Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: SaH9RwBmur32ulJjHbCycpp8z2fnMl/bs0btT/ApUu8=
Subject key identifier: B5:8C:2F:EC:FA:F8:A0:9F:D5:D5:DB:6E:FA:C0:5A:4B:B2:0B:A8:BF
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 0199FFFE9A77DA93FDC9C9B781387BB27D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 04D4
Signing time: Mon 20 Oct 2025 05:01:39 +0000
Manifest this update: Mon 20 Oct 2025 05:01:39 +0000
Manifest next update: Tue 21 Oct 2025 05:01:39 +0000
Files and hashes: 1: WKOKVKl28HtFspcKHQBVFmETqIc.roa (hash: SYeFtPD+C2AS7thwtnIBrj8wTw204QOZOHmVtJCMITk=)
2: jIGs3qKcDxBmqJ2fipFLAdujx6w.roa (hash: KLPs+8T03UuOOCPXUYOJk9ZNwTltd+bx8VIhJhWnYmw=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: LSkxsxPlht9V7aRmgFhhibeu37uFN4UViQ0rPWuSUtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:9a:77:da:93:fd:c9:c9:b7:81:38:7b:b2:7d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Oct 20 05:01:39 2025 GMT
Not After : Oct 21 05:01:39 2025 GMT
Subject: CN=b58c2fecfaf8a09fd5d5db6efac05a4bb20ba8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:69:13:04:33:fd:26:8e:5b:3c:af:14:e9:
1f:7e:10:fa:b3:cd:9a:4f:60:2d:fc:26:87:01:15:
e1:4a:86:ad:f9:bf:31:1c:26:7f:d7:4f:e3:9c:92:
24:5d:46:17:9f:02:39:c3:59:9a:97:2f:ac:3a:20:
b0:be:4b:52:ad:5b:7b:55:74:91:ca:50:2d:fc:8c:
9b:65:fc:41:76:11:5c:e1:2e:60:65:da:66:5f:e0:
94:ba:c7:5f:f9:cb:8d:db:07:2a:fe:a4:45:5a:87:
db:a7:07:92:c6:17:d6:d6:f7:d4:3a:3a:74:67:7d:
50:2b:3a:91:a6:96:6e:e3:a7:8e:5c:c7:f6:cf:aa:
97:18:da:45:70:f5:7b:3f:82:56:b5:c5:26:4e:1e:
19:eb:bf:a1:6d:47:cd:c5:ea:a9:b0:20:53:74:b9:
15:17:ed:38:8e:b2:81:d9:17:27:85:9a:8b:ae:58:
63:c5:a6:04:51:5b:e8:3c:89:bb:72:cc:10:e5:bc:
58:34:07:0b:65:d1:10:b7:6b:0b:8f:98:f2:87:9d:
9b:b4:0a:9f:a6:31:63:68:7e:9a:99:6e:e9:71:d7:
09:0a:3d:13:29:4b:6d:3b:83:f4:95:d7:20:bc:03:
e3:00:d1:72:e3:7c:53:e3:91:0c:16:d9:a5:d4:e2:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8C:2F:EC:FA:F8:A0:9F:D5:D5:DB:6E:FA:C0:5A:4B:B2:0B:A8:BF
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:62:15:5f:69:b3:e6:b1:c8:ab:5c:53:95:fd:b6:b3:74:ce:
d6:51:e0:c9:28:3b:17:d6:4c:69:7a:5f:5e:58:f6:29:ae:c5:
3e:19:8a:f1:e4:41:49:01:df:0d:f9:ba:8e:14:f4:6c:21:97:
b3:64:ed:c9:9a:69:25:23:49:a9:47:a3:e3:bf:f6:fb:70:b9:
dd:5f:97:18:bf:e1:22:25:e8:20:8a:5f:4a:0d:4e:94:31:f4:
f0:24:09:95:58:40:3d:4a:f8:6e:88:04:14:33:05:29:12:6a:
b3:88:0b:e4:7a:4f:c6:b2:da:49:c8:11:5d:12:52:fc:69:0b:
9c:1d:86:c2:c3:7a:6c:1d:42:d6:cf:fc:aa:6b:81:37:93:b6:
5a:44:db:09:1b:36:d6:a7:63:b6:fe:74:bf:4e:cd:52:44:36:
07:6b:6b:bf:25:40:5d:a1:e5:73:8c:dc:e7:4d:2d:82:54:5d:
af:c7:96:77:d0:1e:d7:8b:37:04:bd:bf:2a:70:c0:5f:0c:55:
01:e1:44:99:2a:69:e7:d6:dd:49:60:70:3c:7d:78:81:b8:84:
5b:27:ad:e9:28:1a:84:3f:a2:44:cb:fb:f7:ef:07:3c:c1:9e:
44:e5:87:01:4e:f7:03:7b:22:4e:34:2c:fd:75:cb:38:9f:3e:
61:6a:6d:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//pp32pP9ycm3gTh7sn15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz
NTBiY2IwHhcNMjUxMDIwMDUwMTM5WhcNMjUxMDIxMDUwMTM5WjAzMTEwLwYDVQQD
EyhiNThjMmZlY2ZhZjhhMDlmZDVkNWRiNmVmYWMwNWE0YmIyMGJhOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6lpEwQz/SaOWzyvFOkffhD6s82a
T2At/CaHARXhSoat+b8xHCZ/10/jnJIkXUYXnwI5w1maly+sOiCwvktSrVt7VXSR
ylAt/IybZfxBdhFc4S5gZdpmX+CUusdf+cuN2wcq/qRFWofbpweSxhfW1vfUOjp0
Z31QKzqRppZu46eOXMf2z6qXGNpFcPV7P4JWtcUmTh4Z67+hbUfNxeqpsCBTdLkV
F+04jrKB2RcnhZqLrlhjxaYEUVvoPIm7cswQ5bxYNAcLZdEQt2sLj5jyh52btAqf
pjFjaH6amW7pcdcJCj0TKUttO4P0ldcgvAPjANFy43xT45EMFtml1OLDbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWML+z6+KCf1dXbbvrAWkuyC6i/MB8GA1UdIwQY
MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt
NTI4NzQ2MTFjZDIxLzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx
LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2IVX2mz
5rHIq1xTlf22s3TO1lHgySg7F9ZMaXpfXlj2Ka7FPhmK8eRBSQHfDfm6jhT0bCGX
s2TtyZppJSNJqUej47/2+3C53V+XGL/hIiXoIIpfSg1OlDH08CQJlVhAPUr4bogE
FDMFKRJqs4gL5HpPxrLaScgRXRJS/GkLnB2GwsN6bB1C1s/8qmuBN5O2WkTbCRs2
1qdjtv50v07NUkQ2B2trvyVAXaHlc4zc500tglRdr8eWd9Ae14s3BL2/KnDAXwxV
AeFEmSpp59bdSWBwPH14gbiEWyet6SgahD+iRMv79+8HPMGeROWHAU73A3siTjQs
/XXLOJ8+YWptPw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:10 2025 by rpki-client