Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
File: uByWUlV5h6KgWAzFxl42RrAdo7s.mft (raw, json)
Hash identifier: BmLdemA8YC77M/iibbN+nVcXFLAMALtBHfImhCvjzPE=
Subject key identifier: D1:16:41:EA:03:CD:1F:79:F7:F5:5A:31:A7:4F:C5:2F:49:4F:95:D6
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial: 019A71B8888602B1F8050353BF03672C4D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
Manifest number: 0E3E
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: 1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa (hash: bNeeSn2K9PhEeXEHT+JPXfqKFFY067qwi6XfweStm4U=)
2: uByWUlV5h6KgWAzFxl42RrAdo7s.crl (hash: nxZuB/hcrOB5Qnj2WZTFlWDYUNLgnq6B/NdXg3TAvVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:88:86:02:b1:f8:05:03:53:bf:03:67:2c:4d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=d11641ea03cd1f79f7f55a31a74fc52f494f95d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:6b:23:8f:93:33:da:73:4a:b3:9c:f7:39:
3e:05:83:0b:71:4c:9a:bb:9f:9f:c9:53:cf:85:1f:
8b:a1:60:c2:d9:c9:c2:f3:da:1b:72:78:dc:f9:21:
49:0b:1e:e8:24:09:1d:6f:bb:8e:74:bf:f8:1e:f3:
52:c5:81:6d:6b:59:cb:a9:9c:9f:dc:ba:d8:c9:77:
d5:fc:e2:ab:df:ba:bf:fe:d6:bd:1f:21:f4:8e:a4:
cf:cc:08:2f:f6:54:49:53:e9:2f:bd:cb:d9:77:c2:
04:54:09:ee:c2:e1:75:f0:c2:15:05:d3:6e:e0:60:
2c:46:ec:65:5c:18:7d:ae:24:dc:cf:0a:e4:41:f4:
9e:1b:bb:42:88:e7:f8:ca:08:8d:bb:52:fb:52:a5:
59:f2:d7:39:44:fd:c5:c3:24:d4:72:e5:79:37:fa:
49:64:94:fb:ba:d2:ad:79:9a:f5:48:1e:36:03:1e:
c8:e9:6d:5c:13:7a:9a:01:b0:99:89:21:26:59:6e:
9a:3f:e3:2b:55:63:35:a7:cb:83:23:5c:55:e4:e1:
95:12:12:1d:c8:95:b7:86:a5:ab:2f:f7:eb:6e:b7:
e7:4f:96:29:d0:6f:33:fa:86:2f:37:b7:7b:22:0a:
2d:1e:bf:da:f2:70:f7:54:44:41:2d:3d:a1:ce:bd:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:41:EA:03:CD:1F:79:F7:F5:5A:31:A7:4F:C5:2F:49:4F:95:D6
X509v3 Authority Key Identifier:
keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:51:17:d5:3d:3c:a3:66:a3:66:1b:bd:7e:79:92:7e:15:58:
e6:0a:3c:06:f0:a1:ca:d1:04:7f:f8:b0:b3:72:cb:7a:5b:ae:
31:25:75:6e:73:cd:e1:3f:c8:49:88:b3:85:88:2c:c2:0b:e6:
4a:b5:11:a8:37:9a:9d:49:99:87:cc:7e:c4:f5:d3:18:f5:c6:
60:73:f0:02:15:4d:ea:b9:48:6d:b8:6e:f8:bf:c0:06:2b:3a:
18:51:77:dd:ab:ca:71:c7:66:93:ef:37:54:47:81:0e:43:32:
fc:f2:9a:51:81:6f:00:25:54:41:ff:17:3c:7e:b3:bf:8d:5e:
3b:b1:47:d6:d2:79:cd:a3:9d:9e:a5:30:9f:0c:37:51:b5:0a:
77:90:c1:87:ad:2a:56:42:bf:05:83:34:2a:0e:a6:e2:1c:8a:
81:94:0f:fe:70:b4:84:5f:c7:bb:7b:55:41:07:6d:19:5c:34:
d7:3c:52:5f:74:ed:19:2a:df:d7:61:27:35:10:90:7e:78:c5:
e9:38:51:1c:56:43:8d:57:47:b9:63:51:f0:ef:2a:ac:fa:b6:
4d:08:44:cd:7b:06:f8:4e:14:78:1f:98:64:3b:57:21:2e:d9:
be:70:ce:9c:31:20:7b:08:a1:34:7f:dd:45:19:a6:e7:9c:17:
e0:e3:34:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuIiGArH4BQNTvwNnLE0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWM5NjUyNTU3OTg3YTJhMDU4MGNjNWM2NWUzNjQ2YjAx
ZGEzYmIwHhcNMjUxMTExMDcwMTUwWhcNMjUxMTEyMDcwMTUwWjAzMTEwLwYDVQQD
EyhkMTE2NDFlYTAzY2QxZjc5ZjdmNTVhMzFhNzRmYzUyZjQ5NGY5NWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKdrI4+TM9pzSrOc9zk+BYMLcUya
u5+fyVPPhR+LoWDC2cnC89obcnjc+SFJCx7oJAkdb7uOdL/4HvNSxYFta1nLqZyf
3LrYyXfV/OKr37q//ta9HyH0jqTPzAgv9lRJU+kvvcvZd8IEVAnuwuF18MIVBdNu
4GAsRuxlXBh9riTczwrkQfSeG7tCiOf4ygiNu1L7UqVZ8tc5RP3FwyTUcuV5N/pJ
ZJT7utKteZr1SB42Ax7I6W1cE3qaAbCZiSEmWW6aP+MrVWM1p8uDI1xV5OGVEhId
yJW3hqWrL/frbrfnT5Yp0G8z+oYvN7d7IgotHr/a8nD3VERBLT2hzr3oowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEWQeoDzR959/VaMadPxS9JT5XWMB8GA1UdIwQY
MBaAFLgcllJVeYeioFgMxcZeNkawHaO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYWIwNTQtZWQ1MC00YWE2LWFjZWUt
ZmEwZDJlNDdlNmYxLzEvdUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hYWIwNTQtZWQ1MC00YWE2LWFjZWUtZmEwZDJlNDdlNmYx
LzEvdUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1EX1T08
o2ajZhu9fnmSfhVY5go8BvChytEEf/iws3LLeluuMSV1bnPN4T/ISYizhYgswgvm
SrURqDeanUmZh8x+xPXTGPXGYHPwAhVN6rlIbbhu+L/ABis6GFF33avKccdmk+83
VEeBDkMy/PKaUYFvACVUQf8XPH6zv41eO7FH1tJ5zaOdnqUwnww3UbUKd5DBh60q
VkK/BYM0Kg6m4hyKgZQP/nC0hF/Hu3tVQQdtGVw01zxSX3TtGSrf12EnNRCQfnjF
6ThRHFZDjVdHuWNR8O8qrPq2TQhEzXsG+E4UeB+YZDtXIS7ZvnDOnDEgewihNH/d
RRmm55wX4OM0iw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:17 2025 by rpki-client