Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier: sLkfnb3Yy0WqY3BW/6HXQucqPFHZgbYxDN7AL89MUf4=
Subject key identifier: 7C:AC:23:0B:FD:A3:D9:93:85:3A:DE:F9:B2:41:DF:90:F8:5F:28:4A
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial: 019A5119649C7B587473F5B966CC55773CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 23:00:09 +0000
Manifest this update: Tue 04 Nov 2025 23:00:09 +0000
Manifest next update: Wed 05 Nov 2025 23:00:09 +0000
Files and hashes: 1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: 4trWcyXA077CZyyFAxEd1Jk+5e4R/Xm/kbgqpH6ZG3Q=)
2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:64:9c:7b:58:74:73:f5:b9:66:cc:55:77:3c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Validity
Not Before: Nov 4 23:00:09 2025 GMT
Not After : Nov 5 23:00:09 2025 GMT
Subject: CN=7cac230bfda3d993853adef9b241df90f85f284a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:1b:15:41:4b:f0:45:73:29:2a:04:52:47:
fa:56:75:d2:b8:af:c9:bf:4c:63:ef:38:af:01:14:
52:63:9e:5f:27:b5:a5:33:4f:8f:7f:88:31:d7:d2:
50:79:d5:3c:c6:a1:1a:c9:9c:5a:89:8f:d6:0b:91:
24:87:5a:71:19:5d:b0:fe:df:11:13:82:ab:16:1e:
4f:ca:43:ef:19:05:2a:c3:67:bc:c8:cc:25:68:68:
7f:70:64:1c:f1:61:36:77:3c:37:e1:85:d1:4f:4f:
8f:02:16:e6:e0:8c:52:10:8b:9d:01:dd:6c:52:04:
b8:62:79:46:41:68:d0:e9:5c:49:89:64:08:a6:88:
8d:46:3c:ea:3e:73:ae:f8:a1:42:b3:f5:c2:b8:fa:
cc:63:19:92:f7:ca:9f:df:26:93:1c:51:80:8b:9f:
ab:d7:89:e2:f1:04:44:18:f1:e9:66:75:46:1b:8b:
6f:68:88:21:f1:93:47:ec:e5:d4:07:6c:f6:4c:10:
1f:3e:7d:aa:c9:72:f3:2d:bc:74:08:de:8b:fe:31:
33:d1:1f:09:3b:e0:57:7f:cc:88:ce:ef:e3:34:c5:
5b:ea:22:37:df:7f:29:e7:61:42:d3:97:74:7a:32:
b2:f6:bd:29:a1:e6:62:b8:cb:a0:11:69:64:a8:fb:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AC:23:0B:FD:A3:D9:93:85:3A:DE:F9:B2:41:DF:90:F8:5F:28:4A
X509v3 Authority Key Identifier:
keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8e:4f:23:1b:c8:2a:e6:83:9d:d6:0b:94:00:fb:ef:9e:6f:
ee:4c:29:aa:75:2f:82:49:9d:a6:02:89:f4:19:85:e1:e2:5a:
5b:d4:00:51:9c:16:60:f3:15:b2:4d:6a:50:14:b5:ec:e8:b6:
f6:6e:3f:b6:6a:73:45:f1:4d:63:f2:da:ed:b2:cd:dc:4b:ac:
aa:07:1d:62:b5:c3:4e:a7:a2:4c:97:66:66:80:fb:f1:69:9a:
6c:c1:44:7f:b1:c6:af:04:25:49:e7:21:45:13:36:1f:dd:2c:
f0:cc:17:38:de:87:57:b5:3c:87:ed:90:d3:38:0c:54:f3:a3:
b1:3b:c3:08:e8:2f:80:6d:6d:05:bb:88:2b:3a:1d:29:5d:fb:
33:78:90:dc:c6:ee:12:f8:55:03:ed:ad:03:1f:bc:58:d5:3a:
1d:af:f3:78:18:39:dc:19:34:43:a2:aa:cf:e1:34:4f:4f:82:
26:03:0b:a2:2a:40:3a:1c:1d:39:72:20:1c:26:5e:02:00:cb:
b5:5a:ea:0d:c6:80:ec:4b:4e:fa:92:1e:23:b6:36:93:a8:82:
15:0b:27:7c:64:36:2a:bf:37:75:47:40:20:b5:5d:65:e3:57:
94:ed:c5:fa:f0:c2:ec:d5:c3:d4:03:1c:cb:20:e1:17:8e:0d:
7e:5b:65:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGWSce1h0c/W5ZsxVdzz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOGFhNDk5Mzc0MGRmOGFkMzhkOTJjYzBjMTA3MjM0ZTZk
ZmEwNWMwHhcNMjUxMTA0MjMwMDA5WhcNMjUxMTA1MjMwMDA5WjAzMTEwLwYDVQQD
Eyg3Y2FjMjMwYmZkYTNkOTkzODUzYWRlZjliMjQxZGY5MGY4NWYyODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxkbFUFL8EVzKSoEUkf6VnXSuK/J
v0xj7zivARRSY55fJ7WlM0+Pf4gx19JQedU8xqEayZxaiY/WC5Ekh1pxGV2w/t8R
E4KrFh5PykPvGQUqw2e8yMwlaGh/cGQc8WE2dzw34YXRT0+PAhbm4IxSEIudAd1s
UgS4YnlGQWjQ6VxJiWQIpoiNRjzqPnOu+KFCs/XCuPrMYxmS98qf3yaTHFGAi5+r
14ni8QREGPHpZnVGG4tvaIgh8ZNH7OXUB2z2TBAfPn2qyXLzLbx0CN6L/jEz0R8J
O+BXf8yIzu/jNMVb6iI3338p52FC05d0ejKy9r0poeZiuMugEWlkqPuPUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHysIwv9o9mThTre+bJB35D4XyhKMB8GA1UdIwQY
MBaAFFGKpJk3QN+K042SzAwQcjTm36BcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYt
NDZjNzk3NGJkMThhLzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYtNDZjNzk3NGJkMThh
LzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATY5PIxvI
KuaDndYLlAD7755v7kwpqnUvgkmdpgKJ9BmF4eJaW9QAUZwWYPMVsk1qUBS17Oi2
9m4/tmpzRfFNY/La7bLN3EusqgcdYrXDTqeiTJdmZoD78WmabMFEf7HGrwQlSech
RRM2H90s8MwXON6HV7U8h+2Q0zgMVPOjsTvDCOgvgG1tBbuIKzodKV37M3iQ3Mbu
EvhVA+2tAx+8WNU6Ha/zeBg53Bk0Q6Kqz+E0T0+CJgMLoipAOhwdOXIgHCZeAgDL
tVrqDcaA7EtO+pIeI7Y2k6iCFQsnfGQ2Kr83dUdAILVdZeNXlO3F+vDC7NXD1AMc
yyDhF44NfltlFw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:50:56 2025 by rpki-client