Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: f5fhbV7IogLo+hS8tOmR36NFHIe9xMnmrQFuAEkiK/M=
Subject key identifier: 78:3C:17:19:8F:9A:DA:8E:60:E2:CC:8B:DF:2F:84:F0:F0:91:6C:8C
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 019A4DE1D0D16DFA666DD8B4C6205545FD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 0348
Signing time: Tue 04 Nov 2025 08:00:35 +0000
Manifest this update: Tue 04 Nov 2025 08:00:35 +0000
Manifest next update: Wed 05 Nov 2025 08:00:35 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: i+k/YZ/gMfaaCkB5WmdHOZ3+cmQmJgT1lY6Dyd3jxFA=)
2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d0:d1:6d:fa:66:6d:d8:b4:c6:20:55:45:fd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Nov 4 08:00:35 2025 GMT
Not After : Nov 5 08:00:35 2025 GMT
Subject: CN=783c17198f9ada8e60e2cc8bdf2f84f0f0916c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:b0:09:f5:42:e6:23:57:0f:35:8d:39:63:
c0:58:84:62:53:a8:2e:91:23:27:5a:96:4d:2a:34:
d8:16:a2:4a:a0:54:b5:a0:59:0a:b9:3f:c9:12:17:
4c:83:66:11:28:cf:7a:45:85:bf:6e:67:ad:d0:24:
a2:66:a0:ed:f1:af:b9:ff:95:78:37:a8:e3:77:05:
db:b8:63:18:e5:7e:eb:35:5a:c2:4f:2a:30:e5:79:
4e:16:93:98:c5:21:6f:17:9c:84:12:81:c6:9f:c5:
c8:98:fa:7f:1f:61:e9:db:e5:d8:d1:c5:39:7d:42:
d5:74:29:f1:63:9a:6f:e6:cc:c7:ef:64:d5:a6:19:
4c:bf:4a:5a:4b:e7:f7:c5:f6:4e:1e:73:be:83:b7:
a2:aa:b7:3f:7d:8b:d2:7c:87:61:8f:13:d0:ab:ca:
b2:2c:35:80:c3:a1:b3:e2:c6:54:b6:80:12:a1:33:
be:0b:78:ce:3a:1c:5b:df:ab:73:7c:66:5b:2d:72:
ca:ea:f7:01:09:05:2c:d2:78:97:fa:cc:9f:9d:58:
96:12:42:b8:e5:f0:66:85:c2:e7:75:92:e3:70:46:
ee:33:18:05:79:04:1c:7a:f3:b7:32:ec:ad:b5:4a:
f5:04:18:a5:47:20:6d:20:4c:da:12:8d:a4:84:95:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3C:17:19:8F:9A:DA:8E:60:E2:CC:8B:DF:2F:84:F0:F0:91:6C:8C
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:93:91:31:e5:24:89:59:7b:a7:d7:18:61:01:89:57:62:04:
5a:82:76:8d:04:31:53:26:62:5d:8a:79:53:a3:f0:98:37:72:
43:83:d1:94:cb:16:52:a6:57:6b:4a:28:f3:02:4d:b2:62:72:
bc:b9:cb:2c:4e:a6:6c:fc:3f:8a:84:62:48:4a:13:8d:f1:8c:
07:58:39:97:5f:70:e0:08:ad:48:2d:5b:b9:e8:fb:54:1c:e4:
cf:65:d8:04:31:61:84:ca:7f:49:7a:12:9f:eb:83:2f:a5:f2:
b7:4e:aa:4e:9c:bc:b2:70:2d:6a:e3:d4:ce:13:ec:f3:1f:c1:
e4:2c:12:5f:a8:dd:d2:0e:f3:88:ed:92:0f:f0:37:98:2a:1e:
8c:83:29:b0:00:a2:50:38:3b:71:26:02:0d:cf:fe:c3:42:2a:
5f:d5:c0:3e:3b:af:e6:f6:e8:f1:b1:7e:ec:8f:e6:28:3d:f1:
36:e1:2e:3b:55:67:7c:b7:8e:38:f8:02:fd:26:f1:e6:0d:7b:
a3:06:3e:59:aa:13:cd:3f:8a:bb:bd:4b:32:fe:6b:d1:d9:59:
b0:84:5c:69:6c:00:8f:36:58:35:21:a4:78:54:23:86:0c:a8:
32:42:f3:e0:ff:8f:7f:b6:21:78:d9:da:0e:54:c5:19:b8:04:
a3:54:13:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4dDRbfpmbdi0xiBVRf2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjRmMmRkMGI5ODdhYjc1ZTM3OWY4MTc3YTQxNzZhMzA4
NjAwNjgwHhcNMjUxMTA0MDgwMDM1WhcNMjUxMTA1MDgwMDM1WjAzMTEwLwYDVQQD
Eyg3ODNjMTcxOThmOWFkYThlNjBlMmNjOGJkZjJmODRmMGYwOTE2YzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKqwCfVC5iNXDzWNOWPAWIRiU6gu
kSMnWpZNKjTYFqJKoFS1oFkKuT/JEhdMg2YRKM96RYW/bmet0CSiZqDt8a+5/5V4
N6jjdwXbuGMY5X7rNVrCTyow5XlOFpOYxSFvF5yEEoHGn8XImPp/H2Hp2+XY0cU5
fULVdCnxY5pv5szH72TVphlMv0paS+f3xfZOHnO+g7eiqrc/fYvSfIdhjxPQq8qy
LDWAw6Gz4sZUtoASoTO+C3jOOhxb36tzfGZbLXLK6vcBCQUs0niX+syfnViWEkK4
5fBmhcLndZLjcEbuMxgFeQQcevO3MuyttUr1BBilRyBtIEzaEo2khJWmFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHg8FxmPmtqOYOLMi98vhPDwkWyMMB8GA1UdIwQY
MBaAFFJk8t0LmHq3XjefgXekF2owhgBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjkt
OWQ3OTRlZTE0ZGQwLzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjktOWQ3OTRlZTE0ZGQw
LzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJORMeUk
iVl7p9cYYQGJV2IEWoJ2jQQxUyZiXYp5U6PwmDdyQ4PRlMsWUqZXa0oo8wJNsmJy
vLnLLE6mbPw/ioRiSEoTjfGMB1g5l19w4AitSC1buej7VBzkz2XYBDFhhMp/SXoS
n+uDL6Xyt06qTpy8snAtauPUzhPs8x/B5CwSX6jd0g7ziO2SD/A3mCoejIMpsACi
UDg7cSYCDc/+w0IqX9XAPjuv5vbo8bF+7I/mKD3xNuEuO1VnfLeOOPgC/Sbx5g17
owY+WaoTzT+Ku71LMv5r0dlZsIRcaWwAjzZYNSGkeFQjhgyoMkLz4P+Pf7YheNna
DlTFGbgEo1QTqQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:02 2025 by rpki-client