Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: u8mToBfME0FB28cuS8kToBq4oBgD1RgXM1E06LTtGP4=
Subject key identifier: C8:93:55:38:4E:14:3E:8D:4D:3E:5B:24:DB:2B:9C:74:80:12:A0:97
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 019A1CF5341248DF54906A334A683055B707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0ABC
Signing time: Sat 25 Oct 2025 20:00:22 +0000
Manifest this update: Sat 25 Oct 2025 20:00:22 +0000
Manifest next update: Sun 26 Oct 2025 20:00:22 +0000
Files and hashes: 1: DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa (hash: zaZvD4mJLqp4MOJwB3Nt68nBCMNeBWDlV/d1fzv2XeU=)
2: qGqGFDo3f1YxXSO8NSZP4OIb8Yk.roa (hash: e3ELr1b/OayM2a4sUXudO8Dt/N78b5+UPIuDWK6RcgY=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: Kuv0pV+8AWL/LQEenS47Xo0xYvx9BrUIIzQfKlvSLZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:34:12:48:df:54:90:6a:33:4a:68:30:55:b7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Oct 25 20:00:22 2025 GMT
Not After : Oct 26 20:00:22 2025 GMT
Subject: CN=c89355384e143e8d4d3e5b24db2b9c748012a097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:af:c7:24:f1:83:b9:eb:57:9e:9f:5b:62:
0c:39:eb:18:6b:a9:b5:63:6c:59:fe:5f:27:fd:90:
fe:27:bf:b6:0b:d7:74:f8:f4:be:be:96:ed:e6:0b:
fb:81:e8:8a:20:fa:21:6b:12:e9:24:9e:00:ef:ed:
6f:e6:27:92:0b:44:c2:98:ce:90:bc:05:90:99:f6:
ae:65:57:59:e7:b3:ae:ad:f8:9f:e3:94:07:73:8b:
44:07:48:da:89:c6:b4:75:a4:c1:7a:fc:82:bf:fd:
87:37:54:67:e8:f5:70:4b:ab:b2:59:bf:2b:4e:42:
fa:a2:25:ed:c3:20:cd:12:f4:49:9f:01:5c:a3:a3:
c9:46:d1:d4:93:38:d1:02:1c:0f:07:72:f7:88:59:
42:63:06:3e:9b:10:f1:b3:62:8c:44:d0:1b:fa:f7:
2c:b0:87:c1:63:e7:5c:5c:a5:02:4d:25:92:04:35:
93:a7:f8:13:e0:f2:46:7d:b6:70:99:40:60:6e:8b:
06:27:56:4d:e3:d4:c1:f4:83:f1:3a:06:d9:c6:0f:
64:7e:0d:a1:63:39:2d:a4:be:75:4f:e9:ce:a4:0d:
cc:7c:a1:f8:3c:8f:2d:9e:67:d5:fc:78:b7:61:a2:
4d:62:ea:51:36:39:c8:ef:20:0c:28:91:95:c7:c6:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:93:55:38:4E:14:3E:8D:4D:3E:5B:24:DB:2B:9C:74:80:12:A0:97
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5f:90:42:06:ad:92:26:90:64:fe:c7:6f:fb:07:57:1a:a0:
88:03:a4:4f:e8:ca:6a:da:27:05:0a:68:c4:49:7b:e2:1a:e8:
1d:e9:78:b8:62:78:42:e7:cc:24:d4:48:29:5e:4b:34:5b:dc:
03:b6:a0:a6:1a:79:21:33:70:dd:b4:ac:33:a1:16:81:c5:ff:
b1:d4:71:6a:a4:38:51:38:f3:6a:5c:49:5e:07:15:74:53:f2:
1e:d9:79:25:5d:60:0c:43:2b:da:30:95:82:54:66:91:5f:2c:
fb:ee:74:6e:c5:1d:79:46:74:09:4b:af:10:35:31:ec:92:bd:
27:b9:94:8d:32:87:40:ea:72:01:8e:de:e7:e2:e9:c3:d3:61:
00:da:48:e1:fb:27:cf:4e:de:c6:9d:07:64:fd:76:e5:46:09:
8f:b5:11:fe:8a:ac:cf:47:49:18:e5:80:d1:35:1f:62:42:2e:
16:a5:dd:28:0e:9d:60:0b:98:13:0a:7b:bb:74:84:0e:02:dc:
e3:b2:94:a0:18:9c:8e:85:cb:2c:47:e8:e1:d0:95:42:9e:09:
9a:a1:d0:75:a1:fe:bb:9f:1a:6a:5d:61:25:7c:09:39:1f:fb:
e0:48:3a:8f:10:7d:50:77:9e:30:4e:3c:62:b4:b8:74:8d:5b:
6b:3c:35:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoc9TQSSN9UkGozSmgwVbcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2E1MWRhMjA1MzA0NGY5NjI2MmY2MzdkMGM5Y2MwNWQ3
MzAwNDEwHhcNMjUxMDI1MjAwMDIyWhcNMjUxMDI2MjAwMDIyWjAzMTEwLwYDVQQD
EyhjODkzNTUzODRlMTQzZThkNGQzZTViMjRkYjJiOWM3NDgwMTJhMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumSvxyTxg7nrV56fW2IMOesYa6m1
Y2xZ/l8n/ZD+J7+2C9d0+PS+vpbt5gv7geiKIPohaxLpJJ4A7+1v5ieSC0TCmM6Q
vAWQmfauZVdZ57Ourfif45QHc4tEB0jaica0daTBevyCv/2HN1Rn6PVwS6uyWb8r
TkL6oiXtwyDNEvRJnwFco6PJRtHUkzjRAhwPB3L3iFlCYwY+mxDxs2KMRNAb+vcs
sIfBY+dcXKUCTSWSBDWTp/gT4PJGfbZwmUBgbosGJ1ZN49TB9IPxOgbZxg9kfg2h
YzktpL51T+nOpA3MfKH4PI8tnmfV/Hi3YaJNYupRNjnI7yAMKJGVx8bwUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiTVThOFD6NTT5bJNsrnHSAEqCXMB8GA1UdIwQY
MBaAFLk6UdogUwRPliYvY30MnMBdcwBBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGIt
YTEyYjNjM2FlODhmLzEvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGItYTEyYjNjM2FlODhm
LzEvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABl+QQgat
kiaQZP7Hb/sHVxqgiAOkT+jKatonBQpoxEl74hroHel4uGJ4QufMJNRIKV5LNFvc
A7agphp5ITNw3bSsM6EWgcX/sdRxaqQ4UTjzalxJXgcVdFPyHtl5JV1gDEMr2jCV
glRmkV8s++50bsUdeUZ0CUuvEDUx7JK9J7mUjTKHQOpyAY7e5+Lpw9NhANpI4fsn
z07exp0HZP125UYJj7UR/oqsz0dJGOWA0TUfYkIuFqXdKA6dYAuYEwp7u3SEDgLc
47KUoBicjoXLLEfo4dCVQp4JmqHQdaH+u58aal1hJXwJOR/74Eg6jxB9UHeeME48
YrS4dI1bazw1ZA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 02:56:03 2025 by rpki-client