Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: Bc4FlFyLX/7Bs/kyiIKRSEQck5yc6+5l1rmjJy4cD98=
Subject key identifier: 6E:16:6A:65:6B:1D:28:39:ED:CB:F8:65:3E:79:71:1C:46:63:A3:99
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 019897B75E256BB270D912A3FDDE48D10B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0D30
Signing time: Mon 11 Aug 2025 06:00:33 +0000
Manifest this update: Mon 11 Aug 2025 06:00:33 +0000
Manifest next update: Tue 12 Aug 2025 06:00:33 +0000
Files and hashes: 1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: +FnQQzB9A1zvi5h0kO7NhIg75jbw7S5b2HHnL7YImiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:5e:25:6b:b2:70:d9:12:a3:fd:de:48:d1:0b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Aug 11 06:00:33 2025 GMT
Not After : Aug 12 06:00:33 2025 GMT
Subject: CN=6e166a656b1d2839edcbf8653e79711c4663a399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:6e:ef:a4:79:b3:d7:16:4b:7a:dd:f0:31:
71:cc:96:d3:54:14:70:3c:3c:72:c4:0f:b7:83:db:
1e:13:7f:8f:6d:84:8c:3a:bd:9a:b3:3f:a8:e9:9f:
71:54:e5:b1:f5:6f:0e:25:d0:a4:21:56:b7:60:72:
b5:c7:55:bd:13:5c:0f:3f:05:07:40:b7:0d:b8:18:
84:c1:70:15:f5:24:a2:b4:b6:09:e0:55:9d:79:fd:
a1:02:61:8d:69:80:56:73:30:79:b7:13:77:b8:25:
51:f4:fd:3f:b7:54:ff:91:16:26:80:e5:dd:5e:41:
d2:94:67:25:be:28:87:b2:57:0a:e8:95:2f:50:67:
e4:03:df:b5:60:ad:a6:e0:28:bc:7e:14:e9:e0:92:
c5:26:22:9f:10:f3:83:d8:99:c1:5d:b0:3d:48:10:
02:cd:c9:62:e9:0b:c2:f4:ae:3c:56:c8:24:b5:c2:
5a:6d:4f:49:33:ea:75:78:e1:b0:50:14:35:7a:d5:
b0:fd:64:75:09:71:69:f9:d5:e2:c7:7c:82:f6:f9:
4c:99:3d:ff:49:95:67:5f:5d:bd:20:70:4a:92:6e:
f8:0d:33:1f:e3:d4:f2:47:67:2e:bc:4d:99:21:b3:
3e:ff:e5:c5:43:da:ff:94:87:1c:a2:29:50:38:d0:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:16:6A:65:6B:1D:28:39:ED:CB:F8:65:3E:79:71:1C:46:63:A3:99
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:92:c2:ee:8a:28:69:a1:af:e4:4b:da:f3:62:26:0e:ab:82:
54:8a:b2:00:d4:d7:43:fb:7a:e7:32:d9:31:ab:a9:e9:6c:7c:
ed:a8:78:73:1e:7b:65:81:75:e4:95:24:42:3e:21:3c:16:eb:
48:b7:11:55:26:1d:c2:55:e6:99:d2:0d:e8:d3:6f:b9:a5:28:
f3:5f:35:46:06:08:1e:ee:de:54:e4:1c:56:38:b9:6b:c1:5c:
d2:c2:09:f3:2a:07:f5:f8:80:5d:c6:8d:e5:0e:ca:6b:66:05:
c1:66:5d:dd:e3:d7:3c:f9:eb:cd:59:13:db:9e:67:06:65:90:
11:8e:2f:a7:f9:60:83:69:03:a1:d6:34:23:87:d3:c3:e8:12:
8d:3a:c1:04:d6:d6:da:0b:22:38:52:2c:d4:d3:7d:3e:89:aa:
0e:b1:d2:0a:0b:d8:e1:8b:22:2b:61:0c:f6:0d:f0:12:c0:0c:
7e:42:68:ab:bd:fe:ba:bd:7f:26:f0:3e:d3:3b:80:19:4b:78:
bd:75:bf:d3:24:16:66:5e:2a:92:52:c0:e0:3f:8d:ea:20:38:
40:6e:a3:67:4c:19:86:12:cf:30:79:13:92:a8:3e:bb:b9:f4:
2c:85:5c:94:27:f1:78:a0:1b:54:26:99:82:f6:60:7e:54:76:
bf:50:4f:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXt14la7Jw2RKj/d5I0QtzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYWE5OWViOGMxYjE4YjFhYTdkNDI0NWNlNDgxZmI4ODhm
YmYyNTQwHhcNMjUwODExMDYwMDMzWhcNMjUwODEyMDYwMDMzWjAzMTEwLwYDVQQD
Eyg2ZTE2NmE2NTZiMWQyODM5ZWRjYmY4NjUzZTc5NzExYzQ2NjNhMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m5u76R5s9cWS3rd8DFxzJbTVBRw
PDxyxA+3g9seE3+PbYSMOr2asz+o6Z9xVOWx9W8OJdCkIVa3YHK1x1W9E1wPPwUH
QLcNuBiEwXAV9SSitLYJ4FWdef2hAmGNaYBWczB5txN3uCVR9P0/t1T/kRYmgOXd
XkHSlGclviiHslcK6JUvUGfkA9+1YK2m4Ci8fhTp4JLFJiKfEPOD2JnBXbA9SBAC
zcli6QvC9K48VsgktcJabU9JM+p1eOGwUBQ1etWw/WR1CXFp+dXix3yC9vlMmT3/
SZVnX129IHBKkm74DTMf49TyR2cuvE2ZIbM+/+XFQ9r/lIccoilQONASdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4WamVrHSg57cv4ZT55cRxGY6OZMB8GA1UdIwQY
MBaAFFCqmeuMGxixqn1CRc5IH7iI+/JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAt
MWNmNmZkOWY4MGZhLzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAtMWNmNmZkOWY4MGZh
LzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJLC7ooo
aaGv5Eva82ImDquCVIqyANTXQ/t65zLZMaup6Wx87ah4cx57ZYF15JUkQj4hPBbr
SLcRVSYdwlXmmdIN6NNvuaUo8181RgYIHu7eVOQcVji5a8Fc0sIJ8yoH9fiAXcaN
5Q7Ka2YFwWZd3ePXPPnrzVkT255nBmWQEY4vp/lgg2kDodY0I4fTw+gSjTrBBNbW
2gsiOFIs1NN9PomqDrHSCgvY4YsiK2EM9g3wEsAMfkJoq73+ur1/JvA+0zuAGUt4
vXW/0yQWZl4qklLA4D+N6iA4QG6jZ0wZhhLPMHkTkqg+u7n0LIVclCfxeKAbVCaZ
gvZgflR2v1BPvA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 12:57:58 2025 by rpki-client