Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
File: uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json)
Hash identifier: 4J6QMqfbTGlWiaEHzZdSf8rVZdUzXg0UO+qP327i7qs=
Subject key identifier: 28:5D:C9:D9:97:A3:B9:6C:64:5D:7E:3D:11:4E:8A:60:04:E0:61:00
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial: 019A4FD00EFB67F46083EA6EC3E1F4DC1BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 17:00:26 +0000
Manifest this update: Tue 04 Nov 2025 17:00:26 +0000
Manifest next update: Wed 05 Nov 2025 17:00:26 +0000
Files and hashes: 1: 4NKq_KYwCh8_wTbK61NtPt76P8I.roa (hash: mmA3nOgLzhGsU/7y4XASj7EI9JkBDcrnGGIkqWDOAYQ=)
2: 5NknPZb2YFjtunQlHWI_QMzdlKY.roa (hash: MgsBbLyiXdRHwov9hAncLGKeKv45suA9La+rVSC/C8U=)
3: EcXVeLZGF2isDVGR_npcyvVHtis.roa (hash: 74ii2z9H6EyEbd8UKPQgliXQbUTkT7bMVv5HyoTjEoI=)
4: MLMSeUg0Tn5acuTuB6POUwHtMC4.roa (hash: xJIvGvJF+baBBCFPe1lEWA46OVhv1WXXfc/yQpkBx7I=)
5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: nijTJiAamCiDvHxVzC3/kyijKsghFT3mVJ0q93AjinQ=)
6: vRCQ2oYv0pMSuRkskFBqpNokNQc.roa (hash: nfgafPbA1oV5746o00z5NyxG0STOqD8qAdDbAN/fIQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:0e:fb:67:f4:60:83:ea:6e:c3:e1:f4:dc:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Validity
Not Before: Nov 4 17:00:26 2025 GMT
Not After : Nov 5 17:00:26 2025 GMT
Subject: CN=285dc9d997a3b96c645d7e3d114e8a6004e06100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:03:ff:29:fb:85:6b:8a:1d:2a:b7:26:c5:
ee:21:bf:06:68:d4:d3:ad:3d:a7:63:6b:95:a1:b7:
c2:95:0a:18:7f:70:87:44:41:da:f6:66:1c:52:af:
59:15:5f:f7:3b:c1:e1:6c:2f:86:b5:b1:36:11:86:
1f:8f:43:20:a3:5e:75:fc:fb:92:fe:be:81:1a:6f:
72:df:be:f3:17:19:2d:3e:80:2e:9a:8c:47:9e:e0:
fd:22:e0:27:a3:79:b7:99:6d:dc:d7:3f:8d:39:c0:
ee:ab:07:fb:8c:93:30:92:a4:4d:36:8c:ea:cb:f4:
ed:48:85:e9:8d:5c:a7:ee:ae:7d:53:13:68:61:d8:
1f:c4:6c:90:33:3d:0f:a4:16:b6:3f:9f:6c:3e:83:
9b:15:ff:f5:93:2c:50:c2:9e:8e:70:4f:13:2d:46:
d7:de:2e:f6:9e:b4:d2:b4:39:3e:0a:62:06:76:11:
2d:4f:07:3e:b9:19:10:cd:f7:4c:14:45:9b:58:5c:
ed:35:25:e5:52:dc:8c:8d:de:cc:dc:b1:56:dd:47:
15:55:56:78:b9:51:67:59:49:50:e5:5d:2c:4d:ec:
e9:a1:9f:d5:a3:d5:cf:44:cc:79:c5:0b:a6:6f:d9:
86:88:cb:ac:e8:e0:da:79:b6:94:13:ac:48:2e:d7:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5D:C9:D9:97:A3:B9:6C:64:5D:7E:3D:11:4E:8A:60:04:E0:61:00
X509v3 Authority Key Identifier:
keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f4:12:6c:49:7f:4c:cc:f1:d3:53:6d:43:ea:01:88:22:8d:
30:5f:94:3b:b7:ca:ea:a2:e3:bb:9f:c7:f2:c8:f7:d4:1a:7b:
3e:fe:48:98:38:18:1d:04:89:cb:39:13:46:bf:c6:73:db:70:
74:ef:e2:01:b2:ea:61:a3:3a:ee:86:89:07:47:18:d5:f5:5c:
87:98:45:58:29:38:07:84:24:d8:72:53:7d:0b:5b:a6:02:42:
53:05:a7:b9:14:87:55:90:ab:53:2a:69:8c:60:81:38:21:62:
3a:37:7c:d3:97:ac:b9:ca:55:62:bb:9b:69:49:a0:76:2a:3f:
6d:f6:38:31:d6:0e:ad:b7:a7:99:51:74:84:85:ef:06:8c:a6:
92:03:eb:e2:18:54:1b:a7:c9:59:bf:b3:80:13:5a:00:3c:3a:
80:ae:e8:6b:90:92:da:72:ab:07:00:11:88:b0:cd:8c:c1:2b:
5e:a0:e7:11:d8:f9:1c:1b:2d:5c:aa:bc:eb:cc:54:1f:08:75:
89:3f:ad:44:cc:fd:7e:4f:6c:7e:5c:57:ec:4e:f8:a6:06:1a:
cb:fa:fc:bd:46:bd:45:1f:77:f7:5d:12:39:e9:92:db:b1:19:
75:0c:ba:f1:0c:46:f3:63:45:61:42:1d:aa:9a:0e:27:2e:07:
88:3b:a7:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0A77Z/Rgg+puw+H03BvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDI1MWM0YmZkNTI2ZGEwNjJkNGNlMmFmNTZiNmU0NmU5
MjUxMTcwHhcNMjUxMTA0MTcwMDI2WhcNMjUxMTA1MTcwMDI2WjAzMTEwLwYDVQQD
EygyODVkYzlkOTk3YTNiOTZjNjQ1ZDdlM2QxMTRlOGE2MDA0ZTA2MTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20AD/yn7hWuKHSq3JsXuIb8GaNTT
rT2nY2uVobfClQoYf3CHREHa9mYcUq9ZFV/3O8HhbC+GtbE2EYYfj0Mgo151/PuS
/r6BGm9y377zFxktPoAumoxHnuD9IuAno3m3mW3c1z+NOcDuqwf7jJMwkqRNNozq
y/TtSIXpjVyn7q59UxNoYdgfxGyQMz0PpBa2P59sPoObFf/1kyxQwp6OcE8TLUbX
3i72nrTStDk+CmIGdhEtTwc+uRkQzfdMFEWbWFztNSXlUtyMjd7M3LFW3UcVVVZ4
uVFnWUlQ5V0sTezpoZ/Vo9XPRMx5xQumb9mGiMus6ODaebaUE6xILtd7FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChdydmXo7lsZF1+PRFOimAE4GEAMB8GA1UdIwQY
MBaAFLjSUcS/1SbaBi1M4q9WtuRuklEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAt
NDJiM2Q2OGI1Njc2LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAtNDJiM2Q2OGI1Njc2
LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPQSbEl/
TMzx01NtQ+oBiCKNMF+UO7fK6qLju5/H8sj31Bp7Pv5ImDgYHQSJyzkTRr/Gc9tw
dO/iAbLqYaM67oaJB0cY1fVch5hFWCk4B4Qk2HJTfQtbpgJCUwWnuRSHVZCrUypp
jGCBOCFiOjd805esucpVYrubaUmgdio/bfY4MdYOrbenmVF0hIXvBoymkgPr4hhU
G6fJWb+zgBNaADw6gK7oa5CS2nKrBwARiLDNjMErXqDnEdj5HBstXKq868xUHwh1
iT+tRMz9fk9sflxX7E74pgYay/r8vUa9RR93910SOemS27EZdQy68QxG82NFYUId
qpoOJy4HiDunlg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:59:56 2025 by rpki-client