Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: XOpFdi3kPf0mqVuq9K+Fykc/gCDBwhEdChK28wge6N8=
Subject key identifier: 8F:4E:34:64:F2:A0:86:55:8B:A1:34:C2:AC:77:A0:CE:0F:90:A8:01
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 019A4D3D33EA8EF3FDBF5966E4C14684F8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:47 +0000
Manifest this update: Tue 04 Nov 2025 05:00:47 +0000
Manifest next update: Wed 05 Nov 2025 05:00:47 +0000
Files and hashes: 1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: iEvJoE0FbrvNHqi54oyyC36VLlWqSsvOLyQ17sMAyKY=)
2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:33:ea:8e:f3:fd:bf:59:66:e4:c1:46:84:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Nov 4 05:00:47 2025 GMT
Not After : Nov 5 05:00:47 2025 GMT
Subject: CN=8f4e3464f2a086558ba134c2ac77a0ce0f90a801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:fc:98:27:9b:81:39:a9:e5:84:1a:b0:e4:
bd:61:dd:a5:41:17:0d:50:b2:af:e3:8a:6d:22:ef:
e0:ae:37:02:de:39:4d:22:69:eb:14:b1:14:cc:47:
81:07:09:e7:43:ce:34:a7:37:92:da:dc:e5:b4:01:
2a:b9:e7:33:8c:9d:4f:56:d6:ef:15:25:eb:6a:bb:
9b:89:8f:bc:f4:9b:ce:a6:94:6c:23:b9:1a:92:a9:
5a:3d:8d:b4:39:d0:84:05:21:45:05:bd:b5:a1:18:
b2:3f:b0:99:19:1a:36:4a:a7:95:e1:3a:63:e9:61:
74:62:c7:3e:5a:eb:23:7f:58:cc:2f:ec:19:99:23:
d6:13:11:af:30:3d:ad:6c:fc:37:9c:52:a9:98:2b:
57:53:07:c3:5c:7f:bc:f0:9d:07:09:d1:58:b6:d0:
30:45:62:7c:67:35:ae:c3:de:d5:10:28:be:bf:1a:
53:63:cb:c2:4e:6c:92:46:c0:37:0e:08:0a:0c:77:
20:4c:da:59:22:93:a2:57:cf:6c:e8:90:54:33:19:
02:c3:6e:bf:6f:37:0a:d8:e2:5d:88:91:c1:96:b3:
4d:70:01:53:38:ed:84:96:60:c7:0c:3d:9a:aa:ee:
00:dc:32:29:48:4a:95:c2:22:f9:3d:cb:e0:6b:1d:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:34:64:F2:A0:86:55:8B:A1:34:C2:AC:77:A0:CE:0F:90:A8:01
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ad:ef:01:76:da:0f:a3:eb:f4:11:0d:1d:fb:e6:e0:42:09:
9b:f7:50:a1:76:6d:4e:f5:65:77:99:47:39:03:80:b4:47:00:
c5:4b:10:8e:71:2f:67:6b:cd:01:0e:cc:2d:b6:37:81:e6:25:
32:3f:8e:c8:57:c8:e0:97:15:8b:fc:7b:75:ba:49:50:0d:66:
8e:da:7d:ff:c3:6b:e1:53:13:74:92:d8:ef:e3:4c:86:83:14:
81:fe:7d:b7:d6:4a:b4:f1:60:24:5e:c7:95:c6:78:3a:c3:56:
bc:48:2e:b6:8c:48:62:9e:e4:2c:e2:3b:34:f9:97:be:d1:14:
a9:5f:ba:b1:9e:67:30:b0:65:39:d1:0f:11:29:04:f7:10:9b:
91:99:14:49:ef:df:f8:99:b0:f1:2c:87:ff:6d:12:f6:06:85:
90:6d:54:0d:62:d1:b7:5d:9e:7b:ce:b7:61:9e:1d:51:db:b6:
da:63:c5:5f:fa:44:55:54:fe:3b:b8:8c:45:85:73:5a:de:f1:
98:02:ab:24:df:e9:38:db:87:c0:c1:22:71:cc:6d:1f:c8:f4:
47:a6:11:62:74:bf:7c:e0:5a:2c:b4:c4:c0:f3:14:70:42:0e:
b9:dc:a1:aa:78:b0:17:2a:3e:09:c2:bd:ef:b3:7f:45:51:ac:
4c:b2:c0:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPTPqjvP9v1lm5MFGhPiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYTA2YTQ1M2ZjZDVmMjZmYWY0ODIyYzRiNDU5MDk4ZGNh
ZmYwMzkwHhcNMjUxMTA0MDUwMDQ3WhcNMjUxMTA1MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg4ZjRlMzQ2NGYyYTA4NjU1OGJhMTM0YzJhYzc3YTBjZTBmOTBhODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpn8mCebgTmp5YQasOS9Yd2lQRcN
ULKv44ptIu/grjcC3jlNImnrFLEUzEeBBwnnQ840pzeS2tzltAEqueczjJ1PVtbv
FSXrarubiY+89JvOppRsI7kakqlaPY20OdCEBSFFBb21oRiyP7CZGRo2SqeV4Tpj
6WF0Ysc+Wusjf1jML+wZmSPWExGvMD2tbPw3nFKpmCtXUwfDXH+88J0HCdFYttAw
RWJ8ZzWuw97VECi+vxpTY8vCTmySRsA3DggKDHcgTNpZIpOiV89s6JBUMxkCw26/
bzcK2OJdiJHBlrNNcAFTOO2ElmDHDD2aqu4A3DIpSEqVwiL5Pcvgax1+wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9ONGTyoIZVi6E0wqx3oM4PkKgBMB8GA1UdIwQY
MBaAFFCgakU/zV8m+vSCLEtFkJjcr/A5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDkt
ZWY1ZDUwMTFjYTc3LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDktZWY1ZDUwMTFjYTc3
LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeK3vAXba
D6Pr9BENHfvm4EIJm/dQoXZtTvVld5lHOQOAtEcAxUsQjnEvZ2vNAQ7MLbY3geYl
Mj+OyFfI4JcVi/x7dbpJUA1mjtp9/8Nr4VMTdJLY7+NMhoMUgf59t9ZKtPFgJF7H
lcZ4OsNWvEgutoxIYp7kLOI7NPmXvtEUqV+6sZ5nMLBlOdEPESkE9xCbkZkUSe/f
+Jmw8SyH/20S9gaFkG1UDWLRt12ee863YZ4dUdu22mPFX/pEVVT+O7iMRYVzWt7x
mAKrJN/pONuHwMEiccxtH8j0R6YRYnS/fOBaLLTEwPMUcEIOudyhqniwFyo+CcK9
77N/RVGsTLLA1g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:02 2025 by rpki-client