Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File: UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier: 48ON6htMxco5LBy77cEZajrhoz+KOldeuNYLrPv4s54=
Subject key identifier: 3B:96:FF:AB:2F:B2:7B:16:24:56:E8:45:33:C8:EC:56:D4:88:E4:D6
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial: 019A7225E2610CD22B06A81C8E2B36C00762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number: 032E
Signing time: Tue 11 Nov 2025 09:01:16 +0000
Manifest this update: Tue 11 Nov 2025 09:01:16 +0000
Manifest next update: Wed 12 Nov 2025 09:01:16 +0000
Files and hashes: 1: 6PsTHYIIX51kdSojaJW-z28646w.roa (hash: e4+ExkBHfbgESlNinbHszCcxcrVC7TRY4A/vynG1b6A=)
2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: tkf74bowtMtF8i9RM0HZwG/IudnKDCxAgzJ3kKXQXZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e2:61:0c:d2:2b:06:a8:1c:8e:2b:36:c0:07:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Validity
Not Before: Nov 11 09:01:16 2025 GMT
Not After : Nov 12 09:01:16 2025 GMT
Subject: CN=3b96ffab2fb27b162456e84533c8ec56d488e4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:24:52:eb:ad:8d:66:c8:77:61:f7:65:8d:40:
16:1d:92:92:81:db:7f:34:b3:e1:82:ca:c9:0b:6a:
1f:9e:0f:d8:ff:04:7c:f8:22:0a:cd:33:44:b4:51:
07:5e:c3:f2:96:e9:e3:fd:33:e3:69:98:7e:3e:2b:
7f:70:4a:3b:3f:fe:ed:cd:95:a3:ca:da:99:e8:5c:
6d:fe:90:75:46:fe:4b:40:c8:ac:8c:35:b5:b0:2a:
69:dc:18:77:a5:f5:d6:74:8b:98:08:56:5b:8f:f4:
d0:3e:47:93:e9:a5:df:76:17:2e:06:4e:07:56:e0:
7c:4c:18:7c:93:ed:e9:a9:97:cb:d8:d0:8a:7e:90:
23:49:a1:c9:59:a9:f4:76:ac:78:d5:10:dd:c1:bc:
0e:33:64:a4:2d:25:85:8e:07:2a:15:22:eb:02:ea:
3c:27:91:e4:a3:2f:6d:fd:9a:de:26:14:9e:27:c7:
31:61:87:05:95:32:3a:52:13:45:6e:72:20:e9:46:
06:b8:b8:31:6d:10:fa:08:da:02:a1:da:44:e5:25:
4d:b7:3e:d9:7d:84:0d:b1:4c:8c:2e:e5:8a:30:51:
15:76:25:82:87:71:9f:76:cd:7f:cb:58:78:55:b9:
78:b7:ea:d6:54:5f:8d:90:0e:8c:ae:ff:61:38:80:
cc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:96:FF:AB:2F:B2:7B:16:24:56:E8:45:33:C8:EC:56:D4:88:E4:D6
X509v3 Authority Key Identifier:
keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:26:17:0a:4c:37:42:57:b5:ab:00:67:cf:36:eb:c2:25:b0:
81:b0:c1:08:19:6c:71:d7:65:75:10:b9:1d:d4:a5:38:08:d9:
41:0d:ec:b6:7a:0f:29:86:03:e6:c6:8a:f4:d8:e6:e8:52:ac:
ae:12:cc:90:a5:50:1f:e3:68:72:49:d9:46:34:39:1d:13:b3:
e9:60:5e:6c:0b:a6:0e:6a:45:08:22:ee:3d:e7:65:ce:8c:06:
59:86:80:1f:94:75:14:f5:c5:26:da:5b:ed:f8:17:67:87:2b:
c4:2a:5f:b2:e1:7f:f2:63:40:f2:7a:14:3a:ed:35:ca:a2:d4:
fa:f6:b3:77:2a:6d:26:ef:04:f0:2b:23:06:cd:4f:f0:23:0f:
8e:09:a5:01:93:76:ee:1d:a2:95:d3:86:9d:15:46:20:4f:1a:
42:96:c6:c6:6f:99:3e:0f:7d:4a:3e:16:2a:0e:92:08:d9:ba:
42:52:18:51:d5:a0:e5:3d:ef:76:a6:49:c6:91:6f:c4:72:11:
04:bf:e0:db:ab:7d:cc:33:33:d9:2b:a9:c6:ed:d2:1e:1c:46:
35:f7:08:d0:75:a8:22:1a:17:fc:34:0c:5f:20:ad:2b:03:66:
6f:12:2d:88:13:ee:39:18:03:a7:3e:8a:5b:35:63:a1:e8:d4:
ac:8e:93:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJeJhDNIrBqgcjis2wAdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTQ3ZjliY2Y5MWQyYWNmOGY0MzViYTUwYjgwNTA1NDVj
ZDFmOGYwHhcNMjUxMTExMDkwMTE2WhcNMjUxMTEyMDkwMTE2WjAzMTEwLwYDVQQD
EygzYjk2ZmZhYjJmYjI3YjE2MjQ1NmU4NDUzM2M4ZWM1NmQ0ODhlNGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiRS662NZsh3YfdljUAWHZKSgdt/
NLPhgsrJC2ofng/Y/wR8+CIKzTNEtFEHXsPylunj/TPjaZh+Pit/cEo7P/7tzZWj
ytqZ6Fxt/pB1Rv5LQMisjDW1sCpp3Bh3pfXWdIuYCFZbj/TQPkeT6aXfdhcuBk4H
VuB8TBh8k+3pqZfL2NCKfpAjSaHJWan0dqx41RDdwbwOM2SkLSWFjgcqFSLrAuo8
J5Hkoy9t/ZreJhSeJ8cxYYcFlTI6UhNFbnIg6UYGuLgxbRD6CNoCodpE5SVNtz7Z
fYQNsUyMLuWKMFEVdiWCh3Gfds1/y1h4Vbl4t+rWVF+NkA6Mrv9hOIDM2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuW/6svsnsWJFboRTPI7FbUiOTWMB8GA1UdIwQY
MBaAFFMUf5vPkdKs+PQ1ulC4BQVFzR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYt
ZWIwMDkyYTk0ZmNhLzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYtZWIwMDkyYTk0ZmNh
LzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQiYXCkw3
Qle1qwBnzzbrwiWwgbDBCBlscddldRC5HdSlOAjZQQ3stnoPKYYD5saK9Njm6FKs
rhLMkKVQH+NocknZRjQ5HROz6WBebAumDmpFCCLuPedlzowGWYaAH5R1FPXFJtpb
7fgXZ4crxCpfsuF/8mNA8noUOu01yqLU+vazdyptJu8E8CsjBs1P8CMPjgmlAZN2
7h2ildOGnRVGIE8aQpbGxm+ZPg99Sj4WKg6SCNm6QlIYUdWg5T3vdqZJxpFvxHIR
BL/g26t9zDMz2Supxu3SHhxGNfcI0HWoIhoX/DQMXyCtKwNmbxItiBPuORgDpz6K
WzVjoejUrI6TUA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:03 2025 by rpki-client