Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: Haw7wUybow4tvfV4rhetF3oWA5utyXBAe0JJIfwsGLc=
Subject key identifier: 45:5F:3E:FE:C2:84:4F:BB:D7:6B:DB:E0:AD:01:18:10:59:25:0C:6C
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 019A4D05EEDFD422AF7A1D408873976BB0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 03D9
Signing time: Tue 04 Nov 2025 04:00:25 +0000
Manifest this update: Tue 04 Nov 2025 04:00:25 +0000
Manifest next update: Wed 05 Nov 2025 04:00:25 +0000
Files and hashes: 1: cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa (hash: 9vivL0YwWhsXGDyDf4zb5XsV5Wh0saDdZDc2eObdPvk=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: 5OBZhXCzngl9H94wOVfloLYgz8VhMFc5X2B6wYvs0wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:ee:df:d4:22:af:7a:1d:40:88:73:97:6b:b0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Nov 4 04:00:25 2025 GMT
Not After : Nov 5 04:00:25 2025 GMT
Subject: CN=455f3efec2844fbbd76bdbe0ad01181059250c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:c2:73:4e:7d:fa:82:b5:80:af:ad:a5:9c:
5b:dc:e4:8a:14:ca:64:09:21:b9:f7:ac:39:ae:17:
6d:72:88:c9:d1:95:66:c0:32:6f:91:30:da:4c:83:
d1:55:f2:f1:45:44:25:88:0a:7b:c3:65:b1:c8:3e:
9c:2b:04:f7:4d:1e:24:23:e4:6e:7c:45:32:b9:7d:
b2:06:7a:4c:00:26:3e:07:27:58:71:6c:db:49:c4:
e4:36:f1:9c:06:f3:e6:0c:df:11:8b:19:5f:31:52:
a7:bb:3d:64:58:2c:2b:29:d1:d5:78:7b:2f:d8:f7:
b1:53:5d:e3:98:67:32:ce:13:cf:c9:92:4a:24:0f:
47:37:67:88:3d:0e:7c:21:a4:a8:b0:5e:ca:7f:a0:
d2:43:a5:f4:34:2a:f5:b7:9c:20:7c:ed:82:31:cc:
bd:4d:cc:53:03:5c:46:83:84:fe:31:db:23:67:9b:
77:84:e2:26:24:fc:f7:57:2b:49:86:a7:21:40:46:
4b:77:9d:f0:3b:08:e1:77:67:57:b6:b7:c2:64:9f:
23:cc:9f:8b:16:db:e1:70:b9:12:d1:15:38:b3:f4:
d3:49:85:ad:60:81:28:cc:c4:82:26:b6:6b:20:61:
98:e8:69:ad:72:75:1c:8a:68:97:b8:59:10:02:bc:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5F:3E:FE:C2:84:4F:BB:D7:6B:DB:E0:AD:01:18:10:59:25:0C:6C
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:92:f7:c6:3c:a0:7a:6f:c0:4d:c1:6e:56:19:d7:87:de:07:
bd:d9:73:40:19:29:ba:00:33:fc:be:7d:70:84:b2:b4:80:1c:
b8:23:5c:3e:0d:f3:d1:fe:4e:68:3d:76:22:61:ea:43:c9:e7:
d2:e3:20:d2:79:78:51:ef:9e:c6:5e:f8:4e:90:93:92:86:2a:
cb:f9:f8:7c:c0:70:8b:69:cf:38:d9:28:21:de:e5:e2:f6:13:
0e:f2:97:85:b4:e7:ca:9a:44:ae:0b:75:27:72:e5:d0:82:bb:
87:d6:43:14:8f:39:fd:1c:15:6a:2b:d8:16:ef:ca:de:59:63:
22:f3:be:3a:fd:08:3a:e7:ad:a2:e8:e6:20:34:84:62:3f:4f:
2b:34:8b:25:cc:9b:38:a0:a1:35:f3:7e:d8:96:97:80:06:93:
70:95:a2:6e:87:4d:5b:ee:aa:11:9c:2c:b3:8a:cb:69:9b:43:
67:ed:48:84:3f:dd:04:46:be:6b:9e:be:b8:d4:5b:c1:3c:b6:
ed:46:40:c7:07:f6:08:94:74:2d:d1:96:6d:38:58:15:39:27:
fe:0f:8c:b6:fd:cf:0e:23:07:a3:e9:e7:19:0d:ff:76:55:f0:
b8:49:6a:70:97:de:41:a5:59:00:e5:ae:8e:1d:14:04:f8:5b:
74:73:70:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBe7f1CKveh1AiHOXa7C9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTMwMzU5YjU0NjkxMTJlNmUyYmZhZTg1OTViMDU0ODU1
NTFkMzcwHhcNMjUxMTA0MDQwMDI1WhcNMjUxMTA1MDQwMDI1WjAzMTEwLwYDVQQD
Eyg0NTVmM2VmZWMyODQ0ZmJiZDc2YmRiZTBhZDAxMTgxMDU5MjUwYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxHCc059+oK1gK+tpZxb3OSKFMpk
CSG596w5rhdtcojJ0ZVmwDJvkTDaTIPRVfLxRUQliAp7w2WxyD6cKwT3TR4kI+Ru
fEUyuX2yBnpMACY+BydYcWzbScTkNvGcBvPmDN8RixlfMVKnuz1kWCwrKdHVeHsv
2PexU13jmGcyzhPPyZJKJA9HN2eIPQ58IaSosF7Kf6DSQ6X0NCr1t5wgfO2CMcy9
TcxTA1xGg4T+MdsjZ5t3hOImJPz3VytJhqchQEZLd53wOwjhd2dXtrfCZJ8jzJ+L
FtvhcLkS0RU4s/TTSYWtYIEozMSCJrZrIGGY6GmtcnUcimiXuFkQArySNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVfPv7ChE+712vb4K0BGBBZJQxsMB8GA1UdIwQY
MBaAFLmTA1m1RpES5uK/roWVsFSFVR03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTIt
YmU1ZjEyOWVhODFhLzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTItYmU1ZjEyOWVhODFh
LzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpL3xjyg
em/ATcFuVhnXh94HvdlzQBkpugAz/L59cISytIAcuCNcPg3z0f5OaD12ImHqQ8nn
0uMg0nl4Ue+exl74TpCTkoYqy/n4fMBwi2nPONkoId7l4vYTDvKXhbTnyppErgt1
J3Ll0IK7h9ZDFI85/RwVaivYFu/K3lljIvO+Ov0IOuetoujmIDSEYj9PKzSLJcyb
OKChNfN+2JaXgAaTcJWibodNW+6qEZwss4rLaZtDZ+1IhD/dBEa+a56+uNRbwTy2
7UZAxwf2CJR0LdGWbThYFTkn/g+Mtv3PDiMHo+nnGQ3/dlXwuElqcJfeQaVZAOWu
jh0UBPhbdHNwnA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:15 2025 by rpki-client