Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier: +MdAjwr3MWufyTw5xdcDKJiaXqv7Tzm7/5RXsed0U8A=
Subject key identifier: 3A:E7:B9:68:BF:B9:83:07:57:89:AE:7D:D4:32:9D:26:04:69:AE:5B
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial: 019A56AEE06FF5A0C459AE0A486AC70B7E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number: 0FCC
Signing time: Thu 06 Nov 2025 01:01:32 +0000
Manifest this update: Thu 06 Nov 2025 01:01:32 +0000
Manifest next update: Fri 07 Nov 2025 01:01:32 +0000
Files and hashes: 1: P77Q3SiMGocGRB6eMcUK3MHjTkI.roa (hash: s4PL8KdADdPsj9L9e3HHEkTIVlBNiN0s/bQOnwu+zOw=)
2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: g0ozy7NySgEegQAiKwmYXxqS74O+PwLSGKUB4o1k8Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ae:e0:6f:f5:a0:c4:59:ae:0a:48:6a:c7:0b:7e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Validity
Not Before: Nov 6 01:01:32 2025 GMT
Not After : Nov 7 01:01:32 2025 GMT
Subject: CN=3ae7b968bfb983075789ae7dd4329d260469ae5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7c:f8:f4:92:a2:6b:76:65:3e:12:5d:c7:e5:
b8:3e:34:7e:d0:61:dc:b4:e4:90:ac:a0:13:b2:f5:
2d:57:92:39:87:72:01:5a:f0:4f:c6:5e:a2:15:09:
82:f6:41:64:59:58:ab:36:95:7d:41:dc:9d:39:42:
b1:4d:b1:b2:45:43:11:98:b9:76:52:0e:39:cc:63:
9f:cb:bd:c2:86:61:35:33:df:d9:50:af:ca:03:3c:
b4:d2:ab:ae:a6:b4:f1:f2:41:f5:09:d8:39:98:ce:
5d:88:a1:a9:9e:63:39:44:24:dd:9f:ee:6d:8d:13:
43:77:5f:cb:1d:84:26:46:ad:4b:2a:27:ef:ba:68:
cc:0d:a8:91:b6:b4:8f:20:01:3e:3e:ff:18:39:78:
cd:ec:ef:a5:9f:61:2b:fa:f0:9c:ab:f1:9e:ed:f3:
1d:a4:16:5f:50:e1:69:e3:25:08:41:9c:7b:25:7c:
fe:eb:e9:fd:b8:f8:b8:29:75:8d:96:f5:8d:48:01:
d1:17:cb:d1:fe:4a:14:fc:f8:e0:96:a1:db:f5:8b:
62:d3:d6:c9:86:2d:6f:b8:14:30:4d:63:bb:cf:c5:
a8:92:54:ee:98:60:1b:54:34:bb:3a:c6:52:76:ba:
5b:7a:b5:57:31:29:fb:bf:c1:1e:0e:09:73:da:e8:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:B9:68:BF:B9:83:07:57:89:AE:7D:D4:32:9D:26:04:69:AE:5B
X509v3 Authority Key Identifier:
keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5c:e2:7b:1b:3c:e9:f0:ff:7a:fc:01:4b:11:45:5c:b8:d5:
72:60:28:64:bc:00:c1:66:77:d8:b0:7e:42:ec:d6:e2:3e:08:
4c:d9:7a:31:12:37:e1:bb:77:96:58:aa:1a:26:b7:90:07:23:
b1:a7:d1:b9:8e:f5:bb:c9:e6:17:6a:85:7f:b0:d9:ff:ab:40:
d3:5d:24:2a:bc:10:07:f5:f2:34:b7:27:38:1a:39:23:d9:31:
83:6f:87:cc:6e:03:9b:a4:81:03:73:64:b6:e2:1c:4a:0a:72:
0e:48:ac:86:26:82:98:f5:3d:ce:62:e7:3c:40:06:6a:83:70:
48:07:62:07:7c:20:12:4d:a7:4b:b1:92:2c:d4:e1:a9:e9:33:
b9:72:8e:21:c7:b4:70:ee:7f:19:b4:f0:d7:b3:ba:b5:7a:35:
b3:9c:e7:f3:27:cb:f4:fc:fa:ce:ed:f9:69:b5:4c:5d:10:93:
9d:d5:2d:c5:e5:ac:4a:f8:e5:29:7d:eb:83:0f:c3:ef:8c:dd:
28:49:84:f8:1c:4d:98:aa:03:0f:f2:e6:09:90:e5:06:b0:3c:
24:60:71:b4:31:96:71:c4:0b:ae:92:5b:57:9a:d5:fb:35:b4:
63:8a:07:73:c5:07:f1:6f:09:18:da:1a:c5:dd:83:2a:3a:f8:
37:41:fe:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpWruBv9aDEWa4KSGrHC35jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDNlY2I4ZjcxMWUwYjkyYjUwNWI4YTBmN2E1ZWUwNDIy
OTEzOTUwHhcNMjUxMTA2MDEwMTMyWhcNMjUxMTA3MDEwMTMyWjAzMTEwLwYDVQQD
EygzYWU3Yjk2OGJmYjk4MzA3NTc4OWFlN2RkNDMyOWQyNjA0NjlhZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnz49JKia3ZlPhJdx+W4PjR+0GHc
tOSQrKATsvUtV5I5h3IBWvBPxl6iFQmC9kFkWVirNpV9QdydOUKxTbGyRUMRmLl2
Ug45zGOfy73ChmE1M9/ZUK/KAzy00quuprTx8kH1Cdg5mM5diKGpnmM5RCTdn+5t
jRNDd1/LHYQmRq1LKifvumjMDaiRtrSPIAE+Pv8YOXjN7O+ln2Er+vCcq/Ge7fMd
pBZfUOFp4yUIQZx7JXz+6+n9uPi4KXWNlvWNSAHRF8vR/koU/PjglqHb9Yti09bJ
hi1vuBQwTWO7z8WoklTumGAbVDS7OsZSdrpberVXMSn7v8EeDglz2uj6DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrnuWi/uYMHV4mufdQynSYEaa5bMB8GA1UdIwQY
MBaAFLjT7Lj3EeC5K1Bbig96XuBCKROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMt
YTE4NjFlNTM1NDRkLzEvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMtYTE4NjFlNTM1NDRk
LzEvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFziexs8
6fD/evwBSxFFXLjVcmAoZLwAwWZ32LB+QuzW4j4ITNl6MRI34bt3lliqGia3kAcj
safRuY71u8nmF2qFf7DZ/6tA010kKrwQB/XyNLcnOBo5I9kxg2+HzG4Dm6SBA3Nk
tuIcSgpyDkishiaCmPU9zmLnPEAGaoNwSAdiB3wgEk2nS7GSLNThqekzuXKOIce0
cO5/GbTw17O6tXo1s5zn8yfL9Pz6zu35abVMXRCTndUtxeWsSvjlKX3rgw/D74zd
KEmE+BxNmKoDD/LmCZDlBrA8JGBxtDGWccQLrpJbV5rV+zW0Y4oHc8UH8W8JGNoa
xd2DKjr4N0H+Fw==
-----END CERTIFICATE-----
Generated at Thu Nov 6 07:41:03 2025 by rpki-client