Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
File: UyQUSSuyz6QI_1c6oGj8-aXneO4.mft (raw, json)
Hash identifier: nkuFqSrR8SIZhiy5bLKpzqmgsrhmCgQzaoihEIED9Oc=
Subject key identifier: E8:90:CB:E6:7F:B3:6F:BA:2C:81:E9:2F:3C:53:91:9A:C5:27:FF:42
Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
Certificate issuer: /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Certificate serial: 0199FFFE77CE8B4D367E573A4ACF4F6F0BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
Manifest number: 1034
Signing time: Mon 20 Oct 2025 05:01:30 +0000
Manifest this update: Mon 20 Oct 2025 05:01:30 +0000
Manifest next update: Tue 21 Oct 2025 05:01:30 +0000
Files and hashes: 1: UyQUSSuyz6QI_1c6oGj8-aXneO4.crl (hash: PflHN5galpDtUk0OBZ7EHDFk4YGA3aRMYzidDXwoh48=)
2: a7WXMgAx0WN70jOmPA_ZHtAqrZ8.roa (hash: S6bbeU5Csf/O2Nyy+w5nuCt2wnvpiGasWshn5o3uk0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:77:ce:8b:4d:36:7e:57:3a:4a:cf:4f:6f:0b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Validity
Not Before: Oct 20 05:01:30 2025 GMT
Not After : Oct 21 05:01:30 2025 GMT
Subject: CN=e890cbe67fb36fba2c81e92f3c53919ac527ff42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:43:75:24:04:e5:8b:c8:66:51:b9:47:86:
0a:d1:1f:9e:37:cf:b3:52:1e:16:dc:ee:ab:ec:9c:
7c:26:39:5e:74:80:57:83:e9:e8:ca:fd:b7:46:93:
e1:1d:6f:8a:6b:8b:09:8c:06:8a:a1:2f:ae:01:de:
3f:36:43:a0:6d:ec:85:d1:0a:b5:a3:18:cd:7d:84:
6e:ac:7f:dc:fe:41:d8:96:33:2b:4e:e2:d6:91:8f:
35:cb:2a:16:04:16:2c:54:28:51:90:54:8e:82:73:
ab:7f:3b:5f:38:57:ad:ed:65:1e:a6:b3:fc:1b:80:
0a:7d:94:ee:be:9a:3a:4e:6d:75:e7:e1:20:94:35:
7f:e5:4e:80:be:13:93:d9:4b:17:eb:51:56:1a:47:
5e:07:94:07:74:5f:88:3c:db:0a:2f:ce:98:ac:df:
f5:20:18:0f:b1:4c:9e:5b:2f:92:68:fb:03:27:02:
c1:42:31:8e:17:d6:63:99:0c:21:9a:8c:ce:30:1c:
96:e2:be:fb:26:e5:f8:81:8f:ed:0e:49:1d:01:64:
db:6a:d2:77:86:4b:50:87:89:9d:1b:5d:b2:f3:18:
43:ea:c4:af:33:9e:2a:94:0c:fa:07:9a:4d:28:de:
21:e7:ff:5b:ca:3e:74:87:93:38:9c:f3:78:b5:36:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:90:CB:E6:7F:B3:6F:BA:2C:81:E9:2F:3C:53:91:9A:C5:27:FF:42
X509v3 Authority Key Identifier:
keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2f:d2:fa:2a:ea:d9:ae:0a:fc:a1:da:52:43:15:ba:84:c0:
33:64:2b:8d:60:88:a8:08:0c:11:26:cc:9a:1a:c5:39:ec:5b:
7c:3b:9a:96:17:2a:0a:a6:47:84:9f:1b:bc:97:a4:5c:d3:41:
cc:f5:4b:28:0d:bb:bc:9b:77:8a:85:fb:27:78:7d:13:f0:f7:
d9:ed:e6:e0:ce:41:7e:10:82:3d:85:9b:bb:57:14:86:cf:3e:
67:a9:4a:90:f3:2a:bf:67:be:1b:43:74:b1:0e:9b:04:7e:30:
b3:28:86:57:3d:a2:d8:2a:86:81:96:4b:83:77:4b:43:1e:d5:
e9:00:4c:1d:61:bf:0d:03:a1:71:d5:b6:6f:9a:29:83:4e:69:
e5:25:35:48:d7:49:1a:11:6e:b5:c2:26:df:70:e3:e6:fa:4b:
b7:7f:a9:f7:88:e7:14:db:24:a5:d9:5e:99:8e:33:6f:69:f9:
3d:cb:5b:74:3d:fe:d3:b5:5d:5c:2b:86:34:7d:75:4e:f9:ba:
21:8b:c1:0b:f3:93:34:f1:ec:36:03:c9:48:19:ee:de:4f:0d:
20:48:17:3c:f8:5e:79:3c:fd:c4:66:a9:7a:b2:af:5f:4f:73:
b3:f6:33:8c:74:ad:50:b9:9a:ed:df:fa:5e:73:f8:64:c5:2b:
8a:29:45:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//nfOi002flc6Ss9PbwurMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMjQxNDQ5MmJiMmNmYTQwOGZmNTczYWEwNjhmY2Y5YTVl
Nzc4ZWUwHhcNMjUxMDIwMDUwMTMwWhcNMjUxMDIxMDUwMTMwWjAzMTEwLwYDVQQD
EyhlODkwY2JlNjdmYjM2ZmJhMmM4MWU5MmYzYzUzOTE5YWM1MjdmZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueVDdSQE5YvIZlG5R4YK0R+eN8+z
Uh4W3O6r7Jx8JjledIBXg+noyv23RpPhHW+Ka4sJjAaKoS+uAd4/NkOgbeyF0Qq1
oxjNfYRurH/c/kHYljMrTuLWkY81yyoWBBYsVChRkFSOgnOrfztfOFet7WUeprP8
G4AKfZTuvpo6Tm115+EglDV/5U6AvhOT2UsX61FWGkdeB5QHdF+IPNsKL86YrN/1
IBgPsUyeWy+SaPsDJwLBQjGOF9ZjmQwhmozOMByW4r77JuX4gY/tDkkdAWTbatJ3
hktQh4mdG12y8xhD6sSvM54qlAz6B5pNKN4h5/9byj50h5M4nPN4tTZyHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiQy+Z/s2+6LIHpLzxTkZrFJ/9CMB8GA1UdIwQY
MBaAFFMkFEkrss+kCP9XOqBo/Pml53juMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wNmU0MjItZWIxNS00OWE0LWI5MTYt
Y2Q2NzY2YzM2OWExLzEvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wNmU0MjItZWIxNS00OWE0LWI5MTYtY2Q2NzY2YzM2OWEx
LzEvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAey/S+irq
2a4K/KHaUkMVuoTAM2QrjWCIqAgMESbMmhrFOexbfDualhcqCqZHhJ8bvJekXNNB
zPVLKA27vJt3ioX7J3h9E/D32e3m4M5BfhCCPYWbu1cUhs8+Z6lKkPMqv2e+G0N0
sQ6bBH4wsyiGVz2i2CqGgZZLg3dLQx7V6QBMHWG/DQOhcdW2b5opg05p5SU1SNdJ
GhFutcIm33Dj5vpLt3+p94jnFNskpdlemY4zb2n5PctbdD3+07VdXCuGNH11Tvm6
IYvBC/OTNPHsNgPJSBnu3k8NIEgXPPheeTz9xGaperKvX09zs/YzjHStULma7d/6
XnP4ZMUriilFtA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:37:05 2025 by rpki-client