Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: RhoaqKQiTf8oFIAXg8JkbVibBb0IRIzXMkK9KLYK7Zw=
Subject key identifier: 36:75:99:CB:6B:2C:60:57:47:C2:21:DA:0C:87:CB:A6:19:CA:E8:C0
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 0199FBEC00DCAEB6F872637A1ED58ACF8EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 10:02:51 +0000
Manifest this update: Sun 19 Oct 2025 10:02:51 +0000
Manifest next update: Mon 20 Oct 2025 10:02:51 +0000
Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: p95jYJGdPJRmZl7Fu8UJATfMljxXvlM4IZNhUNzZT7A=)
2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:00:dc:ae:b6:f8:72:63:7a:1e:d5:8a:cf:8e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Oct 19 10:02:51 2025 GMT
Not After : Oct 20 10:02:51 2025 GMT
Subject: CN=367599cb6b2c605747c221da0c87cba619cae8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:e1:54:cf:ed:a9:64:4a:72:6b:7d:52:89:
d5:86:7c:6b:bb:d3:42:22:3a:c0:e7:e9:1c:70:84:
4b:1d:d5:73:b0:5c:17:31:9e:ba:de:32:72:10:6e:
c1:d7:66:ec:50:e1:3e:0c:c7:90:86:cd:ba:20:e0:
c3:a2:93:8c:24:20:b6:1e:9b:c9:f1:78:5e:aa:25:
7a:fa:25:26:ef:83:55:ba:99:f0:1d:2a:d8:fe:55:
83:65:b5:36:98:8d:a8:eb:9b:7c:17:ec:ae:5e:bb:
4a:f6:ed:14:ca:b6:25:80:9f:d2:77:03:4f:c4:c8:
4d:41:21:06:53:45:8f:4b:d5:d6:ff:29:ab:38:e7:
81:56:0a:97:d1:d2:2c:23:b4:55:73:4b:b6:bb:0e:
85:55:09:c7:5d:b3:a2:2b:22:49:89:05:af:fd:f6:
d6:20:ea:96:cd:fd:4e:19:56:04:d5:a5:a0:07:f2:
f2:df:ae:f1:ac:6a:0b:4c:1b:66:b1:11:b3:07:72:
fe:0e:f4:d7:f9:a1:53:6d:b2:07:59:1a:b9:24:e2:
c0:52:f4:b2:5e:b1:dd:fa:dc:79:50:b9:dc:b7:b1:
e3:0d:0c:88:e2:91:54:c6:02:01:cf:a6:ff:0e:59:
f5:79:b0:3c:ef:6b:7f:a0:7e:cc:7c:47:6b:55:21:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:75:99:CB:6B:2C:60:57:47:C2:21:DA:0C:87:CB:A6:19:CA:E8:C0
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e3:10:c2:af:bf:e9:13:88:eb:a4:b9:eb:f9:e8:a5:81:ab:
23:c3:76:b0:e2:01:a1:68:0e:91:55:a7:54:e8:03:6d:e6:bd:
bb:20:6e:15:92:fd:94:70:34:c4:26:dd:03:86:b6:aa:95:78:
53:f0:7d:93:ba:57:46:fe:f8:91:7a:7d:c7:10:0e:98:77:69:
c4:d5:f5:87:b6:bf:c6:e3:01:d8:0b:26:5e:7e:3e:bc:12:a9:
b0:8e:b7:06:af:48:a5:7f:f7:b2:35:45:e2:f1:66:69:61:b6:
c6:a5:9a:bb:c3:9f:e2:00:2a:c7:6c:0c:5f:49:ec:88:eb:b2:
5b:3a:a7:dd:24:db:d9:f9:23:f1:13:e3:31:32:b9:33:20:03:
05:d5:b4:bf:b8:e8:81:06:cf:4e:46:b2:00:77:db:0c:80:71:
42:4a:23:a2:2c:72:91:26:d4:27:e0:e8:51:ee:49:f0:32:22:
77:b2:40:50:4a:26:4f:4c:ea:24:23:7f:45:af:b7:23:fc:9f:
8f:f4:b2:de:3b:a2:34:11:1d:39:e8:e1:5d:0b:16:aa:ad:41:
c3:09:68:62:97:0f:93:82:4e:dc:23:44:a1:c2:13:06:c4:2f:
e6:54:46:06:bd:f6:98:0c:7d:0b:a5:2e:34:60:75:10:9e:20:
c7:ff:56:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77ADcrrb4cmN6HtWKz46tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjUxMDE5MTAwMjUxWhcNMjUxMDIwMTAwMjUxWjAzMTEwLwYDVQQD
EygzNjc1OTljYjZiMmM2MDU3NDdjMjIxZGEwYzg3Y2JhNjE5Y2FlOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3bhVM/tqWRKcmt9UonVhnxru9NC
IjrA5+kccIRLHdVzsFwXMZ663jJyEG7B12bsUOE+DMeQhs26IODDopOMJCC2HpvJ
8XheqiV6+iUm74NVupnwHSrY/lWDZbU2mI2o65t8F+yuXrtK9u0UyrYlgJ/SdwNP
xMhNQSEGU0WPS9XW/ymrOOeBVgqX0dIsI7RVc0u2uw6FVQnHXbOiKyJJiQWv/fbW
IOqWzf1OGVYE1aWgB/Ly367xrGoLTBtmsRGzB3L+DvTX+aFTbbIHWRq5JOLAUvSy
XrHd+tx5ULnct7HjDQyI4pFUxgIBz6b/Dln1ebA872t/oH7MfEdrVSGAswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZ1mctrLGBXR8Ih2gyHy6YZyujAMB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+MQwq+/
6ROI66S56/nopYGrI8N2sOIBoWgOkVWnVOgDbea9uyBuFZL9lHA0xCbdA4a2qpV4
U/B9k7pXRv74kXp9xxAOmHdpxNX1h7a/xuMB2AsmXn4+vBKpsI63Bq9IpX/3sjVF
4vFmaWG2xqWau8Of4gAqx2wMX0nsiOuyWzqn3STb2fkj8RPjMTK5MyADBdW0v7jo
gQbPTkayAHfbDIBxQkojoixykSbUJ+DoUe5J8DIid7JAUEomT0zqJCN/Ra+3I/yf
j/Sy3juiNBEdOejhXQsWqq1BwwloYpcPk4JO3CNEocITBsQv5lRGBr32mAx9C6Uu
NGB1EJ4gx/9W2A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:25 2025 by rpki-client