Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
File: UWJgaJQlhs6VcCEDusiZ0j_PckI.mft (raw, json)
Hash identifier: MV5XG9bCQyvzW5dAsH2YnCI0E7kfiEDD+aFcWvDYxeI=
Subject key identifier: 6E:71:18:2B:39:86:4D:BA:80:5D:F5:9E:58:01:E3:ED:92:B8:F4:94
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Certificate issuer: /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial: 019A7113562C5A7966F9B79F096B132FDB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:23 +0000
Manifest this update: Tue 11 Nov 2025 04:01:23 +0000
Manifest next update: Wed 12 Nov 2025 04:01:23 +0000
Files and hashes: 1: FAtymmkCe6OSJEcPV_Hsc91u3dE.roa (hash: aLoKF1mAozJf+kgQkDeGL4QfI5DgmXzGdTqo0LToX+c=)
2: UWJgaJQlhs6VcCEDusiZ0j_PckI.crl (hash: r09ZcOvr9vCWHsMRJl+LXMJLdxTAmzjO458G+1PIujw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:56:2c:5a:79:66:f9:b7:9f:09:6b:13:2f:db:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51626068942586ce95702103bac899d23fcf7242
Validity
Not Before: Nov 11 04:01:23 2025 GMT
Not After : Nov 12 04:01:23 2025 GMT
Subject: CN=6e71182b39864dba805df59e5801e3ed92b8f494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:de:b2:90:95:42:bf:87:46:be:72:54:54:
d9:42:81:3b:3e:2a:a7:cb:8f:31:a1:94:df:e9:bf:
cb:2f:f0:ee:98:6d:f4:aa:0e:bb:b5:7c:b3:28:59:
0b:73:b0:13:59:93:d2:0c:54:26:89:89:1a:a7:b7:
a7:13:df:87:97:89:3f:77:05:03:ad:a3:3f:75:89:
9d:49:49:c1:6f:b1:61:30:e6:fb:28:8c:31:4a:f5:
75:f3:9c:e6:99:44:19:50:6e:fb:92:67:c4:d4:1a:
ad:99:76:74:10:d8:db:fd:e6:a8:c9:2d:49:b4:7e:
10:25:5a:df:89:a4:39:2d:12:6b:a3:05:bd:b1:f0:
ac:32:ad:eb:fc:53:12:46:92:15:95:e9:12:ba:29:
e8:6a:a6:ce:a1:24:7e:18:7c:c2:b9:b9:8d:cd:c4:
a5:99:81:10:31:b2:33:95:c2:c6:1b:a8:f2:27:e6:
35:c3:f4:3b:0d:92:65:2d:e0:b6:ee:4b:b1:34:e8:
6a:71:b4:26:af:88:ab:3c:61:d4:9a:a8:a0:d6:67:
fc:86:97:1d:e0:11:1a:3a:3e:3b:8e:f8:93:30:31:
cc:86:a5:31:b1:9d:e8:8e:52:05:97:25:4f:7f:cf:
1d:51:96:43:c8:c1:15:65:87:36:bf:62:a0:b8:c1:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:71:18:2B:39:86:4D:BA:80:5D:F5:9E:58:01:E3:ED:92:B8:F4:94
X509v3 Authority Key Identifier:
keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:91:94:81:d7:a6:3b:8b:13:b8:9d:cb:ee:45:e2:3e:9a:99:
45:40:ab:5e:6e:9d:e2:0f:2f:17:a5:d8:4d:ff:5e:81:24:a1:
98:74:66:2f:45:a6:58:ac:76:ab:7c:a8:63:d9:d5:0a:ab:b0:
c3:bf:40:05:c6:a2:ff:03:eb:b0:41:e4:a3:b5:88:93:25:2b:
7c:44:cf:bd:f0:bd:78:8b:a2:b7:ad:81:09:dc:0e:cb:40:a9:
0a:ad:34:41:71:42:0e:b9:30:80:51:ea:12:4a:38:59:ad:eb:
18:8a:66:67:07:84:0d:7d:b1:39:3f:e5:bd:9f:ca:18:39:98:
83:bf:ae:d9:7a:70:df:0e:59:cb:6b:13:c3:d9:01:8b:a0:50:
f0:61:9b:e8:ad:e4:d4:1b:d7:d1:ac:7f:de:61:bf:d1:ff:3e:
cf:f4:99:8a:93:ad:1c:08:35:c2:8d:b1:7d:55:d3:f9:89:41:
fd:e8:d7:ce:9b:fa:50:a3:9b:b3:d2:69:af:61:43:df:4a:1e:
67:1e:d1:af:fc:aa:e7:ff:3a:bc:1b:98:e6:15:62:ef:d4:d4:
3e:26:4d:91:34:74:6c:57:36:e4:4e:db:5f:15:a9:37:23:36:
97:4d:6d:e9:82:29:18:d4:51:18:25:a1:fe:b1:b8:45:93:8a:
91:1d:a7:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE1YsWnlm+befCWsTL9suMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNjI2MDY4OTQyNTg2Y2U5NTcwMjEwM2JhYzg5OWQyM2Zj
ZjcyNDIwHhcNMjUxMTExMDQwMTIzWhcNMjUxMTEyMDQwMTIzWjAzMTEwLwYDVQQD
Eyg2ZTcxMTgyYjM5ODY0ZGJhODA1ZGY1OWU1ODAxZTNlZDkyYjhmNDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IjespCVQr+HRr5yVFTZQoE7Piqn
y48xoZTf6b/LL/DumG30qg67tXyzKFkLc7ATWZPSDFQmiYkap7enE9+Hl4k/dwUD
raM/dYmdSUnBb7FhMOb7KIwxSvV185zmmUQZUG77kmfE1BqtmXZ0ENjb/eaoyS1J
tH4QJVrfiaQ5LRJrowW9sfCsMq3r/FMSRpIVlekSuinoaqbOoSR+GHzCubmNzcSl
mYEQMbIzlcLGG6jyJ+Y1w/Q7DZJlLeC27kuxNOhqcbQmr4irPGHUmqig1mf8hpcd
4BEaOj47jviTMDHMhqUxsZ3ojlIFlyVPf88dUZZDyMEVZYc2v2KguMFyPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5xGCs5hk26gF31nlgB4+2SuPSUMB8GA1UdIwQY
MBaAFFFiYGiUJYbOlXAhA7rImdI/z3JCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNjJkMDAtZmZhOC00M2JlLWEyYmQt
N2JkOWU1ZjQ2N2FkLzEvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jNjJkMDAtZmZhOC00M2JlLWEyYmQtN2JkOWU1ZjQ2N2Fk
LzEvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAypGUgdem
O4sTuJ3L7kXiPpqZRUCrXm6d4g8vF6XYTf9egSShmHRmL0WmWKx2q3yoY9nVCquw
w79ABcai/wPrsEHko7WIkyUrfETPvfC9eIuit62BCdwOy0CpCq00QXFCDrkwgFHq
Eko4Wa3rGIpmZweEDX2xOT/lvZ/KGDmYg7+u2Xpw3w5Zy2sTw9kBi6BQ8GGb6K3k
1BvX0ax/3mG/0f8+z/SZipOtHAg1wo2xfVXT+YlB/ejXzpv6UKObs9Jpr2FD30oe
Zx7Rr/yq5/86vBuY5hVi79TUPiZNkTR0bFc25E7bXxWpNyM2l01t6YIpGNRRGCWh
/rG4RZOKkR2npQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:18:26 2025 by rpki-client