZjJhYmI3YTJh
Nzc0YzgwHhcNMjUxMDI4MDUwMDUxWhcNMjUxMDI5MDUwMDUxWjAzMTEwLwYDVQQD
EyhlOTI1Y2VhMzE4ZTUxOWM4MzNmMzY3OTQxMTI4NTk3YmNmYWQyMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lObwbuOUIL3Y/roOjLNp/vQXpkT
Hc3idY6SxG5jA29wyt1nxHVETr/Wty4BB++VlrpARaoEf4f6I9qubdbZ01UPSc6p
276wD5XDk1qAzYS2jBpe5aes1kT58HPvCj0P/y5xwiVlunsmlUY+E3S5ckWDnphX
dfi3oUT7l7brM5cOmilTkNGrOX4T1a4zWiEr9oC0BJuJ11AS3UWmKauzfua0rRsQ
fJAQPOa5pj3Vxbl0IsJLb1ACmnwfgROMZACyU5Snd+crpioadiUC2STIWG7occaZ
EQsVoiTQhOw8vkcs3Z7Q2aFtVcHk09jkcfYKrNzUf2ngE2RUH5D5j9f3fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOklzqMY5RnIM/NnlBEoWXvPrSBUMB8GA1UdIwQY
MBaAFFLO7i1telDJJJnaGiHyq7eip3TIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUt
MGMwMjBhN2U0YTQ0LzEvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUtMGMwMjBhN2U0YTQ0
LzEvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApASHNjos
egsky0UcFJfxaAwJWc84zAu7M3kznyqIYQt/MVNKo5FMJKbjgdCOyaBf36qsNLqm
Mjp60PqIcosPppYgpVtdqQxrxhVLhvCeQyfAOEi+jjXUSUVE1PvQ2n3UGDTf53Lm
fdM8s/v+DhGxJifJrIvUNwcx9U1Vq3Wv518OcOTUfzaMUaF0Q/1W3kbGhh2mlFmB
ltyO9MJMYHcUBDZRnmMipbGQk7gYj4nacuHJcDg5SfKxpFARORTtGaNQPCO00Jsm
33w55bzkqXuodEXP0dJThgVXejjB9cFpb2+mZG6xnVS46Z3fS5fp7nzlZdcpXPSh
5MHl4vf9ZGhCXA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:35:44 2025 by rpki-client