Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: oQjv5foZ537Ct/ufzaYVUG80/LdWt7gf8RdLyfNqPNE=
Subject key identifier: 19:30:E3:9E:00:83:38:F7:A5:C3:EB:2A:37:98:2C:D5:55:AF:C7:98
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 019A4E4F7BD7892C97D9969D5FEE9A01BF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 15BD
Signing time: Tue 04 Nov 2025 10:00:23 +0000
Manifest this update: Tue 04 Nov 2025 10:00:23 +0000
Manifest next update: Wed 05 Nov 2025 10:00:23 +0000
Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: 8XkmwJR7trHaZ+n7MKrIyUA3PPY74VqDa5S+k7co1z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7b:d7:89:2c:97:d9:96:9d:5f:ee:9a:01:bf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Nov 4 10:00:23 2025 GMT
Not After : Nov 5 10:00:23 2025 GMT
Subject: CN=1930e39e008338f7a5c3eb2a37982cd555afc798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:0d:cb:c9:ca:17:d6:43:68:42:9b:e4:16:
9a:d4:47:d2:a0:9a:65:fe:e9:a3:a7:d4:cf:6c:ae:
6b:4f:de:05:3d:71:dc:d3:d0:a2:e1:ce:38:b2:6d:
09:e8:77:a5:1e:ab:e8:9c:cb:de:a1:e6:bd:0e:c9:
14:f5:f5:f5:42:f5:49:37:43:26:7b:05:3d:98:a6:
84:a2:ca:b0:7b:dd:6f:5b:c4:43:11:86:5a:f8:a1:
4e:04:dd:b1:7a:7a:64:ee:9f:32:fd:7b:46:eb:13:
8a:ac:b8:f7:49:a9:51:dc:65:97:e9:b6:ce:e7:18:
7f:6e:f7:d4:d7:2d:e2:4a:51:ea:22:a9:13:fe:ca:
2f:7b:3f:4b:74:d7:0c:c0:a7:2e:05:f6:27:7f:0a:
5f:f4:8d:bb:f3:d4:0a:e3:d9:70:af:f2:94:e7:6b:
0f:5b:f0:9e:a8:99:47:1f:9c:14:70:b4:27:3a:e0:
4a:d2:0b:17:5a:b1:bc:df:1c:af:fd:e3:2f:aa:be:
21:74:d9:d8:e8:c0:3d:5a:a4:79:97:62:26:c7:24:
e3:00:66:88:42:b6:39:1b:d7:0e:fc:88:16:a1:e9:
db:fa:67:05:4a:35:fe:bd:27:e1:91:18:35:6f:8a:
df:99:37:54:61:ed:42:20:69:fc:39:b1:72:67:d1:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:30:E3:9E:00:83:38:F7:A5:C3:EB:2A:37:98:2C:D5:55:AF:C7:98
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fd:37:e0:21:d5:c5:43:e0:95:b5:fa:ed:1e:9e:cf:62:84:
21:6e:12:64:a6:25:13:28:43:c3:26:50:23:ee:ea:75:02:3f:
bd:05:b2:7f:e1:26:31:47:da:b2:3a:f5:95:42:92:e8:c2:32:
22:b9:f3:2e:e4:29:ec:f9:de:8f:bc:bd:22:a1:73:0a:b9:e9:
eb:c6:06:95:db:db:e9:0a:3d:51:9a:66:87:de:2d:e9:af:86:
8d:31:ba:e7:44:c8:52:f7:39:0c:c4:c8:0e:80:56:1a:5b:f8:
74:b3:55:72:b0:67:c3:27:8c:fa:d8:cd:8e:17:6e:8e:3f:05:
ae:53:83:b0:ff:57:93:98:ea:1a:88:26:82:2b:12:e3:ca:11:
21:98:5b:ff:37:2a:09:4e:c2:19:21:0c:3c:07:64:b0:d4:90:
19:39:58:2a:aa:cc:71:03:28:8f:f9:8f:20:15:c3:79:19:b5:
ee:f2:7f:ff:30:83:56:80:ab:7f:32:48:c3:55:b2:e3:de:b2:
cb:e1:71:a9:e2:fa:19:eb:eb:86:15:64:e1:1f:2f:51:10:d3:
26:e7:42:37:0e:78:b7:2a:bc:3d:4f:9f:06:29:f9:15:88:9e:
e6:f6:42:e6:5b:98:5d:0a:77:1a:e3:56:eb:cb:6b:8f:9b:92:
b7:81:f9:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT3vXiSyX2ZadX+6aAb8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzAyYTQ1ZDA1Njg0ODYwNTFhN2VjNDY2ZjAzMTA4YzMy
MGI0YzQwHhcNMjUxMTA0MTAwMDIzWhcNMjUxMTA1MTAwMDIzWjAzMTEwLwYDVQQD
EygxOTMwZTM5ZTAwODMzOGY3YTVjM2ViMmEzNzk4MmNkNTU1YWZjNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu48Ny8nKF9ZDaEKb5Baa1EfSoJpl
/umjp9TPbK5rT94FPXHc09Ci4c44sm0J6HelHqvonMveoea9DskU9fX1QvVJN0Mm
ewU9mKaEosqwe91vW8RDEYZa+KFOBN2xenpk7p8y/XtG6xOKrLj3SalR3GWX6bbO
5xh/bvfU1y3iSlHqIqkT/sovez9LdNcMwKcuBfYnfwpf9I2789QK49lwr/KU52sP
W/CeqJlHH5wUcLQnOuBK0gsXWrG83xyv/eMvqr4hdNnY6MA9WqR5l2ImxyTjAGaI
QrY5G9cO/IgWoenb+mcFSjX+vSfhkRg1b4rfmTdUYe1CIGn8ObFyZ9GdsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkw454Agzj3pcPrKjeYLNVVr8eYMB8GA1UdIwQY
MBaAFFIwKkXQVoSGBRp+xGbwMQjDILTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGIt
ZTNlNWZhMzZiYjJmLzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGItZTNlNWZhMzZiYjJm
LzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfP034CHV
xUPglbX67R6ez2KEIW4SZKYlEyhDwyZQI+7qdQI/vQWyf+EmMUfasjr1lUKS6MIy
IrnzLuQp7Pnej7y9IqFzCrnp68YGldvb6Qo9UZpmh94t6a+GjTG650TIUvc5DMTI
DoBWGlv4dLNVcrBnwyeM+tjNjhdujj8FrlODsP9Xk5jqGogmgisS48oRIZhb/zcq
CU7CGSEMPAdksNSQGTlYKqrMcQMoj/mPIBXDeRm17vJ//zCDVoCrfzJIw1Wy496y
y+FxqeL6GevrhhVk4R8vURDTJudCNw54tyq8PU+fBin5FYie5vZC5luYXQp3GuNW
68trj5uSt4H5Vw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:03 2025 by rpki-client