Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier: 8wUTkS/EuksQladKcSxUZ33bVhDMlSpq00x1cyJ3y2k=
Subject key identifier: 04:91:6E:F4:13:2E:2A:C6:5F:E1:C7:73:89:69:54:EB:C4:C5:08:A3
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 019A72264D818D0A2E96E1575BE1FE600AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number: 133D
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: hx_fLybZMd0bewVXBVAM7S3L-GQ.roa (hash: sK9kED5NHQV+ZF0/R5VnMBtuYFGBIVWRa2IGw5jpGTA=)
2: oZEDClQI5mUeR-tun2SMB8BFO6g.roa (hash: aVZk36h9DNYmGpwbSUsBXNwd3910rjsUnxEvjedXyHo=)
3: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: GYlqLqbb/2I/mHzQoP3KkJU8vySAXDg0g66twrSJfcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4d:81:8d:0a:2e:96:e1:57:5b:e1:fe:60:0a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=04916ef4132e2ac65fe1c773896954ebc4c508a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:ef:63:dc:93:af:17:1f:cd:5a:4d:63:a2:
45:9e:94:3b:fc:24:7e:ce:7f:0c:1e:ba:72:b6:40:
e8:94:5f:0f:fe:fe:c5:af:15:a9:d8:97:95:ff:16:
6c:f3:7b:9a:f2:6d:ff:45:d6:1c:23:ab:25:e2:17:
74:a6:09:0b:d0:82:b6:04:44:cd:e9:d4:a8:5c:76:
c1:bb:87:ad:90:c2:61:d0:5f:69:d5:e6:cd:70:29:
b8:1d:27:e2:b8:2d:32:61:8f:53:ae:b9:af:7e:7b:
15:3a:5e:b7:61:23:10:db:51:9d:ed:bc:14:83:35:
6f:e8:0c:66:f8:90:08:da:4d:09:eb:f1:ce:53:01:
f6:da:bd:28:a6:51:fb:6e:4d:a4:24:c3:e2:22:51:
01:c4:86:33:69:61:5e:11:43:d8:d0:fa:13:69:bb:
b5:c6:5e:84:b8:68:bf:f2:f6:7a:75:e0:dd:82:d5:
5d:07:f8:61:6a:ad:29:3c:ab:6f:8c:3f:54:7f:a6:
20:7b:4a:77:73:55:6b:81:9e:80:4d:2b:c8:01:a7:
87:55:7c:32:39:ef:f7:f3:af:71:36:03:0d:93:63:
02:80:15:c9:35:c4:dc:de:28:7d:f2:27:ac:a6:2b:
ba:29:4d:08:c6:e4:66:49:b5:45:e4:ad:d2:ee:46:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:6E:F4:13:2E:2A:C6:5F:E1:C7:73:89:69:54:EB:C4:C5:08:A3
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e7:41:9e:0b:bd:a3:5b:9c:a5:f1:cf:d1:96:5b:6e:0e:bb:
c5:c7:c8:38:68:a8:c0:11:7b:9e:49:33:25:f5:a8:bd:99:2f:
95:54:b1:8a:e7:b3:85:a1:78:c9:c6:1b:e0:a1:a1:0a:de:12:
2c:ed:09:48:37:03:8c:76:f9:db:91:14:75:78:fa:88:b1:56:
4c:9a:af:a8:c9:42:70:c3:a6:9d:fc:ee:55:62:75:eb:da:07:
6a:64:17:d5:87:31:f6:c9:ed:e1:74:58:e0:ee:c4:06:c2:c3:
69:c8:96:88:3e:4c:40:28:18:52:99:cf:01:d8:8b:af:25:8e:
42:89:91:7a:52:7b:1c:93:70:f6:38:91:8a:68:0e:ee:46:c4:
7c:6b:b6:c5:78:9a:3a:56:36:71:3d:c4:6b:44:20:72:ca:fd:
14:90:fd:43:1f:7e:4d:b9:46:a9:a9:36:45:62:de:ce:0e:73:
27:60:67:a9:c7:e6:90:e8:a6:e4:39:85:c4:44:78:b9:4d:5a:
89:aa:21:68:49:24:e1:56:04:7b:11:4f:6e:50:98:c5:c9:34:
83:6b:5b:40:46:23:5f:15:83:e9:12:1c:e3:6a:65:81:d8:47:
a5:76:30:f7:8b:55:cd:d3:87:42:7c:6a:46:7f:b0:8f:d3:f2:
f4:fa:4b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJk2BjQouluFXW+H+YAqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNzczMDFlMTRkNjViM2EzZDY4NmRhYWMxNmRmYzQ5YWM0
OGM3Y2QwHhcNMjUxMTExMDkwMTQ0WhcNMjUxMTEyMDkwMTQ0WjAzMTEwLwYDVQQD
EygwNDkxNmVmNDEzMmUyYWM2NWZlMWM3NzM4OTY5NTRlYmM0YzUwOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVvvY9yTrxcfzVpNY6JFnpQ7/CR+
zn8MHrpytkDolF8P/v7FrxWp2JeV/xZs83ua8m3/RdYcI6sl4hd0pgkL0IK2BETN
6dSoXHbBu4etkMJh0F9p1ebNcCm4HSfiuC0yYY9TrrmvfnsVOl63YSMQ21Gd7bwU
gzVv6Axm+JAI2k0J6/HOUwH22r0oplH7bk2kJMPiIlEBxIYzaWFeEUPY0PoTabu1
xl6EuGi/8vZ6deDdgtVdB/hhaq0pPKtvjD9Uf6Yge0p3c1VrgZ6ATSvIAaeHVXwy
Oe/3869xNgMNk2MCgBXJNcTc3ih98iespiu6KU0IxuRmSbVF5K3S7kbZGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASRbvQTLirGX+HHc4lpVOvExQijMB8GA1UdIwQY
MBaAFLp3MB4U1ls6PWhtqsFt/EmsSMfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEt
NWM2OGY2YjBiMmM3LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEtNWM2OGY2YjBiMmM3
LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+dBngu9
o1ucpfHP0ZZbbg67xcfIOGiowBF7nkkzJfWovZkvlVSxiuezhaF4ycYb4KGhCt4S
LO0JSDcDjHb525EUdXj6iLFWTJqvqMlCcMOmnfzuVWJ169oHamQX1Ycx9snt4XRY
4O7EBsLDaciWiD5MQCgYUpnPAdiLryWOQomRelJ7HJNw9jiRimgO7kbEfGu2xXia
OlY2cT3Ea0Qgcsr9FJD9Qx9+TblGqak2RWLezg5zJ2BnqcfmkOim5DmFxER4uU1a
iaohaEkk4VYEexFPblCYxck0g2tbQEYjXxWD6RIc42plgdhHpXYw94tVzdOHQnxq
Rn+wj9Py9PpLXg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:17 2025 by rpki-client