Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier: SBb+a4+AjkL+hH+z0vcueIipxLu5Apl7Nwbtsid3txo=
Subject key identifier: D3:A6:34:5C:3B:1E:4A:8E:56:D5:E2:09:37:5B:FD:F8:C4:8D:2B:95
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 0199FDD8B10B868A8202B891002BAA5AA5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number: 0D14
Signing time: Sun 19 Oct 2025 19:01:00 +0000
Manifest this update: Sun 19 Oct 2025 19:01:00 +0000
Manifest next update: Mon 20 Oct 2025 19:01:00 +0000
Files and hashes: 1: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: K1pTB+dlHCoP8cf8uPnZiU6IeQNWUe8YlZwVx7W8quk=)
2: yBgRtAUy9SDMB2oNfVg6DWBcxdo.roa (hash: th+et5jSmKPB56Gge2PfFSgmFKaHL/juuWVdT7KzSfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b1:0b:86:8a:82:02:b8:91:00:2b:aa:5a:a5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: Oct 19 19:01:00 2025 GMT
Not After : Oct 20 19:01:00 2025 GMT
Subject: CN=d3a6345c3b1e4a8e56d5e209375bfdf8c48d2b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:fe:17:3e:99:a1:96:50:a3:5e:b2:8b:76:
3a:dd:f4:7d:c2:4b:26:4d:9d:76:9c:a4:92:1d:dc:
ed:7f:b9:67:7b:69:5e:02:96:3b:e6:a4:74:0c:65:
fa:82:23:bc:78:91:d1:03:18:cd:86:59:be:ec:42:
05:fa:74:94:ac:78:94:4f:e5:fe:6e:98:9b:b3:6c:
67:57:12:93:a2:ae:7a:e5:55:1c:a8:fa:1b:58:0f:
74:3d:5a:8c:b6:8c:fd:2d:a3:63:e4:cd:40:d4:c6:
aa:5e:13:ca:11:80:55:03:58:4d:f7:1f:b8:fe:aa:
16:a6:cd:ad:b9:ef:b6:dd:c9:92:d4:8c:53:6b:99:
db:c5:cb:23:ea:a8:19:9f:b2:07:3e:33:b3:fc:61:
c6:ed:7b:4e:a4:e9:19:ab:d7:a7:92:d5:09:5f:2b:
d2:55:bd:82:f0:20:e2:17:05:36:5f:fb:cf:15:3c:
0f:a9:18:b3:07:f9:ce:71:15:b7:3a:b8:ca:f9:a2:
fa:c5:9a:3e:9d:f9:7b:02:c3:d8:0f:69:76:a7:f3:
ea:6d:c9:21:e8:b0:27:c4:f0:dc:cc:9a:75:a6:41:
2d:e3:ac:19:7b:6c:d9:43:da:0a:e0:f9:b6:64:62:
3a:55:fb:8f:9b:e7:94:b9:44:91:62:69:3c:bd:c7:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A6:34:5C:3B:1E:4A:8E:56:D5:E2:09:37:5B:FD:F8:C4:8D:2B:95
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d2:a0:5f:b0:0d:7f:9a:b1:2d:e9:17:9a:2c:5e:a7:8c:87:
2b:d6:76:9b:a0:26:6e:47:c5:86:1b:05:14:61:1e:82:ec:bf:
3e:1b:45:ff:b9:a3:e3:bb:a4:d3:99:4d:d1:36:8f:a7:f7:27:
a2:05:a7:a7:c3:39:9e:a5:73:e3:55:4b:d1:82:96:d9:45:25:
88:a3:19:05:b7:99:6a:d2:b2:1a:cd:a7:c7:78:39:4e:c8:9e:
81:ab:31:66:e2:57:cf:37:65:75:37:bc:75:ff:62:7f:a4:de:
f1:ce:7b:92:d6:86:ad:39:4b:3d:b4:5b:18:f5:d2:fd:30:ba:
37:c8:41:42:a4:3a:61:52:93:1b:01:a8:b5:c1:b1:b1:0e:e9:
fe:0c:53:2b:53:5c:5f:73:30:c3:19:68:b4:53:92:13:be:ce:
63:06:cd:0b:ba:b8:c4:9e:fb:f5:40:10:02:8f:af:86:82:18:
d4:35:59:7a:80:cc:a9:3c:c0:1f:e8:56:47:b7:73:8f:2c:18:
07:1c:29:1c:d1:3c:83:b3:7e:3c:fe:3f:ea:25:33:1d:00:a2:
7f:fb:37:a2:90:5d:a1:e6:4f:ca:18:5b:d8:f2:14:b6:f4:2d:
a8:81:a3:f3:be:e5:ee:5e:61:5a:62:c1:82:a7:2d:df:1f:05:
ba:d2:86:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92LELhoqCAriRACuqWqWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMWNlZjZmOWU5ZWRjNDVlM2NkMjhlZjQwMjUxOTc5NTJk
NDYwZTkwHhcNMjUxMDE5MTkwMTAwWhcNMjUxMDIwMTkwMTAwWjAzMTEwLwYDVQQD
EyhkM2E2MzQ1YzNiMWU0YThlNTZkNWUyMDkzNzViZmRmOGM0OGQyYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cz+Fz6ZoZZQo16yi3Y63fR9wksm
TZ12nKSSHdztf7lne2leApY75qR0DGX6giO8eJHRAxjNhlm+7EIF+nSUrHiUT+X+
bpibs2xnVxKToq565VUcqPobWA90PVqMtoz9LaNj5M1A1MaqXhPKEYBVA1hN9x+4
/qoWps2tue+23cmS1IxTa5nbxcsj6qgZn7IHPjOz/GHG7XtOpOkZq9enktUJXyvS
Vb2C8CDiFwU2X/vPFTwPqRizB/nOcRW3OrjK+aL6xZo+nfl7AsPYD2l2p/Pqbckh
6LAnxPDczJp1pkEt46wZe2zZQ9oK4Pm2ZGI6VfuPm+eUuUSRYmk8vce6SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOmNFw7HkqOVtXiCTdb/fjEjSuVMB8GA1UdIwQY
MBaAFLoc72+entxF480o70AlGXlS1GDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWh6dmI1NmUzRVhqelNqdlFDVVplVkxVWU9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yMWQ2NjMtNjg3NC00ODljLWFiOWUt
ZDljYTAzZTY2ZmZiLzEvdWh6dmI1NmUzRVhqelNqdlFDVVplVkxVWU9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yMWQ2NjMtNjg3NC00ODljLWFiOWUtZDljYTAzZTY2ZmZi
LzEvdWh6dmI1NmUzRVhqelNqdlFDVVplVkxVWU9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtKgX7AN
f5qxLekXmixep4yHK9Z2m6AmbkfFhhsFFGEeguy/PhtF/7mj47uk05lN0TaPp/cn
ogWnp8M5nqVz41VL0YKW2UUliKMZBbeZatKyGs2nx3g5TsiegasxZuJXzzdldTe8
df9if6Te8c57ktaGrTlLPbRbGPXS/TC6N8hBQqQ6YVKTGwGotcGxsQ7p/gxTK1Nc
X3MwwxlotFOSE77OYwbNC7q4xJ779UAQAo+vhoIY1DVZeoDMqTzAH+hWR7dzjywY
BxwpHNE8g7N+PP4/6iUzHQCif/s3opBdoeZPyhhb2PIUtvQtqIGj877l7l5hWmLB
gqct3x8FutKGeg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:51 2025 by rpki-client