Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: b/Hu5X8MfOB28Gqt8zDe6UQf34Qo2G3WHFkW8j5a/5c=
Subject key identifier: 34:7F:AA:6C:89:87:DA:79:21:78:92:9F:3A:0B:2C:BA:C9:D7:4E:62
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 0199FC21B56997F3EDD49B30CEDBB1052FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:31 +0000
Manifest this update: Sun 19 Oct 2025 11:01:31 +0000
Manifest next update: Mon 20 Oct 2025 11:01:31 +0000
Files and hashes: 1: 0iqw0_DRAXXz4sreW3NPTcIykK8.roa (hash: upy176yocnlw3ZFcrVK6vEr280ZPGUhzh/TpTxnYSg8=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: aM4NpixHwEZ9kg4aLszvdChzhihBxqGblcndz5tY03Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b5:69:97:f3:ed:d4:9b:30:ce:db:b1:05:2f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Oct 19 11:01:31 2025 GMT
Not After : Oct 20 11:01:31 2025 GMT
Subject: CN=347faa6c8987da792178929f3a0b2cbac9d74e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:da:ba:ce:82:d2:cf:45:34:e4:8b:7b:5c:
33:0e:0b:f8:52:52:ad:d5:59:70:63:55:4c:ad:7a:
19:07:75:76:82:81:2e:6b:0c:e7:59:62:3d:26:a0:
fb:d9:c9:b6:d9:59:1b:89:58:80:7b:40:cd:3f:9d:
be:11:09:6c:de:e4:e1:3c:d4:c1:c3:61:23:44:c9:
09:d6:12:d0:04:7b:1a:e0:0a:b4:8b:60:92:80:94:
87:ae:31:cc:ad:7d:fe:4b:87:88:53:56:63:a6:d4:
ce:99:93:14:48:45:26:cd:59:a2:67:c9:06:46:f1:
13:4b:4a:68:0d:fb:53:6b:c7:34:a6:87:74:50:84:
87:20:3f:bc:e5:db:8e:9e:f5:6e:41:33:23:35:70:
fe:a5:92:93:73:6b:b0:e1:c3:fb:1f:ae:df:d9:d7:
ff:41:52:4f:3a:fd:cf:a8:f0:30:54:3d:6b:4c:5f:
22:10:a2:42:2a:62:6c:8b:aa:6a:b5:b2:85:29:90:
ad:b3:8a:8d:76:4f:c2:b9:54:43:b4:13:88:f2:c8:
ca:23:d7:41:f8:f2:f2:17:06:e4:ac:c7:98:7c:11:
39:be:6b:cd:36:a0:e2:44:6a:3d:10:db:85:7a:d1:
fd:b8:aa:ea:73:3e:37:b0:90:96:c2:d3:0b:d9:fb:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7F:AA:6C:89:87:DA:79:21:78:92:9F:3A:0B:2C:BA:C9:D7:4E:62
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b3:96:7e:46:81:d1:08:d2:3c:c3:42:c9:81:ea:4e:1c:03:
1d:ab:06:9e:c6:83:e6:85:54:ff:0c:ab:0b:a7:39:5e:75:8d:
54:d7:59:f8:fd:11:8e:29:03:bd:4a:d1:53:02:89:08:a2:64:
c4:66:22:2f:09:ef:e8:f1:1f:98:a2:d4:3f:17:42:89:db:e3:
fa:9e:02:f3:12:b6:bc:fe:56:6b:93:e3:09:14:24:1b:b8:8a:
57:ad:7c:93:fa:89:87:2a:34:e9:3c:6d:fd:5b:4f:1c:84:af:
4e:83:99:9a:ef:15:a8:7d:ea:c8:54:29:15:35:03:7e:81:57:
e7:01:43:c4:56:7c:be:43:a6:3e:f1:79:89:12:80:52:54:6e:
a2:3b:7b:0d:58:bf:91:85:b6:f8:c0:7f:46:be:03:13:16:8a:
32:61:4b:af:4b:01:8c:a5:6e:f3:b8:fd:7c:51:96:41:d5:47:
90:14:58:2d:5c:71:d1:ff:3f:4e:e4:bf:87:f8:a2:89:d6:50:
4d:25:c7:c3:47:87:f3:fa:88:c6:2e:8c:84:45:65:de:2e:75:
a5:36:5b:d3:ea:20:f6:20:c6:1d:d2:55:68:d0:ce:1e:c8:f1:
56:6d:ed:d2:cb:94:34:25:be:96:2e:66:09:96:f0:42:1b:e7:
81:f4:02:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IbVpl/Pt1JswztuxBS/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZjQwZWY3ZjEzZWM5YTE1NmVmYjBkYjM5NjA5MGJjNzVk
YTlkNDMwHhcNMjUxMDE5MTEwMTMxWhcNMjUxMDIwMTEwMTMxWjAzMTEwLwYDVQQD
EygzNDdmYWE2Yzg5ODdkYTc5MjE3ODkyOWYzYTBiMmNiYWM5ZDc0ZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ajaus6C0s9FNOSLe1wzDgv4UlKt
1VlwY1VMrXoZB3V2goEuawznWWI9JqD72cm22VkbiViAe0DNP52+EQls3uThPNTB
w2EjRMkJ1hLQBHsa4Aq0i2CSgJSHrjHMrX3+S4eIU1ZjptTOmZMUSEUmzVmiZ8kG
RvETS0poDftTa8c0pod0UISHID+85duOnvVuQTMjNXD+pZKTc2uw4cP7H67f2df/
QVJPOv3PqPAwVD1rTF8iEKJCKmJsi6pqtbKFKZCts4qNdk/CuVRDtBOI8sjKI9dB
+PLyFwbkrMeYfBE5vmvNNqDiRGo9ENuFetH9uKrqcz43sJCWwtML2fuEEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDR/qmyJh9p5IXiSnzoLLLrJ105iMB8GA1UdIwQY
MBaAFLn0DvfxPsmhVu+w2zlgkLx12p1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQt
ZmM1NTkwY2I4ZjZiLzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQtZmM1NTkwY2I4ZjZi
LzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLOWfkaB
0QjSPMNCyYHqThwDHasGnsaD5oVU/wyrC6c5XnWNVNdZ+P0RjikDvUrRUwKJCKJk
xGYiLwnv6PEfmKLUPxdCidvj+p4C8xK2vP5Wa5PjCRQkG7iKV618k/qJhyo06Txt
/VtPHISvToOZmu8VqH3qyFQpFTUDfoFX5wFDxFZ8vkOmPvF5iRKAUlRuojt7DVi/
kYW2+MB/Rr4DExaKMmFLr0sBjKVu87j9fFGWQdVHkBRYLVxx0f8/TuS/h/iiidZQ
TSXHw0eH8/qIxi6MhEVl3i51pTZb0+og9iDGHdJVaNDOHsjxVm3t0suUNCW+li5m
CZbwQhvngfQCkA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:26 2025 by rpki-client