Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
File: UnB4bxfEG9AWJvctsjnyCLUYm7A.mft (raw, json)
Hash identifier: PUIN72VYIU7cEuqsAuWkjWhitCcGxxfwlg8MWe2F76U=
Subject key identifier: 3F:8B:D2:3D:F3:CB:69:3A:5B:A4:EB:E0:65:33:E2:B4:73:0B:77:1A
Authority key identifier: 52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
Certificate issuer: /CN=5270786f17c41bd01626f72db239f208b5189bb0
Certificate serial: 0199FCFD766FDC9F6E859183CD670A0EED81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 15:01:33 +0000
Manifest this update: Sun 19 Oct 2025 15:01:33 +0000
Manifest next update: Mon 20 Oct 2025 15:01:33 +0000
Files and hashes: 1: DmHJvnXYNCZG6CwLW6LsQtmujI4.roa (hash: x67qTlyXrzA3beyYfkqEGco6s6alggLnNjlSZnKsSr0=)
2: UnB4bxfEG9AWJvctsjnyCLUYm7A.crl (hash: KiotYg9hJP7Ggo56q4ZaKtTYpKNjOOrOzDFgTr9MTcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:76:6f:dc:9f:6e:85:91:83:cd:67:0a:0e:ed:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5270786f17c41bd01626f72db239f208b5189bb0
Validity
Not Before: Oct 19 15:01:33 2025 GMT
Not After : Oct 20 15:01:33 2025 GMT
Subject: CN=3f8bd23df3cb693a5ba4ebe06533e2b4730b771a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:f6:82:d5:c2:fc:a2:11:5e:67:a6:8d:3f:
a5:c6:96:e7:2d:98:6b:33:a9:63:18:fb:b5:5b:a4:
a2:64:20:04:d0:96:f0:1b:9e:0a:b2:57:65:67:4e:
b2:96:e3:65:cf:a7:c6:30:31:16:6d:68:fa:71:39:
64:42:ca:71:99:a5:db:85:01:8d:c7:69:18:91:86:
c7:6e:1d:73:32:fd:35:4e:75:36:93:12:38:03:44:
dc:2a:a7:cf:46:3c:c5:4f:89:03:14:86:de:a4:1b:
d5:2b:1a:bb:b1:4e:9f:f7:f2:73:21:1e:f3:21:a8:
3f:ea:86:b7:ac:fa:48:27:a8:a9:d5:fa:89:ac:d9:
c4:8b:c9:89:e2:a6:5c:96:65:cb:5f:8b:39:e6:6a:
5d:c4:fe:79:52:bb:92:d3:dd:01:c7:b4:dd:d7:3c:
99:f8:62:f5:ff:76:a1:dd:67:79:34:35:d2:08:29:
c1:69:7e:8a:88:5f:0f:aa:0b:a4:42:c0:b1:2d:eb:
31:5c:9d:b9:86:0c:b7:8c:da:14:25:e5:e0:e5:64:
4a:b1:64:16:47:1c:14:e1:9b:93:0b:1e:9b:0b:2d:
74:66:e6:23:04:c7:73:01:c9:12:98:27:66:19:30:
87:d2:3a:40:31:1f:49:70:07:05:2d:e4:07:57:36:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8B:D2:3D:F3:CB:69:3A:5B:A4:EB:E0:65:33:E2:B4:73:0B:77:1A
X509v3 Authority Key Identifier:
keyid:52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:72:4c:33:5e:35:cc:ee:71:ab:a4:16:10:c7:69:81:04:86:
45:1e:59:0d:54:25:5c:f3:4e:0d:ae:eb:17:50:57:8d:6b:75:
1e:cd:d8:51:16:cb:f8:fc:0a:88:e5:42:2a:6f:68:fb:53:b4:
dc:58:40:e7:59:de:3c:ea:49:de:a5:9a:20:52:18:ba:1c:ea:
79:5e:25:1a:c5:b1:bb:40:86:e3:e3:17:11:19:cf:b5:9d:b4:
fd:fa:77:cd:a7:92:45:bd:3b:88:38:0e:9c:78:7c:9a:e2:a2:
36:fb:3d:80:91:56:7b:e6:ab:3d:ca:bf:0b:0f:80:af:fb:b9:
fd:84:aa:c8:9f:fb:d5:28:00:0c:ab:24:b1:ea:57:af:d0:d3:
fb:fa:62:88:2f:91:ea:5c:ee:92:4b:1f:e1:b8:67:7d:d7:b4:
71:3e:e8:7c:67:fd:40:7b:e4:4b:15:29:a1:aa:9d:53:93:e7:
b2:59:59:7f:9d:4d:c5:2f:c1:7d:42:81:49:0b:d5:db:48:71:
46:42:a8:b2:19:9b:6f:3c:fc:36:77:b1:91:70:31:ae:fb:2b:
e7:db:d4:45:12:4f:15:5e:98:e7:2f:cc:79:f7:bd:75:a0:73:
0d:c9:d5:c8:91:65:9b:e4:81:b7:b6:60:c9:a9:a8:63:36:e4:
00:f6:29:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/XZv3J9uhZGDzWcKDu2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNzA3ODZmMTdjNDFiZDAxNjI2ZjcyZGIyMzlmMjA4YjUx
ODliYjAwHhcNMjUxMDE5MTUwMTMzWhcNMjUxMDIwMTUwMTMzWjAzMTEwLwYDVQQD
EygzZjhiZDIzZGYzY2I2OTNhNWJhNGViZTA2NTMzZTJiNDczMGI3NzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBz2gtXC/KIRXmemjT+lxpbnLZhr
M6ljGPu1W6SiZCAE0JbwG54KsldlZ06yluNlz6fGMDEWbWj6cTlkQspxmaXbhQGN
x2kYkYbHbh1zMv01TnU2kxI4A0TcKqfPRjzFT4kDFIbepBvVKxq7sU6f9/JzIR7z
Iag/6oa3rPpIJ6ip1fqJrNnEi8mJ4qZclmXLX4s55mpdxP55UruS090Bx7Td1zyZ
+GL1/3ah3Wd5NDXSCCnBaX6KiF8PqgukQsCxLesxXJ25hgy3jNoUJeXg5WRKsWQW
RxwU4ZuTCx6bCy10ZuYjBMdzAckSmCdmGTCH0jpAMR9JcAcFLeQHVzZfHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+L0j3zy2k6W6Tr4GUz4rRzC3caMB8GA1UdIwQY
MBaAFFJweG8XxBvQFib3LbI58gi1GJuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW5CNGJ4ZkVHOUFXSnZjdHNqbnlDTFVZbTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZDQzY2ItODQxYy00MGYyLTlkOWYt
NzVmNDdmMDdjNGUzLzEvVW5CNGJ4ZkVHOUFXSnZjdHNqbnlDTFVZbTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZDQzY2ItODQxYy00MGYyLTlkOWYtNzVmNDdmMDdjNGUz
LzEvVW5CNGJ4ZkVHOUFXSnZjdHNqbnlDTFVZbTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnJMM141
zO5xq6QWEMdpgQSGRR5ZDVQlXPNODa7rF1BXjWt1Hs3YURbL+PwKiOVCKm9o+1O0
3FhA51nePOpJ3qWaIFIYuhzqeV4lGsWxu0CG4+MXERnPtZ20/fp3zaeSRb07iDgO
nHh8muKiNvs9gJFWe+arPcq/Cw+Ar/u5/YSqyJ/71SgADKsksepXr9DT+/piiC+R
6lzukksf4bhnfde0cT7ofGf9QHvkSxUpoaqdU5PnsllZf51NxS/BfUKBSQvV20hx
RkKoshmbbzz8NnexkXAxrvsr59vURRJPFV6Y5y/Mefe9daBzDcnVyJFlm+SBt7Zg
yamoYzbkAPYpMQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:09 2025 by rpki-client