Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
File: uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json)
Hash identifier: B0trmT72p6WD6+1FwP4luujhkoZ8oLH9bMnH9zrqw88=
Subject key identifier: E8:8B:88:0C:FD:21:1D:B7:1E:B6:97:62:71:9F:EB:18:5C:9D:E2:3B
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Certificate issuer: /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial: 0199FE476160EF1CF938BE15951EA04E5ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
Manifest number: 02AE
Signing time: Sun 19 Oct 2025 21:01:54 +0000
Manifest this update: Sun 19 Oct 2025 21:01:54 +0000
Manifest next update: Mon 20 Oct 2025 21:01:54 +0000
Files and hashes: 1: lakVHG3W0xwUWB-wySLMgQJ_pvo.roa (hash: vGuvZzEzVEJozeZlKkwAw1MUHsR6k7X2w8QfYCIWc2E=)
2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: PYoUQU2wwsp/hmXEQg5k5XpusDH5o5stVi3zEkt1Bog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:61:60:ef:1c:f9:38:be:15:95:1e:a0:4e:5a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Validity
Not Before: Oct 19 21:01:54 2025 GMT
Not After : Oct 20 21:01:54 2025 GMT
Subject: CN=e88b880cfd211db71eb69762719feb185c9de23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:59:b8:29:d3:f9:f0:db:32:20:7a:a1:45:
fc:c7:a1:50:b2:e3:e1:69:a8:36:af:25:c5:49:22:
50:20:65:9a:47:cc:dc:5e:f3:f0:1f:97:9e:8f:bc:
3f:e9:9d:f4:25:e9:75:80:13:3c:84:5c:c5:48:a0:
5a:be:a7:c1:16:94:c9:b0:56:7e:ab:c0:75:79:2f:
a9:d6:bf:98:9f:33:76:00:ef:b7:72:86:3d:76:5a:
28:25:2f:64:44:8d:43:49:63:91:51:de:d4:1a:cc:
ab:99:7d:14:b6:de:ac:b4:2d:bb:71:a6:40:a0:aa:
84:b7:1a:fc:be:f7:89:b8:bc:3c:ed:09:aa:4e:67:
26:d6:66:9d:b3:ac:b8:90:27:b4:4f:5d:e6:49:13:
99:44:47:c8:d3:45:9c:3e:17:da:65:fd:e3:4f:13:
7d:aa:ea:3a:3e:3b:49:e8:76:a0:06:90:11:c2:3f:
91:2f:1e:20:55:31:60:d7:7a:a3:5a:0d:03:ac:63:
a1:6a:bf:66:2d:cc:d5:94:92:e0:53:05:d7:b5:40:
b4:16:b6:51:f4:f2:3d:c3:8e:69:e9:61:1e:9a:94:
b4:f9:86:44:32:86:1b:b6:0b:39:25:ac:e1:c0:d1:
63:6e:0f:8a:5f:ff:38:c0:0d:73:53:ff:49:4e:60:
5b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8B:88:0C:FD:21:1D:B7:1E:B6:97:62:71:9F:EB:18:5C:9D:E2:3B
X509v3 Authority Key Identifier:
keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e4:2f:82:46:03:58:61:26:26:da:d4:0d:61:16:65:9d:17:
b2:7b:52:b8:45:bb:9e:f4:17:98:a6:fc:6b:dd:3c:ee:3b:e3:
8d:35:a5:31:63:b3:04:13:d1:b3:34:7d:10:5f:b5:06:a2:9a:
0e:b9:4c:ac:ed:d2:c6:a7:03:59:4b:41:67:34:cf:f4:b6:f0:
78:5b:cc:a2:68:c6:05:95:5d:f1:70:6d:14:67:33:ee:bf:ed:
e6:1c:90:c8:7d:fe:84:a7:71:27:69:60:4b:b5:b5:f5:a4:e8:
ff:99:3e:24:47:e0:9a:d2:6f:b1:99:39:9e:3e:ec:de:36:72:
d4:03:0c:61:90:f4:7e:7f:8b:9e:9b:03:78:af:44:71:29:cb:
75:a3:50:0c:47:7e:a6:56:04:3c:91:52:cf:a1:5d:04:33:b5:
a4:34:e2:41:7d:bf:44:67:f3:cd:79:4e:7e:92:02:78:19:90:
b5:fb:a0:d9:f1:ee:96:95:88:f1:ec:b1:19:7a:4c:10:f2:f6:
09:96:48:e1:6f:8d:b2:43:8f:7d:42:87:09:59:cc:b8:c7:c8:
32:34:68:59:1b:04:cd:12:a3:7e:3f:80:19:c1:02:1a:e5:54:
bd:28:34:69:30:ec:a0:f8:a0:09:11:48:f0:ac:d1:c3:c6:91:
9c:56:74:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R2Fg7xz5OL4VlR6gTlrcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMjZjY2ZhMDcxN2RiOWY1NmFhMzhiODY5MmNlNWRjZmEy
ODI1ZTcwHhcNMjUxMDE5MjEwMTU0WhcNMjUxMDIwMjEwMTU0WjAzMTEwLwYDVQQD
EyhlODhiODgwY2ZkMjExZGI3MWViNjk3NjI3MTlmZWIxODVjOWRlMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLxZuCnT+fDbMiB6oUX8x6FQsuPh
aag2ryXFSSJQIGWaR8zcXvPwH5eej7w/6Z30Jel1gBM8hFzFSKBavqfBFpTJsFZ+
q8B1eS+p1r+YnzN2AO+3coY9dlooJS9kRI1DSWORUd7UGsyrmX0Utt6stC27caZA
oKqEtxr8vveJuLw87QmqTmcm1mads6y4kCe0T13mSROZREfI00WcPhfaZf3jTxN9
quo6PjtJ6HagBpARwj+RLx4gVTFg13qjWg0DrGOhar9mLczVlJLgUwXXtUC0FrZR
9PI9w45p6WEempS0+YZEMoYbtgs5JazhwNFjbg+KX/84wA1zU/9JTmBbaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiLiAz9IR23HraXYnGf6xhcneI7MB8GA1UdIwQY
MBaAFLsmzPoHF9ufVqo4uGks5dz6KCXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2Qt
Y2NiZjBlNWIyYWRkLzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2QtY2NiZjBlNWIyYWRk
LzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+QvgkYD
WGEmJtrUDWEWZZ0XsntSuEW7nvQXmKb8a9087jvjjTWlMWOzBBPRszR9EF+1BqKa
DrlMrO3SxqcDWUtBZzTP9LbweFvMomjGBZVd8XBtFGcz7r/t5hyQyH3+hKdxJ2lg
S7W19aTo/5k+JEfgmtJvsZk5nj7s3jZy1AMMYZD0fn+LnpsDeK9EcSnLdaNQDEd+
plYEPJFSz6FdBDO1pDTiQX2/RGfzzXlOfpICeBmQtfug2fHulpWI8eyxGXpMEPL2
CZZI4W+NskOPfUKHCVnMuMfIMjRoWRsEzRKjfj+AGcECGuVUvSg0aTDsoPigCRFI
8KzRw8aRnFZ0PA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:11 2025 by rpki-client