Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: OPxpalHyOmyrgOK15V4eLC5g2AuXaOxXBv9laz64Bf8=
Subject key identifier: DD:A4:D9:D4:1B:FF:77:B0:C8:D9:AE:8A:FD:5A:2B:2B:B7:7F:58:BC
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 0197752E1D0F2D3CADB0B2AAC990E1AA5674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 20:00:45 +0000
Manifest this update: Sun 15 Jun 2025 20:00:45 +0000
Manifest next update: Mon 16 Jun 2025 20:00:45 +0000
Files and hashes: 1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: bxMfWFyocuoEfQmLY/z/Rc7O5ULKCUlF9L3AdHQeYIw=)
2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:2e:1d:0f:2d:3c:ad:b0:b2:aa:c9:90:e1:aa:56:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Jun 15 20:00:45 2025 GMT
Not After : Jun 16 20:00:45 2025 GMT
Subject: CN=dda4d9d41bff77b0c8d9ae8afd5a2b2bb77f58bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:38:e7:6c:59:64:5b:a2:04:37:b3:4d:cb:
3a:ad:db:c8:69:b8:3f:45:9a:d6:37:c1:08:14:4f:
82:58:d7:b3:40:41:ff:30:ed:e3:b9:1b:6b:22:99:
9c:13:10:27:4e:b7:09:3a:94:03:01:18:aa:dc:13:
39:c6:03:ac:c3:17:6b:a9:ad:3c:ea:aa:eb:8e:f3:
ad:10:42:f2:6a:ee:76:46:c0:ca:2f:b1:f8:57:99:
65:9d:83:8e:de:79:af:c2:be:79:9e:a5:b8:63:77:
ce:a4:66:52:f1:b1:8b:df:6a:5f:57:17:9a:8e:83:
81:00:84:9c:26:14:1d:d9:00:39:76:ca:66:ce:60:
79:93:a2:97:f1:96:8b:86:a4:71:64:9c:1b:62:8c:
24:58:c3:32:94:27:ea:18:21:34:57:7b:ca:e8:a4:
53:a2:f7:a2:f1:b0:0a:4b:58:6c:eb:15:a6:f2:b4:
c3:a7:2e:26:c6:39:8d:ff:ce:80:9b:fc:ab:2d:3f:
23:da:60:ca:d2:b5:12:7c:02:2f:c3:f0:61:9c:ca:
13:96:0c:a8:8a:7c:38:f0:03:0d:95:0d:6a:c7:77:
eb:a2:17:ce:67:b9:79:bb:68:82:42:75:ba:af:75:
6f:c8:86:cc:d5:92:c4:ff:93:d4:e7:98:52:2e:e1:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:D9:D4:1B:FF:77:B0:C8:D9:AE:8A:FD:5A:2B:2B:B7:7F:58:BC
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:58:9a:0a:b5:6f:7a:cf:78:83:21:cd:e1:f0:83:3d:83:2d:
b4:98:db:13:62:23:6a:55:7b:58:ba:de:4c:2f:27:5e:45:c2:
66:6d:cd:fc:0c:55:ce:53:fe:93:85:a6:71:9e:1d:37:cd:48:
6d:fb:64:7e:85:79:4f:28:6d:7a:13:c3:99:05:f1:2e:d9:0e:
79:03:41:ee:54:4c:04:ff:19:cf:92:cb:af:e1:4e:64:a3:2b:
38:ce:60:f8:a6:99:56:5d:ff:77:76:a6:c4:1e:4a:a2:cc:60:
47:7c:5f:64:73:17:cc:b1:41:2a:aa:1e:84:2c:80:d5:3b:7e:
9e:83:db:da:08:85:f4:db:96:c2:a2:3b:ff:21:54:64:ee:a6:
c3:ab:a4:64:6c:d4:98:dd:06:7c:cc:52:ee:61:c7:f5:ea:b4:
ed:05:44:63:f0:2e:26:a2:be:af:7f:63:68:b6:6c:5f:1d:c5:
f0:e1:aa:62:a9:8e:67:2d:75:76:b5:ec:42:9d:b1:cd:08:28:
37:93:17:b0:29:49:c5:ee:65:ed:03:3c:89:94:ef:f9:0a:c6:
9e:e1:96:6a:1e:c2:72:4c:8d:c4:be:09:9a:6c:2e:8b:ed:e5:
b7:43:b6:7c:fc:f7:f9:91:d8:32:15:be:59:d2:37:ae:b2:d3:
23:32:9c:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1Lh0PLTytsLKqyZDhqlZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYTA2YTQ1M2ZjZDVmMjZmYWY0ODIyYzRiNDU5MDk4ZGNh
ZmYwMzkwHhcNMjUwNjE1MjAwMDQ1WhcNMjUwNjE2MjAwMDQ1WjAzMTEwLwYDVQQD
EyhkZGE0ZDlkNDFiZmY3N2IwYzhkOWFlOGFmZDVhMmIyYmI3N2Y1OGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUo452xZZFuiBDezTcs6rdvIabg/
RZrWN8EIFE+CWNezQEH/MO3juRtrIpmcExAnTrcJOpQDARiq3BM5xgOswxdrqa08
6qrrjvOtEELyau52RsDKL7H4V5llnYOO3nmvwr55nqW4Y3fOpGZS8bGL32pfVxea
joOBAIScJhQd2QA5dspmzmB5k6KX8ZaLhqRxZJwbYowkWMMylCfqGCE0V3vK6KRT
ovei8bAKS1hs6xWm8rTDpy4mxjmN/86Am/yrLT8j2mDK0rUSfAIvw/BhnMoTlgyo
inw48AMNlQ1qx3frohfOZ7l5u2iCQnW6r3VvyIbM1ZLE/5PU55hSLuFnSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2k2dQb/3ewyNmuiv1aKyu3f1i8MB8GA1UdIwQY
MBaAFFCgakU/zV8m+vSCLEtFkJjcr/A5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDkt
ZWY1ZDUwMTFjYTc3LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDktZWY1ZDUwMTFjYTc3
LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1iaCrVv
es94gyHN4fCDPYMttJjbE2IjalV7WLreTC8nXkXCZm3N/AxVzlP+k4WmcZ4dN81I
bftkfoV5TyhtehPDmQXxLtkOeQNB7lRMBP8Zz5LLr+FOZKMrOM5g+KaZVl3/d3am
xB5KosxgR3xfZHMXzLFBKqoehCyA1Tt+noPb2giF9NuWwqI7/yFUZO6mw6ukZGzU
mN0GfMxS7mHH9eq07QVEY/AuJqK+r39jaLZsXx3F8OGqYqmOZy11drXsQp2xzQgo
N5MXsClJxe5l7QM8iZTv+QrGnuGWah7CckyNxL4Jmmwui+3lt0O2fPz3+ZHYMhW+
WdI3rrLTIzKcvA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:31:45 2025 by rpki-client