Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: MxHMB66qQdhBVw06+bO/NYR16pnFF+RwU00vaiaG0DI=
Subject key identifier: 44:CE:BF:AF:27:A7:9E:22:7B:4F:28:56:35:CF:28:CA:50:95:AB:69
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 0199FBEB3C33F9826FBCDCFF338B70AAAC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0E18
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: rgvtyID9p-DqMnjSKCFn-cGMrm8.roa (hash: KZX9vOyc4u5urfjnyI1iRG4cI0C7NijDH3Acv+79gvU=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: WCrht6pbWvisy10QeLyrVITqPDhh5+EC6sFYyXs9XCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3c:33:f9:82:6f:bc:dc:ff:33:8b:70:aa:ac:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=44cebfaf27a79e227b4f285635cf28ca5095ab69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:72:ad:60:97:4f:cb:07:6e:43:df:b3:a9:
10:32:fc:ba:41:8c:1e:62:77:6f:fa:a3:50:7f:63:
dd:fc:04:93:c7:3d:88:f5:ad:5a:43:58:90:5a:6a:
11:95:5a:b9:e3:80:1c:d6:8b:20:53:a4:01:63:6b:
05:47:26:58:67:c0:9e:aa:a6:26:8f:71:fa:b5:98:
01:51:95:9c:22:60:2d:24:84:80:b9:37:ba:6b:f0:
b8:58:dd:0c:fd:03:96:59:f3:8b:43:19:68:f9:aa:
3a:68:10:df:e0:98:d5:5c:be:10:d3:24:d7:18:81:
d6:bd:7f:fa:cf:f7:67:88:17:99:d4:82:44:33:b9:
93:9c:44:dc:44:0c:26:a7:88:35:d7:f3:4c:0e:f5:
5a:ee:ee:53:66:df:3c:69:62:7c:29:13:2c:e5:41:
f7:6d:8c:ee:9a:1c:d2:0f:20:8c:41:57:04:04:35:
d6:8a:02:0e:88:5a:32:bd:53:89:44:b6:ff:19:d1:
13:d0:b2:bc:f3:1d:18:dc:0c:45:bc:60:49:61:53:
f8:c3:22:6b:7b:53:b4:6b:1d:2c:24:d7:87:b8:2a:
ea:8d:d1:56:aa:2e:7b:0b:f9:0f:d7:32:a5:94:59:
50:f1:9a:ba:81:39:2d:be:d2:99:91:b0:ee:a4:a6:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CE:BF:AF:27:A7:9E:22:7B:4F:28:56:35:CF:28:CA:50:95:AB:69
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e6:21:46:11:94:4f:0d:33:9e:4e:e0:8e:f2:5a:0e:61:42:
0e:b7:1c:a4:4a:41:8a:db:a2:a0:56:3b:db:81:c0:f1:24:e8:
df:46:31:45:a1:06:b8:22:c0:37:0d:c6:83:d7:87:2b:ac:65:
bb:0d:af:69:84:03:67:24:06:89:e6:af:f7:f6:93:a4:25:85:
80:0b:75:99:b9:eb:6d:40:81:4b:d8:bc:5e:95:88:0e:37:25:
d7:e3:7c:30:4b:37:ad:f5:f8:a0:87:e2:4d:a7:51:52:7d:d9:
0e:0f:ba:fe:5a:a8:c4:ec:dd:3e:dc:96:01:94:0e:57:ce:cd:
eb:f9:9c:e7:45:75:3b:e1:89:35:76:b0:8d:d9:9d:87:ce:0a:
0b:7e:53:3d:de:89:02:a6:73:77:e7:d4:79:f5:09:0b:89:9e:
08:f0:e2:91:05:4c:0d:0f:73:6e:c8:80:0b:a1:50:31:30:59:
29:3e:8d:ca:bf:bf:56:8b:99:f8:88:6a:db:2c:f0:58:59:47:
df:60:27:08:38:17:98:ae:22:b2:f5:0c:14:43:93:3b:90:64:
4e:4b:dd:92:54:d3:44:33:bb:3e:69:3c:02:c7:ce:e9:ef:64:
c4:85:48:e3:8f:15:e9:f2:21:73:4b:28:ff:7f:b1:e0:27:2a:
ba:51:f6:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zwz+YJvvNz/M4twqqxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YTkwODhiYjQyMDFjZTQ2ZDhlYjgzZGM5ZjM4Yzc4Yjhm
M2JlMWIwHhcNMjUxMDE5MTAwMjAxWhcNMjUxMDIwMTAwMjAxWjAzMTEwLwYDVQQD
Eyg0NGNlYmZhZjI3YTc5ZTIyN2I0ZjI4NTYzNWNmMjhjYTUwOTVhYjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d5yrWCXT8sHbkPfs6kQMvy6QYwe
Yndv+qNQf2Pd/ASTxz2I9a1aQ1iQWmoRlVq544Ac1osgU6QBY2sFRyZYZ8CeqqYm
j3H6tZgBUZWcImAtJISAuTe6a/C4WN0M/QOWWfOLQxlo+ao6aBDf4JjVXL4Q0yTX
GIHWvX/6z/dniBeZ1IJEM7mTnETcRAwmp4g11/NMDvVa7u5TZt88aWJ8KRMs5UH3
bYzumhzSDyCMQVcEBDXWigIOiFoyvVOJRLb/GdET0LK88x0Y3AxFvGBJYVP4wyJr
e1O0ax0sJNeHuCrqjdFWqi57C/kP1zKllFlQ8Zq6gTktvtKZkbDupKbK/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETOv68np54ie08oVjXPKMpQlatpMB8GA1UdIwQY
MBaAFLmpCIu0IBzkbY64PcnzjHi4874bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFrSWk3UWdIT1J0anJnOXlmT01lTGp6dmhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jY2FmMzQtM2RlZS00ZmUyLWIyZmMt
OGRkNDUzYWI0MjNkLzEvdWFrSWk3UWdIT1J0anJnOXlmT01lTGp6dmhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jY2FmMzQtM2RlZS00ZmUyLWIyZmMtOGRkNDUzYWI0MjNk
LzEvdWFrSWk3UWdIT1J0anJnOXlmT01lTGp6dmhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+YhRhGU
Tw0znk7gjvJaDmFCDrccpEpBituioFY724HA8STo30YxRaEGuCLANw3Gg9eHK6xl
uw2vaYQDZyQGieav9/aTpCWFgAt1mbnrbUCBS9i8XpWIDjcl1+N8MEs3rfX4oIfi
TadRUn3ZDg+6/lqoxOzdPtyWAZQOV87N6/mc50V1O+GJNXawjdmdh84KC35TPd6J
AqZzd+fUefUJC4meCPDikQVMDQ9zbsiAC6FQMTBZKT6Nyr+/VouZ+Ihq2yzwWFlH
32AnCDgXmK4isvUMFEOTO5BkTkvdklTTRDO7Pmk8AsfO6e9kxIVI448V6fIhc0so
/3+x4CcqulH2Cw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:10 2025 by rpki-client