Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json)
Hash identifier: uN459RtRnu+h4sQES8GehMFnpfDJG+RDoxJMXjhIa80=
Subject key identifier: 5B:B9:B9:4B:82:96:43:A2:37:B7:5A:CC:79:63:80:4A:1F:94:0A:F5
Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Certificate serial: 019A52D0E90BEC7C9DAD2780CC67A5442CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
Manifest number: 02B7
Signing time: Wed 05 Nov 2025 07:00:14 +0000
Manifest this update: Wed 05 Nov 2025 07:00:14 +0000
Manifest next update: Thu 06 Nov 2025 07:00:14 +0000
Files and hashes: 1: 6wMvK7U00knk7Sbj2nJm7vK-JZg.roa (hash: jJMUZ+x65B2/nrC5W+fwDZUjmdqOosi5Z+egTtKKub0=)
2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: PcjkZYl2C4xhkNYXx8UkSip7ej2Sd6S/1mB4qxq8RaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:e9:0b:ec:7c:9d:ad:27:80:cc:67:a5:44:2c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Validity
Not Before: Nov 5 07:00:14 2025 GMT
Not After : Nov 6 07:00:14 2025 GMT
Subject: CN=5bb9b94b829643a237b75acc7963804a1f940af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ec:e6:33:17:9d:6e:de:bc:66:6c:7f:fe:65:
ea:cc:f0:91:28:d9:15:ee:75:98:40:57:57:44:22:
a1:13:0f:ca:64:13:37:b6:69:ed:97:2b:06:33:df:
ba:e7:9a:da:35:f7:32:b0:c3:71:22:d6:3e:0e:23:
85:58:ee:50:ab:a1:c2:bf:f6:43:a2:09:58:ae:d7:
8b:7e:ee:76:94:69:ba:03:4c:af:48:c2:15:c3:71:
62:6f:a5:d5:c2:44:14:2c:5f:6a:9a:c4:ff:19:d3:
d4:25:45:c9:f4:04:51:23:ac:79:a6:b0:18:bd:d4:
b6:7c:10:f8:66:df:e0:08:6b:52:d0:08:06:ff:07:
13:72:d3:74:45:a4:92:fc:79:a3:1c:42:87:5c:e4:
a6:4e:85:3a:a4:17:6e:b8:67:5c:ea:79:74:83:57:
66:ba:ea:24:d1:13:3e:89:f6:0c:22:45:ba:ac:0b:
e6:a5:af:7b:b3:b4:b1:ed:d9:3b:a1:89:80:76:a0:
d8:2f:a5:02:ff:d1:c5:da:4e:38:94:c6:08:bc:47:
fb:4d:68:d6:4e:d4:68:39:b9:40:88:e1:3d:57:b0:
d5:03:56:20:ac:9f:e8:b0:4c:56:1f:eb:dc:00:71:
d0:ac:68:7c:54:be:fd:31:a8:93:fe:80:62:65:82:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B9:B9:4B:82:96:43:A2:37:B7:5A:CC:79:63:80:4A:1F:94:0A:F5
X509v3 Authority Key Identifier:
keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:39:64:8c:60:19:2b:58:bc:ae:4b:fb:6f:b3:b3:a0:63:ec:
fb:b7:44:a3:eb:5f:3d:28:91:dc:67:79:22:cb:40:39:e2:e4:
67:9a:71:5b:35:2f:5e:e4:80:e7:4e:97:da:3a:86:ae:ac:73:
e8:7c:bf:8c:c1:12:f6:ce:6f:7e:06:b6:8a:16:e1:09:5c:c2:
c9:d6:78:c3:ff:72:2c:f8:8c:70:54:99:27:cb:c5:80:41:9d:
a8:ed:63:93:cc:fa:0d:6f:11:e0:49:68:86:64:62:9a:bd:9f:
f4:d2:f2:14:e0:19:62:9d:02:19:da:7b:de:49:69:aa:97:4e:
3f:ee:da:01:b0:4e:6b:b0:1f:86:4e:51:b3:25:ba:b0:b4:c4:
48:85:6b:b6:ab:48:ed:b3:17:88:86:08:05:9b:73:e2:88:9f:
a8:e9:08:3b:61:ee:dc:fc:b3:23:21:56:23:b1:c2:8b:a6:a0:
dc:5f:10:27:f5:18:25:d0:23:82:13:cf:ae:ef:34:52:e6:82:
62:fd:69:b2:ae:b0:95:88:ed:d9:50:3c:6a:ab:88:7d:dd:3b:
02:8c:93:62:d4:3d:47:40:d6:f7:ff:92:a8:f4:a3:35:34:a9:
03:6d:5e:26:8f:f1:ba:38:cd:02:8e:b5:b8:1d:9b:49:57:8e:
4d:21:b1:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0OkL7HydrSeAzGelRCzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NzM1ZWIyY2QyYzRkOGNmNWJmM2Q3NTA3ZDg0ZDYwMzU0
NWRmZTMwHhcNMjUxMTA1MDcwMDE0WhcNMjUxMTA2MDcwMDE0WjAzMTEwLwYDVQQD
Eyg1YmI5Yjk0YjgyOTY0M2EyMzdiNzVhY2M3OTYzODA0YTFmOTQwYWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOzmMxedbt68Zmx//mXqzPCRKNkV
7nWYQFdXRCKhEw/KZBM3tmntlysGM9+655raNfcysMNxItY+DiOFWO5Qq6HCv/ZD
oglYrteLfu52lGm6A0yvSMIVw3Fib6XVwkQULF9qmsT/GdPUJUXJ9ARRI6x5prAY
vdS2fBD4Zt/gCGtS0AgG/wcTctN0RaSS/HmjHEKHXOSmToU6pBduuGdc6nl0g1dm
uuok0RM+ifYMIkW6rAvmpa97s7Sx7dk7oYmAdqDYL6UC/9HF2k44lMYIvEf7TWjW
TtRoOblAiOE9V7DVA1YgrJ/osExWH+vcAHHQrGh8VL79MaiT/oBiZYKQ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFu5uUuClkOiN7dazHljgEoflAr1MB8GA1UdIwQY
MBaAFLhzXrLNLE2M9b89dQfYTWA1Rd/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8yMmRjYzgtZTI3Mi00ODllLTg4NmUt
YjRkY2Y4Y2VhMzVhLzEvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8yMmRjYzgtZTI3Mi00ODllLTg4NmUtYjRkY2Y4Y2VhMzVh
LzEvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzlkjGAZ
K1i8rkv7b7OzoGPs+7dEo+tfPSiR3Gd5IstAOeLkZ5pxWzUvXuSA506X2jqGrqxz
6Hy/jMES9s5vfga2ihbhCVzCydZ4w/9yLPiMcFSZJ8vFgEGdqO1jk8z6DW8R4Elo
hmRimr2f9NLyFOAZYp0CGdp73klpqpdOP+7aAbBOa7Afhk5RsyW6sLTESIVrtqtI
7bMXiIYIBZtz4oifqOkIO2Hu3PyzIyFWI7HCi6ag3F8QJ/UYJdAjghPPru80UuaC
Yv1psq6wlYjt2VA8aquIfd07AoyTYtQ9R0DW9/+SqPSjNTSpA21eJo/xujjNAo61
uB2bSVeOTSGxWQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:19:35 2025 by rpki-client