Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: YK3rt3hMtbKScIEhJ1PsA454j7CXpwRmRl5wyK6YXWQ=
Subject key identifier: 99:7D:81:76:5B:7A:59:EA:59:7D:81:FC:2D:AC:42:FE:33:2F:85:65
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 019A0F3A3CC5D65C521C5357CB2FE59540D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 03B9
Signing time: Thu 23 Oct 2025 04:01:05 +0000
Manifest this update: Thu 23 Oct 2025 04:01:05 +0000
Manifest next update: Fri 24 Oct 2025 04:01:05 +0000
Files and hashes: 1: cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa (hash: 9vivL0YwWhsXGDyDf4zb5XsV5Wh0saDdZDc2eObdPvk=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: USIYfXTfj+h5DuSWaKnW9jwab5KY8OtYRUOtaeRMRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:3a:3c:c5:d6:5c:52:1c:53:57:cb:2f:e5:95:40:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Oct 23 04:01:05 2025 GMT
Not After : Oct 24 04:01:05 2025 GMT
Subject: CN=997d81765b7a59ea597d81fc2dac42fe332f8565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:a6:26:47:0e:ab:84:e3:c5:74:45:af:72:
4f:c5:0e:3e:44:c1:01:6e:7e:04:77:13:b3:99:1e:
71:34:a6:18:b8:a6:d1:6b:3f:7e:49:ed:6a:90:95:
fd:1c:89:e4:ed:69:1f:ec:79:7d:64:6b:ad:6d:38:
4d:86:e1:50:7a:fc:a7:f8:07:29:fb:31:d6:e3:e9:
dd:90:67:6e:14:2b:db:50:e9:50:b6:d2:a6:fc:93:
b0:a5:8c:01:af:a9:67:7a:5a:13:1f:ea:90:8b:f3:
cf:a8:1b:4a:bf:bf:92:53:ff:ee:ce:6a:83:cc:f0:
3d:e8:f6:7f:9a:2f:63:e3:88:b7:bb:b5:fb:40:91:
be:84:9c:4b:30:65:18:15:ae:b5:81:c2:86:8b:2b:
e0:b5:1b:ab:38:17:a8:22:0f:bc:16:5d:9d:bd:ab:
c8:be:3d:9c:92:a2:67:33:08:ca:10:d4:10:f4:5b:
1f:7e:af:e2:50:8c:76:c1:73:ee:c6:b9:e6:25:49:
49:a3:a1:2b:b5:55:f2:83:90:8a:76:cd:06:fe:56:
5d:05:ed:c7:37:c4:1d:74:44:d4:3d:37:1c:cd:a6:
70:4a:86:67:aa:7d:bb:7c:1f:fd:40:16:4a:97:65:
9d:ea:3f:c2:8e:f2:7e:2a:ee:a1:7c:ec:8e:29:07:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:81:76:5B:7A:59:EA:59:7D:81:FC:2D:AC:42:FE:33:2F:85:65
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0d:fb:20:c5:f5:dd:83:e2:92:f0:e7:ee:6f:d4:a9:ad:f9:
22:d4:73:3d:a2:c5:c8:48:2d:04:17:7a:7f:41:00:1a:86:a9:
93:5e:27:3a:eb:85:f0:ee:da:3b:d9:f1:bc:f5:3b:12:30:48:
57:be:9b:60:5b:af:71:fa:ba:8b:f9:1b:1c:29:36:08:5c:31:
b9:75:6e:6f:b8:42:25:41:2f:50:71:48:da:89:d8:30:05:e9:
c5:e4:11:b1:d5:0b:f1:fa:30:6f:9a:e0:b5:a4:e8:b1:30:51:
da:f5:eb:9f:84:c1:7a:99:28:10:18:9b:4b:b2:cc:17:79:61:
94:de:64:25:3d:b5:94:9b:8d:be:6b:b4:39:94:68:dc:0c:80:
7c:19:68:54:4c:23:ad:0c:d5:ab:43:0c:98:b0:90:c2:aa:b9:
fd:4f:e0:16:4e:09:d5:a5:8f:89:4f:a4:95:cb:63:ec:9c:31:
04:4e:19:69:ee:e7:39:a6:13:23:17:ee:a0:e8:aa:4e:18:9d:
73:3d:2a:5f:ad:57:09:5c:47:03:5b:cd:90:12:4e:44:17:e5:
71:77:04:48:da:c5:d1:9f:72:dc:e4:a5:d2:27:81:6c:c0:27:
4c:7e:7e:12:21:08:3e:35:33:b6:ca:00:91:59:72:3a:b9:60:
af:b5:aa:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoPOjzF1lxSHFNXyy/llUDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTMwMzU5YjU0NjkxMTJlNmUyYmZhZTg1OTViMDU0ODU1
NTFkMzcwHhcNMjUxMDIzMDQwMTA1WhcNMjUxMDI0MDQwMTA1WjAzMTEwLwYDVQQD
Eyg5OTdkODE3NjViN2E1OWVhNTk3ZDgxZmMyZGFjNDJmZTMzMmY4NTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DGmJkcOq4TjxXRFr3JPxQ4+RMEB
bn4EdxOzmR5xNKYYuKbRaz9+Se1qkJX9HInk7Wkf7Hl9ZGutbThNhuFQevyn+Acp
+zHW4+ndkGduFCvbUOlQttKm/JOwpYwBr6lneloTH+qQi/PPqBtKv7+SU//uzmqD
zPA96PZ/mi9j44i3u7X7QJG+hJxLMGUYFa61gcKGiyvgtRurOBeoIg+8Fl2dvavI
vj2ckqJnMwjKENQQ9Fsffq/iUIx2wXPuxrnmJUlJo6ErtVXyg5CKds0G/lZdBe3H
N8QddETUPTcczaZwSoZnqn27fB/9QBZKl2Wd6j/CjvJ+Ku6hfOyOKQeK+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJl9gXZbelnqWX2B/C2sQv4zL4VlMB8GA1UdIwQY
MBaAFLmTA1m1RpES5uK/roWVsFSFVR03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTIt
YmU1ZjEyOWVhODFhLzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTItYmU1ZjEyOWVhODFh
LzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAA37IMX1
3YPikvDn7m/Uqa35ItRzPaLFyEgtBBd6f0EAGoapk14nOuuF8O7aO9nxvPU7EjBI
V76bYFuvcfq6i/kbHCk2CFwxuXVub7hCJUEvUHFI2onYMAXpxeQRsdUL8fowb5rg
taTosTBR2vXrn4TBepkoEBibS7LMF3lhlN5kJT21lJuNvmu0OZRo3AyAfBloVEwj
rQzVq0MMmLCQwqq5/U/gFk4J1aWPiU+klctj7JwxBE4Zae7nOaYTIxfuoOiqThid
cz0qX61XCVxHA1vNkBJORBflcXcESNrF0Z9y3OSl0ieBbMAnTH5+EiEIPjUztsoA
kVlyOrlgr7WqFw==
-----END CERTIFICATE-----
Generated at Thu Oct 23 09:20:03 2025 by rpki-client