Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
File: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json)
Hash identifier: Xg2Bq/q3ioFVOPgrvbT3t7+wfFCOLlwcQowj0Ck+8/o=
Subject key identifier: 44:B3:4D:5C:91:1B:7A:36:45:89:B3:FE:A0:DF:0D:35:4F:44:75:D6
Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
Certificate issuer: /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Certificate serial: 019A71135D828BDD12BDF7D419CF0A91D813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
Manifest number: 10BF
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: 5wn1MUshvBmc6ME2IzD6zIe1XZE.roa (hash: QLmy/h6humsEGtFs5Q8B+FIkOzKvZzOF/LsQEEuh7mQ=)
2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: TvqUYGyOYUdylT7Bmef+nmYF8vXHyTofZc1i0puGcsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5d:82:8b:dd:12:bd:f7:d4:19:cf:0a:91:d8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=44b34d5c911b7a364589b3fea0df0d354f4475d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:fc:13:1a:c7:a0:a9:98:86:72:af:16:fa:
fe:78:f8:19:db:61:90:2d:6e:1c:68:b5:96:a3:3a:
fb:b8:88:7e:77:fb:19:ae:a7:f2:74:81:aa:10:f9:
48:5f:9a:94:3a:45:85:1d:28:f2:d7:1e:3a:53:9b:
2b:25:e6:4e:18:bc:c9:a8:72:05:2f:ef:a0:d2:12:
81:fd:49:6b:e2:50:b3:c0:47:1a:65:f1:04:db:c5:
1b:76:92:e7:31:96:59:94:f3:63:e4:ad:b5:62:6f:
08:ef:6b:f0:ea:7c:3f:1c:d9:ec:ec:a1:ec:f1:9e:
41:53:34:10:35:e2:fd:5c:f6:fe:e8:22:04:af:2b:
dd:54:19:a2:9e:3d:b1:94:e3:a4:71:4a:c8:00:76:
08:ad:6f:20:f0:13:7a:43:11:01:c2:64:64:35:ba:
17:ce:ce:6c:46:23:2a:e8:c0:25:2f:11:66:4f:30:
d6:cf:32:8f:b2:90:a9:52:95:33:34:7f:6f:c7:f0:
ef:6b:c1:4e:0d:a5:32:e7:5f:7b:c1:89:c7:75:ee:
e6:35:06:54:e9:ec:87:6b:e2:99:02:ef:ee:f5:cc:
45:bd:65:a2:80:12:33:57:c6:b5:1a:66:bf:f1:5c:
27:ac:fa:f4:20:a9:cf:30:28:55:d1:e2:9d:fd:0b:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B3:4D:5C:91:1B:7A:36:45:89:B3:FE:A0:DF:0D:35:4F:44:75:D6
X509v3 Authority Key Identifier:
keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0f:37:6e:c1:c0:4d:72:99:2f:ca:2c:3d:ba:bd:f7:e4:0d:
46:2e:53:f0:b1:93:6b:19:c6:9f:1c:f6:52:31:d2:23:36:1b:
7c:d6:7d:ea:88:17:39:92:68:86:f3:06:b5:df:c3:a8:a3:07:
a2:6d:e0:57:56:da:73:33:53:d2:80:e7:21:59:7a:2a:1b:4a:
4d:94:63:a2:a0:30:84:ad:1a:07:96:23:8b:ce:67:bb:aa:de:
85:b3:77:2a:5e:bf:19:e9:e2:a5:d4:bd:95:5d:51:10:01:c0:
84:82:87:75:fd:58:0b:3a:09:0b:f4:fc:17:85:24:ab:35:cc:
1a:2d:8e:14:e8:1e:c4:62:ef:1c:81:26:6f:0d:3d:f4:aa:20:
7d:86:12:5a:92:53:7f:55:d0:30:38:ab:6c:ec:41:98:f8:7b:
37:63:6d:95:f5:15:eb:92:67:53:e0:96:ed:20:c7:8d:8a:d9:
38:56:25:93:f6:4d:f8:ee:27:17:4b:af:ff:bd:64:8a:32:6e:
ae:a0:cb:bb:7c:f2:d8:b7:1e:f2:86:bf:cf:34:d5:d9:04:b8:
01:c5:16:09:01:fa:33:d7:72:69:2d:a4:22:22:cd:97:d5:e3:
e5:e7:67:f2:20:eb:22:91:da:98:fd:73:03:40:6c:5a:b5:dc:
5f:71:06:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE12Ci90SvffUGc8KkdgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjJiODVhMWQyYzUxZDk5MDY5Y2EzYTVhZmY1MmVjYzZh
OWFhYjQwHhcNMjUxMTExMDQwMTI1WhcNMjUxMTEyMDQwMTI1WjAzMTEwLwYDVQQD
Eyg0NGIzNGQ1YzkxMWI3YTM2NDU4OWIzZmVhMGRmMGQzNTRmNDQ3NWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwD8ExrHoKmYhnKvFvr+ePgZ22GQ
LW4caLWWozr7uIh+d/sZrqfydIGqEPlIX5qUOkWFHSjy1x46U5srJeZOGLzJqHIF
L++g0hKB/Ulr4lCzwEcaZfEE28UbdpLnMZZZlPNj5K21Ym8I72vw6nw/HNns7KHs
8Z5BUzQQNeL9XPb+6CIEryvdVBminj2xlOOkcUrIAHYIrW8g8BN6QxEBwmRkNboX
zs5sRiMq6MAlLxFmTzDWzzKPspCpUpUzNH9vx/Dva8FODaUy5197wYnHde7mNQZU
6eyHa+KZAu/u9cxFvWWigBIzV8a1Gma/8VwnrPr0IKnPMChV0eKd/QtmsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESzTVyRG3o2RYmz/qDfDTVPRHXWMB8GA1UdIwQY
MBaAFLhiuFodLFHZkGnKOlr/UuzGqaq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2Yt
Mjc4ZmQ0NzVmM2ZiLzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2YtMjc4ZmQ0NzVmM2Zi
LzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMg83bsHA
TXKZL8osPbq99+QNRi5T8LGTaxnGnxz2UjHSIzYbfNZ96ogXOZJohvMGtd/DqKMH
om3gV1baczNT0oDnIVl6KhtKTZRjoqAwhK0aB5Yji85nu6rehbN3Kl6/GenipdS9
lV1REAHAhIKHdf1YCzoJC/T8F4UkqzXMGi2OFOgexGLvHIEmbw099KogfYYSWpJT
f1XQMDirbOxBmPh7N2NtlfUV65JnU+CW7SDHjYrZOFYlk/ZN+O4nF0uv/71kijJu
rqDLu3zy2Lce8oa/zzTV2QS4AcUWCQH6M9dyaS2kIiLNl9Xj5edn8iDrIpHamP1z
A0BsWrXcX3EGQg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:02 2025 by rpki-client