Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File: ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier: 0JBUwsbTwa7nSW2WCDOFtSLuitopR6QgffRAZPANi2o=
Subject key identifier: F3:B0:99:F6:6B:41:FF:F6:D6:47:25:EF:9C:1A:24:CA:CD:E6:34:A4
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer: /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial: 0199FC214317891D72131150A644DE59CE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number: 0FE6
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: B_TjvpIb0yLFS65mk6ISqfofzjA.roa (hash: q5/nXiQuX9jf7AxyuDuG4cnRKI4OPuttYtvlaMLZtB8=)
2: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (hash: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=)
3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: 0G513tP1oMVGK6Ydk/o4MhZ0Mpq462Jq0T3vrH1bi3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:43:17:89:1d:72:13:11:50:a6:44:de:59:ce:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=f3b099f66b41fff6d64725ef9c1a24cacde634a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:49:dd:84:87:84:a3:83:c5:2c:b2:7c:05:
76:2e:73:12:87:89:e6:c9:d2:0f:0f:43:94:5a:b7:
70:7f:b5:d1:94:c7:a8:dd:97:71:1a:f8:1c:83:93:
3e:f2:9c:0d:26:52:49:d5:bd:bf:5b:a9:6e:db:9d:
2d:6c:6c:79:fa:0c:15:71:fb:a7:f7:64:22:54:d7:
6b:9f:47:95:81:08:11:6f:78:9b:4c:3b:c8:59:b4:
40:96:dd:d8:3f:30:f6:5d:ba:34:df:d4:0f:66:34:
e7:86:85:8b:0c:3b:81:8c:be:88:e7:a6:98:08:fb:
b0:df:57:69:23:cb:96:a8:a7:19:11:39:60:a1:91:
28:52:52:90:5d:31:80:0f:be:31:31:4a:e2:e4:fd:
2c:60:8c:02:14:84:52:ee:55:d1:51:cb:76:af:3a:
17:34:65:82:d5:fa:c0:eb:69:72:f4:07:69:91:0c:
b4:01:34:6c:55:57:c1:72:95:1e:50:29:3c:32:06:
fd:80:65:2c:d0:cf:f8:3f:97:8d:68:38:10:ae:ea:
83:2f:b2:bc:86:31:4a:d3:74:39:98:a9:f7:a2:ac:
38:42:73:13:aa:97:36:cc:e7:ac:a2:b5:c8:de:7b:
f6:51:71:75:7a:93:30:f8:7e:ec:c2:2f:7c:4d:d3:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B0:99:F6:6B:41:FF:F6:D6:47:25:EF:9C:1A:24:CA:CD:E6:34:A4
X509v3 Authority Key Identifier:
keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1e:17:4e:2a:87:0c:05:09:90:3c:a0:bc:2f:02:06:7e:2d:
3a:be:f2:de:8d:2e:31:c8:68:9b:b8:13:03:53:b0:49:32:03:
36:be:21:55:aa:fc:3c:b2:ac:63:2d:e2:2b:74:28:18:65:a0:
1b:e7:f7:c6:fb:91:a0:88:05:4a:8f:02:2f:4f:24:a8:14:cf:
b3:9a:fc:53:7a:6a:d5:35:65:18:4d:f3:81:32:ff:ed:20:ad:
f8:d5:f9:53:91:03:eb:50:a3:f4:85:62:41:cd:06:07:5a:5a:
c3:1b:f1:25:80:de:5e:db:ef:98:09:de:aa:7c:16:8c:cf:43:
1b:59:d5:ff:ed:80:f5:c6:61:cc:77:ee:f1:3d:43:cd:7c:fe:
9f:ba:5b:1e:ce:34:42:f2:04:8b:48:05:af:bb:d6:0a:c6:ce:
40:dd:b9:9a:a0:a6:fb:96:03:98:1e:82:db:c8:6b:41:4b:5d:
3b:89:ae:95:cf:8f:f2:a6:85:8f:54:90:5d:ef:24:e0:e8:57:
c7:20:16:a1:f3:db:3a:c3:29:07:81:db:46:3b:a2:66:83:b3:
ce:d5:17:8b:5f:0d:de:1f:78:ba:70:e2:87:22:72:90:cc:a0:
06:52:e1:ac:0e:18:29:cb:e9:59:8c:df:c8:f5:d6:21:92:b9:
19:f4:bf:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IUMXiR1yExFQpkTeWc4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTJkYzIzNDBjNTMwOWI2M2ViYTIzY2ZiZTdlZWQxMWI3
NGFmNDcwHhcNMjUxMDE5MTEwMTAyWhcNMjUxMDIwMTEwMTAyWjAzMTEwLwYDVQQD
EyhmM2IwOTlmNjZiNDFmZmY2ZDY0NzI1ZWY5YzFhMjRjYWNkZTYzNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuORJ3YSHhKODxSyyfAV2LnMSh4nm
ydIPD0OUWrdwf7XRlMeo3ZdxGvgcg5M+8pwNJlJJ1b2/W6lu250tbGx5+gwVcfun
92QiVNdrn0eVgQgRb3ibTDvIWbRAlt3YPzD2Xbo039QPZjTnhoWLDDuBjL6I56aY
CPuw31dpI8uWqKcZETlgoZEoUlKQXTGAD74xMUri5P0sYIwCFIRS7lXRUct2rzoX
NGWC1frA62ly9AdpkQy0ATRsVVfBcpUeUCk8Mgb9gGUs0M/4P5eNaDgQruqDL7K8
hjFK03Q5mKn3oqw4QnMTqpc2zOesorXI3nv2UXF1epMw+H7swi98TdOQOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOwmfZrQf/21kcl75waJMrN5jSkMB8GA1UdIwQY
MBaAFLni3CNAxTCbY+uiPPvn7tEbdK9HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82Zjk5ZDItYWQwNS00Y2ZjLTlhNWUt
OWNiZWRjZWM4NmQ2LzEvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82Zjk5ZDItYWQwNS00Y2ZjLTlhNWUtOWNiZWRjZWM4NmQ2
LzEvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqx4XTiqH
DAUJkDygvC8CBn4tOr7y3o0uMchom7gTA1OwSTIDNr4hVar8PLKsYy3iK3QoGGWg
G+f3xvuRoIgFSo8CL08kqBTPs5r8U3pq1TVlGE3zgTL/7SCt+NX5U5ED61Cj9IVi
Qc0GB1pawxvxJYDeXtvvmAneqnwWjM9DG1nV/+2A9cZhzHfu8T1DzXz+n7pbHs40
QvIEi0gFr7vWCsbOQN25mqCm+5YDmB6C28hrQUtdO4mulc+P8qaFj1SQXe8k4OhX
xyAWofPbOsMpB4HbRjuiZoOzztUXi18N3h94unDihyJykMygBlLhrA4YKcvpWYzf
yPXWIZK5GfS/4Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:25 2025 by rpki-client