Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: 6nGBruVPHwBXrbOIhzlLzBJv3fo1r41E+ZRA5+11neA=
Subject key identifier: 76:FD:3A:D1:CC:29:92:14:45:3D:23:8F:11:FC:9B:48:13:09:5E:31
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 019A70DC49706050CD19F40950879E52483C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0E85
Signing time: Tue 11 Nov 2025 03:01:16 +0000
Manifest this update: Tue 11 Nov 2025 03:01:16 +0000
Manifest next update: Wed 12 Nov 2025 03:01:16 +0000
Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=)
2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: SJcp1Sonxrnz53S+mfgg/ad7DEApeNpKVFm7UwUNWH8=)
3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:49:70:60:50:cd:19:f4:09:50:87:9e:52:48:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Nov 11 03:01:16 2025 GMT
Not After : Nov 12 03:01:16 2025 GMT
Subject: CN=76fd3ad1cc299214453d238f11fc9b4813095e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:eb:c1:5a:87:31:b1:05:65:00:82:ed:f7:
c2:11:ef:09:8f:29:86:60:fd:22:00:6f:7e:54:30:
70:7b:ae:31:60:db:8b:1d:01:0d:34:d2:ba:0c:1b:
70:13:9d:55:b5:9b:f4:b1:23:cf:91:31:fe:ab:8b:
5c:3b:b8:45:53:92:2c:87:84:19:7a:72:20:fd:a3:
d8:22:40:41:21:ee:64:11:6c:20:5e:7f:58:28:20:
e9:4f:da:f9:47:c5:0a:7d:aa:4b:fc:a8:07:39:88:
d4:27:93:40:e5:28:84:eb:58:af:94:c1:0d:74:bc:
e7:9a:77:c1:71:b3:44:2c:3b:04:c5:bb:92:ed:9d:
c4:8b:87:7d:60:71:b9:24:1c:ea:00:91:9d:97:9a:
a8:45:55:b4:77:78:75:77:94:9d:ce:02:5e:cc:76:
be:fe:ef:73:fe:e3:60:0a:82:f1:45:db:60:69:59:
ad:81:3d:03:ac:0a:19:55:43:03:96:2b:bf:03:ff:
0c:f2:71:e6:97:72:94:de:f2:00:db:8f:a1:6f:02:
1f:05:0d:ac:30:69:61:1e:d8:11:ef:89:fd:d6:57:
90:2c:ce:34:d2:f1:32:17:22:18:11:83:88:c4:47:
0e:75:f3:87:1d:4e:76:5c:ee:f4:c9:95:33:b3:94:
17:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FD:3A:D1:CC:29:92:14:45:3D:23:8F:11:FC:9B:48:13:09:5E:31
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:bc:e6:00:a7:af:1f:0e:0d:08:b2:60:fe:23:e9:70:6e:10:
31:4f:c6:98:00:cc:ba:a8:4a:10:f9:ec:97:2a:ff:f5:2e:37:
f6:a2:c5:9a:c5:b2:e0:f6:0b:c3:db:0a:23:e5:c2:00:93:6d:
3c:be:67:a2:ed:ce:ad:cb:19:9e:7a:aa:18:1b:f4:4f:24:42:
70:22:4c:18:29:56:4e:88:41:e5:59:05:6e:aa:51:da:95:b2:
1f:ac:fb:3c:d5:a8:48:58:5b:2c:a1:1c:fc:af:1f:7c:3e:bd:
db:8a:ec:9c:6f:c3:e6:6d:53:8e:d1:75:32:23:5f:bb:1c:93:
f8:c1:37:2b:6b:b2:d8:37:b4:89:48:3b:fe:02:47:44:ab:b4:
9e:7a:ea:af:4b:21:de:1b:c2:ed:45:d1:7e:09:75:18:79:a4:
b7:f4:78:ca:ec:cb:e3:af:f3:7d:a9:24:57:20:0f:64:19:cf:
30:32:0c:da:35:6a:34:93:47:65:9b:18:05:6f:21:9c:5d:d2:
25:07:a1:4f:c9:29:e2:1d:b3:e8:8d:f3:4b:11:f5:71:a2:df:
2c:ab:5d:28:28:0d:99:62:4c:fa:72:3c:59:c9:4f:4b:16:60:
e6:2e:6f:11:65:1d:3b:4c:c0:66:33:ee:5f:db:91:17:af:41:
1b:2e:cb:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3ElwYFDNGfQJUIeeUkg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYzZkZDE3MTllMjg0ZmY1YzcwN2Y4MTIyZThlZDBkODc5
NWFmM2QwHhcNMjUxMTExMDMwMTE2WhcNMjUxMTEyMDMwMTE2WjAzMTEwLwYDVQQD
Eyg3NmZkM2FkMWNjMjk5MjE0NDUzZDIzOGYxMWZjOWI0ODEzMDk1ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDjrwVqHMbEFZQCC7ffCEe8JjymG
YP0iAG9+VDBwe64xYNuLHQENNNK6DBtwE51VtZv0sSPPkTH+q4tcO7hFU5Ish4QZ
enIg/aPYIkBBIe5kEWwgXn9YKCDpT9r5R8UKfapL/KgHOYjUJ5NA5SiE61ivlMEN
dLznmnfBcbNELDsExbuS7Z3Ei4d9YHG5JBzqAJGdl5qoRVW0d3h1d5SdzgJezHa+
/u9z/uNgCoLxRdtgaVmtgT0DrAoZVUMDliu/A/8M8nHml3KU3vIA24+hbwIfBQ2s
MGlhHtgR74n91leQLM400vEyFyIYEYOIxEcOdfOHHU52XO70yZUzs5QXIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHb9OtHMKZIURT0jjxH8m0gTCV4xMB8GA1UdIwQY
MBaAFFLG3RcZ4oT/XHB/gSLo7Q2Hla89MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMt
NjlkNDA2ZTE4NjUzLzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMtNjlkNDA2ZTE4NjUz
LzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrzmAKev
Hw4NCLJg/iPpcG4QMU/GmADMuqhKEPnslyr/9S439qLFmsWy4PYLw9sKI+XCAJNt
PL5nou3OrcsZnnqqGBv0TyRCcCJMGClWTohB5VkFbqpR2pWyH6z7PNWoSFhbLKEc
/K8ffD6924rsnG/D5m1TjtF1MiNfuxyT+ME3K2uy2De0iUg7/gJHRKu0nnrqr0sh
3hvC7UXRfgl1GHmkt/R4yuzL46/zfakkVyAPZBnPMDIM2jVqNJNHZZsYBW8hnF3S
JQehT8kp4h2z6I3zSxH1caLfLKtdKCgNmWJM+nI8WclPSxZg5i5vEWUdO0zAZjPu
X9uRF69BGy7LbA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:39 2025 by rpki-client