Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File: uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier: 8PoUIMr81yh8PS7kHhtctB0BmGAE8irCePMf2hTz39Q=
Subject key identifier: 53:EF:B2:B1:C6:CE:F7:FD:CA:48:2E:1A:7E:5A:EB:B8:0F:8E:25:20
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 019A52637C1CFB2F25DE65FE82B0F5CBED7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 05:00:42 +0000
Manifest this update: Wed 05 Nov 2025 05:00:42 +0000
Manifest next update: Thu 06 Nov 2025 05:00:42 +0000
Files and hashes: 1: J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa (hash: edy80RXVye8xP8f43mCgyStXMeEBN6IE5pQ7y7lCAc8=)
2: RNunNkTlRavCIWC6GWUuTV58ZmQ.roa (hash: gKrJFKjacm0BkE8pyBxq+mcxr78x3vhWqOMKiIcTERc=)
3: TV8n2Nhf92M5RowrecsMHv_G6_Q.roa (hash: gbZyNyumFupj0Q0mMep5WOuD2tZvRRISK0wECqrhMRg=)
4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: O3VrZQktE2kvAngSiarKNmRDHwKNx3a8T8E5okXdG5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:7c:1c:fb:2f:25:de:65:fe:82:b0:f5:cb:ed:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: Nov 5 05:00:42 2025 GMT
Not After : Nov 6 05:00:42 2025 GMT
Subject: CN=53efb2b1c6cef7fdca482e1a7e5aebb80f8e2520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:43:90:74:f6:57:8f:46:12:46:08:c9:95:
9c:a0:49:4f:32:6d:f2:31:f3:fe:4a:3e:20:55:f8:
b0:bb:a0:75:e5:1e:fc:c6:b0:d9:f2:17:0a:89:4e:
a7:16:56:25:39:b7:b7:6e:f7:0b:fe:9e:36:08:69:
63:0e:1a:13:c0:1e:a1:34:df:4d:9e:e8:2a:2b:31:
86:a4:5a:2b:e5:1a:18:e9:a6:e1:c0:b5:f1:4e:23:
f4:be:64:35:6c:2a:94:2c:c9:25:e9:c5:42:eb:89:
dc:b0:61:ec:3a:6f:12:8d:7f:f1:c6:0e:09:d3:ef:
d4:72:c3:9f:7d:ce:dd:ea:2a:52:4d:d7:a1:8a:8a:
ed:a3:8e:65:ca:5c:fd:e9:46:bc:13:d5:41:5b:38:
56:5f:4b:f3:b4:8f:90:9d:7b:ce:d3:9e:84:8a:07:
fe:93:6e:b0:66:4d:2b:68:01:6c:12:77:4d:bf:12:
d7:90:eb:a3:5a:12:3b:b2:51:b5:86:a3:d1:7d:c7:
26:8a:cd:24:2e:3f:ab:4b:61:8b:ae:45:4a:0f:b7:
f3:13:9f:89:cc:15:f2:72:74:9b:d9:1c:f4:1e:b6:
2c:2c:0b:71:72:e6:55:90:3e:84:7d:4a:f4:23:75:
99:41:96:ae:7f:67:d4:80:8c:4e:15:48:64:69:5f:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EF:B2:B1:C6:CE:F7:FD:CA:48:2E:1A:7E:5A:EB:B8:0F:8E:25:20
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:48:36:f3:6f:19:70:78:bc:21:f0:ab:dd:ea:20:ea:dd:26:
18:e8:aa:66:32:99:50:f4:af:9c:56:5c:17:e3:cd:bf:1f:cd:
b4:ea:ae:52:8f:93:3c:bf:fd:18:7a:0e:40:cf:62:c8:2d:66:
ba:d1:5e:c8:a9:36:85:39:c3:18:42:0c:3d:f4:28:fe:21:d9:
64:9e:ce:58:68:88:e9:0d:fd:a8:b4:7f:ea:73:24:ea:64:5a:
b3:80:1a:56:08:ff:f5:04:8d:c9:08:f1:ec:31:86:9a:98:2a:
0b:1b:d6:39:1d:6a:05:f4:30:86:bd:6d:0c:ee:dc:4e:84:c7:
63:06:34:45:ef:3b:b6:66:2f:ff:bb:3f:46:75:97:83:ad:36:
1f:3c:bd:0e:42:5b:1d:74:02:13:bb:e4:2a:bc:ec:4c:80:1e:
ef:92:0c:9b:05:fc:45:f3:7b:9c:77:a5:53:43:08:c8:a1:72:
92:80:d5:d6:e5:bf:e5:40:c0:71:df:af:ef:c6:5f:47:1b:16:
89:95:02:24:ac:b5:7e:d0:39:ca:c7:b6:48:f0:b3:9a:5a:ef:
6b:d9:6c:2b:1f:cc:da:6f:76:8d:06:ea:44:32:99:35:d7:26:
b1:b4:f6:c3:98:05:97:26:6a:84:50:49:fa:57:f3:49:3c:9a:
60:50:6c:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY3wc+y8l3mX+grD1y+16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MjEyNzdmM2U3OTU0YTRhZjU1MjBhOTkwNDJmYjA4OTNh
ZjgwNGQwHhcNMjUxMTA1MDUwMDQyWhcNMjUxMTA2MDUwMDQyWjAzMTEwLwYDVQQD
Eyg1M2VmYjJiMWM2Y2VmN2ZkY2E0ODJlMWE3ZTVhZWJiODBmOGUyNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUpDkHT2V49GEkYIyZWcoElPMm3y
MfP+Sj4gVfiwu6B15R78xrDZ8hcKiU6nFlYlObe3bvcL/p42CGljDhoTwB6hNN9N
nugqKzGGpFor5RoY6abhwLXxTiP0vmQ1bCqULMkl6cVC64ncsGHsOm8SjX/xxg4J
0+/UcsOffc7d6ipSTdehiorto45lylz96Ua8E9VBWzhWX0vztI+QnXvO056Eigf+
k26wZk0raAFsEndNvxLXkOujWhI7slG1hqPRfccmis0kLj+rS2GLrkVKD7fzE5+J
zBXycnSb2Rz0HrYsLAtxcuZVkD6EfUr0I3WZQZauf2fUgIxOFUhkaV83AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPvsrHGzvf9ykguGn5a67gPjiUgMB8GA1UdIwQY
MBaAFLkhJ38+eVSkr1UgqZBC+wiTr4BNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84Y2NiY2MtY2Q1MS00NGFlLThmMDUt
MzZmZDIzMzUxNGY5LzEvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84Y2NiY2MtY2Q1MS00NGFlLThmMDUtMzZmZDIzMzUxNGY5
LzEvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUg2828Z
cHi8IfCr3eog6t0mGOiqZjKZUPSvnFZcF+PNvx/NtOquUo+TPL/9GHoOQM9iyC1m
utFeyKk2hTnDGEIMPfQo/iHZZJ7OWGiI6Q39qLR/6nMk6mRas4AaVgj/9QSNyQjx
7DGGmpgqCxvWOR1qBfQwhr1tDO7cToTHYwY0Re87tmYv/7s/RnWXg602Hzy9DkJb
HXQCE7vkKrzsTIAe75IMmwX8RfN7nHelU0MIyKFykoDV1uW/5UDAcd+v78ZfRxsW
iZUCJKy1ftA5yse2SPCzmlrva9lsKx/M2m92jQbqRDKZNdcmsbT2w5gFlyZqhFBJ
+lfzSTyaYFBsnA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:36:49 2025 by rpki-client