Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File: uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier: qnyz1Qv1deqBuKCnLD/X5K6BXPrwpU1ZcM+yUctPFKw=
Subject key identifier: D9:14:87:F2:4F:4F:59:A4:F3:69:D9:E0:43:32:C0:B9:97:E8:AC:D3
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer: /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial: 019A4C982747781A60389B2EF3373CB8700E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number: 0E6D
Signing time: Tue 04 Nov 2025 02:00:31 +0000
Manifest this update: Tue 04 Nov 2025 02:00:31 +0000
Manifest next update: Wed 05 Nov 2025 02:00:31 +0000
Files and hashes: 1: TfzbLdgbmHscHRZGFXa2BLnb_bw.roa (hash: 3EA04j0oUnZMkQnX+1EWE2fWG+qVwtOVdfkijI+MKmY=)
2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: v2qCnpTY5vnj43xIcC0Q/jQT5noSwnXiQu3AzdoR2KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:27:47:78:1a:60:38:9b:2e:f3:37:3c:b8:70:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Nov 5 02:00:31 2025 GMT
Subject: CN=d91487f24f4f59a4f369d9e04332c0b997e8acd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:58:89:90:ab:88:c8:53:f8:0d:c7:a7:2a:
73:38:da:48:e8:be:fd:35:ac:94:75:22:1d:17:cd:
a1:bb:7f:26:c7:7f:47:3a:94:eb:7a:5f:a4:d3:d4:
f6:c5:12:b7:03:f1:d4:b0:92:c2:35:b6:d9:4d:74:
bc:14:8f:89:be:fa:de:52:6f:d5:38:5c:88:16:82:
5b:be:9c:5d:65:f3:08:29:9c:15:4e:0b:aa:27:e4:
72:6c:fd:16:19:1a:fd:be:f2:c3:dd:1f:13:27:99:
68:22:87:1e:8a:69:86:b6:cd:58:c0:7c:ca:aa:7a:
17:ed:a6:04:c1:fc:ff:24:54:38:68:3a:55:69:a7:
2e:7b:41:8f:88:e2:ac:9a:9c:1e:a4:a1:e4:78:51:
cc:5d:26:0b:38:43:17:a5:65:a9:5a:24:58:e5:89:
d0:1a:c7:50:a7:0d:71:bf:d7:9d:0b:b3:c7:0e:38:
f3:fe:9c:e3:5b:dd:56:b9:43:43:15:18:f4:cd:9d:
37:bf:14:f5:9c:fa:92:56:42:a0:3b:52:83:9e:c9:
5e:a3:e2:c8:e5:16:87:12:d8:03:ff:d1:fa:a1:80:
c6:f5:95:d2:bf:7a:f2:6b:86:22:fe:2c:0a:4b:30:
79:07:e7:9e:4a:d3:e3:23:0b:43:de:60:84:cc:e8:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:14:87:F2:4F:4F:59:A4:F3:69:D9:E0:43:32:C0:B9:97:E8:AC:D3
X509v3 Authority Key Identifier:
keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b8:99:bc:fe:4e:ea:ea:35:f6:47:b2:f5:29:cb:48:49:c8:
65:c3:35:10:df:65:bd:b9:f5:cf:a1:33:e5:c0:3f:4f:bd:dd:
e4:7d:d4:40:87:df:da:19:82:86:06:60:1d:a9:fc:97:77:54:
f8:7d:76:10:c9:d5:4a:79:63:a5:d1:f7:d0:3c:c9:27:3e:94:
85:e0:99:df:6a:35:18:c7:15:5f:50:a0:3f:86:5e:dd:55:23:
50:76:32:f7:1e:c2:b3:82:3e:85:4a:bf:af:d2:d7:5c:74:46:
a6:da:fa:9b:cf:c8:c7:48:ce:72:af:11:9f:c0:f6:2e:e2:f6:
5f:bd:5d:40:91:7c:69:79:71:fe:39:1c:d2:02:28:93:35:b1:
a8:42:41:ac:94:ce:7c:34:8e:90:dd:02:fd:8a:26:37:bf:d6:
72:73:a6:d6:16:3a:1f:29:01:10:4c:f1:27:22:e6:d5:73:a4:
c5:c9:69:8b:97:25:87:e4:fb:4f:87:94:3d:5d:44:79:b4:86:
ab:90:8e:0f:78:11:38:f4:d5:22:e1:f4:52:67:3d:60:a9:c6:
94:36:de:18:8c:d0:0c:6c:51:bf:c5:b2:eb:cc:6d:02:a0:c4:
85:c0:91:51:80:78:91:81:ce:a8:ab:2c:0a:bf:ae:8d:3b:06:
9d:fe:f1:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMmCdHeBpgOJsu8zc8uHAOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWFkMDhmMzZjZmJjMDAwNTNhNWVlM2Q1YWJiN2EzMTE3
YzNmOGEwHhcNMjUxMTA0MDIwMDMxWhcNMjUxMTA1MDIwMDMxWjAzMTEwLwYDVQQD
EyhkOTE0ODdmMjRmNGY1OWE0ZjM2OWQ5ZTA0MzMyYzBiOTk3ZThhY2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf1YiZCriMhT+A3HpypzONpI6L79
NayUdSIdF82hu38mx39HOpTrel+k09T2xRK3A/HUsJLCNbbZTXS8FI+JvvreUm/V
OFyIFoJbvpxdZfMIKZwVTguqJ+RybP0WGRr9vvLD3R8TJ5loIoceimmGts1YwHzK
qnoX7aYEwfz/JFQ4aDpVaacue0GPiOKsmpwepKHkeFHMXSYLOEMXpWWpWiRY5YnQ
GsdQpw1xv9edC7PHDjjz/pzjW91WuUNDFRj0zZ03vxT1nPqSVkKgO1KDnsleo+LI
5RaHEtgD/9H6oYDG9ZXSv3rya4Yi/iwKSzB5B+eeStPjIwtD3mCEzOj6CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkUh/JPT1mk82nZ4EMywLmX6KzTMB8GA1UdIwQY
MBaAFLqq0I82z7wABTpe49Wrt6MRfD+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAt
M2Q0OGRhOWIwNmEyLzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAtM2Q0OGRhOWIwNmEy
LzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbiZvP5O
6uo19key9SnLSEnIZcM1EN9lvbn1z6Ez5cA/T73d5H3UQIff2hmChgZgHan8l3dU
+H12EMnVSnljpdH30DzJJz6UheCZ32o1GMcVX1CgP4Ze3VUjUHYy9x7Cs4I+hUq/
r9LXXHRGptr6m8/Ix0jOcq8Rn8D2LuL2X71dQJF8aXlx/jkc0gIokzWxqEJBrJTO
fDSOkN0C/YomN7/WcnOm1hY6HykBEEzxJyLm1XOkxclpi5clh+T7T4eUPV1EebSG
q5COD3gROPTVIuH0Umc9YKnGlDbeGIzQDGxRv8Wy68xtAqDEhcCRUYB4kYHOqKss
Cr+ujTsGnf7xmQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:17:52 2025 by rpki-client