Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
File: Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft (raw, json)
Hash identifier: e0qtCkjC0/61MOUQSIYYf4w5V5BbG0aoIoe6go3Yam0=
Subject key identifier: 05:79:BD:2C:73:C0:8B:84:E7:A8:2A:27:F1:FE:F8:3A:13:42:61:95
Authority key identifier: 52:EC:B0:E8:5D:0B:7F:EE:A4:A8:2A:C9:44:8D:47:C3:EC:0A:F0:53
Certificate issuer: /CN=52ecb0e85d0b7feea4a82ac9448d47c3ec0af053
Certificate serial: 019A70DC2EB49766EEECFF3C7738CC650BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 03:01:09 +0000
Manifest this update: Tue 11 Nov 2025 03:01:09 +0000
Manifest next update: Wed 12 Nov 2025 03:01:09 +0000
Files and hashes: 1: 5Hag6P9QZzNJGQQPElsAvDoZXrY.roa (hash: sbCnjoQN/zwpc81NILJvfLGG8eJWgqQYFOcEqkbBNRk=)
2: Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl (hash: xSaYD90tkfLWEH8V5bgd/2jdgR3KmA06s1ZR5tSdZxE=)
3: lQnsuSPRzwbhpl5HgEOQpZDD34k.roa (hash: IPjYSRDjQRK4ZxgGrRlNzR9WIDEqNLvDqZwGEGyoqM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:2e:b4:97:66:ee:ec:ff:3c:77:38:cc:65:0b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ecb0e85d0b7feea4a82ac9448d47c3ec0af053
Validity
Not Before: Nov 11 03:01:09 2025 GMT
Not After : Nov 12 03:01:09 2025 GMT
Subject: CN=0579bd2c73c08b84e7a82a27f1fef83a13426195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dc:c7:46:c2:c7:a2:7e:42:2e:11:45:6a:6f:
05:19:10:52:da:ce:58:24:31:ca:b3:73:4a:b4:69:
7e:52:7c:0e:03:b5:4d:30:79:0f:db:76:70:8e:cc:
1c:2f:4f:f2:05:9c:8d:1a:26:a4:12:3f:b2:52:c1:
31:95:5d:02:c2:83:94:5c:b6:f3:17:24:5a:7d:7d:
d0:56:0e:5d:37:1c:66:ae:29:68:61:05:85:f7:b9:
33:9e:70:d9:8c:e0:58:2e:63:1e:9f:9f:9f:3b:b3:
67:3c:83:aa:35:d2:9e:7b:79:1c:83:2f:8d:3e:96:
bd:8d:1f:92:ad:4a:f5:47:b8:15:7c:2b:fe:74:33:
22:11:c5:64:e5:f2:88:ca:06:26:c0:bd:07:1c:26:
6d:78:df:64:ca:7b:5f:3c:88:89:f6:ca:43:32:dd:
09:d4:57:c6:15:16:62:56:a9:26:7e:1d:58:83:86:
8a:f3:73:d8:1e:7b:94:70:6a:43:bb:ad:5e:e3:d6:
fe:81:f6:35:ed:c6:b7:c4:a9:9e:59:44:b4:41:80:
05:18:5d:ff:c9:9a:dd:6f:34:6c:6d:6b:41:5b:77:
4b:77:50:bf:da:88:15:7c:7d:e1:c2:77:ed:7c:c4:
73:0f:e1:e5:95:bc:6c:f2:40:b3:a0:df:61:ec:9f:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:79:BD:2C:73:C0:8B:84:E7:A8:2A:27:F1:FE:F8:3A:13:42:61:95
X509v3 Authority Key Identifier:
keyid:52:EC:B0:E8:5D:0B:7F:EE:A4:A8:2A:C9:44:8D:47:C3:EC:0A:F0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:47:9b:7f:3a:e9:50:50:fd:0a:38:32:05:9b:1e:0a:64:b5:
a7:6f:61:fd:9e:d1:6d:ae:2b:c3:e7:60:e9:9e:24:76:54:17:
ce:b8:f9:9e:f2:31:06:d9:09:a2:aa:36:36:d2:01:30:d4:85:
31:19:a5:58:d8:77:6b:7f:5a:02:e9:04:35:92:01:a9:32:e2:
2d:be:f0:20:44:66:e1:df:e6:2f:24:67:55:7b:59:85:d4:9c:
11:86:3b:d3:1c:c7:f7:11:82:e6:e6:37:c3:b4:fb:ea:8d:9a:
a1:d4:bd:eb:ef:40:22:8f:1d:b9:7e:d3:1b:05:23:52:ca:f6:
33:ad:4f:58:34:ba:9c:fb:35:74:79:59:77:d3:bc:59:8d:97:
c6:45:69:b1:71:30:c0:3a:f5:b3:0a:25:e6:25:0d:61:bd:68:
cb:53:f6:4b:3f:c4:6f:89:22:b6:bf:30:93:eb:41:17:ce:b0:
3a:a5:52:2f:e9:4b:89:a7:91:78:ae:77:2c:06:ce:97:8c:40:
59:14:98:82:07:b9:4d:ff:b6:ce:22:98:0e:6d:0f:47:ff:e6:
0b:66:30:ae:2e:bd:16:02:37:b7:91:90:97:1e:9a:3b:de:0e:
dd:86:d3:f4:f8:5b:fa:3c:e8:03:94:5e:01:32:84:bd:d1:f8:
67:29:2f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3C60l2bu7P88dzjMZQu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZWNiMGU4NWQwYjdmZWVhNGE4MmFjOTQ0OGQ0N2MzZWMw
YWYwNTMwHhcNMjUxMTExMDMwMTA5WhcNMjUxMTEyMDMwMTA5WjAzMTEwLwYDVQQD
EygwNTc5YmQyYzczYzA4Yjg0ZTdhODJhMjdmMWZlZjgzYTEzNDI2MTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltzHRsLHon5CLhFFam8FGRBS2s5Y
JDHKs3NKtGl+UnwOA7VNMHkP23ZwjswcL0/yBZyNGiakEj+yUsExlV0CwoOUXLbz
FyRafX3QVg5dNxxmriloYQWF97kznnDZjOBYLmMen5+fO7NnPIOqNdKee3kcgy+N
Ppa9jR+SrUr1R7gVfCv+dDMiEcVk5fKIygYmwL0HHCZteN9kyntfPIiJ9spDMt0J
1FfGFRZiVqkmfh1Yg4aK83PYHnuUcGpDu61e49b+gfY17ca3xKmeWUS0QYAFGF3/
yZrdbzRsbWtBW3dLd1C/2ogVfH3hwnftfMRzD+Hllbxs8kCzoN9h7J83zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAV5vSxzwIuE56gqJ/H++DoTQmGVMB8GA1UdIwQY
MBaAFFLssOhdC3/upKgqyUSNR8PsCvBTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXV5dzZGMExmLTZrcUNySlJJMUh3LXdLOEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kYjNlNTYtZTgzMi00OTFkLWI1MzAt
Y2E0ZjY2YjA5MDY4LzEvVXV5dzZGMExmLTZrcUNySlJJMUh3LXdLOEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kYjNlNTYtZTgzMi00OTFkLWI1MzAtY2E0ZjY2YjA5MDY4
LzEvVXV5dzZGMExmLTZrcUNySlJJMUh3LXdLOEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEebfzrp
UFD9CjgyBZseCmS1p29h/Z7Rba4rw+dg6Z4kdlQXzrj5nvIxBtkJoqo2NtIBMNSF
MRmlWNh3a39aAukENZIBqTLiLb7wIERm4d/mLyRnVXtZhdScEYY70xzH9xGC5uY3
w7T76o2aodS96+9AIo8duX7TGwUjUsr2M61PWDS6nPs1dHlZd9O8WY2XxkVpsXEw
wDr1swol5iUNYb1oy1P2Sz/Eb4kitr8wk+tBF86wOqVSL+lLiaeReK53LAbOl4xA
WRSYgge5Tf+2ziKYDm0PR//mC2Ywri69FgI3t5GQlx6aO94O3YbT9Phb+jzoA5Re
ATKEvdH4Zykv9w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:54 2025 by rpki-client