
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
File: uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft (raw, json)
Hash identifier: 4tN08jx9qedTdUkrY9KnssCyieduad/HulYttRq1GRc=
Subject key identifier: CF:86:27:33:2E:7A:D4:91:14:40:79:70:DB:93:F3:E7:A4:8D:7D:C2
Authority key identifier: BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6
Certificate issuer: /CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6
Certificate serial: 0199FC21CF8965109927C940C43D3C924E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
Manifest number: 7A
Signing time: Sun 19 Oct 2025 11:01:38 +0000
Manifest this update: Sun 19 Oct 2025 11:01:38 +0000
Manifest next update: Mon 20 Oct 2025 11:01:38 +0000
Files and hashes: 1: UssRM0mPdyIItDZpJc0-R-nRMQk.roa (hash: +PLBHSP6JBeTIBc6ShqrJkAhfrEQDf8RilFXNDdoLBc=)
2: uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl (hash: L5o/ER0EXvC91iM3U6rl6aI0c30+45VceSPQZ1oDs58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:cf:89:65:10:99:27:c9:40:c4:3d:3c:92:4e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6
Validity
Not Before: Oct 19 11:01:38 2025 GMT
Not After : Oct 20 11:01:38 2025 GMT
Subject: CN=cf8627332e7ad49114407970db93f3e7a48d7dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8c:82:12:d2:bf:7f:47:e3:0c:ee:c5:14:11:
5f:d7:ce:1b:25:63:b6:3a:95:09:77:ce:06:df:36:
c0:d6:34:37:d4:5d:11:29:d3:9d:66:5b:49:77:f4:
07:69:09:10:46:f5:09:46:87:1a:75:d0:4a:ea:c1:
de:cd:24:8f:84:87:d3:34:aa:89:13:3b:9d:e2:09:
19:06:98:3b:ff:3b:cd:c2:97:9f:b9:f6:90:64:33:
1d:e1:83:89:19:1f:d9:8c:a4:a1:8f:54:e1:b1:94:
0f:93:e2:61:f9:9a:7c:16:ee:f4:ac:38:95:ad:f5:
ee:c6:48:48:61:40:ef:92:e3:89:b0:50:26:76:20:
c1:90:bc:f6:4b:28:be:75:29:0f:60:a5:5a:04:83:
95:5c:cb:88:db:c0:30:00:d1:9f:b5:29:ed:37:b4:
dd:c9:f9:76:d1:30:0f:7e:44:41:da:9e:e1:07:8d:
c2:5b:08:8d:85:ab:ad:82:c7:9f:ed:04:b4:c9:f7:
3f:4f:aa:c2:29:72:97:dc:f3:83:a5:13:07:79:ad:
24:de:38:15:53:80:a6:9e:92:6c:ab:8f:05:cc:66:
ee:94:7c:85:41:37:41:f7:98:0e:68:ae:56:34:17:
f1:5d:39:07:3d:e3:68:c6:96:08:0f:8a:97:10:e0:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:86:27:33:2E:7A:D4:91:14:40:79:70:DB:93:F3:E7:A4:8D:7D:C2
X509v3 Authority Key Identifier:
keyid:BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e6:79:1a:88:01:93:ee:d7:fe:bd:72:6a:b6:41:eb:57:02:
0a:9f:9a:8d:2d:8f:4f:7d:0f:5d:eb:86:33:e0:9c:39:9d:b2:
a8:4a:69:70:de:e3:c5:68:25:d6:c7:d9:63:75:8a:58:9b:43:
0e:87:41:ab:12:7f:b2:2c:ac:57:fb:cb:66:58:e7:d2:45:fe:
88:08:5e:11:fb:a5:77:ea:02:e7:8a:de:1f:e3:6f:fe:0f:33:
4c:71:a4:57:37:2f:b3:21:75:99:55:5b:32:30:5d:95:00:97:
6b:29:a2:13:d1:30:a2:04:f9:30:c4:00:28:4b:9b:19:61:1b:
7a:ad:2e:0c:67:f0:c5:4e:30:b3:99:d5:2d:35:02:bd:49:2f:
32:ff:ef:49:3f:3f:ac:4b:3e:19:25:3b:ea:ce:0a:b1:bc:e4:
d9:48:ed:00:69:ea:26:de:b1:d9:cf:8d:48:fc:15:c9:17:b2:
eb:3b:35:b3:98:75:63:44:ae:25:b1:9d:f4:83:49:1c:49:e3:
b0:82:d7:41:ef:23:be:c0:57:e7:59:91:b4:48:32:16:f2:e2:
d3:6d:a6:ec:29:fb:eb:5f:f7:19:6b:89:b5:08:cf:a9:44:8e:
23:36:66:15:76:8f:42:d3:fc:33:db:6b:7d:d3:d0:3e:cf:e7:
18:88:5a:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Ic+JZRCZJ8lAxD08kk50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMjY3YjhlMjE1M2ZiZmM5OTAzODQ3YjQ1MDJhMmJlZjQ0
YjU2ZTYwHhcNMjUxMDE5MTEwMTM4WhcNMjUxMDIwMTEwMTM4WjAzMTEwLwYDVQQD
EyhjZjg2MjczMzJlN2FkNDkxMTQ0MDc5NzBkYjkzZjNlN2E0OGQ3ZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4yCEtK/f0fjDO7FFBFf184bJWO2
OpUJd84G3zbA1jQ31F0RKdOdZltJd/QHaQkQRvUJRocaddBK6sHezSSPhIfTNKqJ
Ezud4gkZBpg7/zvNwpefufaQZDMd4YOJGR/ZjKShj1ThsZQPk+Jh+Zp8Fu70rDiV
rfXuxkhIYUDvkuOJsFAmdiDBkLz2Syi+dSkPYKVaBIOVXMuI28AwANGftSntN7Td
yfl20TAPfkRB2p7hB43CWwiNhautgsef7QS0yfc/T6rCKXKX3PODpRMHea0k3jgV
U4CmnpJsq48FzGbulHyFQTdB95gOaK5WNBfxXTkHPeNoxpYID4qXEOANgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+GJzMuetSRFEB5cNuT8+ekjX3CMB8GA1UdIwQY
MBaAFLome44hU/v8mQOEe0UCor70S1bmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWlaN2ppRlQtX3laQTRSN1JRS2l2dlJMVnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ODVkYTUtNzg4Yy00N2EwLWFiOGUt
ODg1NGIwMTlkYjlhLzEvdWlaN2ppRlQtX3laQTRSN1JRS2l2dlJMVnVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85ODVkYTUtNzg4Yy00N2EwLWFiOGUtODg1NGIwMTlkYjlh
LzEvdWlaN2ppRlQtX3laQTRSN1JRS2l2dlJMVnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOZ5GogB
k+7X/r1yarZB61cCCp+ajS2PT30PXeuGM+CcOZ2yqEppcN7jxWgl1sfZY3WKWJtD
DodBqxJ/siysV/vLZljn0kX+iAheEfuld+oC54reH+Nv/g8zTHGkVzcvsyF1mVVb
MjBdlQCXaymiE9EwogT5MMQAKEubGWEbeq0uDGfwxU4ws5nVLTUCvUkvMv/vST8/
rEs+GSU76s4Ksbzk2UjtAGnqJt6x2c+NSPwVyRey6zs1s5h1Y0SuJbGd9INJHEnj
sILXQe8jvsBX51mRtEgyFvLi022m7Cn761/3GWuJtQjPqUSOIzZmFXaPQtP8M9tr
fdPQPs/nGIhafg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:19 2025 by rpki-client