Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: RiPOwE+6C+tBgKogSo9+KI9dAbsqLqeJ/ZJhbYJI+uY=
Subject key identifier: 43:A9:D3:0A:F9:30:3E:01:91:98:02:0D:3D:19:94:09:0B:A8:E6:AB
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 0199FE7D9F0926B7E803C5FB803E74B49B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 1584
Signing time: Sun 19 Oct 2025 22:01:09 +0000
Manifest this update: Sun 19 Oct 2025 22:01:09 +0000
Manifest next update: Mon 20 Oct 2025 22:01:09 +0000
Files and hashes: 1: MmFJokVO4QRlDiGRue7krePTmWQ.roa (hash: 2NjaoaYGPQ9nJqZ5MUASprFLlvmc6uqFQzLhkJlBENc=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: LQLizi8wFCXOIzXglCdu0s1/ANnZ9I0VRR6OvuWtb4U=)
3: a9ojZnfz0fm0UVD2fXdjv-28qnw.roa (hash: s9wsqrb6KjabBhTORHQp4WAcdtQIFP8TAj4IRPzQjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:9f:09:26:b7:e8:03:c5:fb:80:3e:74:b4:9b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Oct 19 22:01:09 2025 GMT
Not After : Oct 20 22:01:09 2025 GMT
Subject: CN=43a9d30af9303e019198020d3d1994090ba8e6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:b0:7e:db:d6:81:a2:69:b6:bb:ce:06:9a:
6b:68:92:3e:64:07:8f:5a:51:62:c3:0e:bc:de:62:
af:2c:52:a9:38:09:1f:68:8b:c2:29:a6:db:2e:d6:
18:19:06:e5:2a:5c:83:ec:09:e0:b1:db:9d:08:53:
d4:23:e8:9d:03:01:15:5f:78:5a:13:f3:d1:64:c5:
39:a1:17:e0:42:d8:9d:da:9e:c3:99:28:8e:2a:5d:
39:2f:69:41:46:b9:fa:b7:ca:96:f7:4e:c3:5c:d1:
c5:d7:22:4e:8b:92:a6:7e:de:e0:58:fb:35:1d:b9:
9e:b6:e7:e0:c6:43:b1:40:90:81:54:c9:15:e9:3c:
2c:28:99:c7:76:9e:4e:8c:e5:ec:22:6b:65:c0:4f:
bf:d1:d4:81:45:5c:90:8a:c7:33:5b:22:b7:30:38:
13:ab:ba:45:29:b3:3c:d1:76:ea:82:9c:21:44:d6:
35:57:ed:ba:62:dc:dd:f4:03:e4:d1:48:9e:89:07:
18:97:df:71:a8:a0:cd:a3:97:8b:bd:89:e6:dc:99:
34:a8:ae:17:4c:e5:87:cf:b3:d0:b7:2c:18:98:61:
ab:6d:43:4f:48:13:4e:cd:49:d7:23:a5:50:dd:66:
11:fd:cd:d4:3e:c3:28:b5:52:79:e9:63:cc:0a:1b:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A9:D3:0A:F9:30:3E:01:91:98:02:0D:3D:19:94:09:0B:A8:E6:AB
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:21:d9:30:df:03:ed:b2:e2:97:b0:35:f4:49:64:2f:32:3e:
92:8d:e8:bd:a2:d0:34:0a:e4:4e:c1:0b:b6:0c:dc:da:dc:5d:
c1:d0:2f:9b:e6:66:42:61:45:43:fd:df:26:77:77:65:46:24:
bf:31:ff:b8:c0:93:62:55:28:91:9c:75:11:d7:0c:26:42:16:
1c:65:2c:45:80:e0:a8:ef:86:5a:c5:b2:c0:d1:a2:57:f7:3c:
40:e9:5e:f1:bf:f1:06:05:f7:07:3d:76:1c:2d:c9:fa:57:17:
22:a5:1b:33:78:47:1c:51:81:cd:72:1d:61:91:aa:70:af:1a:
e7:a6:64:94:18:a2:5c:fe:01:1e:3c:01:b7:9d:20:2a:db:4e:
1a:1a:69:27:a8:89:c1:78:3c:97:bb:2f:40:e3:7a:98:7f:c8:
ba:af:49:cd:fa:20:bb:cb:3c:a6:d6:29:78:c4:70:f6:6e:0a:
83:b1:05:23:c0:7d:20:b8:90:b6:55:78:a1:27:d5:91:7a:87:
d8:fe:be:f7:61:69:f7:11:cd:bc:2a:24:df:0d:91:b6:e9:7e:
38:f3:e6:48:0f:cd:03:c2:25:0f:76:fa:e4:6a:f5:81:8c:97:
da:e1:c2:af:74:4a:2a:d8:27:7a:ce:a9:52:e4:79:b9:30:54:
a4:b0:73:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fZ8JJrfoA8X7gD50tJtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOGQ1ODE0YzcxNTY0MjBkZWMzYTNmN2U1MjZlZjBmODMz
M2VlZjYwHhcNMjUxMDE5MjIwMTA5WhcNMjUxMDIwMjIwMTA5WjAzMTEwLwYDVQQD
Eyg0M2E5ZDMwYWY5MzAzZTAxOTE5ODAyMGQzZDE5OTQwOTBiYThlNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/+wftvWgaJptrvOBppraJI+ZAeP
WlFiww683mKvLFKpOAkfaIvCKabbLtYYGQblKlyD7AngsdudCFPUI+idAwEVX3ha
E/PRZMU5oRfgQtid2p7DmSiOKl05L2lBRrn6t8qW907DXNHF1yJOi5Kmft7gWPs1
HbmetufgxkOxQJCBVMkV6TwsKJnHdp5OjOXsImtlwE+/0dSBRVyQisczWyK3MDgT
q7pFKbM80XbqgpwhRNY1V+26Ytzd9APk0UieiQcYl99xqKDNo5eLvYnm3Jk0qK4X
TOWHz7PQtywYmGGrbUNPSBNOzUnXI6VQ3WYR/c3UPsMotVJ56WPMChtJfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOp0wr5MD4BkZgCDT0ZlAkLqOarMB8GA1UdIwQY
MBaAFFKNWBTHFWQg3sOj9+Um7w+DM+72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW8xWUZNY1ZaQ0RldzZQMzVTYnZENE16N3ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iZWFjMDktYzQ5Zi00YzcwLTk4MTgt
NDMxYzM5YmI3YjM4LzEvVW8xWUZNY1ZaQ0RldzZQMzVTYnZENE16N3ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iZWFjMDktYzQ5Zi00YzcwLTk4MTgtNDMxYzM5YmI3YjM4
LzEvVW8xWUZNY1ZaQ0RldzZQMzVTYnZENE16N3ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyHZMN8D
7bLil7A19ElkLzI+ko3ovaLQNArkTsELtgzc2txdwdAvm+ZmQmFFQ/3fJnd3ZUYk
vzH/uMCTYlUokZx1EdcMJkIWHGUsRYDgqO+GWsWywNGiV/c8QOle8b/xBgX3Bz12
HC3J+lcXIqUbM3hHHFGBzXIdYZGqcK8a56ZklBiiXP4BHjwBt50gKttOGhppJ6iJ
wXg8l7svQON6mH/Iuq9Jzfogu8s8ptYpeMRw9m4Kg7EFI8B9ILiQtlV4oSfVkXqH
2P6+92Fp9xHNvCok3w2Rtul+OPPmSA/NA8IlD3b65Gr1gYyX2uHCr3RKKtgnes6p
UuR5uTBUpLBzsw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:26 2025 by rpki-client