Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: jnWBfL6jyi8sYY7zHBmKtM4yoMUVYhmfNfHTfdSsNAo=
Subject key identifier: E4:2C:0F:32:63:C7:91:62:A8:43:3A:08:CA:4C:8A:57:AD:A8:FA:C3
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 019A503DDC9715F3FA007240BEC37E9D9517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 16E0
Signing time: Tue 04 Nov 2025 19:00:22 +0000
Manifest this update: Tue 04 Nov 2025 19:00:22 +0000
Manifest next update: Wed 05 Nov 2025 19:00:22 +0000
Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: RN/wcrM/gHYKEn+2P6tmkVwwWeTOJhXWj7r7LqiEuzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:dc:97:15:f3:fa:00:72:40:be:c3:7e:9d:95:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Nov 4 19:00:22 2025 GMT
Not After : Nov 5 19:00:22 2025 GMT
Subject: CN=e42c0f3263c79162a8433a08ca4c8a57ada8fac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:8f:f2:fc:30:d9:84:f9:52:17:0e:d6:bf:
f1:2e:4c:e9:c5:ac:1d:05:d8:29:06:97:03:9d:e4:
59:88:d5:41:a7:99:73:b5:37:6d:b2:72:0b:23:9b:
35:9e:86:2a:11:e3:fc:41:3d:eb:15:99:89:a6:b6:
84:e7:70:8c:f6:22:78:ab:6f:26:26:98:e1:b2:5f:
f2:c0:e6:c5:51:dc:40:64:15:b6:55:32:71:f6:ff:
ee:b9:c5:13:68:3f:51:a7:80:e8:a3:80:2f:f1:b2:
9d:89:a8:49:55:10:ec:3a:27:35:47:dd:d5:a6:e4:
11:98:d1:a3:64:a3:7c:46:7d:af:59:9f:14:60:1b:
9d:2a:9e:0c:59:ab:53:e2:1a:d8:c3:51:af:50:fb:
0c:dc:66:0f:3d:b9:06:c3:07:50:df:81:b7:bd:37:
1a:c6:87:e7:02:18:0e:60:0f:7a:2d:7f:7c:8d:34:
07:f2:fe:f6:89:9c:af:40:41:e8:5c:23:10:ba:d9:
99:61:e5:8c:a7:57:25:ec:3b:b4:9c:a9:bf:ac:4f:
3a:79:41:01:e1:f5:43:ce:af:1e:f7:83:be:d8:22:
d4:44:42:f3:03:2f:96:64:48:c0:ad:ec:65:6b:86:
1b:d4:29:94:b0:0f:85:10:96:e3:06:90:aa:f0:fd:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2C:0F:32:63:C7:91:62:A8:43:3A:08:CA:4C:8A:57:AD:A8:FA:C3
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:51:a1:97:ad:3e:cf:36:32:d5:1c:9d:e1:41:dc:de:9e:48:
9d:0e:23:9f:dd:cf:c2:33:18:58:82:a8:94:7c:e2:b8:d4:84:
c7:e5:d5:74:6b:2e:95:c4:40:fb:cb:6e:dd:03:7a:78:dd:38:
19:2d:08:7d:a7:55:03:97:14:70:c0:b0:28:3a:eb:24:fb:79:
4f:42:80:ea:8d:79:42:c0:cf:9f:c1:bc:24:47:d0:26:81:aa:
eb:20:6c:8d:c2:3a:4b:b7:43:4c:18:78:ed:23:7d:c0:c9:32:
94:f6:7c:b5:a7:40:d1:d6:aa:c7:8e:bd:77:a3:8b:08:c1:8b:
21:d2:16:5b:d8:2f:19:4a:e4:2c:7b:a8:01:57:33:cb:fe:da:
4e:29:4b:2c:e1:1c:ee:c1:29:14:71:c2:1e:8a:0a:c1:e5:3c:
27:3b:90:e3:ef:93:8c:a7:d6:d4:4e:d9:18:ba:4d:9a:99:d0:
1b:c2:6d:9c:3e:e7:dd:89:f8:59:02:af:47:1e:6d:31:86:f4:
35:22:91:e9:ff:59:47:58:75:1f:8e:74:d8:7c:ac:f3:3d:61:
fe:58:c4:06:3c:d8:46:99:77:15:b0:16:f7:5c:0e:93:56:1a:
4e:4f:37:28:52:1d:aa:23:58:f4:d7:28:1a:88:2a:ec:2e:f0:
c7:42:f0:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPdyXFfP6AHJAvsN+nZUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzkwYjEzYzllZjRhZmNmZDA4MTI0MTExZTZmNjNkYzMw
MTY1YWEwHhcNMjUxMTA0MTkwMDIyWhcNMjUxMTA1MTkwMDIyWjAzMTEwLwYDVQQD
EyhlNDJjMGYzMjYzYzc5MTYyYTg0MzNhMDhjYTRjOGE1N2FkYThmYWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJyP8vww2YT5UhcO1r/xLkzpxawd
BdgpBpcDneRZiNVBp5lztTdtsnILI5s1noYqEeP8QT3rFZmJpraE53CM9iJ4q28m
Jpjhsl/ywObFUdxAZBW2VTJx9v/uucUTaD9Rp4Doo4Av8bKdiahJVRDsOic1R93V
puQRmNGjZKN8Rn2vWZ8UYBudKp4MWatT4hrYw1GvUPsM3GYPPbkGwwdQ34G3vTca
xofnAhgOYA96LX98jTQH8v72iZyvQEHoXCMQutmZYeWMp1cl7Du0nKm/rE86eUEB
4fVDzq8e94O+2CLURELzAy+WZEjArexla4Yb1CmUsA+FEJbjBpCq8P243QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQsDzJjx5FiqEM6CMpMiletqPrDMB8GA1UdIwQY
MBaAFFM5CxPJ70r8/QgSQRHm9j3DAWWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAt
MzNkN2FjMzcwOTc5LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAtMzNkN2FjMzcwOTc5
LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFGhl60+
zzYy1Ryd4UHc3p5InQ4jn93PwjMYWIKolHziuNSEx+XVdGsulcRA+8tu3QN6eN04
GS0IfadVA5cUcMCwKDrrJPt5T0KA6o15QsDPn8G8JEfQJoGq6yBsjcI6S7dDTBh4
7SN9wMkylPZ8tadA0daqx469d6OLCMGLIdIWW9gvGUrkLHuoAVczy/7aTilLLOEc
7sEpFHHCHooKweU8JzuQ4++TjKfW1E7ZGLpNmpnQG8JtnD7n3Yn4WQKvRx5tMYb0
NSKR6f9ZR1h1H4502Hys8z1h/ljEBjzYRpl3FbAW91wOk1YaTk83KFIdqiNY9Nco
Gogq7C7wx0LwZQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:24:42 2025 by rpki-client