Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File: uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier: pBHl5ira846H4knOrmSX6HUsCPC0m/69OgquT6kdYuc=
Subject key identifier: 66:BF:04:8A:87:BE:8A:40:44:6A:C4:B2:B6:88:F2:D1:0E:1F:5F:78
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial: 019A4D066A54064466ABE3E97C952BAC17F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 04:00:57 +0000
Manifest this update: Tue 04 Nov 2025 04:00:57 +0000
Manifest next update: Wed 05 Nov 2025 04:00:57 +0000
Files and hashes: 1: DcxV2Ja9K-zHvG6LH4NvtzIy1nk.roa (hash: /62oYziaLdSG11/y5rZiLPbV2bYO0W8kgYnInVqSzt8=)
2: GvejnjlTXcBw3hFvJDpNgstBnAQ.roa (hash: mGf6PRUxWjZm6nnbhcxXtuiNF2f40d+lyo3uybi/AYg=)
3: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=)
4: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: +L99Pj4pS/9VCYmeJ/ln4E+uOOU+xJxTphFadZVyGs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:6a:54:06:44:66:ab:e3:e9:7c:95:2b:ac:17:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb190d102ac9603b405b36374d429868604937af
Validity
Not Before: Nov 4 04:00:57 2025 GMT
Not After : Nov 5 04:00:57 2025 GMT
Subject: CN=66bf048a87be8a40446ac4b2b688f2d10e1f5f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:62:05:71:56:42:8e:27:86:39:c4:2b:16:
5a:07:02:d0:71:98:4f:2e:c6:bf:d1:3e:c0:de:4a:
9a:60:1a:bc:c8:fc:a5:07:4c:80:8f:01:80:ba:40:
8b:05:c6:a6:1d:73:45:34:db:cb:9f:04:01:73:04:
c9:42:08:d9:54:a2:8b:00:31:2b:97:87:ed:a5:67:
5c:c4:fa:68:27:c1:d2:83:c6:d9:20:a7:f1:40:a4:
2f:2d:18:65:6a:fb:06:a7:cd:0b:57:5c:a1:05:05:
9c:1b:02:4f:dc:9f:db:c8:2c:00:23:5b:36:dc:22:
1f:cf:b6:d6:83:c8:84:9b:91:8e:f3:87:eb:00:cf:
82:65:1f:32:7a:29:13:b3:53:20:a2:cb:e7:f2:63:
86:43:4d:20:55:0d:7e:8e:af:f7:e4:77:ca:88:1f:
d9:90:79:de:5a:fb:69:62:74:54:be:e0:ce:a1:81:
1f:66:f2:cb:65:40:0e:85:f2:a6:87:ae:a2:d0:51:
97:0b:b4:91:04:89:6f:5e:49:62:5f:fb:10:cb:e7:
5d:b8:6e:e2:73:38:25:a8:87:86:0a:a0:80:87:59:
f5:4f:0a:56:a7:b3:9d:2a:7d:62:cc:4b:a4:84:2c:
01:1a:a1:12:b8:a5:89:f6:6b:8a:73:42:a7:40:a9:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BF:04:8A:87:BE:8A:40:44:6A:C4:B2:B6:88:F2:D1:0E:1F:5F:78
X509v3 Authority Key Identifier:
keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7f:b5:20:50:1b:9b:0b:45:8d:36:37:52:66:c0:b6:73:65:
fb:0c:d2:8e:80:49:db:7a:69:f1:5c:d3:c1:33:98:1d:af:08:
c0:19:11:e5:c2:8b:4d:3b:9d:02:6e:00:26:10:87:80:ec:68:
e1:74:f7:61:f3:4a:15:75:0f:a5:91:a6:dc:d3:ac:9e:a6:78:
fe:70:f6:44:f3:13:56:f1:90:3e:52:fd:76:c4:53:08:83:37:
e5:8a:0e:f0:02:c4:88:a4:bf:04:7d:69:3e:72:f6:80:d9:33:
06:93:24:03:98:38:95:9c:f0:67:bd:e6:2f:12:26:f3:f5:ba:
ae:ae:95:a3:e3:14:b2:a5:8f:18:85:d1:1e:fb:4b:3b:25:10:
23:b9:50:9e:f2:94:12:be:54:db:4a:7b:42:5b:c2:07:ba:61:
7d:de:a7:47:ec:8b:ba:00:1a:96:3d:52:ae:7d:84:a8:fd:81:
4e:46:df:73:11:2a:2b:23:c7:62:a9:6e:9a:f8:9a:b5:ef:e0:
73:9a:a6:5f:c0:a7:7e:b4:d8:57:d6:b7:ff:4f:61:23:b8:b8:
a2:05:e6:fa:9a:0b:08:37:9c:6c:83:ec:11:ef:f4:ef:02:ab:
12:5e:2a:0b:21:ed:32:74:41:50:32:92:d6:06:96:8b:91:d2:
a0:b6:73:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBmpUBkRmq+PpfJUrrBf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0
OTM3YWYwHhcNMjUxMTA0MDQwMDU3WhcNMjUxMTA1MDQwMDU3WjAzMTEwLwYDVQQD
Eyg2NmJmMDQ4YTg3YmU4YTQwNDQ2YWM0YjJiNjg4ZjJkMTBlMWY1Zjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU1iBXFWQo4nhjnEKxZaBwLQcZhP
Lsa/0T7A3kqaYBq8yPylB0yAjwGAukCLBcamHXNFNNvLnwQBcwTJQgjZVKKLADEr
l4ftpWdcxPpoJ8HSg8bZIKfxQKQvLRhlavsGp80LV1yhBQWcGwJP3J/byCwAI1s2
3CIfz7bWg8iEm5GO84frAM+CZR8yeikTs1Mgosvn8mOGQ00gVQ1+jq/35HfKiB/Z
kHneWvtpYnRUvuDOoYEfZvLLZUAOhfKmh66i0FGXC7SRBIlvXkliX/sQy+dduG7i
czglqIeGCqCAh1n1TwpWp7OdKn1izEukhCwBGqESuKWJ9muKc0KnQKn4PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGa/BIqHvopARGrEsraI8tEOH194MB8GA1UdIwQY
MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt
ZTkzZTJlYmE2OWI5LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5
LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHH+1IFAb
mwtFjTY3UmbAtnNl+wzSjoBJ23pp8VzTwTOYHa8IwBkR5cKLTTudAm4AJhCHgOxo
4XT3YfNKFXUPpZGm3NOsnqZ4/nD2RPMTVvGQPlL9dsRTCIM35YoO8ALEiKS/BH1p
PnL2gNkzBpMkA5g4lZzwZ73mLxIm8/W6rq6Vo+MUsqWPGIXRHvtLOyUQI7lQnvKU
Er5U20p7QlvCB7phfd6nR+yLugAalj1Srn2EqP2BTkbfcxEqKyPHYqlumviate/g
c5qmX8CnfrTYV9a3/09hI7i4ogXm+poLCDecbIPsEe/07wKrEl4qCyHtMnRBUDKS
1gaWi5HSoLZzAA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:46 2025 by rpki-client