Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
File: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft (raw, json)
Hash identifier: rrY28b6xe1Kvj+F2MmzjoB6C18VJRhucqpXox+ODnLs=
Subject key identifier: 16:72:A7:35:66:45:A2:35:30:80:AB:CA:78:55:DE:F7:B3:FA:E7:DB
Authority key identifier: D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E
Certificate issuer: /CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
Certificate serial: 019A2A44016A6783FB42EB5DD770554917A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
Manifest number: 1022
Signing time: Tue 28 Oct 2025 10:01:31 +0000
Manifest this update: Tue 28 Oct 2025 10:01:31 +0000
Manifest next update: Wed 29 Oct 2025 10:01:31 +0000
Files and hashes: 1: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl (hash: /e/Hm/UTP8O9aQEiXJUVSc0PveMe9BHqsG4veI/CNzM=)
2: _wOAzM_uG9ZKvF1XTUYbhv67nVM.roa (hash: YsJJfaahevvQpOkAYhPhhrTQuZpLLWZxUc8rH3J04no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:01:6a:67:83:fb:42:eb:5d:d7:70:55:49:17:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
Validity
Not Before: Oct 28 10:01:31 2025 GMT
Not After : Oct 29 10:01:31 2025 GMT
Subject: CN=1672a7356645a2353080abca7855def7b3fae7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ff:a1:f2:fa:f3:16:d7:52:b6:ca:bf:64:b3:
ea:be:08:23:bf:63:b2:17:88:3b:20:d4:d3:25:b5:
75:dd:39:b0:8f:da:73:a8:5d:94:30:c3:47:7e:be:
ae:9a:d3:8e:dd:c0:73:b7:bd:ff:c3:8a:6a:3a:5e:
ef:a8:03:30:ae:57:c2:00:d7:4c:50:c0:a1:75:c8:
c9:bd:2e:13:e7:b6:9c:e3:0a:b1:9f:9b:3d:a7:7a:
70:f5:ed:fa:a3:cd:d3:88:2d:29:07:7f:a6:8f:e0:
0a:07:4f:ca:0e:ad:fc:60:aa:68:83:1b:62:a7:49:
96:90:d2:e7:39:b6:78:4a:84:45:e6:6c:78:d8:40:
9f:7f:39:02:a9:df:2a:8d:9f:ee:1c:b8:3b:f3:99:
6c:7f:3f:5d:c5:b0:f6:50:dd:ab:4e:b4:3d:27:70:
b6:df:68:36:0a:3d:95:d0:47:be:3a:db:9b:38:9e:
38:92:5d:d8:b0:26:36:f6:3e:30:e2:c5:f2:9d:23:
15:e8:28:f8:65:2c:70:4b:6c:3d:2d:6e:dc:a8:67:
8c:09:50:56:bd:b6:8c:a3:99:27:e0:88:35:a0:0a:
d4:e7:93:dc:4c:92:14:88:02:b1:ae:c0:8e:27:c9:
b3:19:46:1f:f9:94:e7:35:fd:c3:bd:f1:d6:48:f6:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:72:A7:35:66:45:A2:35:30:80:AB:CA:78:55:DE:F7:B3:FA:E7:DB
X509v3 Authority Key Identifier:
keyid:D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:80:19:a6:94:80:92:11:4f:9d:cc:9a:27:d3:d1:c9:f6:da:
a7:4e:dc:4d:8c:f7:4d:33:50:37:04:f9:68:ba:c0:f2:97:04:
0b:6a:f7:12:4b:ac:ef:db:22:0c:a2:c4:37:24:64:df:85:b2:
be:7a:98:f1:f2:2d:d8:94:21:49:d1:64:1f:6b:2e:bb:22:c7:
77:be:a5:f1:98:34:75:2b:c2:2e:ce:23:37:b4:b2:a6:65:ca:
e7:ac:a1:47:50:48:9f:d8:74:6e:0a:ed:c0:bf:8a:77:83:78:
c1:c8:96:bb:bd:8c:03:db:b8:e5:15:a8:5a:4e:c3:95:f9:0f:
fe:8a:71:fc:c3:cf:58:17:00:45:89:56:20:c1:36:62:f1:cd:
80:96:41:47:5e:9a:ce:09:fe:5a:8a:a4:a3:69:8e:09:94:c6:
6f:91:cc:fc:a4:6a:2e:98:66:c1:99:83:de:8c:c7:79:ba:a9:
3e:69:be:f1:74:86:ea:47:d8:07:a6:8f:e7:bf:26:5c:fa:01:
47:16:f4:27:54:51:f3:d7:a8:ec:8a:9a:9b:2a:13:7c:da:9a:
01:c8:6f:e0:a6:07:ac:1a:ee:8f:83:e0:f7:ed:b6:a6:b0:ec:
fd:43:e4:97:75:14:08:2c:48:30:68:8c:f7:00:01:f7:a3:70:
d5:d2:76:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqRAFqZ4P7Qutd13BVSRenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDg2ZjdmZTRlYjZkOTQ5YjgwMDdiNGU0MTk4Y2UxYzg3
ODMwMmUwHhcNMjUxMDI4MTAwMTMxWhcNMjUxMDI5MTAwMTMxWjAzMTEwLwYDVQQD
EygxNjcyYTczNTY2NDVhMjM1MzA4MGFiY2E3ODU1ZGVmN2IzZmFlN2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP+h8vrzFtdStsq/ZLPqvggjv2Oy
F4g7INTTJbV13Tmwj9pzqF2UMMNHfr6umtOO3cBzt73/w4pqOl7vqAMwrlfCANdM
UMChdcjJvS4T57ac4wqxn5s9p3pw9e36o83TiC0pB3+mj+AKB0/KDq38YKpogxti
p0mWkNLnObZ4SoRF5mx42ECffzkCqd8qjZ/uHLg785lsfz9dxbD2UN2rTrQ9J3C2
32g2Cj2V0Ee+OtubOJ44kl3YsCY29j4w4sXynSMV6Cj4ZSxwS2w9LW7cqGeMCVBW
vbaMo5kn4Ig1oArU55PcTJIUiAKxrsCOJ8mzGUYf+ZTnNf3DvfHWSPbucwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZypzVmRaI1MICrynhV3vez+ufbMB8GA1UdIwQY
MBaAFNlIb3/k622Um4AHtOQZjOHIeDAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQyZDItNjFkMi00MzRkLThlNWIt
ODg2YzQxNmI5MDUxLzEvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kMDQyZDItNjFkMi00MzRkLThlNWItODg2YzQxNmI5MDUx
LzEvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYAZppSA
khFPncyaJ9PRyfbap07cTYz3TTNQNwT5aLrA8pcEC2r3Ekus79siDKLENyRk34Wy
vnqY8fIt2JQhSdFkH2suuyLHd76l8Zg0dSvCLs4jN7SypmXK56yhR1BIn9h0bgrt
wL+Kd4N4wciWu72MA9u45RWoWk7DlfkP/opx/MPPWBcARYlWIME2YvHNgJZBR16a
zgn+Woqko2mOCZTGb5HM/KRqLphmwZmD3ozHebqpPmm+8XSG6kfYB6aP578mXPoB
Rxb0J1RR89eo7IqamyoTfNqaAchv4KYHrBruj4Pg9+22prDs/UPkl3UUCCxIMGiM
9wAB96Nw1dJ2Eg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 18:06:39 2025 by rpki-client