Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
File: UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json)
Hash identifier: qRJ+xrHc7Qn3vgeE6/gKJqKRpiwpudNIusC00N/rqmY=
Subject key identifier: 92:E0:2C:10:F8:BF:75:A4:DB:C0:DE:7D:89:42:0A:CD:91:3B:E3:B3
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 019A627B944C7C8C0B708F9210FB6B16B3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
Manifest number: 171B
Signing time: Sat 08 Nov 2025 08:00:57 +0000
Manifest this update: Sat 08 Nov 2025 08:00:57 +0000
Manifest next update: Sun 09 Nov 2025 08:00:57 +0000
Files and hashes: 1: DxImOx_LjbbW5qRqk68u0Cu1-sQ.roa (hash: ape7uiR4ZZbTkIG/kyNeBwlIHv8cWlil9k64NhQAZCk=)
2: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: 49L9cTHB5C9e5KwhoAAd8Sh1Kk5eG+JdSvTcvFeDrto=)
3: aAPjM_XPDDQsO68mlmOjlIms0io.roa (hash: xF98ssC/+VTcwkX22EdQGZnLSnHebds/QYmj2MMKLB8=)
4: agSJfA3zW_tdhYtohVlsRja4TdQ.roa (hash: PReYJ3ClBU9KEfTUKtskQ1POrp0pAjooI8cTw1s1kyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:62:7b:94:4c:7c:8c:0b:70:8f:92:10:fb:6b:16:b3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Nov 8 08:00:57 2025 GMT
Not After : Nov 9 08:00:57 2025 GMT
Subject: CN=92e02c10f8bf75a4dbc0de7d89420acd913be3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:17:58:68:a8:30:3d:e9:f2:ef:c3:04:db:
81:09:11:fc:c6:42:8a:d7:84:0c:67:87:8f:56:7e:
60:b8:a8:77:42:66:d7:35:67:74:ab:4c:43:fa:9b:
99:09:4a:06:c0:60:6f:69:a3:9e:27:e2:de:a1:a8:
76:b9:e9:08:08:08:d5:e1:33:9e:a4:db:36:c9:de:
ce:dd:ea:11:46:9e:c6:b1:5a:fd:c4:01:fa:ed:31:
9f:0b:df:d0:09:d6:47:fa:02:bf:6a:45:c8:69:35:
22:52:8e:d7:58:a5:07:95:a0:44:b9:1b:b2:3e:eb:
de:ca:8d:1b:77:78:1e:c1:0c:c5:ea:4e:26:0f:66:
e5:a6:b3:da:cc:56:a2:3c:08:ad:f8:b9:ee:ee:f1:
df:c7:7b:60:a7:9f:be:0f:9c:9c:00:64:28:44:8e:
16:97:5e:42:00:79:fd:17:56:b7:1e:42:67:6b:56:
1d:00:20:8a:0e:2c:83:8d:35:32:2a:5f:d6:d5:64:
e7:f2:02:56:36:10:ea:fe:5b:c2:88:3e:2d:15:6e:
a4:e5:38:bc:1d:a9:b3:a6:61:4f:d8:76:33:45:67:
6f:a3:d7:68:e4:58:5b:d9:fe:3f:f4:2f:1e:c7:b0:
58:c9:bb:55:46:d4:02:e4:75:67:d3:13:aa:e8:f1:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E0:2C:10:F8:BF:75:A4:DB:C0:DE:7D:89:42:0A:CD:91:3B:E3:B3
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:26:d2:e0:0c:ef:48:58:76:17:37:c6:77:3e:4c:c3:d0:14:
0b:ec:b1:8c:0a:9c:97:12:49:96:15:e5:6e:b2:0c:74:d6:67:
37:11:85:f1:2c:f5:c6:05:6f:b4:6a:91:8e:d9:fa:db:6d:be:
e0:22:c3:5d:00:c6:0a:e9:37:6c:d9:a1:c3:a7:18:58:73:03:
d0:68:f4:22:3a:62:41:21:2f:f6:a9:cb:bb:70:c2:3e:cf:86:
df:52:06:da:55:15:16:73:6c:fd:eb:64:0d:69:d9:d3:f8:e1:
3a:ac:ca:28:7e:14:79:97:ee:50:a3:60:7a:76:f3:fe:58:2f:
44:e8:af:13:dc:dd:c0:f9:17:4c:ad:67:50:d2:bf:33:7c:29:
25:5c:91:4f:61:49:f2:25:0f:a6:45:33:b6:72:94:8b:94:85:
47:2d:b2:0c:85:89:e3:61:87:bd:fd:4f:cd:43:fb:63:f7:ec:
65:df:21:9c:ff:c9:10:2b:3d:e8:5c:92:74:25:3b:bd:83:a6:
e2:92:69:e0:44:3c:73:ec:47:a2:e6:a9:84:81:c5:3d:94:43:
0b:51:d1:2c:41:ce:5b:b1:5e:35:63:3f:fa:71:53:6c:e9:91:
ac:1d:60:6e:bb:e7:7b:43:68:0f:20:df:2f:3e:df:3f:9f:8d:
88:2f:fd:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpie5RMfIwLcI+SEPtrFrP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWI3MDVhOTFkYmMzMGVkMTBlYjcyMjJiNzc5N2I4MzRl
MDE4NjMwHhcNMjUxMTA4MDgwMDU3WhcNMjUxMTA5MDgwMDU3WjAzMTEwLwYDVQQD
Eyg5MmUwMmMxMGY4YmY3NWE0ZGJjMGRlN2Q4OTQyMGFjZDkxM2JlM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon8XWGioMD3p8u/DBNuBCRH8xkKK
14QMZ4ePVn5guKh3QmbXNWd0q0xD+puZCUoGwGBvaaOeJ+Leoah2uekICAjV4TOe
pNs2yd7O3eoRRp7GsVr9xAH67TGfC9/QCdZH+gK/akXIaTUiUo7XWKUHlaBEuRuy
Puveyo0bd3gewQzF6k4mD2blprPazFaiPAit+Lnu7vHfx3tgp5++D5ycAGQoRI4W
l15CAHn9F1a3HkJna1YdACCKDiyDjTUyKl/W1WTn8gJWNhDq/lvCiD4tFW6k5Ti8
HamzpmFP2HYzRWdvo9do5Fhb2f4/9C8ex7BYybtVRtQC5HVn0xOq6PHQ7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLgLBD4v3Wk28DefYlCCs2RO+OzMB8GA1UdIwQY
MBaAFFJbcFqR28MO0Q63Iit3l7g04BhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNDYyZGMtOWU1OS00ZThkLTljNmQt
ZjQ2ODg3ZGY5ODYzLzEvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNDYyZGMtOWU1OS00ZThkLTljNmQtZjQ2ODg3ZGY5ODYz
LzEvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGybS4Azv
SFh2FzfGdz5Mw9AUC+yxjAqclxJJlhXlbrIMdNZnNxGF8Sz1xgVvtGqRjtn6222+
4CLDXQDGCuk3bNmhw6cYWHMD0Gj0IjpiQSEv9qnLu3DCPs+G31IG2lUVFnNs/etk
DWnZ0/jhOqzKKH4UeZfuUKNgenbz/lgvROivE9zdwPkXTK1nUNK/M3wpJVyRT2FJ
8iUPpkUztnKUi5SFRy2yDIWJ42GHvf1PzUP7Y/fsZd8hnP/JECs96FySdCU7vYOm
4pJp4EQ8c+xHouaphIHFPZRDC1HRLEHOW7FeNWM/+nFTbOmRrB1gbrvne0NoDyDf
Lz7fP5+NiC/9uQ==
-----END CERTIFICATE-----
Generated at Sat Nov 8 09:18:01 2025 by rpki-client