Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: YP9SddV74/SjAlOAZ1/vtuBgGOMiEOiIJAKgazSy47g=
Subject key identifier: 11:83:F1:62:32:EA:41:2E:9C:7A:41:E6:F1:11:00:6A:4F:39:DA:87
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 019A4E18EC95C135A6D2D876F735E00F1645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0E13
Signing time: Tue 04 Nov 2025 09:00:47 +0000
Manifest this update: Tue 04 Nov 2025 09:00:47 +0000
Manifest next update: Wed 05 Nov 2025 09:00:47 +0000
Files and hashes: 1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: K3nLVmhKPIkEfnEI8/9RRpl08dn+dpo1ESqE2cuJ8sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ec:95:c1:35:a6:d2:d8:76:f7:35:e0:0f:16:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Nov 4 09:00:47 2025 GMT
Not After : Nov 5 09:00:47 2025 GMT
Subject: CN=1183f16232ea412e9c7a41e6f111006a4f39da87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:bc:f0:4b:27:0c:c6:f3:70:e5:2e:79:06:
71:96:11:fe:f6:ac:05:34:f8:0f:87:2a:55:31:6a:
a3:d4:f0:5a:c5:3e:05:66:21:dc:a1:2e:59:2c:4b:
2e:00:99:18:b8:7a:19:72:94:3e:3f:b0:8b:1e:f1:
a5:09:86:aa:de:d0:62:52:9b:f5:38:56:c8:0b:e5:
36:96:48:d4:e6:b9:75:fe:42:ab:6c:57:fe:27:c5:
cf:00:dd:13:fb:51:c0:8b:95:87:d9:5f:2c:c5:98:
25:8b:c6:d5:3d:26:e0:fa:d2:d7:33:5b:9c:f6:83:
dd:58:ed:e1:1d:da:1a:7f:1e:0c:35:8d:27:38:47:
23:6c:10:22:10:54:08:52:44:d6:65:6c:ce:f0:58:
b0:d8:8f:ab:90:e0:68:b8:78:80:04:51:df:db:82:
9c:5b:55:2c:bb:d6:7e:b5:1b:f6:a6:cc:b9:5a:5c:
17:7d:b1:ee:29:1e:a6:dc:97:0a:d9:e8:c7:e2:22:
e3:12:a5:20:5a:41:05:cb:7b:fb:22:83:e8:b6:ea:
0a:1e:3c:b0:0a:c9:38:3c:55:36:4b:03:c5:b3:40:
9f:5f:38:9a:a4:d7:04:d9:99:38:90:a2:b9:72:8a:
04:b3:eb:fa:e1:a7:19:2b:49:2b:d7:bb:37:e5:9d:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:83:F1:62:32:EA:41:2E:9C:7A:41:E6:F1:11:00:6A:4F:39:DA:87
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:85:6c:12:b7:9c:aa:be:62:54:26:4b:90:c4:27:6b:a0:be:
28:d9:0d:86:85:29:39:76:11:e0:2f:9f:a8:83:5a:f8:9b:c4:
47:b7:b3:72:5f:3f:18:c0:d4:d8:48:94:3d:ec:58:ef:f2:4a:
97:50:90:f5:18:11:72:77:51:e9:38:55:63:0e:b5:3c:68:01:
08:4a:fc:ce:22:9e:59:6c:71:ce:ab:58:dd:4c:1f:7c:9f:b7:
14:bf:c5:3d:99:60:c1:b0:5d:8d:b7:e3:fc:65:e7:20:fa:af:
1d:7e:0c:b4:53:48:d1:86:f6:8e:da:bd:bd:6e:72:98:a1:21:
12:63:ea:ae:42:85:0c:41:7a:d3:bc:df:f0:a5:ca:5d:8d:1a:
25:46:c2:f1:80:21:8e:1d:3f:48:cd:f3:05:29:db:e3:b4:09:
4d:89:c4:00:f6:e6:cc:f7:98:3e:dc:48:3a:f3:77:3a:9c:47:
bb:37:05:12:ca:16:86:36:4e:46:3b:05:27:cd:ea:a2:1e:5e:
cb:27:d0:2a:b8:b6:c4:0f:4a:cc:56:fe:00:0c:b3:3b:e0:53:
61:4f:a4:80:ae:16:d1:6e:da:d5:05:45:22:02:fc:54:8e:ba:
c6:64:69:17:e7:7f:ef:b8:22:90:8b:6d:73:9e:b4:71:f2:0a:
87:46:2c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:53 2025 by rpki-client