Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: OvkRt1qZIOvEKVpZhtKFgPIcPhwiBrM8tjY1xg4zToA=
Subject key identifier: F7:3A:97:4A:AA:5E:A4:DE:BD:D6:E1:42:C0:A4:56:9A:DE:AD:69:CD
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 019A5074ECDB0BF1EF97EE37F89FBA137303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 20:00:31 +0000
Manifest this update: Tue 04 Nov 2025 20:00:31 +0000
Manifest next update: Wed 05 Nov 2025 20:00:31 +0000
Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=)
2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: BB66S7L+SiiAVbcYiUIhflL3WD0eO2OV4TGzMY1PzY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:ec:db:0b:f1:ef:97:ee:37:f8:9f:ba:13:73:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Nov 4 20:00:31 2025 GMT
Not After : Nov 5 20:00:31 2025 GMT
Subject: CN=f73a974aaa5ea4debdd6e142c0a4569adead69cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:b4:91:67:04:7a:ed:37:fa:36:1f:95:20:
07:c6:f4:cd:01:d4:d3:ba:91:a5:d3:0d:dc:7e:67:
9b:3b:d9:57:45:7c:f7:ef:fa:08:5c:fa:35:7d:81:
b5:4e:24:d9:11:45:19:3c:04:38:b4:ff:67:18:c4:
0f:07:1e:56:21:8a:a6:73:9a:f4:36:65:31:82:bd:
e7:a8:1a:96:ee:39:72:f4:2a:02:92:ea:2a:c1:d4:
8d:cb:c2:70:f9:42:51:7a:bc:61:0b:4b:3a:28:b3:
7a:09:79:93:90:2b:ca:22:2d:a1:45:35:5a:6a:d9:
1b:1e:b1:04:a4:87:ad:bb:74:06:e0:1c:a7:50:9b:
bb:c3:ca:dd:15:3f:9a:98:76:05:5f:80:68:f6:3f:
6c:85:86:e0:55:39:bc:42:fb:84:21:56:2f:00:c9:
88:48:65:99:a1:af:53:5e:f6:e9:8b:9a:a2:f0:63:
3d:6b:7e:06:83:d2:34:08:d5:f7:db:78:b8:2f:f4:
cd:75:de:95:81:38:67:d2:4e:b1:1a:22:22:89:66:
9c:32:f7:3e:50:d6:a7:fe:e3:f9:73:be:39:12:ed:
3e:16:b6:ad:a4:2c:0d:34:b8:9c:2a:92:cc:27:2f:
a1:98:88:13:75:fc:a3:cf:10:f0:e3:ae:06:c4:e8:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3A:97:4A:AA:5E:A4:DE:BD:D6:E1:42:C0:A4:56:9A:DE:AD:69:CD
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:92:da:b4:7c:92:23:23:c2:33:c6:4f:db:b2:78:99:fb:21:
55:65:9b:2a:8d:c4:b3:36:8d:ec:b2:a7:cc:dd:65:1a:3a:40:
78:be:f7:9b:76:fd:25:f2:c7:17:56:95:b4:cd:68:cf:24:68:
16:c9:b4:69:56:7e:fb:d9:ec:9b:d0:c3:cc:6e:17:93:a9:2e:
3b:02:4e:fa:fb:e4:c3:8c:43:07:3f:2c:ca:f5:e9:c4:27:90:
55:88:4b:32:dc:b3:b1:77:e1:47:dd:80:40:12:f0:9f:c5:dd:
f2:a2:ef:37:31:3b:c9:f6:1e:ab:ee:26:0b:3a:4f:8b:f7:26:
bc:51:ce:0d:e0:7c:16:e4:2e:13:f4:b4:46:68:17:33:a0:3e:
3f:77:0f:55:0a:ee:10:03:0b:32:36:85:f8:71:d2:ac:ae:a6:
ca:aa:10:04:00:0d:1d:bb:c4:70:34:ed:75:23:84:ab:a8:d3:
eb:3c:90:51:78:fd:fb:ca:85:21:6f:a2:74:23:d9:a5:4a:ce:
50:3f:f5:e0:46:36:b1:de:79:70:b3:6c:c4:b2:46:c3:b8:5c:
b4:ea:85:bc:5b:b6:fa:51:9d:8d:16:9e:33:d4:1c:54:2b:06:
a1:f5:56:c8:f0:23:f6:13:a3:67:77:e3:f4:de:c1:69:0b:52:
9d:43:a1:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdOzbC/Hvl+43+J+6E3MDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTFjN2VkYmYxZDNjYzRmYjA3NTM4MWEzN2Y3NjI1NmI4
NzI4NWQwHhcNMjUxMTA0MjAwMDMxWhcNMjUxMTA1MjAwMDMxWjAzMTEwLwYDVQQD
EyhmNzNhOTc0YWFhNWVhNGRlYmRkNmUxNDJjMGE0NTY5YWRlYWQ2OWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3K0kWcEeu03+jYflSAHxvTNAdTT
upGl0w3cfmebO9lXRXz37/oIXPo1fYG1TiTZEUUZPAQ4tP9nGMQPBx5WIYqmc5r0
NmUxgr3nqBqW7jly9CoCkuoqwdSNy8Jw+UJRerxhC0s6KLN6CXmTkCvKIi2hRTVa
atkbHrEEpIetu3QG4BynUJu7w8rdFT+amHYFX4Bo9j9shYbgVTm8QvuEIVYvAMmI
SGWZoa9TXvbpi5qi8GM9a34Gg9I0CNX323i4L/TNdd6VgThn0k6xGiIiiWacMvc+
UNan/uP5c745Eu0+FratpCwNNLicKpLMJy+hmIgTdfyjzxDw464GxOhMGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPc6l0qqXqTevdbhQsCkVprerWnNMB8GA1UdIwQY
MBaAFLkRx+2/HTzE+wdTgaN/diVrhyhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQt
NjEzMDE3ODg2ZThiLzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQtNjEzMDE3ODg2ZThi
LzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5LatHyS
IyPCM8ZP27J4mfshVWWbKo3EszaN7LKnzN1lGjpAeL73m3b9JfLHF1aVtM1ozyRo
Fsm0aVZ++9nsm9DDzG4Xk6kuOwJO+vvkw4xDBz8syvXpxCeQVYhLMtyzsXfhR92A
QBLwn8Xd8qLvNzE7yfYeq+4mCzpPi/cmvFHODeB8FuQuE/S0RmgXM6A+P3cPVQru
EAMLMjaF+HHSrK6myqoQBAANHbvEcDTtdSOEq6jT6zyQUXj9+8qFIW+idCPZpUrO
UD/14EY2sd55cLNsxLJGw7hctOqFvFu2+lGdjRaeM9QcVCsGofVWyPAj9hOjZ3fj
9N7BaQtSnUOhzg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:10:40 2025 by rpki-client