Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
File: UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft (raw, json)
Hash identifier: NvMgwrOtDd1G6IeusAt+1CaC+iZX3ccGubahW9xGuTM=
Subject key identifier: C8:B7:8C:3A:35:86:CB:DF:6C:A2:95:72:77:29:B5:20:89:4E:07:3A
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 0199FBEB059702F3D16CC921E0B2B4812D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
Manifest number: 099C
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: 44dYsozRYENf4ubTHCTQ7hNPzoo.roa (hash: 9g/dOiyadhvu9EEQPUkgGuJzL/QnwS0iPrR2k3LdJdM=)
2: Akrk9AV522kb6SaYDeM3WfYPO7o.roa (hash: ZHsHEgFgctqjdlPRyjI2Dyt+c3//fPJCvQgY9mUz8Ck=)
3: UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl (hash: wb2draj8BSsLtGz3r9c0WNyOdgWm0c1rHpIFf58NLZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:05:97:02:f3:d1:6c:c9:21:e0:b2:b4:81:2d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=c8b78c3a3586cbdf6ca295727729b520894e073a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:ce:94:6c:c3:58:c8:8e:c5:c7:73:2a:53:
b0:91:5b:68:75:14:63:1f:8c:2c:b3:d3:b7:ae:31:
06:ae:d3:ab:53:82:b5:5f:1d:db:bb:c0:6e:0f:d5:
8a:45:a2:c0:d1:a0:17:e6:8a:c6:b4:c2:37:14:36:
ae:c3:01:f3:24:d6:6c:2a:0b:07:3e:4d:20:6f:3d:
96:4e:55:ab:f4:bc:c5:bd:5b:78:be:a4:d6:a5:fb:
c4:fd:74:61:31:1b:33:fa:6e:96:c3:98:f3:11:23:
de:e2:16:34:65:a2:c2:1a:7d:62:19:7c:1d:78:79:
d3:1f:91:b7:10:db:d5:9e:4c:c3:81:43:6f:df:3a:
15:30:25:a3:30:7c:fa:b3:eb:f0:cd:eb:03:ed:63:
60:37:fd:6d:21:b7:0d:25:cd:d0:72:83:44:99:d3:
7a:0e:86:da:da:f9:bb:e7:48:5e:d8:fd:6a:c3:7f:
e9:ca:42:38:e5:27:61:a9:57:ac:37:39:b0:a6:3b:
de:f8:7f:88:e0:41:a1:d3:46:84:b4:53:c4:06:b2:
da:27:84:92:a1:16:eb:f9:e4:16:b7:29:6e:67:f5:
c9:5a:30:f0:47:90:2f:a2:60:d0:ab:57:16:48:cc:
55:06:67:7f:3f:70:a4:94:46:89:33:1c:1d:16:0e:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B7:8C:3A:35:86:CB:DF:6C:A2:95:72:77:29:B5:20:89:4E:07:3A
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:70:a2:60:69:9f:f2:c2:99:16:00:0b:51:8d:92:1f:90:3c:
3c:04:b3:c4:62:5d:26:df:2e:37:ff:c9:67:70:71:dc:4c:c4:
45:7f:cb:de:f3:f8:8d:a1:2a:e3:30:97:f4:fb:ec:63:1e:a7:
e9:88:b6:40:a1:bf:84:85:7d:f0:b1:8f:0d:7a:b5:25:45:06:
63:83:ff:d8:08:5d:af:16:99:87:66:81:b5:a5:1f:e4:39:c9:
f3:89:fd:81:f4:de:d3:fc:cf:d4:c9:09:a3:04:88:27:a4:2b:
ec:4e:53:5a:63:6a:d1:ac:b6:1f:e6:f2:5b:66:cf:e2:63:a2:
28:46:8c:ff:15:0c:cd:50:1a:ad:78:8e:64:e4:93:3e:1e:89:
b8:2f:0b:b7:01:65:0d:ac:4e:50:f4:1e:d0:db:c6:98:f7:c1:
3b:ef:af:68:a4:66:e2:d2:22:e7:ce:95:75:1f:87:61:44:e8:
6c:7a:63:d4:b3:4a:98:36:40:02:e2:57:8b:9b:e9:ea:88:7c:
aa:01:ec:af:0d:aa:e0:b5:60:fa:31:07:b2:fd:56:af:70:a7:
fc:e0:84:04:0f:e8:2e:88:80:57:e2:29:15:d8:bb:b0:38:45:
09:6c:e1:6c:7f:6b:cb:bc:b8:05:ae:34:88:af:57:2b:a3:22:
82:9e:ab:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76wWXAvPRbMkh4LK0gS2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwN2U1ODJhZGM5MzY5ZGE4YWU4NWRkOTM1NzQwMTIzMDgx
YzdlZWQwHhcNMjUxMDE5MTAwMTQ3WhcNMjUxMDIwMTAwMTQ3WjAzMTEwLwYDVQQD
EyhjOGI3OGMzYTM1ODZjYmRmNmNhMjk1NzI3NzI5YjUyMDg5NGUwNzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlXOlGzDWMiOxcdzKlOwkVtodRRj
H4wss9O3rjEGrtOrU4K1Xx3bu8BuD9WKRaLA0aAX5orGtMI3FDauwwHzJNZsKgsH
Pk0gbz2WTlWr9LzFvVt4vqTWpfvE/XRhMRsz+m6Ww5jzESPe4hY0ZaLCGn1iGXwd
eHnTH5G3ENvVnkzDgUNv3zoVMCWjMHz6s+vwzesD7WNgN/1tIbcNJc3QcoNEmdN6
Doba2vm750he2P1qw3/pykI45SdhqVesNzmwpjve+H+I4EGh00aEtFPEBrLaJ4SS
oRbr+eQWtyluZ/XJWjDwR5AvomDQq1cWSMxVBmd/P3CklEaJMxwdFg7SNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi3jDo1hsvfbKKVcncptSCJTgc6MB8GA1UdIwQY
MBaAFFB+WCrck2naiuhd2TV0ASMIHH7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82ZWQ0MzQtY2Q1MS00MTUyLWFhNDMt
MDU2YmFlMjcyODhlLzEvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS82ZWQ0MzQtY2Q1MS00MTUyLWFhNDMtMDU2YmFlMjcyODhl
LzEvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXCiYGmf
8sKZFgALUY2SH5A8PASzxGJdJt8uN//JZ3Bx3EzERX/L3vP4jaEq4zCX9PvsYx6n
6Yi2QKG/hIV98LGPDXq1JUUGY4P/2AhdrxaZh2aBtaUf5DnJ84n9gfTe0/zP1MkJ
owSIJ6Qr7E5TWmNq0ay2H+byW2bP4mOiKEaM/xUMzVAarXiOZOSTPh6JuC8LtwFl
DaxOUPQe0NvGmPfBO++vaKRm4tIi586VdR+HYUTobHpj1LNKmDZAAuJXi5vp6oh8
qgHsrw2q4LVg+jEHsv1Wr3Cn/OCEBA/oLoiAV+IpFdi7sDhFCWzhbH9ry7y4Ba40
iK9XK6Migp6row==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:10 2025 by rpki-client