Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
File: UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json)
Hash identifier: Ptgq1UVI2XiRI2g8eNhseR/GKR44M2mDbcyr8HyWouc=
Subject key identifier: 76:B8:85:91:3A:1A:1E:11:3B:FE:4D:83:82:C4:C2:0D:D7:E4:43:54
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Certificate issuer: /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial: 019A4DE1E3604DBA7295CC543300D98AE4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:40 +0000
Manifest this update: Tue 04 Nov 2025 08:00:40 +0000
Manifest next update: Wed 05 Nov 2025 08:00:40 +0000
Files and hashes: 1: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: 6T1BtgHe9p5tfPgDboHysKyIEpKcbP6bvd938+0Ij7c=)
2: UPs4nn0eBay_fIEXwzFrziOGHlg.roa (hash: n1rQX2er8ehY5mv/Oe6cZ3YcfGOcUxMxZAxeUBrIysk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e3:60:4d:ba:72:95:cc:54:33:00:d9:8a:e4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Validity
Not Before: Nov 4 08:00:40 2025 GMT
Not After : Nov 5 08:00:40 2025 GMT
Subject: CN=76b885913a1a1e113bfe4d8382c4c20dd7e44354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:00:14:5d:01:66:bd:cd:a2:f5:90:20:25:
c0:5b:61:4b:1f:d9:0c:3b:37:42:44:55:f4:4d:46:
d0:4c:f6:79:23:40:f0:3a:55:41:3c:ca:5b:74:56:
72:d1:b4:72:70:1d:04:dc:87:d2:90:5c:c2:be:4c:
7b:39:f1:f0:ca:af:3f:fb:fd:50:83:47:21:9a:1b:
0c:21:90:4b:85:7f:94:62:bb:f2:25:b2:c3:5e:be:
e5:2b:5d:20:bf:db:ae:61:56:45:e3:b0:3e:08:18:
1d:b4:dd:b6:9d:6e:e1:06:20:3e:ca:f4:07:4c:09:
d4:92:f2:cc:8b:54:5f:a0:62:a3:14:d4:5c:2b:5d:
a7:9b:44:33:8e:be:3a:f6:80:bf:04:82:05:08:48:
26:87:e7:c6:e2:d1:c4:70:39:88:0b:bd:6a:15:70:
a2:b7:49:60:36:1a:c0:cb:49:35:f6:22:64:63:59:
18:66:fe:ec:0d:dd:5d:f4:ee:53:33:63:fa:db:6a:
4b:6c:8a:94:ea:60:9f:ab:04:9e:a8:47:2d:80:ce:
af:ab:32:e8:31:e7:50:9b:cb:8e:ca:f0:78:3d:a3:
be:47:ae:3c:46:93:b2:d7:d5:10:60:c1:f9:1e:b9:
e3:d7:37:5a:89:9e:51:4c:46:03:51:b9:34:b2:8b:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B8:85:91:3A:1A:1E:11:3B:FE:4D:83:82:C4:C2:0D:D7:E4:43:54
X509v3 Authority Key Identifier:
keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c9:03:43:c7:0b:d0:5b:07:18:e3:e2:8a:62:9f:ba:c7:f3:
13:a6:30:12:22:81:b2:f0:be:a1:ad:3a:0e:57:83:4c:24:45:
d8:d6:19:67:9b:f2:db:9a:b3:ab:51:ab:50:82:8c:19:38:75:
63:e1:e1:81:1e:da:5c:48:74:da:d9:00:85:c7:88:37:4b:79:
54:3e:39:73:62:a4:3e:ff:bd:e4:de:b1:3e:69:c4:11:3b:5f:
63:f5:1a:34:f9:0a:54:f1:53:7e:44:ac:4f:53:10:07:d7:94:
e7:d7:9c:d6:95:57:76:9f:05:83:f9:3a:5e:99:74:3e:62:1f:
f7:75:71:ba:b7:ce:7b:20:bc:d0:71:9b:2d:9d:78:e0:01:5c:
79:92:e9:c5:d5:3d:be:a2:df:aa:fb:15:6e:86:d1:9d:e8:8a:
fa:45:01:dc:5c:56:bd:44:46:88:29:d8:f0:66:ea:e8:06:0a:
dc:4f:9b:df:c8:ca:6b:b3:ef:cc:62:e1:ed:9a:ba:a6:f9:19:
7e:fe:6d:97:f1:4a:e2:86:7e:ab:3e:c0:74:fc:3a:d9:f1:13:
f3:c4:11:34:9f:5f:1c:7b:12:c7:8d:4a:da:1e:db:da:81:08:
4b:8e:22:f6:52:76:3e:7b:8c:ed:09:d4:e1:f5:12:2d:d4:63:
91:63:6b:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4eNgTbpylcxUMwDZiuT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZWE1YWNiNDQ3YjJjZWI5MzJhMDNmMjkwMDgyZGM3NmY4
ZTQwZTMwHhcNMjUxMTA0MDgwMDQwWhcNMjUxMTA1MDgwMDQwWjAzMTEwLwYDVQQD
Eyg3NmI4ODU5MTNhMWExZTExM2JmZTRkODM4MmM0YzIwZGQ3ZTQ0MzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6AAFF0BZr3NovWQICXAW2FLH9kM
OzdCRFX0TUbQTPZ5I0DwOlVBPMpbdFZy0bRycB0E3IfSkFzCvkx7OfHwyq8/+/1Q
g0chmhsMIZBLhX+UYrvyJbLDXr7lK10gv9uuYVZF47A+CBgdtN22nW7hBiA+yvQH
TAnUkvLMi1RfoGKjFNRcK12nm0Qzjr469oC/BIIFCEgmh+fG4tHEcDmIC71qFXCi
t0lgNhrAy0k19iJkY1kYZv7sDd1d9O5TM2P622pLbIqU6mCfqwSeqEctgM6vqzLo
MedQm8uOyvB4PaO+R648RpOy19UQYMH5Hrnj1zdaiZ5RTEYDUbk0sotU6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHa4hZE6Gh4RO/5Ng4LEwg3X5ENUMB8GA1UdIwQY
MBaAFFDqWstEeyzrkyoD8pAILcdvjkDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMGVkZWYtMjUzZC00OWIxLTk2OWUt
NWNhOGFjMTgwOTZkLzEvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xMGVkZWYtMjUzZC00OWIxLTk2OWUtNWNhOGFjMTgwOTZk
LzEvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATskDQ8cL
0FsHGOPiimKfusfzE6YwEiKBsvC+oa06DleDTCRF2NYZZ5vy25qzq1GrUIKMGTh1
Y+HhgR7aXEh02tkAhceIN0t5VD45c2KkPv+95N6xPmnEETtfY/UaNPkKVPFTfkSs
T1MQB9eU59ec1pVXdp8Fg/k6Xpl0PmIf93VxurfOeyC80HGbLZ144AFceZLpxdU9
vqLfqvsVbobRneiK+kUB3FxWvURGiCnY8Gbq6AYK3E+b38jKa7PvzGLh7Zq6pvkZ
fv5tl/FK4oZ+qz7AdPw62fET88QRNJ9fHHsSx41K2h7b2oEIS44i9lJ2PnuM7QnU
4fUSLdRjkWNrFQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:11 2025 by rpki-client