Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File: UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier: DBmmiUyVXkgTrV2sw5Pdbc12LxZTEjlK8QHPk05ZRyk=
Subject key identifier: A5:51:1D:62:0F:41:9C:EE:89:17:CD:78:63:A7:CF:38:FF:23:D2:D5
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 019A044813C5F9C87864B7C002E1B0461492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number: 1431
Signing time: Tue 21 Oct 2025 01:00:23 +0000
Manifest this update: Tue 21 Oct 2025 01:00:23 +0000
Manifest next update: Wed 22 Oct 2025 01:00:23 +0000
Files and hashes: 1: 1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa (hash: 2k5Vbn4Uzj43wxo1XqMC5rFldjjQHil2kjWg9IIMQEQ=)
2: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: GNHuwipcgxqOW5cLUn2psH7+AUVdPk8oknJrSzy96Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:48:13:c5:f9:c8:78:64:b7:c0:02:e1:b0:46:14:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: Oct 21 01:00:23 2025 GMT
Not After : Oct 22 01:00:23 2025 GMT
Subject: CN=a5511d620f419cee8917cd7863a7cf38ff23d2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:b0:be:4f:35:11:98:d3:ee:c8:de:7a:23:
55:34:fc:a8:91:f4:b0:f7:b0:f4:9c:c2:bf:82:e1:
ff:7c:f6:52:43:27:2b:b4:3f:c6:79:e0:59:e7:bc:
4a:bd:ae:8b:07:d5:9b:77:6a:e2:a7:38:69:47:cd:
3a:49:6f:59:9f:81:a0:90:90:e7:99:1d:25:44:00:
81:5d:95:6f:64:b5:0d:3e:dc:14:ba:dd:cc:d7:25:
1d:f9:05:9e:e3:3b:cb:a9:1a:01:49:55:be:7f:f3:
c5:b7:61:2a:28:6d:42:50:66:48:55:e4:eb:5b:9b:
64:4e:2f:11:fb:2d:72:2b:dd:bd:79:34:73:5f:14:
12:62:23:eb:f4:d9:c5:0d:8c:51:6f:0d:1b:58:80:
23:ea:d8:a7:28:1e:c0:af:78:8e:67:02:ac:80:f3:
a6:53:62:3f:3d:a9:f9:b6:02:41:98:b1:09:40:6c:
8e:69:61:e7:fc:9c:12:0e:76:53:6b:80:6d:72:2d:
45:dd:3f:66:a1:69:cc:56:b1:aa:9b:8f:80:b3:73:
3c:44:b3:49:e4:15:62:b1:3d:29:88:59:8d:40:95:
ec:aa:73:3e:c7:33:4f:ec:b1:89:ee:28:17:15:b3:
82:11:3c:ff:3b:40:2f:8e:fb:b5:a4:18:83:ae:44:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:51:1D:62:0F:41:9C:EE:89:17:CD:78:63:A7:CF:38:FF:23:D2:D5
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:44:46:d8:4e:2c:d2:76:9a:fd:fd:a3:5f:06:7e:09:82:f7:
c3:cb:8c:b0:70:54:f8:2f:3d:b9:a9:06:bf:9a:f3:df:53:f2:
d8:3f:5a:a6:52:c5:7d:55:53:c3:2f:b6:ab:6c:e4:fe:c4:09:
24:89:a7:0d:e1:cd:62:03:bd:80:ef:42:b3:62:b3:46:cb:0b:
c3:2a:b6:96:65:1a:03:4e:2e:66:a9:5a:57:19:2d:61:04:b2:
a1:af:af:af:f1:35:8e:de:6d:c6:d1:30:2d:14:5f:02:7c:e1:
13:35:51:d3:84:41:48:3d:b4:15:0f:6d:40:db:af:6a:53:66:
24:bc:f1:af:32:be:81:8d:8e:05:2c:ac:5f:df:9e:1b:18:0d:
3c:4a:2f:30:11:df:58:e2:78:6e:20:31:19:ad:52:ac:de:3e:
84:b9:7c:70:90:9e:3d:8b:d4:fb:f1:bf:f7:05:2a:94:79:27:
37:ad:36:fa:6d:3b:c5:d9:c1:9a:51:7a:7d:fc:39:f1:2b:11:
9b:67:94:63:3f:ad:0d:d1:81:fb:25:df:3e:5f:90:55:3e:a5:
f5:67:2f:bc:8e:02:94:b2:f4:27:19:66:bf:43:24:9d:a9:53:
d7:21:90:68:56:52:7b:d1:43:84:f4:4a:9c:65:3a:85:0f:fd:
45:dd:f6:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoESBPF+ch4ZLfAAuGwRhSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWE2YTliZWI1MmVmZjI5NjQ0NjU5Yjk0MzJhMGE1OTIz
NzMxNGMwHhcNMjUxMDIxMDEwMDIzWhcNMjUxMDIyMDEwMDIzWjAzMTEwLwYDVQQD
EyhhNTUxMWQ2MjBmNDE5Y2VlODkxN2NkNzg2M2E3Y2YzOGZmMjNkMmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09Kwvk81EZjT7sjeeiNVNPyokfSw
97D0nMK/guH/fPZSQycrtD/GeeBZ57xKva6LB9Wbd2ripzhpR806SW9Zn4GgkJDn
mR0lRACBXZVvZLUNPtwUut3M1yUd+QWe4zvLqRoBSVW+f/PFt2EqKG1CUGZIVeTr
W5tkTi8R+y1yK929eTRzXxQSYiPr9NnFDYxRbw0bWIAj6tinKB7Ar3iOZwKsgPOm
U2I/Pan5tgJBmLEJQGyOaWHn/JwSDnZTa4Btci1F3T9moWnMVrGqm4+As3M8RLNJ
5BVisT0piFmNQJXsqnM+xzNP7LGJ7igXFbOCETz/O0Avjvu1pBiDrkQP7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVRHWIPQZzuiRfNeGOnzzj/I9LVMB8GA1UdIwQY
MBaAFFGaapvrUu/ylkRlm5QyoKWSNzFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQt
OTA1ZDlkY2Y1MGFlLzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQtOTA1ZDlkY2Y1MGFl
LzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeURG2E4s
0naa/f2jXwZ+CYL3w8uMsHBU+C89uakGv5rz31Py2D9aplLFfVVTwy+2q2zk/sQJ
JImnDeHNYgO9gO9Cs2KzRssLwyq2lmUaA04uZqlaVxktYQSyoa+vr/E1jt5txtEw
LRRfAnzhEzVR04RBSD20FQ9tQNuvalNmJLzxrzK+gY2OBSysX9+eGxgNPEovMBHf
WOJ4biAxGa1SrN4+hLl8cJCePYvU+/G/9wUqlHknN602+m07xdnBmlF6ffw58SsR
m2eUYz+tDdGB+yXfPl+QVT6l9WcvvI4ClLL0Jxlmv0MknalT1yGQaFZSe9FDhPRK
nGU6hQ/9Rd323w==
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:47:08 2025 by rpki-client