Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: vusKl7iGxz0srcVkgjXcj/knRFVeLpAQoxQ4SBaFDI8=
Subject key identifier: AA:22:80:5D:A4:27:E4:9F:8A:E8:17:D8:3B:44:BB:AE:E7:06:06:FD
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 019A5564AB273811F2EFC933CAD49DFF2C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 0244
Signing time: Wed 05 Nov 2025 19:00:52 +0000
Manifest this update: Wed 05 Nov 2025 19:00:52 +0000
Manifest next update: Thu 06 Nov 2025 19:00:52 +0000
Files and hashes: 1: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: g87uvm12gb1ZcBWtNBzKTYAsOL7hHE33my8UP1HsTT8=)
2: wHN-DwZ2phagN24dcEs0dOWS0n4.roa (hash: PRZ4ezYR0MkLhJDk66PX2K5V2aQktdQihK+Xr7QGigU=)
3: y-MlarmKmlKjR0Tpwvf7Z9g15TU.roa (hash: atFZ+K+NvLsqdqFRmhH9PBtrTTMkkRg/sp5S4neTnNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:ab:27:38:11:f2:ef:c9:33:ca:d4:9d:ff:2c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Nov 5 19:00:52 2025 GMT
Not After : Nov 6 19:00:52 2025 GMT
Subject: CN=aa22805da427e49f8ae817d83b44bbaee70606fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:b1:eb:1b:6a:82:70:65:d1:07:70:3e:e3:
53:25:3e:33:b7:bf:a8:56:76:1f:b2:74:4f:04:be:
64:67:e5:1c:d6:df:33:8a:a5:5e:2f:03:0a:c8:dc:
19:08:28:15:b3:89:55:fb:6f:4d:5e:5e:1d:11:ba:
99:77:93:46:fb:92:b0:df:af:d6:69:23:05:f5:ec:
90:97:ff:89:7f:13:de:61:23:bf:fd:b5:8e:f7:5e:
07:4d:a6:03:3b:77:da:f5:e7:4a:8a:1e:fb:d2:cd:
e1:83:f6:82:87:09:f8:50:c5:f1:16:21:93:dc:d0:
cc:06:e1:4a:52:8e:3b:03:5c:c6:73:77:e4:2e:58:
bd:87:05:6a:c2:c6:ce:d9:6b:dc:7b:02:dd:fe:74:
f0:2a:c2:ba:6a:40:e4:b8:f0:86:57:ee:63:b7:51:
a7:ad:fb:25:6a:9e:4a:95:9a:ea:41:41:84:f6:5e:
83:f5:44:f7:93:ed:0a:9e:f8:d7:c3:cf:d9:9d:1d:
3f:91:2f:bf:3c:ae:d3:2c:f1:61:51:e3:95:5f:8f:
29:75:76:9c:ca:49:00:48:64:2c:0d:b3:c4:d9:9f:
82:48:db:6d:57:2f:29:04:cf:9b:1d:b7:00:28:b3:
0e:f6:0d:2f:b9:93:b7:fb:a0:17:99:76:e9:08:93:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:22:80:5D:A4:27:E4:9F:8A:E8:17:D8:3B:44:BB:AE:E7:06:06:FD
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cf:85:8c:b2:3e:91:2e:74:c9:95:32:60:27:f1:fa:1b:e0:
a3:c1:73:43:f4:1d:4a:19:9a:c9:03:17:b2:d3:37:0b:44:7e:
3c:4b:be:16:87:d3:cd:f4:0a:98:38:ff:f8:0a:3f:e0:b3:03:
f9:7a:1f:9a:f9:6a:60:1f:7a:7c:a3:2a:9b:7d:81:e5:48:e0:
3f:f5:9d:93:f0:0d:86:83:fd:7e:3b:6b:e2:91:c5:9d:01:cb:
eb:6f:e5:eb:30:04:f1:5d:91:54:49:b0:a9:a7:34:87:02:36:
f6:cd:43:32:1a:bc:e5:17:40:96:b8:e2:a7:cc:e1:c0:23:d6:
e0:20:70:fb:81:d8:e5:69:7d:d1:d5:0a:40:80:73:90:f8:6e:
5a:92:11:af:97:52:bf:37:2b:f9:28:0b:58:ac:a9:99:f9:a3:
f7:29:c1:56:83:dd:66:af:a9:91:db:57:38:95:2c:23:e6:85:
5b:9a:d9:8f:cd:93:b6:79:6d:08:7a:c3:37:4f:5b:0e:33:5a:
4b:11:c4:c1:ce:88:97:1c:93:54:a2:be:20:c8:a2:b8:ca:4f:
ac:32:38:81:11:80:fb:2e:82:80:70:40:a9:b0:17:34:f5:85:
ee:7d:18:51:ef:b7:d8:7a:50:5d:30:52:fa:19:31:5f:0c:63:
14:a7:a4:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVZKsnOBHy78kzytSd/ywXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTYzMTEwODI1N2I3MWZlMzMwYmM5OGIzYWJjMTQ2Yzk1
Yjg4ZTAwHhcNMjUxMTA1MTkwMDUyWhcNMjUxMTA2MTkwMDUyWjAzMTEwLwYDVQQD
EyhhYTIyODA1ZGE0MjdlNDlmOGFlODE3ZDgzYjQ0YmJhZWU3MDYwNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxqx6xtqgnBl0QdwPuNTJT4zt7+o
VnYfsnRPBL5kZ+Uc1t8ziqVeLwMKyNwZCCgVs4lV+29NXl4dEbqZd5NG+5Kw36/W
aSMF9eyQl/+JfxPeYSO//bWO914HTaYDO3fa9edKih770s3hg/aChwn4UMXxFiGT
3NDMBuFKUo47A1zGc3fkLli9hwVqwsbO2WvcewLd/nTwKsK6akDkuPCGV+5jt1Gn
rfslap5KlZrqQUGE9l6D9UT3k+0KnvjXw8/ZnR0/kS+/PK7TLPFhUeOVX48pdXac
ykkASGQsDbPE2Z+CSNttVy8pBM+bHbcAKLMO9g0vuZO3+6AXmXbpCJN/hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoigF2kJ+SfiugX2DtEu67nBgb9MB8GA1UdIwQY
MBaAFLhWMRCCV7cf4zC8mLOrwUbJW4jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEt
YTJlY2JhOGU0OTlkLzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEtYTJlY2JhOGU0OTlk
LzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABM+FjLI+
kS50yZUyYCfx+hvgo8FzQ/QdShmayQMXstM3C0R+PEu+FofTzfQKmDj/+Ao/4LMD
+XofmvlqYB96fKMqm32B5UjgP/Wdk/ANhoP9fjtr4pHFnQHL62/l6zAE8V2RVEmw
qac0hwI29s1DMhq85RdAlrjip8zhwCPW4CBw+4HY5Wl90dUKQIBzkPhuWpIRr5dS
vzcr+SgLWKypmfmj9ynBVoPdZq+pkdtXOJUsI+aFW5rZj82TtnltCHrDN09bDjNa
SxHEwc6IlxyTVKK+IMiiuMpPrDI4gRGA+y6CgHBAqbAXNPWF7n0YUe+32HpQXTBS
+hkxXwxjFKekiQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:54 2025 by rpki-client