Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: 737LcgCZl8MXxiLG1PEXKxBEUzonhpbfHs155NboHXM=
Subject key identifier: 1C:A0:D9:2D:DF:C1:3C:90:E4:66:DA:14:FA:97:B6:39:1A:1D:2E:2B
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 019A202D42BA627CB19465624864973A959E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 11:00:28 +0000
Manifest this update: Sun 26 Oct 2025 11:00:28 +0000
Manifest next update: Mon 27 Oct 2025 11:00:28 +0000
Files and hashes: 1: 8hWTGCLXxSwODB2tKv40DFwDRSA.roa (hash: LnqtzTwP6Z/uj/Pahytsa4k9TTsa7E1q6xNsCMwJ/r4=)
2: KdlAk3dh27bShWAn4-0kWb61hVQ.roa (hash: ATJYV8SWOcnAG9fqVBljwxaiv5XnfJ4U40CX0lPgLrE=)
3: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: n9qGfuDwjL+mHTfNU4WMiDu2Ilz7n8c6GlRKjGKmvF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:42:ba:62:7c:b1:94:65:62:48:64:97:3a:95:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Oct 26 11:00:28 2025 GMT
Not After : Oct 27 11:00:28 2025 GMT
Subject: CN=1ca0d92ddfc13c90e466da14fa97b6391a1d2e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:92:07:aa:00:3a:69:c9:f7:53:46:3a:c4:
97:91:4a:86:55:33:48:e1:50:98:73:99:ac:c5:2e:
b9:b3:32:1c:09:ca:c0:e0:6f:00:c9:20:f4:dc:c5:
56:b7:88:db:91:3a:98:67:2c:2b:ed:36:39:5a:70:
4e:f2:2e:ea:f2:f1:15:02:fe:51:65:0d:20:56:9c:
25:76:f8:26:0c:7f:31:77:a6:fd:55:7e:f1:b0:91:
5a:74:a1:80:21:49:d8:0d:eb:81:3d:09:ec:17:1e:
8c:21:d4:c3:09:52:7e:55:b8:cd:a0:21:53:e6:13:
e3:d9:9c:e8:2d:b9:aa:be:af:a4:44:29:61:23:e5:
e0:f4:75:a4:55:2a:15:18:ac:c6:ec:fc:a7:43:2c:
5f:41:6f:d4:46:66:ca:8b:03:3b:d3:17:aa:6d:4f:
81:2a:66:ef:81:be:d9:c3:da:37:11:90:3d:bb:85:
af:00:74:e6:de:b3:cf:6b:21:be:fe:0d:ae:bf:54:
d3:df:db:87:47:18:0d:e4:78:88:cd:53:b4:5e:85:
db:b5:28:e6:ce:38:cb:c9:c0:fa:11:32:a8:83:c5:
78:25:24:32:22:dd:10:ae:eb:28:a7:ed:51:a9:12:
39:41:a6:6e:03:c5:82:57:7a:9e:af:14:d0:25:3d:
96:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A0:D9:2D:DF:C1:3C:90:E4:66:DA:14:FA:97:B6:39:1A:1D:2E:2B
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3f:5b:94:90:ee:9d:bc:e7:d6:77:d5:90:7e:a7:44:df:56:
88:b0:d4:6a:ab:86:e6:60:36:96:31:48:93:cb:24:c9:81:dc:
ad:80:7f:b9:81:50:7c:2e:43:3a:3d:da:21:51:76:ad:51:59:
19:68:2c:ad:9f:c6:a3:b0:b5:b2:e2:8c:c1:85:67:60:77:76:
33:ae:0e:2e:2c:a4:61:d1:77:5f:f1:4e:39:b1:62:a1:9f:65:
73:82:bc:11:cb:5b:42:c5:63:16:65:be:32:f4:36:7a:b6:83:
68:b5:8f:44:77:2d:f9:66:5c:07:c8:fe:6f:d3:d1:16:48:15:
36:60:d7:67:eb:0b:c0:a4:20:43:6e:6c:7c:d9:92:a3:6b:a6:
48:e2:db:de:00:e5:74:ed:d8:85:bf:04:ac:c3:e9:d7:7d:1d:
1f:00:cd:53:91:76:bb:c1:b1:07:6c:29:e8:a6:99:1b:9b:fb:
20:c7:73:d3:29:c0:3a:8d:de:85:dc:71:58:c4:05:fb:b5:d2:
31:91:8d:de:78:ee:6c:1b:7b:eb:1c:45:28:c4:b9:14:87:5b:
cd:8e:7a:84:a6:79:77:a5:53:3d:ef:2d:a2:74:fc:b5:93:30:
25:f7:fc:0f:43:f6:c2:c5:d0:74:12:a9:f7:a3:22:71:48:2a:
de:7d:07:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZogLUK6YnyxlGViSGSXOpWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYmQwOTkyODcyMTUyYTg2ZDYwZDk2M2I4N2QwMTgxN2Mw
MGZjNTMwHhcNMjUxMDI2MTEwMDI4WhcNMjUxMDI3MTEwMDI4WjAzMTEwLwYDVQQD
EygxY2EwZDkyZGRmYzEzYzkwZTQ2NmRhMTRmYTk3YjYzOTFhMWQyZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFeSB6oAOmnJ91NGOsSXkUqGVTNI
4VCYc5msxS65szIcCcrA4G8AySD03MVWt4jbkTqYZywr7TY5WnBO8i7q8vEVAv5R
ZQ0gVpwldvgmDH8xd6b9VX7xsJFadKGAIUnYDeuBPQnsFx6MIdTDCVJ+VbjNoCFT
5hPj2ZzoLbmqvq+kRClhI+Xg9HWkVSoVGKzG7PynQyxfQW/URmbKiwM70xeqbU+B
Kmbvgb7Zw9o3EZA9u4WvAHTm3rPPayG+/g2uv1TT39uHRxgN5HiIzVO0XoXbtSjm
zjjLycD6ETKog8V4JSQyIt0Qrusop+1RqRI5QaZuA8WCV3qerxTQJT2WFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByg2S3fwTyQ5GbaFPqXtjkaHS4rMB8GA1UdIwQY
MBaAFFO9CZKHIVKobWDZY7h9AYF8APxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZTI2NGUtZDZjZS00MmQ1LWIwNWQt
ZTE1ZjRmODQwOWU2LzEvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82ZTI2NGUtZDZjZS00MmQ1LWIwNWQtZTE1ZjRmODQwOWU2
LzEvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWz9blJDu
nbzn1nfVkH6nRN9WiLDUaquG5mA2ljFIk8skyYHcrYB/uYFQfC5DOj3aIVF2rVFZ
GWgsrZ/Go7C1suKMwYVnYHd2M64OLiykYdF3X/FOObFioZ9lc4K8EctbQsVjFmW+
MvQ2eraDaLWPRHct+WZcB8j+b9PRFkgVNmDXZ+sLwKQgQ25sfNmSo2umSOLb3gDl
dO3Yhb8ErMPp130dHwDNU5F2u8GxB2wp6KaZG5v7IMdz0ynAOo3ehdxxWMQF+7XS
MZGN3njubBt76xxFKMS5FIdbzY56hKZ5d6VTPe8tonT8tZMwJff8D0P2wsXQdBKp
96MicUgq3n0HAg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 19:07:53 2025 by rpki-client