Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
File: uTp0QF6_eyUcz7unwrIOwV-djkg.mft (raw, json)
Hash identifier: dM7dPw0FvV8MtODtlKiw22ONZeAPg75JfElko/Yw5y4=
Subject key identifier: 1C:A6:FD:D9:77:B8:81:B1:8C:20:D2:8E:01:0A:94:24:EA:0F:EF:26
Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
Certificate issuer: /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Certificate serial: 019A4DE223E31594D3249FF92CDACDA29132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:57 +0000
Manifest this update: Tue 04 Nov 2025 08:00:57 +0000
Manifest next update: Wed 05 Nov 2025 08:00:57 +0000
Files and hashes: 1: qOLNGNRyGrNXwDtUb1Nnss6ejZA.roa (hash: QTajoDC346WYrSbnlkADnzaxaVDnFT9Xm/bmwQZTFeI=)
2: uTp0QF6_eyUcz7unwrIOwV-djkg.crl (hash: kX89f9i44JfXAT/jiNmhX0sKaMDF9w8WGer3N9R8jDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:23:e3:15:94:d3:24:9f:f9:2c:da:cd:a2:91:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Validity
Not Before: Nov 4 08:00:57 2025 GMT
Not After : Nov 5 08:00:57 2025 GMT
Subject: CN=1ca6fdd977b881b18c20d28e010a9424ea0fef26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:b3:56:c8:8b:cb:6d:a0:e8:ad:16:1e:07:
3b:4d:16:6e:bf:a1:ce:e5:9b:2d:37:5b:61:2c:9b:
5a:80:f6:2f:b6:14:ef:18:7e:07:9e:08:7c:c8:49:
85:13:2a:a6:b8:fb:19:ff:7c:b2:90:01:df:cf:5e:
47:a3:31:32:32:ca:e1:86:e7:48:5a:8b:54:d7:91:
38:33:58:46:83:c3:9a:30:f5:d0:8d:82:78:4b:27:
70:dd:ea:b2:e9:82:8f:db:ac:20:09:c9:a3:ab:b2:
0f:93:ac:af:f3:33:69:bc:14:4b:2c:41:31:ef:ea:
23:b7:ab:f0:7b:46:cb:7f:60:82:17:25:fe:fe:6b:
6f:86:ab:af:db:85:b5:8d:e1:f8:f2:23:cc:24:99:
19:58:88:85:67:ef:bc:42:36:29:4a:5c:9b:d0:64:
1c:e9:ce:89:a4:5f:a2:5b:e4:66:9e:1d:17:cc:5e:
77:6f:3a:d4:49:9b:4b:a7:db:70:49:1f:61:30:25:
80:01:04:12:85:66:7f:64:de:8b:03:b6:2b:3d:93:
70:64:b5:64:60:4e:ab:dd:89:d0:9b:ae:55:a0:35:
0b:b7:68:9e:d3:a3:07:8b:d7:6d:1b:b2:40:5a:82:
b5:a5:6e:6e:1a:cd:1d:a5:95:d7:e2:90:e7:85:51:
23:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A6:FD:D9:77:B8:81:B1:8C:20:D2:8E:01:0A:94:24:EA:0F:EF:26
X509v3 Authority Key Identifier:
keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:43:68:26:c2:9c:65:37:5a:ef:f2:4c:67:2e:de:0f:24:9b:
42:f8:68:2f:27:dc:17:21:1d:ca:c5:a0:e7:3c:6e:62:78:8f:
ba:40:e4:39:3b:8c:9d:4f:d2:87:a6:a8:27:cc:5c:10:96:61:
10:69:d9:2d:ed:f6:5e:59:1f:b2:13:9f:30:40:e7:af:dd:55:
24:3d:5d:0d:6e:7d:d5:82:a2:c8:97:d0:af:16:c4:0c:db:0a:
71:f8:49:0a:d7:9e:36:59:94:a4:be:de:a1:59:39:6d:1e:59:
6d:5b:ca:72:4c:16:ae:31:91:73:11:c2:ab:e4:49:db:1b:95:
d8:ca:a8:13:96:8a:e3:7f:5d:2f:36:9d:99:2a:64:d4:e4:cd:
7e:08:aa:7e:f1:93:6b:f2:6e:34:05:36:03:d0:c8:6d:4f:46:
01:f1:da:c6:9f:e8:0d:fc:94:6a:ff:45:98:89:f2:57:aa:78:
a2:85:b1:c6:11:8f:7b:38:7f:29:b5:95:d3:a8:58:f8:56:1d:
76:45:31:2c:93:b8:01:e8:de:58:a0:43:ae:69:00:5a:f2:dd:
12:88:f6:4a:4b:d1:5a:f1:10:d5:49:20:1f:58:f8:80:ec:ab:
e4:5e:3d:b8:b3:d4:b5:f5:5b:fd:58:40:d5:26:b8:7b:88:46:
5b:49:92:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4iPjFZTTJJ/5LNrNopEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2E3NDQwNWViZjdiMjUxY2NmYmJhN2MyYjIwZWMxNWY5
ZDhlNDgwHhcNMjUxMTA0MDgwMDU3WhcNMjUxMTA1MDgwMDU3WjAzMTEwLwYDVQQD
EygxY2E2ZmRkOTc3Yjg4MWIxOGMyMGQyOGUwMTBhOTQyNGVhMGZlZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNGzVsiLy22g6K0WHgc7TRZuv6HO
5ZstN1thLJtagPYvthTvGH4Hngh8yEmFEyqmuPsZ/3yykAHfz15HozEyMsrhhudI
WotU15E4M1hGg8OaMPXQjYJ4Sydw3eqy6YKP26wgCcmjq7IPk6yv8zNpvBRLLEEx
7+ojt6vwe0bLf2CCFyX+/mtvhquv24W1jeH48iPMJJkZWIiFZ++8QjYpSlyb0GQc
6c6JpF+iW+Rmnh0XzF53bzrUSZtLp9twSR9hMCWAAQQShWZ/ZN6LA7YrPZNwZLVk
YE6r3YnQm65VoDULt2ie06MHi9dtG7JAWoK1pW5uGs0dpZXX4pDnhVEjowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBym/dl3uIGxjCDSjgEKlCTqD+8mMB8GA1UdIwQY
MBaAFLk6dEBev3slHM+7p8KyDsFfnY5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82ODJkYTAtZDNlZi00OWYwLWJlYTQt
MGExMzRiNjUzNWM0LzEvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82ODJkYTAtZDNlZi00OWYwLWJlYTQtMGExMzRiNjUzNWM0
LzEvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0NoJsKc
ZTda7/JMZy7eDySbQvhoLyfcFyEdysWg5zxuYniPukDkOTuMnU/Sh6aoJ8xcEJZh
EGnZLe32XlkfshOfMEDnr91VJD1dDW591YKiyJfQrxbEDNsKcfhJCteeNlmUpL7e
oVk5bR5ZbVvKckwWrjGRcxHCq+RJ2xuV2MqoE5aK439dLzadmSpk1OTNfgiqfvGT
a/JuNAU2A9DIbU9GAfHaxp/oDfyUav9FmInyV6p4ooWxxhGPezh/KbWV06hY+FYd
dkUxLJO4AejeWKBDrmkAWvLdEoj2SkvRWvEQ1UkgH1j4gOyr5F49uLPUtfVb/VhA
1Sa4e4hGW0mSiw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:41 2025 by rpki-client