Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: ONKeRQzwy1RqODWs4f3vvi2Q50GD+LRvy3ZbUJPwufQ=
Subject key identifier: C1:49:51:EB:E6:61:3A:8A:D4:31:93:12:01:9F:98:DA:68:21:D2:DF
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 0199FCC6B87F78383ACFFD0E793C123F17E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 062E
Signing time: Sun 19 Oct 2025 14:01:45 +0000
Manifest this update: Sun 19 Oct 2025 14:01:45 +0000
Manifest next update: Mon 20 Oct 2025 14:01:45 +0000
Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=)
2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: UsRmp/k74itRvIW+D4IYkdJwWNLX7F666PfdMdZsLig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b8:7f:78:38:3a:cf:fd:0e:79:3c:12:3f:17:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Oct 19 14:01:45 2025 GMT
Not After : Oct 20 14:01:45 2025 GMT
Subject: CN=c14951ebe6613a8ad4319312019f98da6821d2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:2f:44:be:3f:81:84:a9:7b:36:c6:0f:5f:
0a:a2:85:fa:ac:e6:77:60:ff:a0:fa:f6:84:5f:1c:
3a:7c:6c:76:48:d9:71:f6:42:13:13:c4:15:e8:2e:
b9:07:a4:50:79:0a:1c:78:03:63:76:d1:4d:bf:98:
bc:6c:a1:87:76:fc:51:4b:31:a4:cf:db:0c:fc:71:
3c:06:58:a7:58:86:7f:ca:aa:da:ab:50:a8:cd:9b:
93:79:b1:8f:40:dd:82:40:6b:98:70:59:ab:18:87:
1e:96:e0:e5:2c:ff:1d:af:56:88:f6:8b:60:d3:b4:
28:2a:f3:1e:bb:ca:85:61:d0:6c:b2:7d:f5:6c:01:
0c:66:03:37:65:4e:92:34:00:c2:d9:85:51:7d:3f:
fd:bc:2c:e7:48:a7:4d:16:a4:e3:2f:f7:05:d5:81:
9c:41:19:ac:9a:1d:ee:1e:74:c4:5f:58:fb:be:f3:
3c:19:5a:0e:63:87:53:fe:6c:de:53:76:af:c0:d3:
0f:fe:e7:3e:c5:5d:8c:03:bb:a5:96:f7:dc:b5:bc:
09:14:7c:e8:df:b1:96:4a:32:14:20:76:3a:ab:0d:
aa:97:c6:c8:a0:39:a4:ce:2e:5d:ec:c2:d1:21:14:
db:8c:87:41:1b:58:20:f6:21:4d:24:f1:b7:ed:36:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:51:EB:E6:61:3A:8A:D4:31:93:12:01:9F:98:DA:68:21:D2:DF
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:90:08:4c:5f:90:92:32:dc:83:cf:c7:43:92:e5:f2:8c:f5:
8e:38:07:2f:16:89:25:38:08:a3:53:3f:4b:33:b2:4d:15:76:
b0:08:73:5e:35:a8:bb:2e:c7:c7:76:e1:d7:45:36:aa:fb:f3:
6e:78:04:0e:44:89:81:d6:bd:77:18:13:ee:f2:32:c6:ef:22:
31:80:f1:da:1b:02:c7:31:9e:cd:11:a3:1b:76:df:98:c0:60:
2f:ab:39:cd:82:e8:0b:ad:2b:54:e7:11:6e:98:a9:37:31:35:
99:f1:c8:b8:76:8e:65:c3:09:ad:c0:85:88:0b:20:41:02:2d:
45:64:9f:57:1c:73:d9:e5:12:17:46:8f:9c:64:b3:02:c1:29:
b5:f7:76:a0:06:2a:ca:57:53:80:02:5b:09:18:5b:4b:73:cc:
4d:3b:65:19:ab:db:27:b6:78:17:7a:9d:72:0c:53:23:b0:88:
d9:c2:f4:8d:4f:8b:35:99:21:51:44:46:01:fe:2a:7a:7f:6c:
21:a8:ac:f4:b8:37:ef:2f:a1:b8:ae:85:17:d6:01:d7:0e:9d:
b3:dd:a2:62:af:e6:7b:64:49:d7:b0:a7:0a:29:9b:d1:70:84:
83:2e:3e:4e:ea:1d:68:64:75:4b:a3:cb:85:7b:b9:7d:d1:d9:
43:2e:1f:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xrh/eDg6z/0OeTwSPxfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OTUxYzg1MTRiN2RkMjFiMzMzYWJiMzNjYWNhM2M0ZGFl
OWQ3MDkwHhcNMjUxMDE5MTQwMTQ1WhcNMjUxMDIwMTQwMTQ1WjAzMTEwLwYDVQQD
EyhjMTQ5NTFlYmU2NjEzYThhZDQzMTkzMTIwMTlmOThkYTY4MjFkMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPgvRL4/gYSpezbGD18KooX6rOZ3
YP+g+vaEXxw6fGx2SNlx9kITE8QV6C65B6RQeQoceANjdtFNv5i8bKGHdvxRSzGk
z9sM/HE8BlinWIZ/yqraq1CozZuTebGPQN2CQGuYcFmrGIceluDlLP8dr1aI9otg
07QoKvMeu8qFYdBssn31bAEMZgM3ZU6SNADC2YVRfT/9vCznSKdNFqTjL/cF1YGc
QRmsmh3uHnTEX1j7vvM8GVoOY4dT/mzeU3avwNMP/uc+xV2MA7ullvfctbwJFHzo
37GWSjIUIHY6qw2ql8bIoDmkzi5d7MLRIRTbjIdBG1gg9iFNJPG37TY9BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFJUevmYTqK1DGTEgGfmNpoIdLfMB8GA1UdIwQY
MBaAFLiVHIUUt90hszOrszyso8Ta6dcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQt
OGNkNzk1MjdlNTMwLzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQtOGNkNzk1MjdlNTMw
LzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZAITF+Q
kjLcg8/HQ5Ll8oz1jjgHLxaJJTgIo1M/SzOyTRV2sAhzXjWouy7Hx3bh10U2qvvz
bngEDkSJgda9dxgT7vIyxu8iMYDx2hsCxzGezRGjG3bfmMBgL6s5zYLoC60rVOcR
bpipNzE1mfHIuHaOZcMJrcCFiAsgQQItRWSfVxxz2eUSF0aPnGSzAsEptfd2oAYq
yldTgAJbCRhbS3PMTTtlGavbJ7Z4F3qdcgxTI7CI2cL0jU+LNZkhUURGAf4qen9s
Iais9Lg37y+huK6FF9YB1w6ds92iYq/me2RJ17CnCimb0XCEgy4+TuodaGR1S6PL
hXu5fdHZQy4fqw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:57 2025 by rpki-client