Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
File: k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json)
Hash identifier: Zm8bfb/w6CRJe8u4EfrU8Vh8n2Zq8yZV9BB9DVHeuWo=
Subject key identifier: 59:4C:5D:E7:21:CC:E8:8C:56:76:F0:11:13:95:21:48:7C:8D:EF:B6
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial: 0199FB45E98264F548B8F2516DA18157FFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:26 +0000
Manifest this update: Sun 19 Oct 2025 07:01:26 +0000
Manifest next update: Mon 20 Oct 2025 07:01:26 +0000
Files and hashes: 1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: YjYv5MX4q6megHDF/Gsd6bgYUUVXCc/+HZrlnqaysfo=)
2: nuidpU4aDNDfpkpE3RPeG40f1q4.roa (hash: KG4XUtkHgFpia+tczkzg4tQ7m8oF5y68xoUIqm5c/jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e9:82:64:f5:48:b8:f2:51:6d:a1:81:57:ff:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Validity
Not Before: Oct 19 07:01:26 2025 GMT
Not After : Oct 20 07:01:26 2025 GMT
Subject: CN=594c5de721cce88c5676f011139521487c8defb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:65:69:ed:11:c5:6c:78:22:2c:15:8a:ad:
05:f6:fa:6b:4a:fc:54:d9:ce:ac:64:2c:68:81:9a:
7a:ad:49:73:a8:18:f3:28:d2:be:ca:55:84:7a:e9:
48:82:40:ca:c0:d1:de:10:b2:96:b5:eb:9f:11:3c:
51:c7:83:cf:b5:db:da:9b:eb:9c:0e:67:43:fa:98:
71:58:19:7d:6c:86:61:ce:ad:22:a8:f3:7c:1f:92:
c2:35:0b:8e:11:b0:ad:3d:01:2d:ca:6c:ca:7c:a6:
74:cb:44:03:5a:27:ea:9a:71:a1:ab:cb:ed:a8:03:
b7:4b:a8:43:13:ad:aa:c6:97:93:9d:82:fa:b1:09:
f2:ae:02:40:b6:3e:e0:62:3a:49:d3:23:f2:ef:d8:
f5:90:b6:08:ce:51:a4:4f:4c:9c:65:59:40:33:ad:
9f:fe:8b:81:06:2b:f1:77:b6:3d:42:a6:12:89:7f:
65:f4:50:64:24:86:28:b0:f3:44:dd:5f:3a:c7:3b:
1b:e2:79:f6:4d:09:25:78:23:78:cd:97:ac:b2:5a:
fc:0a:71:e9:f0:57:cd:42:3c:fb:1a:a5:cf:7d:38:
be:f9:3f:38:05:4f:02:b6:3f:0c:49:ca:39:07:84:
8d:a0:7a:a3:a0:a6:5a:cc:8b:72:7b:17:d7:a3:dd:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:5D:E7:21:CC:E8:8C:56:76:F0:11:13:95:21:48:7C:8D:EF:B6
X509v3 Authority Key Identifier:
keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0c:e2:3b:b1:c7:0b:9f:c7:cf:ba:13:b2:91:a9:c0:35:1b:
7a:ce:96:44:5b:48:8d:18:2f:03:0e:58:6d:7d:57:f9:86:87:
db:2b:e8:de:87:7f:b1:77:92:a6:44:14:02:54:c0:38:82:7f:
b2:9e:0d:d1:35:3e:e0:1d:33:15:0c:e6:a5:ff:d7:b6:22:a3:
97:c3:41:3c:01:64:68:a6:fb:67:40:1e:af:cc:67:62:63:79:
b6:f8:2a:9a:0d:6c:65:23:c5:81:7f:28:76:59:4d:77:42:89:
89:a0:61:99:94:4a:e4:9d:1e:ca:64:cc:e4:ba:b4:60:70:be:
c3:52:28:0c:9f:d9:71:a3:7a:80:ad:66:f3:ba:75:b3:d3:40:
4d:72:4f:84:42:56:a8:a6:c3:64:43:bc:c7:22:1e:f9:ea:3c:
ba:72:f4:56:f7:1b:14:d7:38:37:6b:f6:85:cb:c6:3d:60:7c:
16:84:1b:f7:d1:34:0f:6e:99:4c:1e:69:10:78:4e:27:df:e1:
23:a0:67:40:e8:ff:0b:5f:fe:91:58:24:df:a8:dd:a7:be:ad:
df:b7:3c:ce:19:39:28:0c:4c:86:70:fa:04:cc:23:e2:37:14:
30:ba:3b:19:35:64:5c:8a:21:29:3c:9b:41:a0:c0:4a:6f:d9:
e1:0d:25:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RemCZPVIuPJRbaGBV/+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzg1YjNhOWUzM2M1MmI1OGI5ZWM5NWEzNzcyM2YwMDA4
YmY5NDYwHhcNMjUxMDE5MDcwMTI2WhcNMjUxMDIwMDcwMTI2WjAzMTEwLwYDVQQD
Eyg1OTRjNWRlNzIxY2NlODhjNTY3NmYwMTExMzk1MjE0ODdjOGRlZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLRlae0RxWx4IiwViq0F9vprSvxU
2c6sZCxogZp6rUlzqBjzKNK+ylWEeulIgkDKwNHeELKWteufETxRx4PPtdvam+uc
DmdD+phxWBl9bIZhzq0iqPN8H5LCNQuOEbCtPQEtymzKfKZ0y0QDWifqmnGhq8vt
qAO3S6hDE62qxpeTnYL6sQnyrgJAtj7gYjpJ0yPy79j1kLYIzlGkT0ycZVlAM62f
/ouBBivxd7Y9QqYSiX9l9FBkJIYosPNE3V86xzsb4nn2TQkleCN4zZesslr8CnHp
8FfNQjz7GqXPfTi++T84BU8Ctj8MSco5B4SNoHqjoKZazItyexfXo90u0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlMXechzOiMVnbwEROVIUh8je+2MB8GA1UdIwQY
MBaAFJN4WzqeM8UrWLnslaN3I/AAi/lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80ODI5ODQtZDllNC00ZDMzLWE4ZWMt
ZjRiYWI3MTllMDcwLzEvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80ODI5ODQtZDllNC00ZDMzLWE4ZWMtZjRiYWI3MTllMDcw
LzEvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAziO7HH
C5/Hz7oTspGpwDUbes6WRFtIjRgvAw5YbX1X+YaH2yvo3od/sXeSpkQUAlTAOIJ/
sp4N0TU+4B0zFQzmpf/XtiKjl8NBPAFkaKb7Z0Aer8xnYmN5tvgqmg1sZSPFgX8o
dllNd0KJiaBhmZRK5J0eymTM5Lq0YHC+w1IoDJ/ZcaN6gK1m87p1s9NATXJPhEJW
qKbDZEO8xyIe+eo8unL0VvcbFNc4N2v2hcvGPWB8FoQb99E0D26ZTB5pEHhOJ9/h
I6BnQOj/C1/+kVgk36jdp76t37c8zhk5KAxMhnD6BMwj4jcUMLo7GTVkXIohKTyb
QaDASm/Z4Q0l5w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:14 2025 by rpki-client