Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File: uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier: MR1hJPt63LGqv3vuQKtgRI6gm+4jigoTvLOxEnb+Vjk=
Subject key identifier: BB:99:EB:DA:0E:B8:33:B6:51:2E:06:24:69:87:A0:9F:11:F4:A9:FA
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 0199FBEAD4884C10C62B32EFD0FDB43C1BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: rfqIXym62rsTrwUCch6X7N-WIjc.roa (hash: UrLx/UfZM+i0RuGAlwwTlhRRu8d3hC661LamttgumqQ=)
2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: e5gNfABsWcJ/Ev0TW26wE/CcdDhusQIbXCECebp1R5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d4:88:4c:10:c6:2b:32:ef:d0:fd:b4:3c:1b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=bb99ebda0eb833b6512e06246987a09f11f4a9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:3c:d0:aa:38:d4:83:b5:27:9d:95:f0:35:
97:f1:b7:03:5b:ff:27:27:ef:2d:21:10:3f:3f:cc:
50:73:de:be:57:72:11:d9:a2:52:ce:b3:9d:fa:21:
d2:d5:14:38:dc:4f:e0:40:d0:4a:e9:4b:c7:4c:7e:
60:82:12:a1:fa:7d:60:33:0c:a0:0a:a0:37:51:a5:
64:78:3d:3f:c8:1c:79:45:82:8e:c5:40:e7:53:6a:
a4:f5:2f:9c:4f:aa:23:09:8f:1e:b9:4e:c6:6f:e7:
fc:18:e0:d8:7c:b3:74:e4:c6:14:cc:55:ef:55:9f:
50:cb:46:18:b7:2d:09:9a:f5:85:ab:26:c8:ec:b1:
54:40:14:13:62:91:29:76:52:02:a9:b5:12:83:a3:
03:e7:a1:36:fc:13:e4:80:8b:63:c3:0e:d0:68:95:
cd:d5:f8:bc:a5:5f:74:dd:d1:ec:b7:ea:f4:da:21:
0d:d6:7f:b8:fc:9d:51:3f:c9:88:d7:81:be:68:19:
c9:b1:4b:76:5e:82:e5:f3:4e:76:ce:e8:de:b7:ad:
e6:f1:82:3f:7c:70:59:df:a3:c3:b7:d7:77:d5:a8:
3d:d7:ae:4f:7e:c2:52:3c:12:38:c4:a4:a4:73:40:
66:cd:8e:b2:c0:f7:cb:47:dc:16:62:e6:0d:39:33:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:99:EB:DA:0E:B8:33:B6:51:2E:06:24:69:87:A0:9F:11:F4:A9:FA
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ba:87:63:31:b9:b6:a6:f2:cd:eb:a0:92:cf:fd:14:9d:04:
71:a5:aa:70:89:1f:08:be:83:ed:ff:87:db:3c:43:92:cf:00:
95:dd:d0:3a:87:08:72:7e:0b:75:0c:93:ad:91:d2:d0:63:7c:
d7:27:39:2f:63:ec:70:b2:b9:02:26:9c:21:7f:26:6b:98:04:
f5:97:b7:7b:97:22:a9:f8:42:cd:38:d4:f7:48:d1:35:fa:21:
08:43:3b:59:27:ce:8a:56:57:df:de:4d:9e:3a:24:84:0c:45:
4a:e7:36:1a:72:6e:16:77:a9:27:bd:e3:52:08:87:68:e5:87:
02:e5:6c:02:d6:b8:96:ac:67:f0:39:23:a1:a3:b8:9a:69:3a:
5f:99:aa:4d:84:70:2d:24:23:0a:25:b1:90:6c:b9:c5:89:dc:
57:a2:ea:d6:1d:51:41:c0:d4:80:ed:f9:d7:dd:00:22:77:88:
e1:b0:27:1e:c6:90:7a:c1:ef:e5:1f:ef:e5:97:69:c0:89:c6:
fa:33:49:8d:b3:39:07:47:90:85:09:d5:a0:1b:73:5d:67:65:
a3:2d:64:9b:16:f9:5f:2b:b1:c0:91:70:47:aa:e9:5b:25:0a:
c5:73:97:25:75:df:99:b7:72:56:d8:a9:cf:81:78:1b:5e:f5:
0c:b5:d7:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76tSITBDGKzLv0P20PBvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjljYzQyNDE1ZWFjNjVjNGJhYTFhMzkyNjMwMmU4OGI1
ZTE2MjkwHhcNMjUxMDE5MTAwMTM1WhcNMjUxMDIwMTAwMTM1WjAzMTEwLwYDVQQD
EyhiYjk5ZWJkYTBlYjgzM2I2NTEyZTA2MjQ2OTg3YTA5ZjExZjRhOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iw80Ko41IO1J52V8DWX8bcDW/8n
J+8tIRA/P8xQc96+V3IR2aJSzrOd+iHS1RQ43E/gQNBK6UvHTH5gghKh+n1gMwyg
CqA3UaVkeD0/yBx5RYKOxUDnU2qk9S+cT6ojCY8euU7Gb+f8GODYfLN05MYUzFXv
VZ9Qy0YYty0JmvWFqybI7LFUQBQTYpEpdlICqbUSg6MD56E2/BPkgItjww7QaJXN
1fi8pV903dHst+r02iEN1n+4/J1RP8mI14G+aBnJsUt2XoLl8052zujet63m8YI/
fHBZ36PDt9d31ag9165PfsJSPBI4xKSkc0BmzY6ywPfLR9wWYuYNOTPtewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuZ69oOuDO2US4GJGmHoJ8R9Kn6MB8GA1UdIwQY
MBaAFLhpzEJBXqxlxLqho5JjAuiLXhYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUduTVFrRmVyR1hFdXFHamttTUM2SXRlRmlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MzJiMjYtMzE5My00NGE3LTkzOGUt
YWY2ODQ2N2MzNzI3LzEvdUduTVFrRmVyR1hFdXFHamttTUM2SXRlRmlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MzJiMjYtMzE5My00NGE3LTkzOGUtYWY2ODQ2N2MzNzI3
LzEvdUduTVFrRmVyR1hFdXFHamttTUM2SXRlRmlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrqHYzG5
tqbyzeugks/9FJ0EcaWqcIkfCL6D7f+H2zxDks8Ald3QOocIcn4LdQyTrZHS0GN8
1yc5L2PscLK5AiacIX8ma5gE9Ze3e5ciqfhCzTjU90jRNfohCEM7WSfOilZX395N
njokhAxFSuc2GnJuFnepJ73jUgiHaOWHAuVsAta4lqxn8DkjoaO4mmk6X5mqTYRw
LSQjCiWxkGy5xYncV6Lq1h1RQcDUgO35190AIneI4bAnHsaQesHv5R/v5ZdpwInG
+jNJjbM5B0eQhQnVoBtzXWdloy1kmxb5XyuxwJFwR6rpWyUKxXOXJXXfmbdyVtip
z4F4G171DLXX0Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:34 2025 by rpki-client