Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
File: uEWIWKHL3onJKQYPQvKw35JNTik.mft (raw, json)
Hash identifier: ZkKVVS16hiXma+L9Nq9Nkd/7KhuxE87T/MH1M0YRtV0=
Subject key identifier: 8B:5C:66:AE:32:05:6D:2C:3C:97:81:A7:5B:23:09:EA:7D:47:EC:B2
Authority key identifier: B8:45:88:58:A1:CB:DE:89:C9:29:06:0F:42:F2:B0:DF:92:4D:4E:29
Certificate issuer: /CN=b8458858a1cbde89c929060f42f2b0df924d4e29
Certificate serial: 019A71EEF11EBCB8E07678ABF6B73D03C93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
Manifest number: 0B9F
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: TGrXflCdfRfW3fIuk1M0sun1vvs.roa (hash: alNQcjpWXoWXc70x5wuOV0VaoVsG9NOJ3xbbbXJM7RE=)
2: uEWIWKHL3onJKQYPQvKw35JNTik.crl (hash: YqCxIln66aPv1s+Q6bU3WdAHhfV3NV6bSJjO7ldLDj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f1:1e:bc:b8:e0:76:78:ab:f6:b7:3d:03:c9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8458858a1cbde89c929060f42f2b0df924d4e29
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=8b5c66ae32056d2c3c9781a75b2309ea7d47ecb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:2d:0f:bd:37:0f:15:71:5a:4b:8c:1e:ff:
b7:f4:3e:74:0a:52:4e:a5:ab:41:d4:e4:74:c8:90:
ac:7e:2c:75:6e:22:ec:ae:f3:6a:53:f9:ac:93:3e:
6a:e8:7b:cc:e3:d5:3b:56:11:67:70:b1:77:01:59:
08:a3:c8:74:ba:4f:39:1d:1f:ec:3c:0e:15:0f:98:
ab:6d:d7:74:c2:46:13:a4:da:73:a2:a1:fd:0c:1a:
fc:fd:5a:1c:3e:e1:f1:b3:bd:80:02:94:88:03:e4:
5d:7b:8b:c2:40:4a:90:fb:c9:ba:02:40:af:99:06:
60:27:ff:77:ca:13:2b:2c:b4:4b:56:b5:6c:0c:ef:
2a:50:7e:dd:12:de:cb:66:b0:38:8d:9c:68:f8:cc:
44:5f:f8:fc:f8:e5:39:ef:f4:57:90:8f:ed:7e:36:
33:58:69:76:70:71:66:91:35:ee:35:7a:42:8a:d5:
a5:af:3d:f2:6c:f5:f6:0a:ae:1a:71:8a:1a:56:1d:
7d:40:51:8b:f9:f4:e0:af:b8:f2:d0:57:e7:29:ae:
32:42:98:bb:cc:52:61:bc:c0:e0:4d:a8:c5:22:d8:
7f:e4:0a:56:0e:96:8c:5b:48:f6:93:25:e8:30:a4:
26:70:74:3f:c4:cf:91:50:eb:b4:7c:f9:f1:58:b9:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5C:66:AE:32:05:6D:2C:3C:97:81:A7:5B:23:09:EA:7D:47:EC:B2
X509v3 Authority Key Identifier:
keyid:B8:45:88:58:A1:CB:DE:89:C9:29:06:0F:42:F2:B0:DF:92:4D:4E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:93:85:b8:c1:6c:3c:18:23:a3:d3:95:38:0c:c1:13:03:fa:
4d:9b:79:13:af:27:09:39:79:71:91:01:a9:4f:c8:f2:c7:ec:
86:6e:aa:ac:e4:02:53:38:3d:f8:03:0c:22:b9:7d:d4:13:65:
9e:f4:08:0a:48:80:fa:03:3b:5f:f2:18:e3:6f:8d:fb:c6:d3:
30:8a:e3:fc:18:4b:1d:10:69:0e:5f:49:e8:13:70:68:52:a0:
78:18:57:7f:b9:83:d0:de:17:40:43:4b:be:c7:9e:a1:57:67:
2d:1c:11:ec:2b:9e:84:7c:69:b1:a7:36:29:ab:8f:9c:e8:67:
e1:7c:51:49:47:ec:f9:65:30:c6:06:9e:f4:d3:09:a3:4a:14:
6c:a6:de:72:38:9e:36:01:be:cf:e0:44:94:6c:c8:be:86:40:
2b:57:1a:18:3c:bc:b7:81:fc:58:b3:51:8e:ce:60:b0:63:97:
05:2c:b0:52:e1:99:a8:fd:91:23:71:58:d8:02:6f:69:cb:16:
42:78:e7:f2:82:ae:9c:6b:eb:f5:df:04:4d:f2:6d:7b:9c:90:
39:88:b8:3a:7a:a2:a9:ba:b2:c4:38:63:57:68:76:6a:d4:b4:
42:37:d3:88:38:50:f6:8c:c6:f8:26:48:da:2c:a7:0d:55:eb:
22:57:4f:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7vEevLjgdnir9rc9A8k6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NDU4ODU4YTFjYmRlODljOTI5MDYwZjQyZjJiMGRmOTI0
ZDRlMjkwHhcNMjUxMTExMDgwMTE1WhcNMjUxMTEyMDgwMTE1WjAzMTEwLwYDVQQD
Eyg4YjVjNjZhZTMyMDU2ZDJjM2M5NzgxYTc1YjIzMDllYTdkNDdlY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU4tD703DxVxWkuMHv+39D50ClJO
patB1OR0yJCsfix1biLsrvNqU/mskz5q6HvM49U7VhFncLF3AVkIo8h0uk85HR/s
PA4VD5irbdd0wkYTpNpzoqH9DBr8/VocPuHxs72AApSIA+Rde4vCQEqQ+8m6AkCv
mQZgJ/93yhMrLLRLVrVsDO8qUH7dEt7LZrA4jZxo+MxEX/j8+OU57/RXkI/tfjYz
WGl2cHFmkTXuNXpCitWlrz3ybPX2Cq4acYoaVh19QFGL+fTgr7jy0FfnKa4yQpi7
zFJhvMDgTajFIth/5ApWDpaMW0j2kyXoMKQmcHQ/xM+RUOu0fPnxWLmVOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItcZq4yBW0sPJeBp1sjCep9R+yyMB8GA1UdIwQY
MBaAFLhFiFihy96JySkGD0LysN+STU4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUVXSVdLSEwzb25KS1FZUFF2S3czNUpOVGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lNjc0ZmItMjY4My00Y2Y0LTk2N2It
YjdjNjdlYWNjM2E1LzEvdUVXSVdLSEwzb25KS1FZUFF2S3czNUpOVGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lNjc0ZmItMjY4My00Y2Y0LTk2N2ItYjdjNjdlYWNjM2E1
LzEvdUVXSVdLSEwzb25KS1FZUFF2S3czNUpOVGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5OFuMFs
PBgjo9OVOAzBEwP6TZt5E68nCTl5cZEBqU/I8sfshm6qrOQCUzg9+AMMIrl91BNl
nvQICkiA+gM7X/IY42+N+8bTMIrj/BhLHRBpDl9J6BNwaFKgeBhXf7mD0N4XQENL
vseeoVdnLRwR7CuehHxpsac2KauPnOhn4XxRSUfs+WUwxgae9NMJo0oUbKbecjie
NgG+z+BElGzIvoZAK1caGDy8t4H8WLNRjs5gsGOXBSywUuGZqP2RI3FY2AJvacsW
Qnjn8oKunGvr9d8ETfJte5yQOYi4OnqiqbqyxDhjV2h2atS0QjfTiDhQ9ozG+CZI
2iynDVXrIldPnQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:55:01 2025 by rpki-client