Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
File: uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json)
Hash identifier: /i3UPpknDwEk9jFy/6on55Xa4QP6vDVed+rKsAkgu64=
Subject key identifier: 48:A3:5E:D0:AC:26:F6:6B:99:DD:4E:C9:3E:BE:0A:BF:F7:F9:BF:20
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial: 0199368093D0771E0D357A48B4DA919BCC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
Manifest number: 03A6
Signing time: Thu 11 Sep 2025 02:00:20 +0000
Manifest this update: Thu 11 Sep 2025 02:00:20 +0000
Manifest next update: Fri 12 Sep 2025 02:00:20 +0000
Files and hashes: 1: FqXqM-CF5p0Rq38uJsia_NQp_xY.roa (hash: GMH0+ju4uwTjeyWz+p9XJEoUNztNymm7JQRhgTt4Qx4=)
2: clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa (hash: zxw0qvHYZIrsTwUU39fdb8nl6XgBcWyyRbtlR0A6A58=)
3: r1yy0iaaI6tU-hR6fBL9Hl5rZ8s.roa (hash: YmIYOIAciROTE+jQf1c1upjbnpWZiAky+TZT072x85g=)
4: tPs3GfF30oL_YN3V2-6-sgSR5vI.roa (hash: dKCGleVNGeQ7syDLSUJzqSgk8sblx18tc2ARIjFcsRs=)
5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: welEZkPM9ExJC5dwd6NERq7zQjzxEyGjZNSVan74jLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:93:d0:77:1e:0d:35:7a:48:b4:da:91:9b:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Validity
Not Before: Sep 11 02:00:20 2025 GMT
Not After : Sep 12 02:00:20 2025 GMT
Subject: CN=48a35ed0ac26f66b99dd4ec93ebe0abff7f9bf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fb:ea:5b:70:32:be:78:f4:2c:05:83:bf:10:
dc:b7:c5:4a:e2:ef:d2:4c:14:99:be:e3:79:37:16:
b6:ea:59:04:fb:35:b4:fc:21:98:a9:1d:96:dd:bc:
69:ed:f5:6a:0e:2d:a3:1b:d0:9f:8d:0d:6a:08:be:
01:b4:c6:c6:28:45:c5:6a:94:05:29:96:f2:6a:10:
58:b9:12:7e:0b:fa:36:ac:16:8a:9e:bf:e8:57:07:
5b:d6:16:4e:47:53:68:df:35:7c:8e:c3:38:b6:ed:
13:ed:97:86:88:a7:5d:66:b2:9f:f9:b2:7f:67:6a:
41:07:f1:9d:d3:d7:36:75:ae:35:e5:69:37:94:33:
76:56:dd:1b:f3:d9:54:ff:a8:80:83:da:a7:d2:3f:
30:74:42:df:dd:b4:f2:03:38:34:ba:96:81:a6:24:
cf:4d:3e:0b:51:66:73:0a:39:22:f2:69:60:c2:0e:
6e:ed:7d:b9:b2:1e:fd:0f:7e:4b:ef:e4:9f:ad:90:
2c:b3:a3:ca:c5:95:b4:fa:cf:8f:7e:b6:8e:95:ae:
d5:a7:6e:ef:59:40:b0:e9:35:41:b6:32:f1:cc:e1:
16:a1:d2:77:0f:e1:aa:c4:e7:fc:01:75:b0:1e:ef:
c3:7c:c7:fa:bc:a5:0d:44:0e:80:d1:d7:9c:9e:45:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:5E:D0:AC:26:F6:6B:99:DD:4E:C9:3E:BE:0A:BF:F7:F9:BF:20
X509v3 Authority Key Identifier:
keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8c:54:ef:b9:cf:c2:03:44:89:e7:d7:2e:f8:d2:fd:71:ab:
5f:49:6c:ea:f3:6a:0f:9a:3c:4d:f0:7c:3f:a9:e8:ff:b8:90:
e1:3a:c5:40:59:e2:98:af:7b:43:7c:bf:6d:87:73:ae:58:f2:
f8:26:63:5d:27:b8:98:93:c9:71:45:45:b7:1d:9b:85:1e:ad:
75:aa:45:19:57:9a:9f:d5:58:a7:07:23:21:af:7a:45:ce:3f:
01:4f:67:a5:6b:9a:88:f4:5e:ed:06:6c:42:a8:5e:1c:c6:4d:
31:2c:85:d8:20:79:5c:ed:18:99:0b:9b:fa:ee:b8:99:19:70:
80:a4:03:25:06:59:eb:47:59:7c:ab:fd:6b:d2:9b:72:74:8a:
ad:a8:2d:74:bb:c1:bd:ba:e0:29:36:e3:be:c6:b0:8d:34:22:
0c:36:e3:aa:62:8c:6c:da:d5:86:2b:56:e4:12:30:4e:1a:fb:
d4:c6:f9:15:81:93:99:5d:7e:ed:9c:04:08:3e:c2:63:04:d3:
82:2a:67:33:98:30:35:07:7c:dc:c1:04:d1:cc:0a:63:28:22:
43:ec:b5:72:25:65:2b:9a:b0:54:37:68:61:0e:e8:de:df:08:
0c:65:30:68:7e:44:29:b4:c3:56:fa:c5:21:45:ba:32:a2:46:
b5:65:62:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2gJPQdx4NNXpItNqRm8w5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTdlZDA4YjhlOWU4ZWVmNWY4M2UzY2NiMjY3NDVmOGIz
ODg1ZTcwHhcNMjUwOTExMDIwMDIwWhcNMjUwOTEyMDIwMDIwWjAzMTEwLwYDVQQD
Eyg0OGEzNWVkMGFjMjZmNjZiOTlkZDRlYzkzZWJlMGFiZmY3ZjliZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vvqW3Ayvnj0LAWDvxDct8VK4u/S
TBSZvuN5Nxa26lkE+zW0/CGYqR2W3bxp7fVqDi2jG9CfjQ1qCL4BtMbGKEXFapQF
KZbyahBYuRJ+C/o2rBaKnr/oVwdb1hZOR1No3zV8jsM4tu0T7ZeGiKddZrKf+bJ/
Z2pBB/Gd09c2da415Wk3lDN2Vt0b89lU/6iAg9qn0j8wdELf3bTyAzg0upaBpiTP
TT4LUWZzCjki8mlgwg5u7X25sh79D35L7+SfrZAss6PKxZW0+s+PfraOla7Vp27v
WUCw6TVBtjLxzOEWodJ3D+GqxOf8AXWwHu/DfMf6vKUNRA6A0decnkXu3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEijXtCsJvZrmd1OyT6+Cr/3+b8gMB8GA1UdIwQY
MBaAFLqn7Qi46eju9fg+PMsmdF+LOIXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjct
OGE5NmYwM2JjNjE3LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjctOGE5NmYwM2JjNjE3
LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIxU77nP
wgNEiefXLvjS/XGrX0ls6vNqD5o8TfB8P6no/7iQ4TrFQFnimK97Q3y/bYdzrljy
+CZjXSe4mJPJcUVFtx2bhR6tdapFGVean9VYpwcjIa96Rc4/AU9npWuaiPRe7QZs
QqheHMZNMSyF2CB5XO0YmQub+u64mRlwgKQDJQZZ60dZfKv9a9KbcnSKragtdLvB
vbrgKTbjvsawjTQiDDbjqmKMbNrVhitW5BIwThr71Mb5FYGTmV1+7ZwECD7CYwTT
gipnM5gwNQd83MEE0cwKYygiQ+y1ciVlK5qwVDdoYQ7o3t8IDGUwaH5EKbTDVvrF
IUW6MqJGtWViBA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 04:16:27 2025 by rpki-client