Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
File: UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json)
Hash identifier: ftMutHL/1ZT4IOSkNwLfnuI2ocI3ilTKBFDdfQSlfyQ=
Subject key identifier: 42:DA:C6:32:D3:6A:F5:10:02:BC:85:41:F9:EB:95:B8:29:6B:4B:73
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 0199FC216FE2E0CB38C9BBD575F0D6E1618F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: DxImOx_LjbbW5qRqk68u0Cu1-sQ.roa (hash: ape7uiR4ZZbTkIG/kyNeBwlIHv8cWlil9k64NhQAZCk=)
2: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: Dpx4vmhSfF8ADFA572mw14g3fKFjR6wl8Ny6qCeG6Fc=)
3: aAPjM_XPDDQsO68mlmOjlIms0io.roa (hash: xF98ssC/+VTcwkX22EdQGZnLSnHebds/QYmj2MMKLB8=)
4: agSJfA3zW_tdhYtohVlsRja4TdQ.roa (hash: PReYJ3ClBU9KEfTUKtskQ1POrp0pAjooI8cTw1s1kyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6f:e2:e0:cb:38:c9:bb:d5:75:f0:d6:e1:61:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=42dac632d36af51002bc8541f9eb95b8296b4b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e9:59:37:e3:6c:a4:9a:7c:a2:5b:7c:b1:0a:
a9:57:58:6c:d4:89:0c:fd:28:c4:26:40:0d:4a:7a:
6b:05:19:8b:91:75:d6:e1:e1:d4:d7:9c:a4:4c:02:
cd:26:c9:26:1c:14:8b:e1:f2:a6:e9:e0:a4:a9:90:
9f:83:96:2b:5f:f2:a3:dd:c8:6f:aa:3c:57:31:24:
24:f6:0f:fb:be:74:1e:a5:23:37:2f:c9:ea:7b:9d:
5f:d0:d1:18:4c:f9:43:6b:65:69:53:0b:6d:b3:fb:
fe:90:03:1d:c2:07:da:dd:43:9d:8b:a4:57:7d:95:
07:bd:e8:72:0c:92:39:92:4b:79:e8:f1:4b:8b:29:
7a:88:dd:58:9a:c6:d0:b1:58:6b:c3:55:7f:51:1b:
3d:30:d2:65:63:74:72:83:e8:33:46:7d:76:d1:ad:
50:97:a3:2b:bb:f6:15:34:b7:df:b2:3e:00:dd:a5:
6f:4d:53:84:23:03:80:7d:48:47:98:14:7d:19:af:
24:fc:02:79:ff:8d:fa:d3:c9:1c:61:90:23:70:2f:
07:34:9d:ec:24:dc:6f:1b:43:fe:7d:f0:e5:0f:49:
0f:e5:40:a9:4a:81:22:49:37:26:2d:f8:43:80:15:
80:a1:c7:95:43:58:eb:b9:bb:1a:55:89:b1:f2:48:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DA:C6:32:D3:6A:F5:10:02:BC:85:41:F9:EB:95:B8:29:6B:4B:73
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8b:f9:f7:30:77:6d:4d:2b:3c:31:e2:8b:97:b1:f2:8e:64:
9c:54:5b:21:23:44:fe:29:3a:48:fb:6f:c0:4d:2e:08:ec:d5:
00:82:cd:44:f9:16:a7:22:e8:f8:ea:18:74:81:4c:e4:8c:e8:
9e:42:74:fc:f0:df:82:ad:99:9a:43:1c:5f:99:7b:e9:b6:f2:
56:3f:e5:5b:fb:88:ae:e3:b8:cd:6a:fc:be:77:51:d7:10:be:
72:99:f9:2a:1e:92:5b:1d:fd:29:d1:ab:a8:5a:e4:a6:14:53:
ca:dc:5c:9e:da:25:2c:eb:53:fe:59:69:fd:74:7e:df:14:55:
be:28:f7:7d:80:be:b1:c2:f3:8b:16:64:4e:d3:b7:7b:ba:61:
d0:a2:b1:1d:4e:12:0b:a4:f2:84:09:3b:dc:95:8d:97:57:82:
e8:4d:04:dd:0b:3b:79:07:e4:b6:20:32:e8:a3:d3:ba:98:08:
fa:80:80:19:98:51:e0:6b:ac:ef:4a:92:b4:b9:14:3f:e3:9b:
ed:23:54:ca:48:4f:3e:76:1a:d6:1a:a6:20:d5:f1:58:6f:69:
e1:a1:a1:c0:36:03:da:cc:c0:d1:2d:63:0f:76:0f:ce:f9:57:
84:bf:e0:d4:4f:f3:5c:46:6f:ed:79:80:e5:a8:09:00:30:71:
a9:ff:3f:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IW/i4Ms4ybvVdfDW4WGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWI3MDVhOTFkYmMzMGVkMTBlYjcyMjJiNzc5N2I4MzRl
MDE4NjMwHhcNMjUxMDE5MTEwMTEzWhcNMjUxMDIwMTEwMTEzWjAzMTEwLwYDVQQD
Eyg0MmRhYzYzMmQzNmFmNTEwMDJiYzg1NDFmOWViOTViODI5NmI0YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhelZN+NspJp8olt8sQqpV1hs1IkM
/SjEJkANSnprBRmLkXXW4eHU15ykTALNJskmHBSL4fKm6eCkqZCfg5YrX/Kj3chv
qjxXMSQk9g/7vnQepSM3L8nqe51f0NEYTPlDa2VpUwtts/v+kAMdwgfa3UOdi6RX
fZUHvehyDJI5kkt56PFLiyl6iN1YmsbQsVhrw1V/URs9MNJlY3Ryg+gzRn120a1Q
l6Mru/YVNLffsj4A3aVvTVOEIwOAfUhHmBR9Ga8k/AJ5/43608kcYZAjcC8HNJ3s
JNxvG0P+ffDlD0kP5UCpSoEiSTcmLfhDgBWAoceVQ1jrubsaVYmx8kghAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELaxjLTavUQAryFQfnrlbgpa0tzMB8GA1UdIwQY
MBaAFFJbcFqR28MO0Q63Iit3l7g04BhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNDYyZGMtOWU1OS00ZThkLTljNmQt
ZjQ2ODg3ZGY5ODYzLzEvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNDYyZGMtOWU1OS00ZThkLTljNmQtZjQ2ODg3ZGY5ODYz
LzEvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYv59zB3
bU0rPDHii5ex8o5knFRbISNE/ik6SPtvwE0uCOzVAILNRPkWpyLo+OoYdIFM5Izo
nkJ0/PDfgq2ZmkMcX5l76bbyVj/lW/uIruO4zWr8vndR1xC+cpn5Kh6SWx39KdGr
qFrkphRTytxcntolLOtT/llp/XR+3xRVvij3fYC+scLzixZkTtO3e7ph0KKxHU4S
C6TyhAk73JWNl1eC6E0E3Qs7eQfktiAy6KPTupgI+oCAGZhR4Gus70qStLkUP+Ob
7SNUykhPPnYa1hqmINXxWG9p4aGhwDYD2szA0S1jD3YPzvlXhL/g1E/zXEZv7XmA
5agJADBxqf8/CA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:13 2025 by rpki-client