
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier: 2eAz4kjhyAOt8KvQNbkWYETYldJuOiT7SFjYUpvB0/I=
Subject key identifier: 5A:EC:EF:C9:37:11:D3:71:5E:27:15:6D:41:2B:D3:FA:BD:E3:06:B1
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 0199FC8F80AEBA0F4999520ACFC74678DC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number: 12FF
Signing time: Sun 19 Oct 2025 13:01:27 +0000
Manifest this update: Sun 19 Oct 2025 13:01:27 +0000
Manifest next update: Mon 20 Oct 2025 13:01:27 +0000
Files and hashes: 1: Dh_PGcah1amxFNaKHyr8GSWi0PM.roa (hash: aWuvVvbhf111USH5RwpYaeoTHWgggPXcMAanGVjaecw=)
2: DsXaN-JcB1la2CE31gfwERTXOWA.roa (hash: cvGbZhq10ZJuhtEt9TJhe7Mw/LDk0dS6Cxjwe9D+Wn8=)
3: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: S0N2XAX/QUT4hSBI5bLOsHLbv6Ktf9jpLljXUxjn4oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:80:ae:ba:0f:49:99:52:0a:cf:c7:46:78:dc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: Oct 19 13:01:27 2025 GMT
Not After : Oct 20 13:01:27 2025 GMT
Subject: CN=5aecefc93711d3715e27156d412bd3fabde306b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:1d:2c:54:50:49:48:53:e7:2e:17:44:26:
da:82:ee:a9:31:22:80:ae:0d:68:eb:36:a0:60:bc:
e5:a8:6d:ae:27:f8:82:7b:cc:e1:95:53:24:0b:e6:
b5:ea:5c:b3:09:ea:0a:05:2c:dd:de:19:23:b6:5c:
bb:6c:a9:4e:7f:52:68:f3:6e:fd:cb:a3:b8:85:f4:
0d:26:ae:f4:06:6c:22:98:0d:8f:30:d9:3e:c0:34:
31:77:6f:fe:69:2b:53:50:96:17:7c:3d:7c:5d:1e:
ff:88:8f:af:53:f0:53:3a:f6:25:be:e6:0f:dd:31:
d8:58:63:43:a1:08:d6:91:32:15:0b:19:70:bd:e4:
b9:57:cb:a5:65:d1:2e:b9:3b:a7:0d:f7:88:82:fa:
f1:a2:58:96:2f:cb:aa:99:99:56:19:bd:6c:67:1a:
11:10:0f:ab:fd:6b:eb:e5:cd:5e:f2:0d:ab:73:20:
bf:c6:86:2b:a5:b7:ed:fb:64:56:89:9c:cb:70:62:
28:55:df:fe:4a:71:9a:ab:27:8b:67:2e:3a:44:46:
e1:3d:a3:db:90:7f:6e:af:15:13:fe:e2:7a:6d:c3:
a8:9b:43:d9:f9:30:55:96:60:f9:eb:bc:ed:ea:bc:
d6:10:75:3d:98:5e:3e:9a:49:ad:75:bd:88:f7:af:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EC:EF:C9:37:11:D3:71:5E:27:15:6D:41:2B:D3:FA:BD:E3:06:B1
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:51:e1:02:33:c9:27:9d:90:6f:0d:e8:ae:60:bd:53:c0:ab:
b9:22:c6:4f:8d:e4:b3:5c:04:16:9a:81:3a:40:56:c2:54:c0:
b6:88:6e:24:09:5c:33:12:ac:4a:1c:1e:73:23:10:04:41:2f:
a9:a6:38:da:26:74:bc:92:02:fc:47:46:8c:8d:9b:23:f3:82:
09:b9:87:f5:a9:b7:b3:11:88:9d:f5:e2:9e:f1:79:d6:6f:be:
c6:ff:10:3c:ff:ea:5a:2a:a3:62:58:5e:77:26:0d:98:4e:83:
ae:1f:76:f7:0c:c9:4f:9a:9b:d9:65:0d:23:91:84:6a:6a:11:
b5:92:d6:b3:e8:c0:c1:82:be:48:e9:d2:2f:01:9c:65:0d:ed:
5e:fd:37:c9:c2:ae:4a:1e:d4:45:8e:82:c5:c2:59:82:0c:bf:
b5:bd:51:82:c1:32:b5:b0:0c:ca:ee:00:d4:87:9b:9d:39:ae:
a0:d6:4e:ba:f6:b7:45:ae:f1:c4:ae:65:91:45:0f:d7:e6:c6:
23:a6:15:54:60:4c:25:fc:41:1e:40:08:68:ae:e0:77:82:7d:
f7:05:a8:f1:af:ee:58:2a:4d:1a:12:ad:dc:40:b3:ee:f0:6c:
61:ec:e2:97:6e:00:00:a1:7a:6a:34:2d:7d:a1:0c:f1:ff:72:
81:3e:a2:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j4Cuug9JmVIKz8dGeNw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNzczMDFlMTRkNjViM2EzZDY4NmRhYWMxNmRmYzQ5YWM0
OGM3Y2QwHhcNMjUxMDE5MTMwMTI3WhcNMjUxMDIwMTMwMTI3WjAzMTEwLwYDVQQD
Eyg1YWVjZWZjOTM3MTFkMzcxNWUyNzE1NmQ0MTJiZDNmYWJkZTMwNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPsdLFRQSUhT5y4XRCbagu6pMSKA
rg1o6zagYLzlqG2uJ/iCe8zhlVMkC+a16lyzCeoKBSzd3hkjtly7bKlOf1Jo8279
y6O4hfQNJq70BmwimA2PMNk+wDQxd2/+aStTUJYXfD18XR7/iI+vU/BTOvYlvuYP
3THYWGNDoQjWkTIVCxlwveS5V8ulZdEuuTunDfeIgvrxoliWL8uqmZlWGb1sZxoR
EA+r/Wvr5c1e8g2rcyC/xoYrpbft+2RWiZzLcGIoVd/+SnGaqyeLZy46REbhPaPb
kH9urxUT/uJ6bcOom0PZ+TBVlmD567zt6rzWEHU9mF4+mkmtdb2I968n0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrs78k3EdNxXicVbUEr0/q94waxMB8GA1UdIwQY
MBaAFLp3MB4U1ls6PWhtqsFt/EmsSMfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEt
NWM2OGY2YjBiMmM3LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEtNWM2OGY2YjBiMmM3
LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1HhAjPJ
J52Qbw3ormC9U8CruSLGT43ks1wEFpqBOkBWwlTAtohuJAlcMxKsShwecyMQBEEv
qaY42iZ0vJIC/EdGjI2bI/OCCbmH9am3sxGInfXinvF51m++xv8QPP/qWiqjYlhe
dyYNmE6Drh929wzJT5qb2WUNI5GEamoRtZLWs+jAwYK+SOnSLwGcZQ3tXv03ycKu
Sh7URY6CxcJZggy/tb1RgsEytbAMyu4A1IebnTmuoNZOuva3Ra7xxK5lkUUP1+bG
I6YVVGBMJfxBHkAIaK7gd4J99wWo8a/uWCpNGhKt3ECz7vBsYezil24AAKF6ajQt
faEM8f9ygT6i3g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:09 2025 by rpki-client