Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.mft
File: UuvM2QyKD8Eempj4VmboGDte-mw.mft (raw, json)
Hash identifier: XCyRs//84/Gmr477mBbm/hlTYGol295W/7EBohlrM4c=
Subject key identifier: 18:1D:01:62:42:44:A0:9D:D1:C0:D2:4C:57:1D:60:49:BC:CA:C7:83
Authority key identifier: 52:EB:CC:D9:0C:8A:0F:C1:1E:9A:98:F8:56:66:E8:18:3B:5E:FA:6C
Certificate issuer: /CN=52ebccd90c8a0fc11e9a98f85666e8183b5efa6c
Certificate serial: 019A725C67C76CE95DAA8C2C2BCFA8B78F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuvM2QyKD8Eempj4VmboGDte-mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.mft
Manifest number: AA
Signing time: Tue 11 Nov 2025 10:00:49 +0000
Manifest this update: Tue 11 Nov 2025 10:00:49 +0000
Manifest next update: Wed 12 Nov 2025 10:00:49 +0000
Files and hashes: 1: UuvM2QyKD8Eempj4VmboGDte-mw.crl (hash: VFBiduaTUQIgrVucpeaT5MmlJHa0ssevggQSbUf1YjI=)
2: sVTCT8sEkXxJuhkBNIhtjsKN-fc.roa (hash: 1LlLgeWONb0LHd1NES4d+bEdwCY//jkVZ5AxYbJmCGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuvM2QyKD8Eempj4VmboGDte-mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:67:c7:6c:e9:5d:aa:8c:2c:2b:cf:a8:b7:8f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ebccd90c8a0fc11e9a98f85666e8183b5efa6c
Validity
Not Before: Nov 11 10:00:49 2025 GMT
Not After : Nov 12 10:00:49 2025 GMT
Subject: CN=181d01624244a09dd1c0d24c571d6049bccac783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:cd:2e:94:86:68:f6:7d:09:30:7b:73:84:
0c:16:fd:af:ec:1e:0d:00:76:5d:32:09:c1:49:16:
83:5a:17:d3:7d:fb:8b:9b:39:13:9f:c4:36:1e:6d:
90:29:a1:30:fa:df:84:8f:1b:7a:d1:f5:25:9e:d6:
1f:85:45:70:28:ac:f9:70:db:bc:de:97:56:62:cf:
69:27:11:c3:56:35:93:4d:0e:68:1d:b1:f9:6b:d3:
59:c2:65:a3:e6:f4:ff:1c:1c:2a:8d:d8:69:24:3a:
90:4b:92:ea:8a:ab:ad:b7:f1:75:d8:44:27:5f:33:
47:ea:ba:c7:a8:72:bb:6d:10:00:25:8a:5a:14:69:
66:f7:f8:f3:e1:74:f6:63:f4:11:4e:11:bb:ba:ef:
ba:2e:1a:fe:9a:dc:1e:f2:a9:13:d9:60:90:f4:12:
a7:b6:ac:3d:4f:ea:46:86:57:19:00:39:ca:8b:0b:
d7:eb:45:5c:1d:78:2e:b1:8b:2a:89:51:bb:a3:7e:
43:66:25:c2:d4:28:a1:c5:54:5d:d6:e7:1d:17:66:
cd:6b:d9:c6:84:8e:8d:89:1e:73:c2:c1:39:3a:26:
75:f2:75:b9:ec:5b:d8:63:27:85:dc:86:d6:e9:71:
a8:33:58:44:c3:68:22:00:f2:26:27:38:f9:a1:11:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1D:01:62:42:44:A0:9D:D1:C0:D2:4C:57:1D:60:49:BC:CA:C7:83
X509v3 Authority Key Identifier:
keyid:52:EB:CC:D9:0C:8A:0F:C1:1E:9A:98:F8:56:66:E8:18:3B:5E:FA:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuvM2QyKD8Eempj4VmboGDte-mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8d:fe:5c:5f:b5:5f:5f:db:ec:81:36:54:e5:2a:6c:c2:46:
12:69:e6:71:33:c1:e3:dd:78:7d:2a:8a:b8:73:97:3f:fe:4c:
4e:8e:81:70:25:19:2d:7b:16:82:c2:f6:e0:04:51:67:eb:6a:
5a:ca:6e:38:4e:ee:62:b6:1a:67:87:46:b8:40:d3:c1:c4:33:
6f:a7:a6:82:56:e1:42:76:d5:49:4d:f6:f3:7e:f3:e1:fa:dd:
e5:6a:36:61:e0:7f:41:40:12:66:88:dc:87:60:24:eb:d5:91:
89:8a:ea:10:f6:d8:01:b5:1a:b4:fe:94:d0:86:2c:07:64:07:
65:39:67:e6:53:d1:b7:ba:7b:df:87:9e:78:17:59:53:83:31:
db:42:ca:e6:8f:b7:77:67:78:e7:26:0a:86:c9:95:4f:c5:07:
c3:02:f5:3d:67:02:4f:ed:36:cc:14:d4:73:67:b1:8d:ac:94:
3d:e5:3b:62:50:41:5a:08:eb:fe:50:a8:08:e8:43:60:dc:b7:
e3:dc:c5:91:1c:6c:e4:0c:06:3f:86:c5:eb:e7:79:bc:ed:1f:
b6:cd:48:ea:37:e7:f9:22:98:63:6a:9e:45:77:84:f5:0a:c3:
07:68:6d:48:de:8c:f2:72:37:f0:aa:0b:63:b0:ae:64:7f:5d:
34:57:0c:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXGfHbOldqowsK8+ot48qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZWJjY2Q5MGM4YTBmYzExZTlhOThmODU2NjZlODE4M2I1
ZWZhNmMwHhcNMjUxMTExMTAwMDQ5WhcNMjUxMTEyMTAwMDQ5WjAzMTEwLwYDVQQD
EygxODFkMDE2MjQyNDRhMDlkZDFjMGQyNGM1NzFkNjA0OWJjY2FjNzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSTNLpSGaPZ9CTB7c4QMFv2v7B4N
AHZdMgnBSRaDWhfTffuLmzkTn8Q2Hm2QKaEw+t+Ejxt60fUlntYfhUVwKKz5cNu8
3pdWYs9pJxHDVjWTTQ5oHbH5a9NZwmWj5vT/HBwqjdhpJDqQS5Lqiqutt/F12EQn
XzNH6rrHqHK7bRAAJYpaFGlm9/jz4XT2Y/QRThG7uu+6Lhr+mtwe8qkT2WCQ9BKn
tqw9T+pGhlcZADnKiwvX60VcHXgusYsqiVG7o35DZiXC1CihxVRd1ucdF2bNa9nG
hI6NiR5zwsE5OiZ18nW57FvYYyeF3IbW6XGoM1hEw2giAPImJzj5oRGmVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgdAWJCRKCd0cDSTFcdYEm8yseDMB8GA1UdIwQY
MBaAFFLrzNkMig/BHpqY+FZm6Bg7XvpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXV2TTJReUtEOEVlbXBqNFZtYm9HRHRlLW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xY2M4NWEtYWY3Ny00NWVkLWI2Y2It
ZDk3YzhiNTZhZTI1LzEvVXV2TTJReUtEOEVlbXBqNFZtYm9HRHRlLW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xY2M4NWEtYWY3Ny00NWVkLWI2Y2ItZDk3YzhiNTZhZTI1
LzEvVXV2TTJReUtEOEVlbXBqNFZtYm9HRHRlLW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV43+XF+1
X1/b7IE2VOUqbMJGEmnmcTPB4914fSqKuHOXP/5MTo6BcCUZLXsWgsL24ARRZ+tq
WspuOE7uYrYaZ4dGuEDTwcQzb6emglbhQnbVSU32837z4frd5Wo2YeB/QUASZojc
h2Ak69WRiYrqEPbYAbUatP6U0IYsB2QHZTln5lPRt7p734eeeBdZU4Mx20LK5o+3
d2d45yYKhsmVT8UHwwL1PWcCT+02zBTUc2exjayUPeU7YlBBWgjr/lCoCOhDYNy3
49zFkRxs5AwGP4bF6+d5vO0fts1I6jfn+SKYY2qeRXeE9QrDB2htSN6M8nI38KoL
Y7CuZH9dNFcMdg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:52:13 2025 by rpki-client