Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
File: uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json)
Hash identifier: pnx6V+671CavVNoeEufTrNrAGwc3rfwP+FFFMf1OWF8=
Subject key identifier: 85:70:01:BD:C9:92:F6:6E:1A:74:D1:09:ED:69:35:0F:25:31:05:9C
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Certificate issuer: /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial: 0199FC584800677EB3A0D50B270973FB3341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
Manifest number: 0F65
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: LUeFE-e9M56hGD7W3dr7iEaRzQc.roa (hash: +d9SvNclOTnQ6lkDZgYeQTKUTYMS6VbA7XWWCAaY2o8=)
2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: M+FkcM4pXQ0SV/9MZKY8fukC6ejXKJlVewoF9eBcAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:48:00:67:7e:b3:a0:d5:0b:27:09:73:fb:33:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=857001bdc992f66e1a74d109ed69350f2531059c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:9d:94:15:57:2c:77:8b:d7:e5:75:30:00:
17:6e:69:a3:45:73:fb:31:36:cd:68:5c:9a:e5:48:
5a:44:9f:2b:49:a5:1a:d1:6d:b6:44:0d:c0:df:b2:
13:34:04:c9:b2:47:64:0d:6b:9b:2c:df:06:55:e4:
f3:33:ec:b9:30:85:65:e4:e6:eb:62:f3:01:3b:7e:
19:ec:d5:fe:c8:b4:86:62:01:56:3d:ee:a6:36:45:
c2:62:19:62:ff:b0:0c:de:1f:5f:dd:d2:0b:66:0c:
36:23:bd:3b:e5:a5:e0:02:ff:cb:89:10:e4:fb:c8:
fd:f4:18:67:43:59:13:49:37:f5:81:bc:ed:b6:b4:
bc:97:6e:40:dd:31:92:95:e9:9a:b0:dc:49:5b:f8:
d7:58:8b:d2:b0:8b:a8:9f:b5:63:9b:ec:b5:ac:af:
81:2d:12:b9:ca:ee:c9:bf:2c:08:ff:9c:45:21:b1:
df:97:3e:66:fd:5b:ec:87:ba:94:9a:5f:83:43:fb:
d1:d8:12:79:ab:69:28:21:56:36:62:1c:12:b3:2b:
1f:55:ec:fb:ad:13:71:70:3e:c3:ae:55:7d:62:bf:
e7:79:12:cb:ae:31:7a:c2:cb:1b:23:87:8e:df:fc:
45:7b:c1:04:e2:0c:5a:04:37:15:94:c1:7c:e8:e4:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:70:01:BD:C9:92:F6:6E:1A:74:D1:09:ED:69:35:0F:25:31:05:9C
X509v3 Authority Key Identifier:
keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f6:6e:53:b4:64:b3:38:3c:da:5b:d6:05:5d:56:31:05:6c:
29:e2:34:b4:0c:fa:8a:fe:62:61:05:71:0f:74:36:0e:b5:aa:
ff:a2:7b:96:c1:97:c1:6e:7d:8c:36:53:17:d6:35:41:eb:06:
b8:a8:92:1a:81:fb:f8:0d:04:d7:02:a1:6f:f3:43:5a:e8:34:
18:80:66:18:ac:a7:d0:80:0c:5c:71:5f:73:bb:d2:0d:8e:87:
36:36:8e:8e:c6:c6:18:c5:57:ef:35:e6:4c:ac:52:cf:9c:62:
8e:15:e6:3c:85:39:2b:4f:51:b3:03:7d:53:c7:cf:c6:96:19:
18:d7:3d:80:31:82:25:09:05:7f:ef:b9:be:15:b3:0d:4c:34:
b9:72:69:ef:81:b6:a1:78:a8:54:a2:d8:e6:11:65:31:8a:52:
03:ca:fa:a5:b4:a9:ba:9e:a9:b1:bc:b0:bb:c8:22:1e:ed:a9:
45:aa:79:3a:92:dd:86:fa:8a:ed:d9:32:66:08:25:71:c3:c6:
62:8e:6a:ff:45:fd:c2:6a:20:16:85:b0:2b:d7:c1:44:91:71:
19:aa:31:0e:09:b0:39:7e:22:fd:87:fd:11:a0:7c:4a:b4:89:
16:38:f4:d7:d9:e4:17:1f:fd:f9:c5:b7:79:93:33:e3:03:6d:
01:58:18:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEgAZ36zoNULJwlz+zNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMzAxNTU3NjRjYjJlZTBmNWVlZWZjZGY1MmE3YjEyZDM3
MmVkZGQwHhcNMjUxMDE5MTIwMTA3WhcNMjUxMDIwMTIwMTA3WjAzMTEwLwYDVQQD
Eyg4NTcwMDFiZGM5OTJmNjZlMWE3NGQxMDllZDY5MzUwZjI1MzEwNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtGdlBVXLHeL1+V1MAAXbmmjRXP7
MTbNaFya5UhaRJ8rSaUa0W22RA3A37ITNATJskdkDWubLN8GVeTzM+y5MIVl5Obr
YvMBO34Z7NX+yLSGYgFWPe6mNkXCYhli/7AM3h9f3dILZgw2I7075aXgAv/LiRDk
+8j99BhnQ1kTSTf1gbzttrS8l25A3TGSlemasNxJW/jXWIvSsIuon7Vjm+y1rK+B
LRK5yu7JvywI/5xFIbHflz5m/Vvsh7qUml+DQ/vR2BJ5q2koIVY2YhwSsysfVez7
rRNxcD7DrlV9Yr/neRLLrjF6wssbI4eO3/xFe8EE4gxaBDcVlMF86OQQQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVwAb3JkvZuGnTRCe1pNQ8lMQWcMB8GA1UdIwQY
MBaAFLswFVdkyy7g9e7vzfUqexLTcu3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTct
ZGUwMjVlNmY4NTg5LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTctZGUwMjVlNmY4NTg5
LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfZuU7Rk
szg82lvWBV1WMQVsKeI0tAz6iv5iYQVxD3Q2DrWq/6J7lsGXwW59jDZTF9Y1QesG
uKiSGoH7+A0E1wKhb/NDWug0GIBmGKyn0IAMXHFfc7vSDY6HNjaOjsbGGMVX7zXm
TKxSz5xijhXmPIU5K09RswN9U8fPxpYZGNc9gDGCJQkFf++5vhWzDUw0uXJp74G2
oXioVKLY5hFlMYpSA8r6pbSpup6psbywu8giHu2pRap5OpLdhvqK7dkyZgglccPG
Yo5q/0X9wmogFoWwK9fBRJFxGaoxDgmwOX4i/Yf9EaB8SrSJFjj019nkFx/9+cW3
eZMz4wNtAVgYVg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:15 2025 by rpki-client