Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: ZdIswQZCOwlKXzYZwJFHY6B8eYkM8ui+XrrGOdQ6X10=
Subject key identifier: 1E:B1:58:90:DE:A2:A3:33:17:28:6C:7A:F5:83:B7:FA:61:1C:09:86
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 019A4F61D9D5C775627F480BD7EC9CA5C8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 0F6D
Signing time: Tue 04 Nov 2025 15:00:03 +0000
Manifest this update: Tue 04 Nov 2025 15:00:03 +0000
Manifest next update: Wed 05 Nov 2025 15:00:03 +0000
Files and hashes: 1: 6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa (hash: 6xTcUx7aYzPFSdoIn+1iA2U6ilYMmAiW4t3gwfarhms=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: hAFqFycTLzj6gu2vm1ldiNYQfaUMYU3b1l8izCXd+Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:d9:d5:c7:75:62:7f:48:0b:d7:ec:9c:a5:c8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Nov 4 15:00:03 2025 GMT
Not After : Nov 5 15:00:03 2025 GMT
Subject: CN=1eb15890dea2a33317286c7af583b7fa611c0986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:1a:1b:c5:91:d4:c2:5c:58:02:6d:15:eb:
d9:fc:84:e3:bf:d8:d6:1e:9e:8a:cf:e2:28:52:90:
ae:fb:33:15:45:ef:18:8b:0d:bf:a3:83:e3:3d:b7:
e9:fd:b4:0f:8e:50:08:5f:ef:06:ec:fa:b6:9a:de:
0b:d0:9b:a3:88:d4:d9:13:32:cb:6e:68:aa:bd:9e:
f4:34:f4:bd:12:dd:92:c4:88:f2:b8:4a:14:84:a2:
95:c9:87:dc:8e:16:ee:4c:fe:59:d1:50:82:c7:ef:
4d:1d:62:8a:bf:07:bf:29:ae:ea:ef:08:5e:0f:1f:
25:90:f5:96:fe:fa:2e:29:17:fe:93:e6:6a:86:65:
4c:89:42:55:bf:a1:0d:26:40:95:0e:1d:94:94:07:
cc:16:cf:c8:e1:44:04:2d:e9:a2:14:bf:c2:62:17:
36:32:fe:4a:4a:6e:81:18:ca:00:ec:fa:2e:4b:4b:
60:39:31:d1:a6:c8:82:f3:69:3d:51:71:d4:70:94:
31:b5:c4:ac:7a:fa:6b:18:b8:e0:bf:25:89:8b:38:
2b:55:5d:3b:37:f0:47:8e:fa:c9:c6:68:12:c9:12:
71:37:f2:c0:50:50:52:ac:53:78:99:8e:22:ce:f0:
ba:a0:a9:5a:5e:9e:1d:ab:ef:02:48:53:82:1e:92:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:58:90:DE:A2:A3:33:17:28:6C:7A:F5:83:B7:FA:61:1C:09:86
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:21:32:1b:cc:18:3c:bd:2a:e3:a8:01:33:6c:06:d4:35:ed:
82:26:f0:e1:56:44:15:5d:f4:66:76:c7:b7:39:99:be:df:1d:
d9:b7:32:e8:fe:37:95:b2:39:cc:b7:39:4f:05:85:47:fd:80:
0c:4f:20:11:ce:24:46:60:d5:f4:71:37:32:1a:a4:d3:b2:95:
23:dd:ee:c8:9a:08:ce:da:00:38:85:29:65:90:bb:e0:68:23:
ef:32:de:4a:ad:c3:23:aa:c5:2f:83:60:b5:bb:a3:58:b3:5f:
a2:4a:81:f7:18:f7:cb:c2:2d:ed:8c:59:9c:4c:9c:95:1f:58:
67:de:9e:f5:f1:04:3a:2a:4e:fe:2e:f5:23:49:fe:c4:ee:3b:
78:cd:2a:34:e7:11:28:5c:55:89:08:91:21:36:df:12:7b:18:
38:02:ba:c2:89:9e:3c:15:a8:62:56:f1:fd:67:c4:ca:52:6c:
81:41:4f:8b:a2:33:16:05:55:20:96:df:19:93:ad:99:e8:63:
7a:30:cd:b4:3d:9e:32:c4:67:5f:1b:7e:cb:2e:0d:be:b9:93:
00:3c:57:12:ad:05:34:19:1b:e9:95:d2:9e:7e:c0:40:86:44:
e8:25:0a:fc:1b:b0:84:f8:04:15:5e:b8:88:7f:16:a8:09:6c:
de:98:a2:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYdnVx3Vif0gL1+ycpcjnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOTM0MzIzNTU4MWNmNDEwNDE5MGRhN2EwY2ExNzRiOWMw
ZDBiZDUwHhcNMjUxMTA0MTUwMDAzWhcNMjUxMTA1MTUwMDAzWjAzMTEwLwYDVQQD
EygxZWIxNTg5MGRlYTJhMzMzMTcyODZjN2FmNTgzYjdmYTYxMWMwOTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW0aG8WR1MJcWAJtFevZ/ITjv9jW
Hp6Kz+IoUpCu+zMVRe8Yiw2/o4PjPbfp/bQPjlAIX+8G7Pq2mt4L0JujiNTZEzLL
bmiqvZ70NPS9Et2SxIjyuEoUhKKVyYfcjhbuTP5Z0VCCx+9NHWKKvwe/Ka7q7whe
Dx8lkPWW/vouKRf+k+ZqhmVMiUJVv6ENJkCVDh2UlAfMFs/I4UQELemiFL/CYhc2
Mv5KSm6BGMoA7PouS0tgOTHRpsiC82k9UXHUcJQxtcSsevprGLjgvyWJizgrVV07
N/BHjvrJxmgSyRJxN/LAUFBSrFN4mY4izvC6oKlaXp4dq+8CSFOCHpJZ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6xWJDeoqMzFyhsevWDt/phHAmGMB8GA1UdIwQY
MBaAFFKTQyNVgc9BBBkNp6DKF0ucDQvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mYmJmOGQtMmM0My00MjlkLWI1Y2Qt
ZmNjMjIwNjQ0NTU4LzEvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9mYmJmOGQtMmM0My00MjlkLWI1Y2QtZmNjMjIwNjQ0NTU4
LzEvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCEyG8wY
PL0q46gBM2wG1DXtgibw4VZEFV30ZnbHtzmZvt8d2bcy6P43lbI5zLc5TwWFR/2A
DE8gEc4kRmDV9HE3Mhqk07KVI93uyJoIztoAOIUpZZC74Ggj7zLeSq3DI6rFL4Ng
tbujWLNfokqB9xj3y8It7YxZnEyclR9YZ96e9fEEOipO/i71I0n+xO47eM0qNOcR
KFxViQiRITbfEnsYOAK6womePBWoYlbx/WfEylJsgUFPi6IzFgVVIJbfGZOtmehj
ejDNtD2eMsRnXxt+yy4NvrmTADxXEq0FNBkb6ZXSnn7AQIZE6CUK/BuwhPgEFV64
iH8WqAls3piisQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:53 2025 by rpki-client