Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
File: Uz39bMFAxoo9O7qGulfPO4umqbc.mft (raw, json)
Hash identifier: zpWfUzSid48TrdeGT4himV6TPEEqnoPRo/mS1JFt2B8=
Subject key identifier: 82:52:A1:D7:B7:6C:D2:38:77:3E:12:CF:E6:22:D7:0B:11:97:4F:02
Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Certificate serial: 019A50E27F5216899103236628F817DECD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
Manifest number: 1254
Signing time: Tue 04 Nov 2025 22:00:12 +0000
Manifest this update: Tue 04 Nov 2025 22:00:12 +0000
Manifest next update: Wed 05 Nov 2025 22:00:12 +0000
Files and hashes: 1: LuBsqNtq59OLv1AWHpkXInch_bk.roa (hash: IW1LLIgf30eZrheSzd/U0PwBqHlPoD/7QK4BJgtpt6w=)
2: Uz39bMFAxoo9O7qGulfPO4umqbc.crl (hash: qz7ZtrOxpdf8V2+KR1xC+K0TQo9z2fn1iET5hzI8EXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:7f:52:16:89:91:03:23:66:28:f8:17:de:cd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Validity
Not Before: Nov 4 22:00:12 2025 GMT
Not After : Nov 5 22:00:12 2025 GMT
Subject: CN=8252a1d7b76cd238773e12cfe622d70b11974f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:2f:c3:b2:e3:92:4a:29:85:96:89:d3:7e:
07:ca:7b:77:99:2f:f9:b8:c7:87:5c:2f:62:ff:86:
18:9c:75:76:e6:af:cc:ac:26:f9:fe:0b:05:dc:70:
c4:b0:39:ff:e5:7e:04:f8:f6:a7:51:a2:21:f6:86:
b7:52:bb:f8:52:8c:e6:46:bb:3e:ad:c2:9a:1a:36:
de:ef:72:2a:9f:6a:5f:a2:42:77:82:24:c1:30:94:
b3:29:15:a9:91:d4:38:ed:36:61:35:2c:35:00:12:
c4:f3:6b:b7:e5:00:50:1a:9a:43:f4:23:c6:55:8c:
09:d6:3e:f2:e5:93:d9:e5:e9:f8:06:58:c0:8a:6c:
5b:1b:e1:33:3a:a7:c5:aa:85:9a:58:c4:59:fd:ce:
c3:b7:82:0e:fb:74:ee:c8:a6:b4:e7:b4:b8:1d:f2:
05:18:70:f7:bc:96:d3:f3:7c:fc:63:eb:c9:08:0c:
3f:c7:10:01:24:30:16:d5:06:ec:0c:2a:82:77:9f:
f3:94:70:09:05:fd:a7:51:69:bc:8b:48:d5:70:52:
30:49:0a:67:f2:ce:65:16:ae:5a:af:02:16:0c:60:
ed:fa:53:53:65:d8:26:93:c4:39:0c:b6:4b:90:c8:
72:c7:d1:ab:14:92:49:64:be:6d:d4:b4:ce:30:f7:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:52:A1:D7:B7:6C:D2:38:77:3E:12:CF:E6:22:D7:0B:11:97:4F:02
X509v3 Authority Key Identifier:
keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b0:a1:28:8f:b2:7c:bb:d1:24:a6:5f:21:47:54:1c:e7:1c:
9d:38:e8:34:1f:70:dc:7b:26:91:35:3d:7a:40:d2:9c:66:c7:
d1:e8:14:74:b6:83:5b:9d:97:c8:6b:61:38:43:60:11:f3:71:
ee:75:17:97:3d:de:b1:d8:8e:4c:56:5c:a2:70:5b:d0:f3:14:
f8:f0:f7:b0:b0:f0:24:18:e7:33:e2:58:4a:6b:d8:e2:03:e5:
cf:01:53:62:89:8b:d1:c4:2d:47:34:b0:ff:09:8e:85:f3:3f:
ae:59:89:c9:f4:44:19:0b:91:89:27:b3:92:87:ed:cb:88:fc:
b3:b5:c3:2c:fc:60:08:3b:55:c0:c7:9c:04:94:db:ad:07:f6:
78:6c:7d:b7:9a:b1:de:f2:c4:29:a3:66:c9:ae:3c:69:d6:bd:
76:a3:f9:e4:82:d9:0f:2e:8b:90:9e:30:3a:cb:48:16:89:46:
40:b4:53:ac:df:48:d7:42:7e:7d:72:2e:eb:fa:24:8b:74:8f:
3a:6b:80:b0:29:37:94:1a:08:17:d6:dd:0b:95:87:cb:83:66:
c5:18:ec:e8:10:51:88:a0:8c:3b:a9:4f:78:85:ef:b8:e9:a8:
cd:fe:8a:e2:6d:2a:64:53:a0:64:2c:2b:ab:9f:f2:2f:02:dc:
13:3d:7b:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4n9SFomRAyNmKPgX3s0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzM2RmZDZjYzE0MGM2OGEzZDNiYmE4NmJhNTdjZjNiOGJh
NmE5YjcwHhcNMjUxMTA0MjIwMDEyWhcNMjUxMTA1MjIwMDEyWjAzMTEwLwYDVQQD
Eyg4MjUyYTFkN2I3NmNkMjM4NzczZTEyY2ZlNjIyZDcwYjExOTc0ZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tUvw7LjkkophZaJ034Hynt3mS/5
uMeHXC9i/4YYnHV25q/MrCb5/gsF3HDEsDn/5X4E+PanUaIh9oa3Urv4UozmRrs+
rcKaGjbe73Iqn2pfokJ3giTBMJSzKRWpkdQ47TZhNSw1ABLE82u35QBQGppD9CPG
VYwJ1j7y5ZPZ5en4BljAimxbG+EzOqfFqoWaWMRZ/c7Dt4IO+3TuyKa057S4HfIF
GHD3vJbT83z8Y+vJCAw/xxABJDAW1QbsDCqCd5/zlHAJBf2nUWm8i0jVcFIwSQpn
8s5lFq5arwIWDGDt+lNTZdgmk8Q5DLZLkMhyx9GrFJJJZL5t1LTOMPcGywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJSode3bNI4dz4Sz+Yi1wsRl08CMB8GA1UdIwQY
MBaAFFM9/WzBQMaKPTu6hrpXzzuLpqm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80Mjg4OGItYWEzZi00NjExLTgwM2Qt
MmRiNDRjOTFhZTYwLzEvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80Mjg4OGItYWEzZi00NjExLTgwM2QtMmRiNDRjOTFhZTYw
LzEvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbChKI+y
fLvRJKZfIUdUHOccnTjoNB9w3HsmkTU9ekDSnGbH0egUdLaDW52XyGthOENgEfNx
7nUXlz3esdiOTFZconBb0PMU+PD3sLDwJBjnM+JYSmvY4gPlzwFTYomL0cQtRzSw
/wmOhfM/rlmJyfREGQuRiSezkofty4j8s7XDLPxgCDtVwMecBJTbrQf2eGx9t5qx
3vLEKaNmya48ada9dqP55ILZDy6LkJ4wOstIFolGQLRTrN9I10J+fXIu6/oki3SP
OmuAsCk3lBoIF9bdC5WHy4NmxRjs6BBRiKCMO6lPeIXvuOmozf6K4m0qZFOgZCwr
q5/yLwLcEz179Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:25 2025 by rpki-client