Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: ymZsX2QaDpl8sOS8w8hGihplooi2c/cq5G+6SescgWA=
Subject key identifier: 01:64:49:D4:88:28:D5:5F:7A:AF:37:5E:77:39:ED:10:40:75:B2:F5
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 019A00DA6EFE0DF99AD437B1094B133EE830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 0234
Signing time: Mon 20 Oct 2025 09:01:46 +0000
Manifest this update: Mon 20 Oct 2025 09:01:46 +0000
Manifest next update: Tue 21 Oct 2025 09:01:46 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: jPWaUKI/EQhe1CBuZUUH7VRKOdwbseINpA6gkt1zKfQ=)
2: ePyQopOScagWFzEkE8JnltAqMeo.roa (hash: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:6e:fe:0d:f9:9a:d4:37:b1:09:4b:13:3e:e8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Oct 20 09:01:46 2025 GMT
Not After : Oct 21 09:01:46 2025 GMT
Subject: CN=016449d48828d55f7aaf375e7739ed104075b2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:c8:60:c7:fe:be:60:9d:c8:48:09:cc:e0:
c4:d0:74:3e:bf:73:df:94:04:84:17:17:4b:b7:e4:
4b:f3:e2:a8:92:43:6c:13:2c:78:c8:b1:05:0b:28:
c7:59:fb:12:14:6c:e3:a7:41:e3:ec:2e:e1:17:cf:
b1:46:59:fa:8e:cd:8f:3e:40:e8:5b:c4:58:2c:5c:
9c:78:32:cb:5d:e4:8f:98:8e:a6:96:c1:23:b1:17:
e8:59:42:0f:4a:29:6d:e9:5f:d0:7e:11:e9:dd:52:
58:a1:30:3e:f5:b8:7a:69:ee:54:c3:6c:d4:69:69:
d5:19:e2:16:e2:7f:31:db:14:d2:26:e0:4e:f9:5c:
b3:0c:8d:8d:0d:6f:d1:73:86:98:6a:1c:4e:8c:a5:
ca:9f:73:40:63:43:fd:d6:95:9b:8a:02:a4:85:a1:
02:d7:9e:ef:75:73:df:20:bd:c7:d8:1a:9f:f1:b0:
c6:08:de:21:4c:5a:01:a4:83:5d:41:59:53:3a:ea:
7a:36:87:2c:f1:88:cb:56:47:d4:37:c9:27:15:7b:
49:58:97:57:b7:0c:f1:fd:09:50:0f:52:de:c6:6c:
5f:b1:9b:bf:45:0e:a1:be:53:6f:34:c4:44:b4:f2:
db:7e:76:cd:99:00:78:46:64:da:4d:ac:11:55:a6:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:64:49:D4:88:28:D5:5F:7A:AF:37:5E:77:39:ED:10:40:75:B2:F5
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5b:9e:01:53:56:c9:62:c9:c7:86:27:39:ff:fb:ec:49:0d:
3d:5e:f5:cb:46:f8:a5:0b:3a:23:2f:90:5c:8e:19:69:f1:e9:
1c:ea:ce:78:fc:ee:9f:5f:c9:fa:cc:7e:c3:a9:39:6d:d3:a5:
0a:c2:21:30:d1:e0:17:33:8a:5a:e6:7f:fa:2d:61:af:c8:30:
24:0d:1d:9c:9f:d6:b2:97:37:5c:8f:fa:cc:92:be:92:9f:7f:
f2:02:c5:91:f2:e8:79:ed:89:f5:cf:63:86:12:94:8b:22:84:
3f:07:20:fc:54:0e:78:a9:aa:a9:34:01:89:c4:ad:9f:c5:a5:
40:e9:88:fb:78:c5:7b:67:23:bd:81:96:43:05:ca:10:cf:a8:
56:cd:e6:ad:f2:72:e2:e1:08:78:59:11:46:42:c0:58:e1:17:
9b:b7:e9:4c:5b:fb:05:8d:7d:8a:bd:75:ca:a7:e6:c4:3c:01:
19:b8:31:b6:73:72:f8:6f:5e:21:60:ef:de:fc:f3:e2:22:21:
10:52:55:83:0a:58:4b:02:ad:55:93:90:a1:2d:29:93:71:0e:
2b:61:0f:e5:59:94:de:15:e2:e7:6c:f6:f9:7d:70:1d:7e:16:
0b:27:10:4c:03:3c:05:7d:f1:22:09:ed:72:d2:cc:48:7f:9f:
50:db:a6:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2m7+Dfma1DexCUsTPugwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzVjYWM3MGExOThhODVmMzI0YmZlZGEwZjM1ZWQ3OTkx
YzJhZWIwHhcNMjUxMDIwMDkwMTQ2WhcNMjUxMDIxMDkwMTQ2WjAzMTEwLwYDVQQD
EygwMTY0NDlkNDg4MjhkNTVmN2FhZjM3NWU3NzM5ZWQxMDQwNzViMmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1fIYMf+vmCdyEgJzODE0HQ+v3Pf
lASEFxdLt+RL8+KokkNsEyx4yLEFCyjHWfsSFGzjp0Hj7C7hF8+xRln6js2PPkDo
W8RYLFyceDLLXeSPmI6mlsEjsRfoWUIPSilt6V/QfhHp3VJYoTA+9bh6ae5Uw2zU
aWnVGeIW4n8x2xTSJuBO+VyzDI2NDW/Rc4aYahxOjKXKn3NAY0P91pWbigKkhaEC
157vdXPfIL3H2Bqf8bDGCN4hTFoBpINdQVlTOup6Nocs8YjLVkfUN8knFXtJWJdX
twzx/QlQD1LexmxfsZu/RQ6hvlNvNMREtPLbfnbNmQB4RmTaTawRVaYOhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFkSdSIKNVfeq83Xnc57RBAdbL1MB8GA1UdIwQY
MBaAFFM1yscKGYqF8yS/7aDzXteZHCrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQt
ZjM0YThmNzJlZWM0LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQtZjM0YThmNzJlZWM0
LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVueAVNW
yWLJx4YnOf/77EkNPV71y0b4pQs6Iy+QXI4ZafHpHOrOePzun1/J+sx+w6k5bdOl
CsIhMNHgFzOKWuZ/+i1hr8gwJA0dnJ/Wspc3XI/6zJK+kp9/8gLFkfLoee2J9c9j
hhKUiyKEPwcg/FQOeKmqqTQBicStn8WlQOmI+3jFe2cjvYGWQwXKEM+oVs3mrfJy
4uEIeFkRRkLAWOEXm7fpTFv7BY19ir11yqfmxDwBGbgxtnNy+G9eIWDv3vzz4iIh
EFJVgwpYSwKtVZOQoS0pk3EOK2EP5VmU3hXi52z2+X1wHX4WCycQTAM8BX3xIgnt
ctLMSH+fUNum5A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:28:22 2025 by rpki-client