Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier: TzITb8bJ1yL5FwLhVaT1g2W77dR/z8wWvv4JEwcVXSk=
Subject key identifier: F5:00:98:B4:AD:E0:18:EF:C4:9C:60:26:22:1C:7D:DE:10:8E:46:06
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial: 019A559B0D3F116DAD30A698CBD6FB2071BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number: 021D
Signing time: Wed 05 Nov 2025 20:00:16 +0000
Manifest this update: Wed 05 Nov 2025 20:00:16 +0000
Manifest next update: Thu 06 Nov 2025 20:00:16 +0000
Files and hashes: 1: 2LFR55bzEg917ZVxswXc708avQY.roa (hash: 09G2R5A6VRyPInwdzmXjWMU+vVVMHeHCt8VJGVFJ0ks=)
2: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: g//nJ4pVL8F1cDVOimJNGC3rk8WQdQYFRxIQP3biHF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:0d:3f:11:6d:ad:30:a6:98:cb:d6:fb:20:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Validity
Not Before: Nov 5 20:00:16 2025 GMT
Not After : Nov 6 20:00:16 2025 GMT
Subject: CN=f50098b4ade018efc49c6026221c7dde108e4606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:7d:53:15:3d:0c:c4:21:a1:a8:14:13:01:
30:46:24:1c:f3:16:dd:34:98:87:e1:0c:5f:a1:99:
fe:c6:d0:8c:72:3b:8f:76:ab:f3:58:ac:da:c5:e9:
6e:24:d3:50:b2:5c:21:d4:5e:1f:55:2f:41:65:8b:
25:1f:61:06:a7:b1:2f:99:80:bc:37:8f:51:1d:3d:
6f:fb:8b:5c:1b:af:b5:3e:8d:1a:8f:ce:bc:0f:9f:
25:88:6f:12:6d:60:6a:1c:76:df:2b:f1:ef:53:aa:
37:df:e3:a1:9d:62:15:4a:02:6b:bd:05:15:8f:19:
99:c8:06:6e:61:67:5a:18:bf:f8:44:96:4f:c3:bc:
6a:55:1e:40:e6:9e:e1:36:e2:27:bc:a3:15:aa:f6:
7f:d3:d9:fb:6e:f3:47:7c:71:bc:5d:0f:5d:80:35:
b6:d0:9c:62:e3:3f:5b:e5:28:0a:bc:12:df:96:76:
b4:8c:20:38:b6:d0:7c:74:a9:c6:b2:8a:83:66:45:
b9:f8:cb:6d:ad:30:52:e3:41:05:bd:10:62:c2:61:
87:39:81:5e:16:af:b0:4e:f3:67:c7:e0:e2:3a:8b:
ac:d0:96:f0:03:58:1d:4a:c3:25:23:c3:67:ae:83:
47:ca:1e:ed:2b:e0:98:42:c1:5d:07:a1:b1:f5:dc:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:00:98:B4:AD:E0:18:EF:C4:9C:60:26:22:1C:7D:DE:10:8E:46:06
X509v3 Authority Key Identifier:
keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:70:39:d3:79:6e:53:8f:16:ce:19:ce:6b:fd:08:27:1d:d8:
6d:b6:dc:12:3f:d1:66:95:05:a5:b4:2d:86:da:be:37:5f:9f:
bb:85:08:73:48:84:aa:bc:f7:0d:c0:90:0d:e7:eb:88:42:a3:
09:b0:c7:8a:b2:42:85:ab:4a:01:6e:bd:3e:7a:5d:46:d2:bc:
f1:b5:73:0d:3d:d4:1f:e7:c0:35:71:ca:28:52:7a:32:1d:23:
3a:95:20:39:06:4a:38:5f:d7:57:6a:63:74:ee:5d:80:68:63:
e1:ea:e3:7d:4e:a9:1e:50:32:52:45:e3:bd:1f:72:a1:f8:bb:
4e:6b:d4:10:d5:2a:c8:32:f7:50:9c:49:f1:f2:e8:8c:53:4c:
db:61:b2:7e:2a:59:5c:44:86:ef:24:f4:17:04:bc:e3:fc:ca:
0d:48:81:8c:9d:a2:ed:05:a0:4d:9f:7a:fa:bf:5c:2d:ab:0c:
82:b5:a9:87:1e:2e:f4:9d:f0:8b:12:2d:24:fa:bd:d0:64:3c:
92:0e:c1:21:49:64:5b:c3:d7:85:83:b2:94:19:a6:ca:cc:28:
36:4a:ed:ee:d2:83:fd:ae:92:6e:d4:f9:2c:54:1c:17:ab:ec:
89:f2:aa:a7:c2:14:06:d3:85:89:04:69:ed:62:3b:05:68:36:
af:ee:8f:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVmw0/EW2tMKaYy9b7IHG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMDliY2IyMjUyZWI2NDY5MDJjY2JmZDRjOTg2Y2IwYzJi
OTEzOTgwHhcNMjUxMTA1MjAwMDE2WhcNMjUxMTA2MjAwMDE2WjAzMTEwLwYDVQQD
EyhmNTAwOThiNGFkZTAxOGVmYzQ5YzYwMjYyMjFjN2RkZTEwOGU0NjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrl9UxU9DMQhoagUEwEwRiQc8xbd
NJiH4QxfoZn+xtCMcjuPdqvzWKzaxeluJNNQslwh1F4fVS9BZYslH2EGp7EvmYC8
N49RHT1v+4tcG6+1Po0aj868D58liG8SbWBqHHbfK/HvU6o33+OhnWIVSgJrvQUV
jxmZyAZuYWdaGL/4RJZPw7xqVR5A5p7hNuInvKMVqvZ/09n7bvNHfHG8XQ9dgDW2
0Jxi4z9b5SgKvBLflna0jCA4ttB8dKnGsoqDZkW5+MttrTBS40EFvRBiwmGHOYFe
Fq+wTvNnx+DiOous0JbwA1gdSsMlI8NnroNHyh7tK+CYQsFdB6Gx9dycTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUAmLSt4BjvxJxgJiIcfd4QjkYGMB8GA1UdIwQY
MBaAFFAJvLIlLrZGkCzL/UyYbLDCuROYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2Mt
ZDVkYTg1OGUxNWZiLzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2MtZDVkYTg1OGUxNWZi
LzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXA503lu
U48WzhnOa/0IJx3YbbbcEj/RZpUFpbQthtq+N1+fu4UIc0iEqrz3DcCQDefriEKj
CbDHirJChatKAW69PnpdRtK88bVzDT3UH+fANXHKKFJ6Mh0jOpUgOQZKOF/XV2pj
dO5dgGhj4erjfU6pHlAyUkXjvR9yofi7TmvUENUqyDL3UJxJ8fLojFNM22GyfipZ
XESG7yT0FwS84/zKDUiBjJ2i7QWgTZ96+r9cLasMgrWphx4u9J3wixItJPq90GQ8
kg7BIUlkW8PXhYOylBmmyswoNkrt7tKD/a6SbtT5LFQcF6vsifKqp8IUBtOFiQRp
7WI7BWg2r+6PgQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:36:05 2025 by rpki-client