Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
File: uUQn2LeWZF92S05mvxmtOOSr7hw.mft (raw, json)
Hash identifier: MnY1HDOSsn71pxdsWHA2nkpRzHwRwSLSZ7Qm3SRucF4=
Subject key identifier: CC:5B:08:67:F4:47:F9:E4:99:41:4A:66:2D:05:EF:90:19:FA:7D:E3
Authority key identifier: B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
Certificate issuer: /CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Certificate serial: 0199FB7CCAFD8B45659F339B89478B41E8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
Manifest number: 30
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: M9ok_oEA-Cq66PnPmgpXlFaH8Sc.roa (hash: Bj68sqknRNEMUK6hrMTUuevwXIra7kusoFg9lZhmyJM=)
2: uUQn2LeWZF92S05mvxmtOOSr7hw.crl (hash: CoUORW63dwXPdIn7hiXqYuxyG8kfyiH5y6wXnUCYi6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ca:fd:8b:45:65:9f:33:9b:89:47:8b:41:e8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=cc5b0867f447f9e499414a662d05ef9019fa7de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:eb:b6:e0:c0:ec:fc:f5:9f:d3:2d:5b:04:
8c:32:ff:c7:35:1e:71:ab:ed:03:75:d2:0c:b7:96:
d2:b2:d9:6e:18:63:2b:66:89:e8:ce:b0:50:0b:07:
5f:8e:77:4b:11:56:26:c3:5b:d1:a1:aa:81:30:3e:
d9:b6:d5:b8:db:4f:5b:2b:53:05:70:34:50:56:8e:
6b:ed:db:20:c6:c3:04:36:b4:22:a6:48:b9:ca:e6:
0f:dc:98:6b:da:bb:63:5f:dd:5c:04:ef:fa:f0:f7:
18:04:90:cf:1a:f4:6a:be:fe:26:37:45:66:c4:fc:
1e:81:27:b6:b8:57:03:83:3a:c3:8e:23:11:8e:83:
86:b3:fc:40:a1:72:bc:53:52:f7:36:18:b3:37:fa:
d8:5d:8d:54:8e:1c:0b:70:49:67:50:c9:cb:d3:53:
5e:4a:41:f8:8c:d6:94:99:bd:49:57:59:fe:48:49:
49:e6:cf:6a:1f:98:0e:42:74:9f:0f:f1:03:70:72:
6a:ba:2e:7a:2c:f6:33:15:f4:67:6b:52:d1:17:1c:
55:6a:80:9b:d7:1a:e5:ab:b5:06:82:d8:af:85:96:
c3:e0:17:92:05:99:a0:0a:93:1e:69:f9:6f:cc:d2:
9d:a1:43:1b:c8:36:d5:a2:08:cb:bc:7b:f3:1a:26:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5B:08:67:F4:47:F9:E4:99:41:4A:66:2D:05:EF:90:19:FA:7D:E3
X509v3 Authority Key Identifier:
keyid:B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f2:20:9a:78:07:06:7f:aa:ba:1b:7a:21:7c:4a:49:74:cd:
7d:6d:01:7a:5c:7c:6a:67:00:d0:8f:8d:a2:8b:09:a5:9e:b1:
7a:aa:93:48:f7:84:3b:f8:a0:05:ad:d4:74:32:5e:89:1c:ef:
92:83:f5:d9:aa:62:eb:e5:dc:25:94:e1:57:ed:6c:b2:8d:ca:
1c:63:d1:93:b4:80:03:d4:0c:73:bf:24:80:ca:5e:a3:15:63:
9d:a2:38:94:2c:7d:e0:0c:df:8d:79:8e:ea:bc:60:25:26:40:
ee:89:43:6e:d9:37:50:e4:6e:ed:9f:5a:88:0f:68:64:cb:c5:
14:92:c4:58:1f:65:d3:3f:63:4f:76:4b:78:88:a5:f9:fd:40:
86:9e:10:54:22:cb:33:ed:cc:3d:b2:64:f7:30:5d:ba:e7:5b:
7a:45:55:bc:19:2e:38:f3:66:dc:1d:49:f1:a0:19:09:1f:f9:
cb:8a:b0:5e:2b:3b:48:9a:68:1a:f7:89:f6:44:8b:59:46:e4:
66:5e:8c:3a:b9:fc:58:39:1c:c0:b0:08:05:75:b6:70:8c:d7:
4c:88:62:ee:94:9b:b8:f0:74:e4:29:58:42:68:12:37:a6:b1:
67:ab:29:57:d8:26:46:50:d6:14:ca:9b:d8:67:83:6b:ec:6a:
61:7a:59:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fMr9i0VlnzObiUeLQejlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDQyN2Q4Yjc5NjY0NWY3NjRiNGU2NmJmMTlhZDM4ZTRh
YmVlMWMwHhcNMjUxMDE5MDgwMTIzWhcNMjUxMDIwMDgwMTIzWjAzMTEwLwYDVQQD
EyhjYzViMDg2N2Y0NDdmOWU0OTk0MTRhNjYyZDA1ZWY5MDE5ZmE3ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t/rtuDA7Pz1n9MtWwSMMv/HNR5x
q+0DddIMt5bSstluGGMrZonozrBQCwdfjndLEVYmw1vRoaqBMD7ZttW4209bK1MF
cDRQVo5r7dsgxsMENrQipki5yuYP3Jhr2rtjX91cBO/68PcYBJDPGvRqvv4mN0Vm
xPwegSe2uFcDgzrDjiMRjoOGs/xAoXK8U1L3NhizN/rYXY1UjhwLcElnUMnL01Ne
SkH4jNaUmb1JV1n+SElJ5s9qH5gOQnSfD/EDcHJqui56LPYzFfRna1LRFxxVaoCb
1xrlq7UGgtivhZbD4BeSBZmgCpMeaflvzNKdoUMbyDbVogjLvHvzGiZvywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxbCGf0R/nkmUFKZi0F75AZ+n3jMB8GA1UdIwQY
MBaAFLlEJ9i3lmRfdktOZr8ZrTjkq+4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kOWNmN2UtYWE3ZS00ODIzLTk5Zjkt
NDdmNWMxYzUyY2UyLzEvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kOWNmN2UtYWE3ZS00ODIzLTk5ZjktNDdmNWMxYzUyY2Uy
LzEvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfIgmngH
Bn+quht6IXxKSXTNfW0Belx8amcA0I+NoosJpZ6xeqqTSPeEO/igBa3UdDJeiRzv
koP12api6+XcJZThV+1sso3KHGPRk7SAA9QMc78kgMpeoxVjnaI4lCx94AzfjXmO
6rxgJSZA7olDbtk3UORu7Z9aiA9oZMvFFJLEWB9l0z9jT3ZLeIil+f1Ahp4QVCLL
M+3MPbJk9zBduudbekVVvBkuOPNm3B1J8aAZCR/5y4qwXis7SJpoGveJ9kSLWUbk
Zl6MOrn8WDkcwLAIBXW2cIzXTIhi7pSbuPB05ClYQmgSN6axZ6spV9gmRlDWFMqb
2GeDa+xqYXpZlA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:18 2025 by rpki-client