Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: OMgw1qiH9osbqdmR7+ZmSRo2MPJCBranPhOlQts2KlE=
Subject key identifier: 6E:E8:56:34:74:71:5A:22:B6:AF:0A:67:93:D6:16:3F:59:E0:C2:B8
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 019A56096D87732208917182887B37C6F3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 0336
Signing time: Wed 05 Nov 2025 22:00:49 +0000
Manifest this update: Wed 05 Nov 2025 22:00:49 +0000
Manifest next update: Thu 06 Nov 2025 22:00:49 +0000
Files and hashes: 1: MJaKjYCmx7hqbl_Sgp0HlxFEPTo.roa (hash: 7qpw/goTRYdFqZs/4SurZemQFQCz3pPQoJv09aj5YOE=)
2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: uHHfVBt8mI/jRCv2L6impKiqELPv4FEJiDrI0ttvic8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:09:6d:87:73:22:08:91:71:82:88:7b:37:c6:f3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Nov 5 22:00:49 2025 GMT
Not After : Nov 6 22:00:49 2025 GMT
Subject: CN=6ee8563474715a22b6af0a6793d6163f59e0c2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:c8:18:4c:0a:3b:20:c0:90:5b:eb:c7:96:
61:6a:ad:63:e0:de:01:17:00:1f:25:e0:ff:b1:cd:
fc:0e:7e:8d:8c:04:78:51:37:a0:45:d5:ee:3e:c8:
e3:4a:33:de:44:fe:79:6f:9d:33:6e:86:a9:98:a2:
44:ca:04:f7:7b:21:cf:1e:59:4a:56:78:bb:7c:e6:
e9:2f:46:77:4e:3b:d8:0a:df:d3:ea:e7:79:85:d0:
cd:07:22:cd:e7:00:51:a0:b7:e1:ff:6c:77:52:9b:
5b:34:16:69:da:4e:61:de:7e:24:f9:6d:4d:55:73:
fc:90:02:dc:50:c8:0f:82:d8:db:63:61:5b:09:f9:
eb:96:b6:67:0a:bc:76:cb:55:b4:85:b7:45:24:6c:
28:10:53:f0:44:ad:63:92:ba:25:9a:44:7f:f5:95:
ee:4e:ed:09:a7:f0:14:41:90:f6:29:53:34:1f:39:
b1:1b:b9:70:d9:56:8f:0d:c0:64:ce:22:65:8b:88:
b5:5d:48:54:ee:5e:ac:04:42:96:15:34:c0:89:14:
f8:5f:30:04:3e:f4:72:97:ca:3c:a3:8e:24:e6:63:
4e:a9:2a:2a:e3:d5:3d:9a:ac:80:18:02:84:e4:b8:
d5:4c:c0:37:3e:16:6f:16:80:00:4a:63:40:f7:e3:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:56:34:74:71:5A:22:B6:AF:0A:67:93:D6:16:3F:59:E0:C2:B8
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6e:47:08:de:72:37:5f:a0:70:f7:03:7b:6d:a7:ca:66:a9:
2b:45:e6:9e:80:78:66:2d:d3:e5:00:d6:13:f3:27:ac:70:bf:
7c:cd:3e:90:59:71:ea:4a:64:fe:bc:45:75:14:df:c1:d9:0b:
a3:18:6c:e8:90:27:2a:95:5f:4f:fd:87:71:b2:fa:c3:79:52:
58:65:37:b7:75:d3:fd:52:06:73:f8:cf:e4:f7:b2:e1:0a:90:
21:ff:69:67:35:fa:b7:f8:84:03:3e:f9:7d:a7:db:6f:b1:d9:
40:e3:2a:39:27:e6:6a:a7:09:57:7a:59:cc:ac:9e:02:f2:3b:
7f:b8:e3:95:35:33:aa:86:99:2c:90:7f:93:2a:e0:79:7f:f2:
62:dc:16:4a:f1:8a:81:74:db:1c:ca:17:60:97:db:45:2f:de:
de:cc:87:45:86:80:1f:69:99:83:83:f7:80:68:6c:68:ee:db:
d0:8d:fd:c9:29:ac:e9:9d:1b:07:05:bc:13:96:96:36:be:72:
3f:85:95:db:34:2e:6e:20:2a:3a:1c:52:8b:c9:43:00:30:0f:
63:b5:7e:be:41:ae:2e:ae:42:a4:90:3f:aa:7a:43:c8:16:c8:
34:a1:46:34:66:d5:af:7c:b8:51:1e:2b:5f:32:a6:02:55:77:
4f:8f:3b:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpWCW2HcyIIkXGCiHs3xvO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNGY4NzlmM2Y5N2FkOGNkNzMxOTNkODA2OWU0OWIwMWI2
YmFkZGQwHhcNMjUxMTA1MjIwMDQ5WhcNMjUxMTA2MjIwMDQ5WjAzMTEwLwYDVQQD
Eyg2ZWU4NTYzNDc0NzE1YTIyYjZhZjBhNjc5M2Q2MTYzZjU5ZTBjMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGrIGEwKOyDAkFvrx5Zhaq1j4N4B
FwAfJeD/sc38Dn6NjAR4UTegRdXuPsjjSjPeRP55b50zboapmKJEygT3eyHPHllK
Vni7fObpL0Z3TjvYCt/T6ud5hdDNByLN5wBRoLfh/2x3UptbNBZp2k5h3n4k+W1N
VXP8kALcUMgPgtjbY2FbCfnrlrZnCrx2y1W0hbdFJGwoEFPwRK1jkrolmkR/9ZXu
Tu0Jp/AUQZD2KVM0HzmxG7lw2VaPDcBkziJli4i1XUhU7l6sBEKWFTTAiRT4XzAE
PvRyl8o8o44k5mNOqSoq49U9mqyAGAKE5LjVTMA3PhZvFoAASmNA9+M/KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7oVjR0cVoitq8KZ5PWFj9Z4MK4MB8GA1UdIwQY
MBaAFK1Ph58/l62M1zGT2AaeSbAba63dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQt
OTRlZjE5NzA3MzgyLzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQtOTRlZjE5NzA3Mzgy
LzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGW5HCN5y
N1+gcPcDe22nymapK0XmnoB4Zi3T5QDWE/MnrHC/fM0+kFlx6kpk/rxFdRTfwdkL
oxhs6JAnKpVfT/2HcbL6w3lSWGU3t3XT/VIGc/jP5Pey4QqQIf9pZzX6t/iEAz75
fafbb7HZQOMqOSfmaqcJV3pZzKyeAvI7f7jjlTUzqoaZLJB/kyrgeX/yYtwWSvGK
gXTbHMoXYJfbRS/e3syHRYaAH2mZg4P3gGhsaO7b0I39ySms6Z0bBwW8E5aWNr5y
P4WV2zQubiAqOhxSi8lDADAPY7V+vkGuLq5CpJA/qnpDyBbINKFGNGbVr3y4UR4r
XzKmAlV3T487vw==
-----END CERTIFICATE-----
Generated at Thu Nov 6 03:52:53 2025 by rpki-client