Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File: uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier: QnKOi+dAc/20LlmGIehV8g6d9PLVCQ1taJbi4WdpMAg=
Subject key identifier: 06:BE:C9:67:B1:93:CB:65:54:57:B7:5B:9E:36:31:66:95:2D:D0:B1
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial: 019A4E1898F1B0480D2941C6494E396F322F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number: 1341
Signing time: Tue 04 Nov 2025 09:00:26 +0000
Manifest this update: Tue 04 Nov 2025 09:00:26 +0000
Manifest next update: Wed 05 Nov 2025 09:00:26 +0000
Files and hashes: 1: FWSXCF4qgT0faY_P6PSKnBV7G2M.roa (hash: tFzm3MTdpBb4fBz33ckdkrZ9Nss77FL8hdTAaxqUFls=)
2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: Pn0lOV/8n8UCQDyS/0i1WxMLcuBiL3XC/uWVEyirSk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:98:f1:b0:48:0d:29:41:c6:49:4e:39:6f:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Validity
Not Before: Nov 4 09:00:26 2025 GMT
Not After : Nov 5 09:00:26 2025 GMT
Subject: CN=06bec967b193cb655457b75b9e363166952dd0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:2f:b9:4f:5d:06:d2:21:40:39:c9:36:e8:
8c:be:41:81:62:af:88:6d:73:12:08:c2:b3:ac:ec:
85:16:0b:2b:f1:d3:f4:f7:54:79:27:f5:1d:86:0c:
4a:44:0d:75:f8:5c:02:ee:bd:42:e7:2f:8f:19:4f:
2a:eb:7d:62:61:a9:b8:ca:38:6c:55:ee:23:d7:71:
cd:a3:33:bd:a9:51:d4:8a:39:0d:dd:ef:1d:24:6b:
7b:39:92:ca:c3:45:22:26:c7:3e:9b:45:4c:eb:f6:
4c:40:15:7d:80:2f:89:d0:62:2e:8d:8b:b0:ff:39:
39:a8:71:02:f8:ed:63:39:bf:00:5d:dc:41:d3:35:
cf:5a:a9:2d:15:99:e8:df:e1:d1:99:ad:41:f8:16:
60:f3:8f:c7:d6:db:d4:07:90:b7:4a:bf:92:0e:3d:
87:7b:08:e2:d5:cc:6b:f7:86:3e:09:1a:1c:51:bd:
e5:25:78:69:91:05:57:c4:9f:99:d8:02:4a:d0:ce:
4d:a9:af:b2:f4:92:3b:3b:da:13:5c:e5:fd:96:1e:
71:03:d0:cf:8b:7f:bf:e7:6c:86:72:cf:9f:d5:a2:
7c:d0:94:0f:e6:3e:f0:51:6e:0f:48:1e:1e:ef:b3:
b5:30:f1:0b:3f:4d:fb:1a:fe:51:fd:03:9c:d6:bd:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BE:C9:67:B1:93:CB:65:54:57:B7:5B:9E:36:31:66:95:2D:D0:B1
X509v3 Authority Key Identifier:
keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7f:ed:27:b5:80:e2:87:8b:ff:18:6f:e7:d7:0c:dc:4a:cc:
6c:1e:bf:56:92:0b:1b:3c:cc:a3:0f:be:c2:66:2d:57:81:a9:
a9:93:43:f4:00:6e:e7:51:d7:85:10:e0:e6:fb:62:85:bd:a2:
3b:75:fc:dc:c0:58:ac:34:ca:45:86:ea:95:8d:e8:65:85:0b:
2f:9d:c6:fe:75:35:01:d8:b7:7a:33:98:34:b5:d9:c0:c2:f6:
23:79:f2:be:bb:c0:47:1e:bf:20:7a:5a:dd:81:f4:2b:a3:74:
05:cc:87:42:e8:cf:1b:2d:fb:dc:95:d6:65:13:51:c7:2d:b4:
86:03:7f:a8:0b:e1:52:1c:39:8a:89:b8:4f:c9:22:e8:fe:35:
c8:70:b9:04:1e:fa:22:eb:f4:a5:6c:6e:84:a0:62:65:0e:4e:
a0:10:03:bb:76:7a:86:97:7d:f5:9e:4b:db:8b:39:da:53:55:
9b:cb:a7:02:f2:45:97:d7:e6:80:dd:da:b3:c7:08:c2:ad:be:
9c:80:f3:ef:7f:c7:c0:65:70:cf:42:32:fb:8d:ce:11:af:19:
61:43:e9:aa:3f:06:44:89:e4:f2:15:8a:ed:9b:dd:cc:d3:75:
66:fc:9c:f7:a3:fb:b4:b8:69:c2:1f:05:9f:fd:bc:b3:d6:33:
27:9b:3f:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGJjxsEgNKUHGSU45bzIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDRjYTJkOTkyZDc3ODU4MDBiZGQ1NTI0ZDNlMTEzODNk
OWYxZGUwHhcNMjUxMTA0MDkwMDI2WhcNMjUxMTA1MDkwMDI2WjAzMTEwLwYDVQQD
EygwNmJlYzk2N2IxOTNjYjY1NTQ1N2I3NWI5ZTM2MzE2Njk1MmRkMGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoQvuU9dBtIhQDnJNuiMvkGBYq+I
bXMSCMKzrOyFFgsr8dP091R5J/UdhgxKRA11+FwC7r1C5y+PGU8q631iYam4yjhs
Ve4j13HNozO9qVHUijkN3e8dJGt7OZLKw0UiJsc+m0VM6/ZMQBV9gC+J0GIujYuw
/zk5qHEC+O1jOb8AXdxB0zXPWqktFZno3+HRma1B+BZg84/H1tvUB5C3Sr+SDj2H
ewji1cxr94Y+CRocUb3lJXhpkQVXxJ+Z2AJK0M5Nqa+y9JI7O9oTXOX9lh5xA9DP
i3+/52yGcs+f1aJ80JQP5j7wUW4PSB4e77O1MPELP037Gv5R/QOc1r15owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAa+yWexk8tlVFe3W542MWaVLdCxMB8GA1UdIwQY
MBaAFLlEyi2ZLXeFgAvdVSTT4ROD2fHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEt
MDJhMTJiODYxODBkLzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEtMDJhMTJiODYxODBk
LzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWH/tJ7WA
4oeL/xhv59cM3ErMbB6/VpILGzzMow++wmYtV4GpqZND9ABu51HXhRDg5vtihb2i
O3X83MBYrDTKRYbqlY3oZYULL53G/nU1Adi3ejOYNLXZwML2I3nyvrvARx6/IHpa
3YH0K6N0BcyHQujPGy373JXWZRNRxy20hgN/qAvhUhw5iom4T8ki6P41yHC5BB76
Iuv0pWxuhKBiZQ5OoBADu3Z6hpd99Z5L24s52lNVm8unAvJFl9fmgN3as8cIwq2+
nIDz73/HwGVwz0Iy+43OEa8ZYUPpqj8GRInk8hWK7ZvdzNN1Zvyc96P7tLhpwh8F
n/28s9YzJ5s/Vg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:29:34 2025 by rpki-client