Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
File: UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json)
Hash identifier: fAtY1+OLIS2hWr87gRsGj6TtWwM723hdI+1tlqYJIOU=
Subject key identifier: 20:8E:FC:4E:FD:33:EC:C4:F1:87:6F:9D:1B:DE:2D:6E:2B:A0:97:02
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 019A4F9963F4BB7B4C53212249D2F04B33E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
Manifest number: 168F
Signing time: Tue 04 Nov 2025 16:00:43 +0000
Manifest this update: Tue 04 Nov 2025 16:00:43 +0000
Manifest next update: Wed 05 Nov 2025 16:00:43 +0000
Files and hashes: 1: Dfg_6uPZGIobbDBwacwC_EIGO5Q.roa (hash: MNEfy6R5nPCa8pOdBJiq9jk5hqQVJGf5oHPySiSroIg=)
2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: EcJvJKB8h1UDt56aflSOySVCggKkplf3+29EY7OkYq0=)
3: uHo3NllV-K3w1G6p5rG7wnxalyc.roa (hash: 9Ww2h+p6zLKhFMgiZaAelr6XnjDP//hoNtiBUG9Lei4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:63:f4:bb:7b:4c:53:21:22:49:d2:f0:4b:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: Nov 4 16:00:43 2025 GMT
Not After : Nov 5 16:00:43 2025 GMT
Subject: CN=208efc4efd33ecc4f1876f9d1bde2d6e2ba09702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:bf:5a:3e:c7:eb:ef:25:36:57:49:26:9a:
d2:71:ac:ab:aa:bd:3f:3a:2f:86:03:fa:1e:e3:10:
4a:96:1b:69:0f:96:f8:58:bd:6c:a9:94:8a:64:63:
e6:8d:3b:b9:af:41:d4:35:b5:4f:74:5f:8c:23:a7:
67:9a:f8:fb:01:44:84:e1:d6:79:73:8d:26:33:38:
87:67:00:b2:88:de:8e:8c:f5:7b:fc:f8:cf:6c:b7:
e8:24:8e:1e:75:d4:1b:fc:69:aa:e3:c2:93:d9:4e:
6f:a3:e7:b5:3c:67:7b:d6:2c:0e:77:d1:5a:73:2a:
1a:58:b7:f0:85:2c:51:46:31:d0:85:75:27:37:59:
9c:e6:8f:29:74:01:4f:67:e7:7d:62:c3:80:29:b2:
62:f5:93:f6:b9:a6:71:ae:ee:fc:8f:ed:40:20:9b:
0a:61:08:68:97:83:e5:34:b3:f0:60:39:55:1f:96:
f3:34:35:80:83:6c:86:8f:f7:53:0b:ac:3d:48:4a:
b6:51:f0:9d:98:55:14:94:e3:7e:80:dd:62:fc:89:
e8:46:a5:38:a9:a1:10:5c:dd:3c:d4:ff:f5:62:3c:
69:5a:35:7f:6a:d0:7b:69:84:50:d2:d6:de:54:6c:
7d:70:93:85:9b:17:43:87:26:6c:7f:bd:b5:b4:dd:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8E:FC:4E:FD:33:EC:C4:F1:87:6F:9D:1B:DE:2D:6E:2B:A0:97:02
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:de:3d:9a:9e:32:2f:17:92:88:29:54:22:f4:72:e3:2f:ca:
ea:3f:ec:79:07:1c:9b:f4:48:ff:26:e7:57:2e:32:8e:e2:7d:
ac:f6:87:ce:85:d2:c1:62:5d:be:3b:a6:1c:62:5b:42:a1:fd:
b1:e2:45:a3:74:0b:85:22:f6:de:84:72:08:38:a1:c2:29:64:
aa:12:ea:7d:12:6b:39:ff:02:50:0c:c2:4f:5e:3d:ee:4a:d7:
d3:d9:b2:a4:ec:30:e2:43:a0:c9:2f:38:ff:44:cb:7b:58:7f:
58:a1:9a:5b:86:57:40:97:72:74:88:66:d0:18:e5:99:17:a9:
e1:7d:6e:d0:f2:26:07:a7:f5:51:81:4a:e6:11:8a:ba:60:e9:
91:bc:4d:3a:ed:fe:74:1d:70:67:8a:1b:56:28:bb:b3:20:ac:
48:d2:b6:5f:1c:be:dc:75:1c:a7:f6:95:c1:74:40:aa:09:94:
fb:4f:4c:9d:f1:bc:c2:ba:4f:da:c6:03:1e:db:b7:c7:d0:c2:
5e:c8:d3:53:b4:18:94:79:0c:9f:31:0b:e0:07:58:3e:48:da:
1f:e4:61:3d:30:9a:63:cf:b6:73:24:b0:d1:13:f8:b9:68:b7:
39:d1:bd:cc:7b:6f:0c:82:c7:e6:29:0a:09:22:6c:fa:97:58:
17:91:6c:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmWP0u3tMUyEiSdLwSzPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZWIwM2QyMTE5OTZlOTlhNDllM2MzZjljZTRiM2YyYTE1
NzIzYzUwHhcNMjUxMTA0MTYwMDQzWhcNMjUxMTA1MTYwMDQzWjAzMTEwLwYDVQQD
EygyMDhlZmM0ZWZkMzNlY2M0ZjE4NzZmOWQxYmRlMmQ2ZTJiYTA5NzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyee/Wj7H6+8lNldJJprScayrqr0/
Oi+GA/oe4xBKlhtpD5b4WL1sqZSKZGPmjTu5r0HUNbVPdF+MI6dnmvj7AUSE4dZ5
c40mMziHZwCyiN6OjPV7/PjPbLfoJI4eddQb/Gmq48KT2U5vo+e1PGd71iwOd9Fa
cyoaWLfwhSxRRjHQhXUnN1mc5o8pdAFPZ+d9YsOAKbJi9ZP2uaZxru78j+1AIJsK
YQhol4PlNLPwYDlVH5bzNDWAg2yGj/dTC6w9SEq2UfCdmFUUlON+gN1i/InoRqU4
qaEQXN081P/1YjxpWjV/atB7aYRQ0tbeVGx9cJOFmxdDhyZsf721tN0LYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCO/E79M+zE8YdvnRveLW4roJcCMB8GA1UdIwQY
MBaAFFLrA9IRmW6ZpJ48P5zks/KhVyPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVzRDBoR1picG1rbmp3X25PU3o4cUZYSThVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NjY3NmEtM2JhYy00YjZkLWE2Mzgt
OTZjZDQyZjBmOTViLzEvVXVzRDBoR1picG1rbmp3X25PU3o4cUZYSThVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82NjY3NmEtM2JhYy00YjZkLWE2MzgtOTZjZDQyZjBmOTVi
LzEvVXVzRDBoR1picG1rbmp3X25PU3o4cUZYSThVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAit49mp4y
LxeSiClUIvRy4y/K6j/seQccm/RI/ybnVy4yjuJ9rPaHzoXSwWJdvjumHGJbQqH9
seJFo3QLhSL23oRyCDihwilkqhLqfRJrOf8CUAzCT1497krX09mypOww4kOgyS84
/0TLe1h/WKGaW4ZXQJdydIhm0BjlmRep4X1u0PImB6f1UYFK5hGKumDpkbxNOu3+
dB1wZ4obVii7syCsSNK2Xxy+3HUcp/aVwXRAqgmU+09MnfG8wrpP2sYDHtu3x9DC
XsjTU7QYlHkMnzEL4AdYPkjaH+RhPTCaY8+2cySw0RP4uWi3OdG9zHtvDILH5ikK
CSJs+pdYF5FsUA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:15 2025 by rpki-client