Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: 0yNNeAktc4E0QX6UzoT0VOx5bG53n8qXGhpEYKYIX2A=
Subject key identifier: F3:15:A3:68:05:22:46:B5:19:77:DE:36:CD:0C:3C:A3:96:E5:1D:11
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 0199FAD8383CD102DE702401DA74CDDB9C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 05:01:38 +0000
Manifest this update: Sun 19 Oct 2025 05:01:38 +0000
Manifest next update: Mon 20 Oct 2025 05:01:38 +0000
Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: d8pW0h17d9N76IWbKcr6yqDoY6ZSLBaF6SysRhoGSVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:38:3c:d1:02:de:70:24:01:da:74:cd:db:9c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Oct 19 05:01:38 2025 GMT
Not After : Oct 20 05:01:38 2025 GMT
Subject: CN=f315a368052246b51977de36cd0c3ca396e51d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:7e:ed:4b:68:b8:02:e0:e0:7f:fc:12:08:
22:20:33:ff:b7:ad:87:89:9d:93:65:c0:c1:71:4a:
84:4a:57:ab:bb:54:b4:3e:25:a7:33:02:0f:1b:e0:
83:af:d1:91:f3:15:1a:74:23:40:1e:1a:0b:ac:21:
b8:a0:16:05:88:5e:59:06:68:ad:02:20:08:47:e4:
9d:ac:48:61:f6:41:97:5c:59:de:a1:ee:e9:b0:e4:
de:43:58:85:1c:4d:0c:e8:16:15:06:76:78:94:71:
2d:83:29:8d:a0:6b:c5:e8:52:9a:a7:59:a8:ca:30:
dd:a2:38:4a:ef:6e:fd:fb:ec:39:df:4a:c5:1e:65:
51:4a:76:91:d3:d9:0c:2f:0c:be:2d:c4:97:c5:2e:
5c:83:2d:f4:14:4d:76:e7:be:29:22:10:fc:01:d3:
b6:b8:f4:d6:44:ec:34:fd:aa:b2:20:20:15:f7:5b:
17:28:2e:9d:21:ae:eb:08:62:48:00:dc:53:aa:e1:
ba:59:43:0a:1d:fb:00:d3:38:19:fd:99:06:15:4b:
74:1e:66:77:4f:a3:5e:c1:c2:f1:d2:4d:fc:48:45:
07:ad:f8:e4:03:e0:4a:66:e3:02:8a:1a:60:54:32:
31:a9:f2:2a:3a:02:d1:af:4a:7d:d3:95:e2:c0:81:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:15:A3:68:05:22:46:B5:19:77:DE:36:CD:0C:3C:A3:96:E5:1D:11
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a8:9e:f7:40:ad:d2:a6:85:3f:48:00:42:51:7b:e4:c7:d9:
dc:96:3a:5b:11:d2:94:13:20:6a:96:b6:e2:45:01:74:f4:51:
07:5d:ff:35:03:0e:14:b2:85:7f:f1:42:2f:2e:92:31:f9:33:
53:5e:0e:fc:50:44:fe:ab:5f:da:d6:ef:3b:b5:c3:3c:93:b5:
0e:47:26:11:49:30:c9:96:8a:8c:84:45:88:b8:0a:2e:92:5f:
55:99:c1:99:7e:00:2d:89:27:82:c2:c7:16:2d:b2:0f:74:e1:
bc:f5:b7:7a:f4:98:37:94:a4:82:b9:51:db:a6:81:3f:b8:56:
b5:1e:d8:84:92:7c:bc:09:1d:80:71:a2:3c:5b:d1:c6:16:72:
b4:f3:a8:5e:da:69:af:75:9a:f2:2c:2b:68:b6:9b:d6:7e:1b:
ff:96:08:02:48:33:36:55:a0:0b:bb:39:12:f6:87:1c:f4:88:
90:a9:d6:78:7f:12:e0:73:19:c1:b7:47:6a:65:e0:2b:aa:6e:
9a:a4:1e:2b:9c:e3:93:08:35:51:d3:00:25:84:68:a0:63:76:
57:45:c6:16:7f:2d:6e:9a:a7:ba:74:54:99:ad:b3:36:f6:14:
30:b4:8e:84:ce:2a:15:34:43:8b:01:22:f2:a6:21:08:26:f0:
ca:5a:d4:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62Dg80QLecCQB2nTN25wMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MjMyZDE5ZGQ4MWQ0NWMyNTkyM2FlYjRkOWE5Njg1ODc5
YWVmYTYwHhcNMjUxMDE5MDUwMTM4WhcNMjUxMDIwMDUwMTM4WjAzMTEwLwYDVQQD
EyhmMzE1YTM2ODA1MjI0NmI1MTk3N2RlMzZjZDBjM2NhMzk2ZTUxZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTh+7UtouALg4H/8EggiIDP/t62H
iZ2TZcDBcUqESleru1S0PiWnMwIPG+CDr9GR8xUadCNAHhoLrCG4oBYFiF5ZBmit
AiAIR+SdrEhh9kGXXFneoe7psOTeQ1iFHE0M6BYVBnZ4lHEtgymNoGvF6FKap1mo
yjDdojhK7279++w530rFHmVRSnaR09kMLwy+LcSXxS5cgy30FE12574pIhD8AdO2
uPTWROw0/aqyICAV91sXKC6dIa7rCGJIANxTquG6WUMKHfsA0zgZ/ZkGFUt0HmZ3
T6NewcLx0k38SEUHrfjkA+BKZuMCihpgVDIxqfIqOgLRr0p905XiwIGgrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMVo2gFIka1GXfeNs0MPKOW5R0RMB8GA1UdIwQY
MBaAFLgjLRndgdRcJZI6602aloWHmu+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYt
MWRmMDllNzAxNDM0LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYtMWRmMDllNzAxNDM0
LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqie90Ct
0qaFP0gAQlF75MfZ3JY6WxHSlBMgapa24kUBdPRRB13/NQMOFLKFf/FCLy6SMfkz
U14O/FBE/qtf2tbvO7XDPJO1DkcmEUkwyZaKjIRFiLgKLpJfVZnBmX4ALYkngsLH
Fi2yD3ThvPW3evSYN5SkgrlR26aBP7hWtR7YhJJ8vAkdgHGiPFvRxhZytPOoXtpp
r3Wa8iwraLab1n4b/5YIAkgzNlWgC7s5EvaHHPSIkKnWeH8S4HMZwbdHamXgK6pu
mqQeK5zjkwg1UdMAJYRooGN2V0XGFn8tbpqnunRUma2zNvYUMLSOhM4qFTRDiwEi
8qYhCCbwylrU9w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:02 2025 by rpki-client