Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: v7y5hqMf2F5IqoxVqPK1X51YkN6VQcfuJ1HMh5hNaaE=
Subject key identifier: FF:CD:E5:7E:10:10:D3:60:38:3C:1C:FE:53:7F:41:8A:B8:0E:F6:1A
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 019A53E43BAC62C4C807083396C03F79E761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 025F
Signing time: Wed 05 Nov 2025 12:00:57 +0000
Manifest this update: Wed 05 Nov 2025 12:00:57 +0000
Manifest next update: Thu 06 Nov 2025 12:00:57 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: mqENUSmJJGJez6ZERHMRUzfEVhugAlSmFZf2Dh+1gm4=)
2: ePyQopOScagWFzEkE8JnltAqMeo.roa (hash: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:3b:ac:62:c4:c8:07:08:33:96:c0:3f:79:e7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Nov 5 12:00:57 2025 GMT
Not After : Nov 6 12:00:57 2025 GMT
Subject: CN=ffcde57e1010d360383c1cfe537f418ab80ef61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:09:af:89:83:4e:2f:19:70:62:79:f9:c7:
5e:11:a1:74:27:68:f7:bc:d9:29:83:b7:e1:ff:a6:
42:c1:9a:c0:4d:97:64:27:be:01:a4:82:de:b2:51:
2d:d3:07:9f:82:ca:68:0c:12:3f:62:04:c4:b7:ee:
b6:28:c7:05:ef:89:7e:5f:c2:75:b2:9c:24:53:d2:
ef:a7:63:2e:a8:04:ed:6d:6a:c4:31:a4:92:53:27:
1b:32:35:35:21:9c:bd:8b:80:c8:ea:a5:28:54:ed:
73:4b:5e:c5:f7:5e:de:5e:fe:7c:79:08:93:7d:a2:
1b:63:06:a0:26:72:46:ba:c8:c5:ee:b2:d1:85:ba:
50:c1:67:40:7f:75:a6:ab:c4:5f:de:ae:07:7d:ce:
7d:75:b6:c9:dc:15:eb:5d:fc:c8:eb:ce:49:f0:9c:
61:42:03:01:a3:64:d4:ff:ae:8d:96:a4:ca:9e:e6:
e1:ce:7b:ae:a6:a8:46:fd:20:5e:cf:ed:d8:1a:08:
58:b1:55:2c:00:93:b2:34:5c:c1:2e:50:9a:89:f1:
ce:cb:21:74:59:f5:57:69:e2:9e:70:b1:a8:51:04:
79:8f:ca:09:35:31:4a:e3:b8:2b:53:d7:2b:74:18:
c7:4b:90:8f:98:be:05:2e:45:44:53:cb:62:d1:d4:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CD:E5:7E:10:10:D3:60:38:3C:1C:FE:53:7F:41:8A:B8:0E:F6:1A
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:59:64:ea:84:82:a0:18:3a:90:6b:e8:5b:45:db:46:64:03:
e2:d2:3a:19:eb:de:27:c5:97:bb:9a:ff:68:af:13:12:f6:9c:
28:ad:25:59:1d:08:67:4f:bc:b4:8e:00:ba:02:f5:6a:02:1f:
a4:a9:80:b6:f5:b9:2b:b6:ec:54:2e:e4:cf:7a:6d:53:bc:94:
28:40:16:65:73:07:55:50:f1:53:0d:0f:b1:08:d2:50:fc:e2:
16:4a:10:e4:a7:2e:ad:a5:a4:31:c5:c0:31:e5:43:d2:d0:b0:
b5:c7:fe:18:11:68:d2:73:42:6b:2d:e5:7c:fa:20:75:0a:4b:
e0:81:94:d6:bb:82:9c:a2:aa:8b:ca:a9:16:5f:20:79:95:40:
19:4c:02:6b:1b:2e:95:63:d7:ec:b1:95:a1:ed:c3:4e:74:ce:
0f:ed:6f:79:7d:e5:3a:4a:96:c7:c5:b2:04:cb:ab:06:7a:43:
5b:63:cc:57:81:8b:92:9e:67:c2:ff:c4:4b:c5:c4:fe:4c:d4:
5f:7e:b6:b6:6e:fa:05:0b:c9:28:ba:cf:c5:be:2b:cf:13:6b:
1f:dd:3b:b2:57:fa:13:fc:54:2a:17:91:1f:f7:2c:37:c8:ac:
2c:f0:73:12:85:cd:e8:3e:50:69:55:df:a1:49:ac:fe:32:98:
56:7d:84:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT5DusYsTIBwgzlsA/eedhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzVjYWM3MGExOThhODVmMzI0YmZlZGEwZjM1ZWQ3OTkx
YzJhZWIwHhcNMjUxMTA1MTIwMDU3WhcNMjUxMTA2MTIwMDU3WjAzMTEwLwYDVQQD
EyhmZmNkZTU3ZTEwMTBkMzYwMzgzYzFjZmU1MzdmNDE4YWI4MGVmNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAcJr4mDTi8ZcGJ5+cdeEaF0J2j3
vNkpg7fh/6ZCwZrATZdkJ74BpILeslEt0wefgspoDBI/YgTEt+62KMcF74l+X8J1
spwkU9Lvp2MuqATtbWrEMaSSUycbMjU1IZy9i4DI6qUoVO1zS17F917eXv58eQiT
faIbYwagJnJGusjF7rLRhbpQwWdAf3Wmq8Rf3q4Hfc59dbbJ3BXrXfzI685J8Jxh
QgMBo2TU/66NlqTKnubhznuupqhG/SBez+3YGghYsVUsAJOyNFzBLlCaifHOyyF0
WfVXaeKecLGoUQR5j8oJNTFK47grU9crdBjHS5CPmL4FLkVEU8ti0dSMRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/N5X4QENNgODwc/lN/QYq4DvYaMB8GA1UdIwQY
MBaAFFM1yscKGYqF8yS/7aDzXteZHCrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQt
ZjM0YThmNzJlZWM0LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQtZjM0YThmNzJlZWM0
LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVlk6oSC
oBg6kGvoW0XbRmQD4tI6GeveJ8WXu5r/aK8TEvacKK0lWR0IZ0+8tI4AugL1agIf
pKmAtvW5K7bsVC7kz3ptU7yUKEAWZXMHVVDxUw0PsQjSUPziFkoQ5KcuraWkMcXA
MeVD0tCwtcf+GBFo0nNCay3lfPogdQpL4IGU1ruCnKKqi8qpFl8geZVAGUwCaxsu
lWPX7LGVoe3DTnTOD+1veX3lOkqWx8WyBMurBnpDW2PMV4GLkp5nwv/ES8XE/kzU
X362tm76BQvJKLrPxb4rzxNrH907slf6E/xUKheRH/csN8isLPBzEoXN6D5QaVXf
oUms/jKYVn2Ekg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:54:35 2025 by rpki-client