Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
File: uNaZAUpVUnPtOrsXCGquPwL_mg8.mft (raw, json)
Hash identifier: NAs8T2JnB6aTK+ZC+vW74x4fPd/37IwX9mFotpRMMVw=
Subject key identifier: 9B:2B:AD:39:2A:A3:6A:F0:97:8B:FF:6A:AB:B2:38:C8:62:AB:C5:5A
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Certificate issuer: /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial: 0199FC590B74944F0B7F02CB78F701A9F019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
Manifest number: 0C2C
Signing time: Sun 19 Oct 2025 12:01:58 +0000
Manifest this update: Sun 19 Oct 2025 12:01:58 +0000
Manifest next update: Mon 20 Oct 2025 12:01:58 +0000
Files and hashes: 1: grkiyNrBsZFvA41Z_BZuZwQjbk0.roa (hash: orWqkkbt375i6JBo+FAAzLtCgy2y10AY9MRPYxvZKZE=)
2: uNaZAUpVUnPtOrsXCGquPwL_mg8.crl (hash: 58ESzAC56OQP3elgrqvEomBhyom1l2BdQuvOnwP0KRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0b:74:94:4f:0b:7f:02:cb:78:f7:01:a9:f0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Validity
Not Before: Oct 19 12:01:58 2025 GMT
Not After : Oct 20 12:01:58 2025 GMT
Subject: CN=9b2bad392aa36af0978bff6aabb238c862abc55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:d2:95:10:b5:c5:d2:20:c7:fb:09:28:16:
84:b5:70:26:43:89:07:83:be:22:84:61:3a:f1:91:
65:f2:37:a9:e9:98:81:9d:db:49:e7:83:bf:f8:2e:
74:cc:fa:75:09:62:1c:d2:bd:c4:85:6b:36:0c:4e:
fe:97:eb:26:dc:8f:e8:7e:dd:c3:c1:10:14:5f:96:
1d:b3:4c:c2:eb:d4:5d:6f:d3:37:72:fa:25:c5:e3:
8d:eb:bc:24:2a:5b:dc:28:8e:4a:24:88:6b:7e:7c:
01:28:c6:d1:95:5c:cb:51:2c:2b:bb:c2:cc:de:27:
f9:8e:35:fa:1c:ac:6b:a0:25:7d:b0:d0:49:70:c9:
3f:66:c0:8f:f3:6a:e7:99:06:65:e5:2f:79:38:d7:
08:c9:1f:7c:ca:1b:d3:2d:23:76:82:c6:9f:10:a1:
70:08:36:95:0f:05:61:cd:02:f7:a5:fc:94:1c:b3:
51:d4:68:10:70:aa:aa:2e:7b:dd:3e:fe:81:d6:f0:
10:39:c7:10:e9:2f:10:35:72:3a:cb:3a:52:d4:af:
43:f3:ca:73:d7:f7:16:7a:84:23:0d:04:fc:40:34:
4e:b8:58:f0:53:44:7b:4f:dd:8e:6c:ba:19:cf:e3:
ea:7f:cb:69:95:ec:d8:ca:41:2a:cc:01:46:d3:44:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:AD:39:2A:A3:6A:F0:97:8B:FF:6A:AB:B2:38:C8:62:AB:C5:5A
X509v3 Authority Key Identifier:
keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ac:1f:64:17:0a:14:73:d5:b1:75:6c:9a:c0:3a:d2:f4:99:
70:80:fc:bd:9d:70:c8:5c:77:92:80:7a:07:c7:e2:41:d8:ea:
19:46:55:98:41:7e:37:68:68:78:e8:f4:70:fb:2d:bb:69:9a:
25:82:44:90:a0:09:bc:25:f5:c7:ae:41:39:13:0f:59:88:e9:
41:01:d0:88:16:87:06:56:ea:0a:25:d5:b3:db:b8:15:10:3c:
56:53:97:b2:99:ce:9c:43:c5:ab:f8:c7:07:44:8a:62:89:36:
fc:9d:4e:02:a4:05:1e:73:89:ce:59:d3:d6:53:7b:44:16:7d:
ec:ec:2f:e4:cd:31:05:bb:3a:a4:34:5e:6f:85:d2:87:65:9d:
d4:19:fa:05:16:88:dc:2f:34:ab:f3:3c:a9:79:22:af:4e:32:
a2:9a:c1:9a:36:8f:03:90:fe:d4:2f:b5:07:3d:f1:73:8c:a1:
30:73:cb:93:0e:87:43:91:f9:8f:af:b0:51:9b:54:63:ea:96:
78:e3:ce:04:8b:d1:49:2b:4d:3b:f4:00:3b:d2:c0:73:55:f4:
6c:2b:80:aa:a9:5a:a7:58:56:32:c0:fb:95:68:2e:f8:1c:ef:
74:b8:ff:eb:0d:56:f6:9a:73:88:de:6b:4b:63:70:7a:91:c6:
22:99:d1:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WQt0lE8LfwLLePcBqfAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDY5OTAxNGE1NTUyNzNlZDNhYmIxNzA4NmFhZTNmMDJm
ZjlhMGYwHhcNMjUxMDE5MTIwMTU4WhcNMjUxMDIwMTIwMTU4WjAzMTEwLwYDVQQD
Eyg5YjJiYWQzOTJhYTM2YWYwOTc4YmZmNmFhYmIyMzhjODYyYWJjNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTvSlRC1xdIgx/sJKBaEtXAmQ4kH
g74ihGE68ZFl8jep6ZiBndtJ54O/+C50zPp1CWIc0r3EhWs2DE7+l+sm3I/oft3D
wRAUX5Yds0zC69Rdb9M3cvolxeON67wkKlvcKI5KJIhrfnwBKMbRlVzLUSwru8LM
3if5jjX6HKxroCV9sNBJcMk/ZsCP82rnmQZl5S95ONcIyR98yhvTLSN2gsafEKFw
CDaVDwVhzQL3pfyUHLNR1GgQcKqqLnvdPv6B1vAQOccQ6S8QNXI6yzpS1K9D88pz
1/cWeoQjDQT8QDROuFjwU0R7T92ObLoZz+Pqf8tplezYykEqzAFG00SUhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsrrTkqo2rwl4v/aquyOMhiq8VaMB8GA1UdIwQY
MBaAFLjWmQFKVVJz7Tq7Fwhqrj8C/5oPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5hWkFVcFZVblB0T3JzWENHcXVQd0xfbWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xMDRiYWUtMmM5YS00YmViLTkwMzUt
YjJkNzlhZTQ5NjQ2LzEvdU5hWkFVcFZVblB0T3JzWENHcXVQd0xfbWc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xMDRiYWUtMmM5YS00YmViLTkwMzUtYjJkNzlhZTQ5NjQ2
LzEvdU5hWkFVcFZVblB0T3JzWENHcXVQd0xfbWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqwfZBcK
FHPVsXVsmsA60vSZcID8vZ1wyFx3koB6B8fiQdjqGUZVmEF+N2hoeOj0cPstu2ma
JYJEkKAJvCX1x65BORMPWYjpQQHQiBaHBlbqCiXVs9u4FRA8VlOXspnOnEPFq/jH
B0SKYok2/J1OAqQFHnOJzlnT1lN7RBZ97Owv5M0xBbs6pDReb4XSh2Wd1Bn6BRaI
3C80q/M8qXkir04yoprBmjaPA5D+1C+1Bz3xc4yhMHPLkw6HQ5H5j6+wUZtUY+qW
eOPOBIvRSStNO/QAO9LAc1X0bCuAqqlap1hWMsD7lWgu+BzvdLj/6w1W9ppziN5r
S2NwepHGIpnRFA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:22 2025 by rpki-client