Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: v+fVh1ruNk8h4ESnMR+lWcrm2ap3QSD3b99HiMyTwJM=
Subject key identifier: 23:10:EE:24:68:1D:A7:E2:FB:26:36:BE:61:B6:D9:CB:07:23:99:E4
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 0199FD3492010845AA4F89058ABC434997CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 0308
Signing time: Sun 19 Oct 2025 16:01:44 +0000
Manifest this update: Sun 19 Oct 2025 16:01:44 +0000
Manifest next update: Mon 20 Oct 2025 16:01:44 +0000
Files and hashes: 1: MJaKjYCmx7hqbl_Sgp0HlxFEPTo.roa (hash: 7qpw/goTRYdFqZs/4SurZemQFQCz3pPQoJv09aj5YOE=)
2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: spEFBMTjbbUIbCBSqiBEsTFx37JGL7c8HdLb/mxagIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:92:01:08:45:aa:4f:89:05:8a:bc:43:49:97:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Oct 19 16:01:44 2025 GMT
Not After : Oct 20 16:01:44 2025 GMT
Subject: CN=2310ee24681da7e2fb2636be61b6d9cb072399e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:74:17:67:da:61:c9:0f:fc:2a:7b:c4:9f:
73:a0:b0:09:2b:5e:1e:c0:3b:01:3e:f8:07:ed:fb:
bc:e8:16:be:4f:7f:15:b6:60:d5:52:a8:70:3b:9b:
a0:e8:db:70:f4:15:96:c8:42:ec:89:72:06:5b:71:
20:d3:06:45:ef:43:40:91:2e:d4:ec:d0:7b:81:6f:
81:88:a6:89:a7:3b:a8:08:9b:a1:ca:75:f4:7f:66:
77:7d:08:50:a0:ac:b8:5b:5b:77:49:a9:71:cb:78:
78:af:0f:42:e9:32:50:e2:57:5c:c4:53:95:15:59:
b7:45:bc:80:ac:26:fb:f7:33:f1:e1:b8:97:a3:4c:
5e:cd:b1:a9:ee:f6:6e:1d:7f:00:f7:ba:d5:c5:ff:
96:83:d9:37:8b:86:9e:4f:9e:21:35:e1:7d:fe:1c:
4d:c0:a2:ee:43:b9:a2:17:cb:3e:e9:36:8e:b7:dc:
d7:89:28:5e:66:cb:79:52:89:1b:d8:2a:65:77:a5:
b8:3d:a7:50:99:3b:94:4f:69:74:6e:a2:03:21:21:
34:3b:bc:8b:5d:57:7c:4e:98:6a:a4:67:74:cc:44:
20:47:35:65:d8:45:f4:26:83:ef:a7:7e:96:26:95:
75:1f:73:2c:f4:f1:06:63:c7:02:dd:16:c2:f9:23:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:10:EE:24:68:1D:A7:E2:FB:26:36:BE:61:B6:D9:CB:07:23:99:E4
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:75:09:13:f0:20:07:25:27:f4:d0:80:d9:7a:fe:b6:6b:bb:
4c:63:c1:27:f2:33:2a:1b:91:e8:96:68:55:35:fe:7e:3d:41:
c3:1b:5e:bd:36:2d:70:07:1a:05:a0:3f:4e:71:d3:01:bf:94:
ec:cd:c2:dc:ff:eb:04:2d:18:19:82:f1:f6:b6:72:44:87:fd:
49:1e:2e:4f:8c:af:2c:ed:7e:bd:89:75:88:43:fe:8d:d2:6e:
0d:2b:45:57:be:68:6f:fc:0a:b0:37:20:cc:f6:37:48:73:f3:
a2:da:65:74:f5:e7:26:11:ea:29:c9:05:14:16:20:7d:70:25:
2c:58:6b:9f:6a:61:f4:70:25:14:7d:46:81:a9:53:43:56:29:
e8:90:28:05:39:a4:34:d6:62:8b:e7:97:f4:2b:01:6a:cf:a6:
2a:aa:5b:3d:8b:21:47:3b:ee:70:d6:11:2f:46:b4:e8:d6:8a:
78:22:8b:b5:9d:b7:e2:04:af:2e:87:ef:d9:7c:e9:a6:d3:0a:
ff:3a:8c:60:7e:87:13:a2:b1:2c:e9:b8:09:1b:c1:d4:c6:63:
06:e0:e3:16:c9:8e:75:41:d4:55:09:e9:2b:43:ec:df:67:d7:
66:2f:b0:b3:b5:44:27:4d:d1:81:92:86:32:b5:4a:b2:40:2f:
b8:04:dd:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NJIBCEWqT4kFirxDSZfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNGY4NzlmM2Y5N2FkOGNkNzMxOTNkODA2OWU0OWIwMWI2
YmFkZGQwHhcNMjUxMDE5MTYwMTQ0WhcNMjUxMDIwMTYwMTQ0WjAzMTEwLwYDVQQD
EygyMzEwZWUyNDY4MWRhN2UyZmIyNjM2YmU2MWI2ZDljYjA3MjM5OWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunV0F2faYckP/Cp7xJ9zoLAJK14e
wDsBPvgH7fu86Ba+T38VtmDVUqhwO5ug6Ntw9BWWyELsiXIGW3Eg0wZF70NAkS7U
7NB7gW+BiKaJpzuoCJuhynX0f2Z3fQhQoKy4W1t3Salxy3h4rw9C6TJQ4ldcxFOV
FVm3RbyArCb79zPx4biXo0xezbGp7vZuHX8A97rVxf+Wg9k3i4aeT54hNeF9/hxN
wKLuQ7miF8s+6TaOt9zXiSheZst5Uokb2Cpld6W4PadQmTuUT2l0bqIDISE0O7yL
XVd8TphqpGd0zEQgRzVl2EX0JoPvp36WJpV1H3Ms9PEGY8cC3RbC+SOfgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMQ7iRoHafi+yY2vmG22csHI5nkMB8GA1UdIwQY
MBaAFK1Ph58/l62M1zGT2AaeSbAba63dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQt
OTRlZjE5NzA3MzgyLzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQtOTRlZjE5NzA3Mzgy
LzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXUJE/Ag
ByUn9NCA2Xr+tmu7TGPBJ/IzKhuR6JZoVTX+fj1BwxtevTYtcAcaBaA/TnHTAb+U
7M3C3P/rBC0YGYLx9rZyRIf9SR4uT4yvLO1+vYl1iEP+jdJuDStFV75ob/wKsDcg
zPY3SHPzotpldPXnJhHqKckFFBYgfXAlLFhrn2ph9HAlFH1GgalTQ1Yp6JAoBTmk
NNZii+eX9CsBas+mKqpbPYshRzvucNYRL0a06NaKeCKLtZ234gSvLofv2XzpptMK
/zqMYH6HE6KxLOm4CRvB1MZjBuDjFsmOdUHUVQnpK0Ps32fXZi+ws7VEJ03RgZKG
MrVKskAvuATdyw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:00 2025 by rpki-client