Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: eOCWjn1B0YhMl+OKENDKgOH0ANbbczFYqmcf6Kmbl5E=
Subject key identifier: 74:4C:FE:7A:19:4F:E2:6B:F9:37:4B:C5:86:57:F6:AB:93:58:7F:14
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 019A503E5DE05D0D7FDA321C3540166C7F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 0333
Signing time: Tue 04 Nov 2025 19:00:55 +0000
Manifest this update: Tue 04 Nov 2025 19:00:55 +0000
Manifest next update: Wed 05 Nov 2025 19:00:55 +0000
Files and hashes: 1: MJaKjYCmx7hqbl_Sgp0HlxFEPTo.roa (hash: 7qpw/goTRYdFqZs/4SurZemQFQCz3pPQoJv09aj5YOE=)
2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: QJwoTtwn4MSCGRg8Cvv0L1afTsd37Vc+3tQlwark4o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:5d:e0:5d:0d:7f:da:32:1c:35:40:16:6c:7f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Nov 4 19:00:55 2025 GMT
Not After : Nov 5 19:00:55 2025 GMT
Subject: CN=744cfe7a194fe26bf9374bc58657f6ab93587f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:4b:aa:11:69:92:b7:42:af:61:00:37:e8:
4a:24:7a:46:76:b4:d6:29:19:a5:a8:78:49:68:cf:
08:d1:a4:da:35:f2:ee:cf:e0:44:db:b3:be:35:1b:
67:3e:10:9d:b5:d0:6f:0e:3b:0a:04:eb:91:e2:b7:
75:58:5a:1b:fd:1f:95:68:eb:75:e3:57:a2:2e:df:
e2:b5:57:f0:f5:e6:fd:f3:45:72:3b:69:c0:41:0e:
c0:43:1e:10:a5:c9:81:5b:fd:c7:ed:d0:72:97:d3:
3c:92:58:f9:4a:00:d6:2e:91:b6:b7:81:88:99:13:
9b:77:85:36:67:db:33:ac:b0:48:23:58:b9:05:84:
fa:1c:1f:a9:17:f5:68:61:7d:ad:da:0c:20:87:37:
03:e9:2c:1a:e7:4e:92:df:86:35:05:77:d7:1a:08:
70:42:34:22:fd:0f:b9:25:21:15:04:37:a1:0f:df:
00:20:9d:9c:8e:54:1d:a4:83:a9:05:29:d8:2b:f1:
fe:82:07:c8:3d:10:3d:0e:30:80:8a:54:df:27:93:
54:cc:8d:20:6d:91:e0:46:39:b6:8e:4c:91:a6:1b:
f5:5c:db:d0:6e:e7:a7:6e:65:4e:d9:0e:8b:4b:88:
f0:e3:68:54:31:03:4e:5b:65:02:fd:50:49:23:bd:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4C:FE:7A:19:4F:E2:6B:F9:37:4B:C5:86:57:F6:AB:93:58:7F:14
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:df:91:72:ea:ea:9b:5b:11:b6:4b:e1:b0:38:f4:1d:be:56:
8b:e8:84:51:36:d1:11:5f:b3:98:1b:8c:a3:aa:71:ca:d4:26:
ba:d4:8a:75:7a:a0:9a:aa:fc:fe:d4:da:3e:6c:e0:64:e2:5a:
40:a7:78:99:d6:43:e9:3e:f6:f5:6c:ac:ce:d8:6b:8a:c2:23:
c0:6e:82:94:4e:09:d4:70:de:80:39:ed:a4:f6:b5:74:4a:e2:
d2:01:d1:c8:09:12:2e:1a:e2:bf:59:ed:4f:f9:f6:e3:01:6f:
da:72:ed:d8:f6:5d:c9:9a:ba:fb:80:c8:03:35:1f:40:a0:51:
c6:ac:dc:9b:f5:0e:87:f7:c8:2c:13:09:8d:55:e2:c2:56:cc:
ae:44:1f:21:99:84:14:f7:32:78:27:4c:12:47:d4:49:39:cb:
da:ec:ee:c4:fa:dd:93:ec:07:73:2a:cf:c8:4d:b0:63:4e:dc:
76:93:3c:90:fa:9b:be:07:5d:4b:b9:1c:73:59:27:ec:6e:fa:
95:32:ef:69:40:50:dd:6f:74:97:66:1c:10:d5:1c:16:45:97:
21:90:ea:d0:2a:80:db:08:16:87:22:62:d9:d1:f5:e1:88:23:
4d:3e:66:f1:e3:75:47:e0:a2:83:a0:c5:db:14:10:79:e4:d8:
4b:4e:ab:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPl3gXQ1/2jIcNUAWbH9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNGY4NzlmM2Y5N2FkOGNkNzMxOTNkODA2OWU0OWIwMWI2
YmFkZGQwHhcNMjUxMTA0MTkwMDU1WhcNMjUxMTA1MTkwMDU1WjAzMTEwLwYDVQQD
Eyg3NDRjZmU3YTE5NGZlMjZiZjkzNzRiYzU4NjU3ZjZhYjkzNTg3ZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N5LqhFpkrdCr2EAN+hKJHpGdrTW
KRmlqHhJaM8I0aTaNfLuz+BE27O+NRtnPhCdtdBvDjsKBOuR4rd1WFob/R+VaOt1
41eiLt/itVfw9eb980VyO2nAQQ7AQx4QpcmBW/3H7dByl9M8klj5SgDWLpG2t4GI
mRObd4U2Z9szrLBII1i5BYT6HB+pF/VoYX2t2gwghzcD6Swa506S34Y1BXfXGghw
QjQi/Q+5JSEVBDehD98AIJ2cjlQdpIOpBSnYK/H+ggfIPRA9DjCAilTfJ5NUzI0g
bZHgRjm2jkyRphv1XNvQbuenbmVO2Q6LS4jw42hUMQNOW2UC/VBJI72FJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRM/noZT+Jr+TdLxYZX9quTWH8UMB8GA1UdIwQY
MBaAFK1Ph58/l62M1zGT2AaeSbAba63dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQt
OTRlZjE5NzA3MzgyLzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQtOTRlZjE5NzA3Mzgy
LzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAct+Rcurq
m1sRtkvhsDj0Hb5Wi+iEUTbREV+zmBuMo6pxytQmutSKdXqgmqr8/tTaPmzgZOJa
QKd4mdZD6T729WyszthrisIjwG6ClE4J1HDegDntpPa1dEri0gHRyAkSLhriv1nt
T/n24wFv2nLt2PZdyZq6+4DIAzUfQKBRxqzcm/UOh/fILBMJjVXiwlbMrkQfIZmE
FPcyeCdMEkfUSTnL2uzuxPrdk+wHcyrPyE2wY07cdpM8kPqbvgddS7kcc1kn7G76
lTLvaUBQ3W90l2YcENUcFkWXIZDq0CqA2wgWhyJi2dH14YgjTT5m8eN1R+Cig6DF
2xQQeeTYS06rEQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:00 2025 by rpki-client