Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: eJDDkbbBJY2jCOMw/sooMw7gkVb1hXYX7LAofZVvUN4=
Subject key identifier: 82:20:58:62:F1:EA:67:30:E3:52:85:97:F2:5E:44:16:B4:54:C5:47
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 019A51872910B68A86999A3B447D50BF436C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 1451
Signing time: Wed 05 Nov 2025 01:00:03 +0000
Manifest this update: Wed 05 Nov 2025 01:00:03 +0000
Manifest next update: Thu 06 Nov 2025 01:00:03 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: NGyfMEHWRxMeyyys3pmRp3HYeoZaW9xuTtILadVrIHo=)
2: ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa (hash: xFEzrUJlVVBWEtFecNObcV0TMloS/XizxOFPtUYtswE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:29:10:b6:8a:86:99:9a:3b:44:7d:50:bf:43:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Nov 5 01:00:03 2025 GMT
Not After : Nov 6 01:00:03 2025 GMT
Subject: CN=82205862f1ea6730e3528597f25e4416b454c547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:f7:c2:dd:c1:d3:4e:40:f0:8c:3d:ed:e0:
59:71:d2:d3:a7:b9:5f:ad:f1:10:a9:a6:8d:23:77:
9c:b6:77:84:d8:e0:89:5e:d5:14:da:96:ec:78:86:
7c:b7:48:80:46:d6:01:c5:40:5a:a5:62:e6:cc:98:
28:d4:3f:46:b3:e9:8a:29:a1:bb:75:57:c5:58:5e:
0e:e5:d4:97:ff:26:2f:4c:eb:9e:09:18:77:9d:f7:
dd:fc:c0:c2:88:e6:3f:a5:25:00:ee:77:ca:2e:c6:
04:3c:eb:11:07:81:5a:74:0c:7f:a3:e8:43:64:3a:
25:6b:98:12:61:98:f0:b1:05:b8:52:78:3e:eb:05:
77:d4:f7:81:e5:a8:a6:7f:dc:ea:c8:41:51:70:86:
1b:b2:f8:dd:34:7b:26:f8:60:42:b5:f2:00:e5:41:
c6:db:06:82:d3:13:a1:57:1a:97:77:69:1b:21:32:
9f:56:56:59:34:15:39:aa:82:c3:41:e8:77:b7:14:
a3:4c:4c:c1:be:55:36:3c:94:45:98:a5:da:0a:4b:
8a:d8:7c:dc:4a:10:c8:09:0d:6b:3a:b8:38:bb:62:
3f:c5:d0:06:52:60:ef:16:c5:8d:f4:8b:f9:a8:6d:
a9:ff:e4:66:3f:32:4c:4c:9e:5e:b9:11:ec:f3:94:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:20:58:62:F1:EA:67:30:E3:52:85:97:F2:5E:44:16:B4:54:C5:47
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:83:8d:f2:1d:2b:12:25:a9:aa:ff:c0:4c:68:46:60:af:ed:
0c:3c:2f:b8:ae:9b:15:53:d6:6c:ba:68:7b:1e:9a:50:31:be:
a6:c3:7e:63:6b:dc:fe:84:75:39:7c:c3:fa:1e:de:fe:18:a4:
f1:86:44:38:95:c4:97:54:cb:a8:99:93:16:9a:bc:43:4b:ac:
8c:dd:79:03:c5:6e:eb:8e:f0:20:e6:83:c0:d5:c0:dc:bc:f2:
09:0d:88:96:19:ad:ed:e0:f1:60:18:61:5e:c5:c2:5b:bc:c8:
91:31:27:ee:fd:92:2e:f0:fb:1b:f6:83:a6:f1:27:7e:b2:ac:
f2:b2:45:92:9a:29:60:be:ca:a7:e6:4b:44:b5:22:aa:c1:34:
e3:ff:c0:5a:8c:21:37:fc:b1:89:10:36:53:59:b5:11:5d:bc:
5a:4a:f0:5f:d2:1d:50:de:54:83:0c:48:2c:49:ee:d0:8d:91:
2f:4a:0e:92:06:84:74:eb:58:f7:b1:7d:42:a9:1e:f2:69:9e:
e5:6b:b0:f9:c5:ec:b1:b2:6b:f3:1f:85:fe:d3:6e:d1:d7:f0:
74:66:a9:b0:07:99:51:36:b9:0e:1b:8c:02:a7:c2:16:9e:d1:
6b:ed:28:6b:5d:11:a2:3c:07:53:0b:7c:5f:5d:bc:0c:3c:23:
c3:23:30:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRhykQtoqGmZo7RH1Qv0NsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDI4NGI5NDMyNWY1MDYwZjhhMGU4N2MxYmUyODI3Nzg4
ZjE4ZjkwHhcNMjUxMTA1MDEwMDAzWhcNMjUxMTA2MDEwMDAzWjAzMTEwLwYDVQQD
Eyg4MjIwNTg2MmYxZWE2NzMwZTM1Mjg1OTdmMjVlNDQxNmI0NTRjNTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/v3wt3B005A8Iw97eBZcdLTp7lf
rfEQqaaNI3ectneE2OCJXtUU2pbseIZ8t0iARtYBxUBapWLmzJgo1D9Gs+mKKaG7
dVfFWF4O5dSX/yYvTOueCRh3nffd/MDCiOY/pSUA7nfKLsYEPOsRB4FadAx/o+hD
ZDola5gSYZjwsQW4Ung+6wV31PeB5aimf9zqyEFRcIYbsvjdNHsm+GBCtfIA5UHG
2waC0xOhVxqXd2kbITKfVlZZNBU5qoLDQeh3txSjTEzBvlU2PJRFmKXaCkuK2Hzc
ShDICQ1rOrg4u2I/xdAGUmDvFsWN9Iv5qG2p/+RmPzJMTJ5euRHs85QfYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIgWGLx6mcw41KFl/JeRBa0VMVHMB8GA1UdIwQY
MBaAFNlChLlDJfUGD4oOh8G+KCd4jxj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQt
OTVkNTk0NjVlOWE4LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQtOTVkNTk0NjVlOWE4
LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4ON8h0r
EiWpqv/ATGhGYK/tDDwvuK6bFVPWbLpoex6aUDG+psN+Y2vc/oR1OXzD+h7e/hik
8YZEOJXEl1TLqJmTFpq8Q0usjN15A8Vu647wIOaDwNXA3LzyCQ2Ilhmt7eDxYBhh
XsXCW7zIkTEn7v2SLvD7G/aDpvEnfrKs8rJFkpopYL7Kp+ZLRLUiqsE04//AWowh
N/yxiRA2U1m1EV28WkrwX9IdUN5UgwxILEnu0I2RL0oOkgaEdOtY97F9Qqke8mme
5Wuw+cXssbJr8x+F/tNu0dfwdGapsAeZUTa5DhuMAqfCFp7Ra+0oa10RojwHUwt8
X128DDwjwyMwsw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:07 2025 by rpki-client