Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier: 4MCBjT5uaIGFDY7R9OoklctpA3SU9AzBDVTrmORDcAk=
Subject key identifier: 46:D6:F8:C0:19:31:B7:F4:F6:B7:9B:45:BB:6C:49:30:7B:56:99:CA
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 019965B5AA88DAE3F4AB42D87727B6E61731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number: 16A4
Signing time: Sat 20 Sep 2025 06:00:28 +0000
Manifest this update: Sat 20 Sep 2025 06:00:28 +0000
Manifest next update: Sun 21 Sep 2025 06:00:28 +0000
Files and hashes: 1: HvGkzNX-LlaIXMSfIk5S1mOC0oY.roa (hash: cwXFNBAD/M2F0MUB/ov5M8039XefOPt3b2kagm/DMzw=)
2: ZqsDRLhiPpia2P-7RyyhANwTVV4.roa (hash: 0rsjP4AuQ2t0LszFPHOckD8EVFICht07+jDEBI6TOgQ=)
3: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: stGE0Ept3kwcCkUI4krj2hktnkHzRYZs0h1arvyttKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 00:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:b5:aa:88:da:e3:f4:ab:42:d8:77:27:b6:e6:17:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Sep 20 06:00:28 2025 GMT
Not After : Sep 21 06:00:28 2025 GMT
Subject: CN=46d6f8c01931b7f4f6b79b45bb6c49307b5699ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bf:e0:d1:f2:41:5d:9b:7e:ff:94:bc:a5:17:
fe:45:5b:a5:92:f7:30:1e:ac:3e:7a:fb:b0:95:37:
95:c4:1e:9b:ff:f0:a0:d4:91:c5:3f:9e:52:23:78:
68:dd:5e:35:e1:91:25:91:91:ff:6f:e1:d4:67:82:
ca:22:46:19:b1:1d:3e:50:c3:04:dc:e7:1b:93:99:
8d:04:59:fe:e4:c5:d0:a9:de:45:68:2f:6d:52:b8:
61:69:f0:04:ff:84:a3:2d:f3:42:7b:67:32:87:51:
e8:e7:09:92:2c:20:fe:2c:53:e6:01:c3:4c:28:c1:
9b:1a:20:73:6c:0c:e4:49:a5:0e:ea:a6:39:32:3d:
92:e0:71:78:d6:88:ef:2a:fd:89:a1:a5:c2:d3:68:
96:2b:e8:a8:48:fa:48:d6:6c:d5:6e:d9:ea:fe:8a:
cf:2c:03:37:41:9f:77:f1:c7:5b:e2:f3:1b:f1:96:
07:66:7b:b1:02:82:f1:24:80:a9:a2:bc:93:60:0f:
fe:2a:01:07:a6:7f:05:e0:92:be:3c:a0:de:ea:cb:
1e:f8:d6:6d:a2:f6:3a:01:19:af:f9:fc:2f:77:80:
a6:9d:b5:0e:bd:28:98:42:47:15:6f:79:f1:dc:28:
1d:cb:16:be:83:65:a0:6b:ec:f1:3d:2a:63:0b:4a:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D6:F8:C0:19:31:B7:F4:F6:B7:9B:45:BB:6C:49:30:7B:56:99:CA
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:a5:ab:78:eb:9c:40:29:e8:dd:8c:97:50:10:dd:c6:7c:c2:
a3:e5:cd:a8:ad:c1:63:87:e3:55:4d:1c:50:45:24:78:b8:40:
37:41:c4:b2:af:6b:d0:9e:ff:4c:43:7b:ed:75:90:40:1c:0d:
28:54:4c:cb:ef:a3:2b:61:77:e3:57:13:38:cf:5d:5e:20:fa:
48:89:fc:a5:bd:a6:3d:22:9c:23:53:1d:c1:b8:3a:66:4d:f4:
b9:01:a1:3a:c7:29:95:2d:a2:4e:03:92:dd:7d:cf:2e:77:56:
f2:ce:8f:3d:99:ce:df:c1:8e:61:12:d7:7b:78:9d:ef:9d:2a:
6b:fe:ea:e4:41:cb:42:6d:aa:f2:ee:40:77:5f:4a:29:26:37:
02:03:77:a8:50:44:8e:f2:f2:d7:b9:37:79:fa:56:39:01:7f:
4f:c8:4c:48:76:86:d0:a9:5c:02:a8:f9:10:0a:c8:a9:a3:12:
d3:1d:ca:5e:f5:7e:b0:04:df:8f:f7:66:0d:f1:51:9a:2f:b0:
3e:f9:7d:f7:0f:3b:e5:91:d6:ca:02:ab:4c:db:9f:a8:9b:63:
c4:30:44:4b:47:f3:76:5d:6e:ee:2b:dc:bd:1b:e9:d4:b9:42:
f0:49:b9:3c:85:6c:bf:d7:7f:cf:48:ca:62:fa:7f:b8:30:ad:
44:64:46:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlltaqI2uP0q0LYdye25hcxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTY3ZmNiMGJkYzYwMDFkOGNmNzA3M2M2NDllYjk4MTlm
YzVlYjgwHhcNMjUwOTIwMDYwMDI4WhcNMjUwOTIxMDYwMDI4WjAzMTEwLwYDVQQD
Eyg0NmQ2ZjhjMDE5MzFiN2Y0ZjZiNzliNDViYjZjNDkzMDdiNTY5OWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5b/g0fJBXZt+/5S8pRf+RVulkvcw
Hqw+evuwlTeVxB6b//Cg1JHFP55SI3ho3V414ZElkZH/b+HUZ4LKIkYZsR0+UMME
3Ocbk5mNBFn+5MXQqd5FaC9tUrhhafAE/4SjLfNCe2cyh1Ho5wmSLCD+LFPmAcNM
KMGbGiBzbAzkSaUO6qY5Mj2S4HF41ojvKv2JoaXC02iWK+ioSPpI1mzVbtnq/orP
LAM3QZ938cdb4vMb8ZYHZnuxAoLxJICporyTYA/+KgEHpn8F4JK+PKDe6sse+NZt
ovY6ARmv+fwvd4CmnbUOvSiYQkcVb3nx3Cgdyxa+g2Wga+zxPSpjC0oVYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbW+MAZMbf09rebRbtsSTB7VpnKMB8GA1UdIwQY
MBaAFLnmf8sL3GAB2M9wc8ZJ65gZ/F64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEt
ZmE3MWFlMDVkYzNmLzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEtZmE3MWFlMDVkYzNm
LzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2aWreOuc
QCno3YyXUBDdxnzCo+XNqK3BY4fjVU0cUEUkeLhAN0HEsq9r0J7/TEN77XWQQBwN
KFRMy++jK2F341cTOM9dXiD6SIn8pb2mPSKcI1Mdwbg6Zk30uQGhOscplS2iTgOS
3X3PLndW8s6PPZnO38GOYRLXe3id750qa/7q5EHLQm2q8u5Ad19KKSY3AgN3qFBE
jvLy17k3efpWOQF/T8hMSHaG0KlcAqj5EArIqaMS0x3KXvV+sATfj/dmDfFRmi+w
Pvl99w875ZHWygKrTNufqJtjxDBES0fzdl1u7ivcvRvp1LlC8Em5PIVsv9d/z0jK
Yvp/uDCtRGRG9g==
-----END CERTIFICATE-----
Generated at Sat Sep 20 07:23:00 2025 by rpki-client