Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File: uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier: I0XnUpk4F2gcrG1k5AminI4RyVp2xKQakEYqR5/DQgg=
Subject key identifier: AB:AA:08:BE:71:75:8C:60:19:AB:5D:72:FE:F0:5A:1F:E9:AA:90:C0
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial: 0199FD34048EC0798307242F94BC4BAF8139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number: 0998
Signing time: Sun 19 Oct 2025 16:01:08 +0000
Manifest this update: Sun 19 Oct 2025 16:01:08 +0000
Manifest next update: Mon 20 Oct 2025 16:01:08 +0000
Files and hashes: 1: prumtdRguLUWgSqqHbzk8jBqloQ.roa (hash: xMMK2x/LYfV9Soh0v548c3TFIIdeHQqfXsiwhf98SBU=)
2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: c3N7RAqlf8eGq+EcdCAvT1FPLsKmBGjXa/UeRx3dfsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:04:8e:c0:79:83:07:24:2f:94:bc:4b:af:81:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Validity
Not Before: Oct 19 16:01:08 2025 GMT
Not After : Oct 20 16:01:08 2025 GMT
Subject: CN=abaa08be71758c6019ab5d72fef05a1fe9aa90c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:f0:61:5f:39:12:73:51:54:32:af:76:8e:
f9:7e:43:3c:91:87:39:bb:13:f8:fa:97:33:d1:43:
98:ad:ff:c0:6c:ae:11:35:16:7e:0f:7f:ee:76:83:
d3:ec:42:ba:b5:c2:a5:0f:97:2f:26:68:ca:a0:6a:
c8:eb:34:c3:62:4c:27:c3:fb:1c:66:97:b7:cd:ce:
2c:b2:4c:9d:b4:01:c8:e8:42:d2:7e:e2:ad:52:94:
3a:c2:41:cb:cd:cb:d5:3f:eb:b2:d5:a6:da:d6:29:
14:04:15:3b:63:3e:07:fc:fb:59:b6:9b:e2:5e:4a:
87:48:63:26:30:34:a1:17:0e:1d:16:10:30:89:e0:
db:4c:63:85:61:25:1c:a9:85:26:a9:13:d9:1c:f4:
92:e7:2e:f6:a4:95:4d:31:34:99:5d:97:16:76:2b:
c4:52:29:12:aa:da:15:15:86:08:de:44:d1:4f:1b:
f2:af:d0:b0:b7:17:9a:93:3d:9c:4b:7b:c3:19:94:
19:02:4e:6e:ea:da:2d:3b:10:3a:53:67:2b:a5:eb:
40:54:7b:25:9b:78:68:63:37:65:dc:d3:ff:9a:bf:
55:70:a4:2f:e7:af:aa:9b:31:e9:b8:1d:aa:55:5c:
2f:c0:dd:15:bf:5d:48:c8:96:e4:2a:28:d0:4b:95:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AA:08:BE:71:75:8C:60:19:AB:5D:72:FE:F0:5A:1F:E9:AA:90:C0
X509v3 Authority Key Identifier:
keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6f:ba:db:21:a9:df:3e:2f:79:13:a9:77:32:e4:2c:d3:39:
ae:d0:79:4c:27:3b:88:3c:22:c1:2e:71:5e:8f:fd:32:a0:7e:
06:22:63:86:fa:6f:04:45:1c:a8:d5:fd:ca:38:71:e7:c3:e5:
b0:c5:dc:c6:89:27:dd:87:2e:41:8a:ef:66:73:89:a7:ba:59:
24:d0:1c:c6:59:0c:1d:4b:58:44:53:2f:cb:d1:cf:c1:66:0f:
1d:d6:68:25:cc:d1:49:6e:1e:c7:31:d6:25:fc:73:ae:e6:bb:
f3:40:d9:e8:57:7b:91:25:a1:9a:3f:e4:3d:6e:1b:29:a3:4e:
40:06:51:fd:10:b3:5e:7a:64:a4:01:7a:2b:bd:85:cb:a5:f0:
24:a9:70:23:4b:95:7f:86:8e:f0:cc:2c:ad:b1:ff:5b:5b:f0:
ba:3d:21:b3:b7:1c:dc:aa:91:f8:e0:9a:5e:e1:d9:e5:c1:c8:
73:54:45:cf:2d:eb:02:27:4d:8f:2b:5e:13:dc:b4:12:80:3a:
5d:a1:93:06:2a:6e:38:f3:57:75:5e:c5:71:e7:e5:3c:81:d5:
05:e1:a2:7d:1a:d9:16:9d:c4:4d:13:37:4e:c0:ea:88:84:c6:
37:86:56:b8:bc:88:da:02:2f:27:20:c9:df:71:0d:85:db:1f:
ec:28:8d:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NASOwHmDByQvlLxLr4E5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZGFmYTdlYTU1MzE3ODEzM2U3ZTg0ZmVlYjhhYzNhOWRi
Y2Y5Y2EwHhcNMjUxMDE5MTYwMTA4WhcNMjUxMDIwMTYwMTA4WjAzMTEwLwYDVQQD
EyhhYmFhMDhiZTcxNzU4YzYwMTlhYjVkNzJmZWYwNWExZmU5YWE5MGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIPwYV85EnNRVDKvdo75fkM8kYc5
uxP4+pcz0UOYrf/AbK4RNRZ+D3/udoPT7EK6tcKlD5cvJmjKoGrI6zTDYkwnw/sc
Zpe3zc4sskydtAHI6ELSfuKtUpQ6wkHLzcvVP+uy1aba1ikUBBU7Yz4H/PtZtpvi
XkqHSGMmMDShFw4dFhAwieDbTGOFYSUcqYUmqRPZHPSS5y72pJVNMTSZXZcWdivE
UikSqtoVFYYI3kTRTxvyr9Cwtxeakz2cS3vDGZQZAk5u6totOxA6U2crpetAVHsl
m3hoYzdl3NP/mr9VcKQv56+qmzHpuB2qVVwvwN0Vv11IyJbkKijQS5X/TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuqCL5xdYxgGatdcv7wWh/pqpDAMB8GA1UdIwQY
MBaAFLja+n6lUxeBM+foT+64rDqdvPnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUt
NmI4OWZhNDY3NTdjLzEvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUtNmI4OWZhNDY3NTdj
LzEvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2+62yGp
3z4veROpdzLkLNM5rtB5TCc7iDwiwS5xXo/9MqB+BiJjhvpvBEUcqNX9yjhx58Pl
sMXcxokn3YcuQYrvZnOJp7pZJNAcxlkMHUtYRFMvy9HPwWYPHdZoJczRSW4exzHW
Jfxzrua780DZ6Fd7kSWhmj/kPW4bKaNOQAZR/RCzXnpkpAF6K72Fy6XwJKlwI0uV
f4aO8MwsrbH/W1vwuj0hs7cc3KqR+OCaXuHZ5cHIc1RFzy3rAidNjyteE9y0EoA6
XaGTBipuOPNXdV7FceflPIHVBeGifRrZFp3ETRM3TsDqiITGN4ZWuLyI2gIvJyDJ
33ENhdsf7CiNrw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:26 2025 by rpki-client