Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
File: Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft (raw, json)
Hash identifier: UNxkVduNZVtadwniwnRZPMdFWYpLGMPM4E3QMvDvEpE=
Subject key identifier: AB:46:47:14:FB:2A:DE:6F:6F:D6:D7:96:AD:CC:3F:59:B7:15:25:7B
Authority key identifier: 52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04
Certificate issuer: /CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
Certificate serial: 019A72CA5AF2964DA1D29FEE6F6E7C8DFB38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 12:00:55 +0000
Manifest this update: Tue 11 Nov 2025 12:00:55 +0000
Manifest next update: Wed 12 Nov 2025 12:00:55 +0000
Files and hashes: 1: 9JadLiuorP5WBtAK4ahko9XzHjQ.roa (hash: qnkmqt5DjArPix3ByqvfUIsWSJTvM73SLxqKVoYiGls=)
2: Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl (hash: 6VlBtDLbQO97xyT1cZV5HbbevDCfycY8za+wm+Wu3LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5a:f2:96:4d:a1:d2:9f:ee:6f:6e:7c:8d:fb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
Validity
Not Before: Nov 11 12:00:55 2025 GMT
Not After : Nov 12 12:00:55 2025 GMT
Subject: CN=ab464714fb2ade6f6fd6d796adcc3f59b715257b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:57:88:c5:82:bd:2a:50:d7:5c:5a:df:5f:f9:
c3:72:71:f3:fe:d2:cd:51:26:14:5c:b0:05:f9:c7:
c4:01:05:5c:25:5a:4d:9c:44:27:a9:f8:d3:0b:5c:
41:3d:b8:98:c5:0e:d7:2a:96:32:7e:0e:27:a7:10:
ac:0d:d1:c0:6e:3d:49:9c:56:fc:63:ac:1e:00:72:
cd:e7:48:f7:4e:ff:6f:e1:05:53:60:13:7c:1a:76:
c6:56:92:3f:38:55:20:ad:1f:c4:3a:7f:04:07:1b:
85:08:5f:0e:3d:48:a0:44:a9:d6:16:ac:e9:f2:07:
0b:6b:c7:36:af:b3:23:9b:c1:1c:1b:01:cf:38:bb:
39:a3:63:74:ce:80:1d:3b:64:22:e8:09:a2:2c:42:
fa:ba:d9:b3:f9:32:41:03:d0:75:b5:a9:93:8b:07:
ec:e1:47:cc:1c:0c:c7:bf:f2:88:dc:ec:08:e7:94:
78:fc:4e:51:70:e7:e1:1c:e3:ac:d1:1a:81:6d:50:
3b:fc:77:6a:77:0e:df:64:3b:ce:3a:ba:69:39:28:
43:96:1f:a2:d8:a2:51:61:ef:67:89:2f:6f:92:a2:
63:f1:28:90:3f:1a:dc:cd:92:63:3d:fb:4d:3b:7f:
b0:78:37:e3:e9:02:11:ce:ff:62:fe:ca:2a:72:90:
49:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:46:47:14:FB:2A:DE:6F:6F:D6:D7:96:AD:CC:3F:59:B7:15:25:7B
X509v3 Authority Key Identifier:
keyid:52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3e:62:15:5b:52:32:da:5e:df:8d:be:6f:70:07:41:37:71:
69:46:15:78:92:4d:ad:25:b8:d9:d4:c0:78:41:00:15:c2:a7:
b0:ae:1f:ce:b4:46:9b:84:59:3a:05:af:9a:67:f5:ea:6d:e2:
41:42:9f:42:a6:bc:33:34:c7:2c:a6:6a:c1:dc:71:c8:76:17:
ef:0f:5f:3a:e0:31:84:7e:95:be:ae:e9:e3:60:e1:0c:74:aa:
18:65:15:35:d5:ec:62:18:0c:60:b1:45:eb:c9:f9:48:3e:2d:
c3:81:f9:58:8f:43:08:33:af:10:6f:fc:ac:d9:f5:6b:04:71:
aa:ac:b5:c8:92:af:19:d1:fa:f0:e6:7b:56:ec:5b:bf:4f:1e:
90:61:90:08:21:5b:f2:86:fc:0c:18:63:d4:a1:8c:c8:37:9e:
97:e1:c9:4c:71:44:ce:0a:52:1a:3d:7e:60:aa:0e:7a:1e:f8:
95:3f:2d:7a:d6:b9:ec:e4:fd:e1:11:49:48:3b:b7:cb:7b:8b:
be:7c:d3:16:dd:0f:13:72:eb:c8:ed:0e:1c:10:09:9f:60:7d:
d5:e9:38:78:53:c1:58:ab:dd:df:98:96:27:d5:0a:88:ba:18:
18:89:9f:74:86:a0:8b:84:ec:9d:39:19:e5:03:ab:9e:be:94:
8b:42:66:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyylrylk2h0p/ub258jfs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODliNmE4YmZhYWM1YzhjMDlhNDhjMDQyODE5ZGZjNWVh
NDUxMDQwHhcNMjUxMTExMTIwMDU1WhcNMjUxMTEyMTIwMDU1WjAzMTEwLwYDVQQD
EyhhYjQ2NDcxNGZiMmFkZTZmNmZkNmQ3OTZhZGNjM2Y1OWI3MTUyNTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FeIxYK9KlDXXFrfX/nDcnHz/tLN
USYUXLAF+cfEAQVcJVpNnEQnqfjTC1xBPbiYxQ7XKpYyfg4npxCsDdHAbj1JnFb8
Y6weAHLN50j3Tv9v4QVTYBN8GnbGVpI/OFUgrR/EOn8EBxuFCF8OPUigRKnWFqzp
8gcLa8c2r7Mjm8EcGwHPOLs5o2N0zoAdO2Qi6AmiLEL6utmz+TJBA9B1tamTiwfs
4UfMHAzHv/KI3OwI55R4/E5RcOfhHOOs0RqBbVA7/Hdqdw7fZDvOOrppOShDlh+i
2KJRYe9niS9vkqJj8SiQPxrczZJjPftNO3+weDfj6QIRzv9i/soqcpBJJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtGRxT7Kt5vb9bXlq3MP1m3FSV7MB8GA1UdIwQY
MBaAFFKJtqi/qsXIwJpIwEKBnfxepFEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9tMnFMLXF4Y2pBbWtqQVFvR2RfRjZrVVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iNjZjMmMtM2QwMS00YmRiLThjNGMt
YjJkYTk3N2U0MDdkLzEvVW9tMnFMLXF4Y2pBbWtqQVFvR2RfRjZrVVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iNjZjMmMtM2QwMS00YmRiLThjNGMtYjJkYTk3N2U0MDdk
LzEvVW9tMnFMLXF4Y2pBbWtqQVFvR2RfRjZrVVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhj5iFVtS
Mtpe342+b3AHQTdxaUYVeJJNrSW42dTAeEEAFcKnsK4fzrRGm4RZOgWvmmf16m3i
QUKfQqa8MzTHLKZqwdxxyHYX7w9fOuAxhH6Vvq7p42DhDHSqGGUVNdXsYhgMYLFF
68n5SD4tw4H5WI9DCDOvEG/8rNn1awRxqqy1yJKvGdH68OZ7Vuxbv08ekGGQCCFb
8ob8DBhj1KGMyDeel+HJTHFEzgpSGj1+YKoOeh74lT8teta57OT94RFJSDu3y3uL
vnzTFt0PE3LryO0OHBAJn2B91ek4eFPBWKvd35iWJ9UKiLoYGImfdIagi4TsnTkZ
5QOrnr6Ui0JmWQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:21:53 2025 by rpki-client