Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: ui4aCly5+FbLQh5MF0CzuikEV8UVB9iDV+F4AN/ZOdY=
Subject key identifier: BE:87:19:BA:5D:B5:AB:41:EF:47:73:5C:66:EE:29:09:F9:40:22:CE
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 019A4E863E8371A1E1164861CD0659AE40D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 159D
Signing time: Tue 04 Nov 2025 11:00:11 +0000
Manifest this update: Tue 04 Nov 2025 11:00:11 +0000
Manifest next update: Wed 05 Nov 2025 11:00:11 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: qgVQi5CwzhgsGgjs3q8XlydmB7/LOYyIjiVak24iF+Q=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3e:83:71:a1:e1:16:48:61:cd:06:59:ae:40:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Nov 4 11:00:11 2025 GMT
Not After : Nov 5 11:00:11 2025 GMT
Subject: CN=be8719ba5db5ab41ef47735c66ee2909f94022ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:41:c4:f8:ee:36:c0:53:a8:42:cb:f1:c2:
7d:3e:d4:83:70:a9:81:a3:e8:cc:f3:e7:86:18:3a:
e7:a9:1f:c1:90:60:31:b1:79:1f:85:ac:06:ca:dc:
97:48:d1:35:1f:51:90:c3:3c:f7:14:26:a4:59:8d:
14:22:0c:55:45:20:6b:12:12:ce:dd:d2:04:69:05:
a1:24:d1:1c:0d:97:81:29:2f:c8:61:c3:a7:40:f7:
09:a0:ca:ce:e0:29:3c:4f:2e:6c:4a:bc:40:46:0c:
a1:4f:5d:4e:52:67:ac:e1:4d:ba:8a:92:e3:ab:bf:
d9:15:2b:68:0d:85:ce:83:91:02:c5:f8:cd:65:c3:
b9:f7:21:d7:39:90:45:da:28:b8:63:f7:a6:a9:63:
57:2d:d7:28:28:30:0d:09:e4:af:04:9d:9c:08:c5:
fc:15:1d:35:8b:c8:63:41:ee:75:72:84:d3:52:8d:
51:6f:36:a0:aa:01:a5:54:cb:7c:72:64:02:87:a8:
29:8a:b4:ae:50:15:a0:ce:79:8c:5e:42:15:42:a9:
10:48:55:4e:5d:41:68:10:6e:ad:b7:c0:93:30:bc:
c1:d5:c5:6e:6e:fe:da:53:d8:8e:eb:70:ad:85:6a:
40:3f:ef:53:8d:33:34:c6:a1:d8:61:73:80:1e:b1:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:87:19:BA:5D:B5:AB:41:EF:47:73:5C:66:EE:29:09:F9:40:22:CE
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9e:ba:8c:22:c2:f1:d0:22:e8:de:92:f5:2c:77:2e:03:21:
71:5a:20:6a:1b:0b:3e:6b:cd:41:5d:ff:79:d5:f3:c6:eb:e8:
be:eb:10:5b:27:57:61:01:65:0c:24:ec:7b:27:d7:56:c1:87:
ec:34:28:b0:02:20:6f:41:8a:89:38:03:30:38:d7:ec:ba:fe:
7a:c4:b2:33:df:41:04:af:5e:e4:69:56:76:57:1f:58:af:96:
a2:6b:a2:87:7f:a9:0c:dd:b7:8e:71:e3:7f:ca:1b:69:84:a2:
20:6e:1b:69:0c:57:f1:cb:e7:88:39:9b:ad:0b:82:cf:a6:44:
b8:dd:14:6a:a1:ec:9c:a5:07:70:c5:76:78:6e:10:65:ad:97:
3e:52:ba:f9:df:2e:00:e1:d1:2f:59:49:bb:84:a6:7b:f9:14:
68:0d:6a:cc:c2:f9:b2:78:4e:2d:23:9b:d6:72:ce:72:c1:be:
b2:96:59:74:85:90:74:4a:4c:04:ef:bf:2a:93:3a:25:83:b9:
54:eb:66:87:bd:a1:0f:1f:f6:c1:68:41:25:c0:0b:a6:2b:1f:
f6:f0:59:0d:76:9f:e9:e3:1c:94:5e:8d:56:04:2e:5a:d8:fe:
ab:ff:2a:a2:19:70:6f:ad:7b:fe:2f:ef:de:a0:01:48:dc:62:
b7:90:dc:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhj6DcaHhFkhhzQZZrkDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzAwNmQ2NDAxZWY0MmZhNTBlMjQwOTU1MDBiMmZkYWZh
ZDViYWEwHhcNMjUxMTA0MTEwMDExWhcNMjUxMTA1MTEwMDExWjAzMTEwLwYDVQQD
EyhiZTg3MTliYTVkYjVhYjQxZWY0NzczNWM2NmVlMjkwOWY5NDAyMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X1BxPjuNsBTqELL8cJ9PtSDcKmB
o+jM8+eGGDrnqR/BkGAxsXkfhawGytyXSNE1H1GQwzz3FCakWY0UIgxVRSBrEhLO
3dIEaQWhJNEcDZeBKS/IYcOnQPcJoMrO4Ck8Ty5sSrxARgyhT11OUmes4U26ipLj
q7/ZFStoDYXOg5ECxfjNZcO59yHXOZBF2ii4Y/emqWNXLdcoKDANCeSvBJ2cCMX8
FR01i8hjQe51coTTUo1RbzagqgGlVMt8cmQCh6gpirSuUBWgznmMXkIVQqkQSFVO
XUFoEG6tt8CTMLzB1cVubv7aU9iO63CthWpAP+9TjTM0xqHYYXOAHrEBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6HGbpdtatB70dzXGbuKQn5QCLOMB8GA1UdIwQY
MBaAFFDABtZAHvQvpQ4kCVUAsv2vrVuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEt
YzJkY2RjODVlNTg0LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEtYzJkY2RjODVlNTg0
LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa566jCLC
8dAi6N6S9Sx3LgMhcVogahsLPmvNQV3/edXzxuvovusQWydXYQFlDCTseyfXVsGH
7DQosAIgb0GKiTgDMDjX7Lr+esSyM99BBK9e5GlWdlcfWK+Womuih3+pDN23jnHj
f8obaYSiIG4baQxX8cvniDmbrQuCz6ZEuN0UaqHsnKUHcMV2eG4QZa2XPlK6+d8u
AOHRL1lJu4Sme/kUaA1qzML5snhOLSOb1nLOcsG+spZZdIWQdEpMBO+/KpM6JYO5
VOtmh72hDx/2wWhBJcALpisf9vBZDXaf6eMclF6NVgQuWtj+q/8qohlwb617/i/v
3qABSNxit5DcCg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:49 2025 by rpki-client