
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: dZAI1rBn/v1nP+c0KKuQrz4ruXAC+9f1cGd/V4lqLx8=
Subject key identifier: 15:5A:DC:64:45:B8:D6:FC:FE:FD:D2:F1:71:9E:49:7C:2B:C4:26:58
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 019857FD14F6A667E6982909468CC1ED9411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0D0F
Signing time: Tue 29 Jul 2025 21:01:00 +0000
Manifest this update: Tue 29 Jul 2025 21:01:00 +0000
Manifest next update: Wed 30 Jul 2025 21:01:00 +0000
Files and hashes: 1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: mn6Thad93mAhk71uwrHI3mfLYdyUISBC+d5Yigh5WEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:fd:14:f6:a6:67:e6:98:29:09:46:8c:c1:ed:94:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Jul 29 21:01:00 2025 GMT
Not After : Jul 30 21:01:00 2025 GMT
Subject: CN=155adc6445b8d6fcfefdd2f1719e497c2bc42658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:09:bb:25:21:1a:df:4a:79:a4:2b:cd:90:
14:ff:4f:ef:27:0e:84:2d:02:67:99:54:ce:9a:c4:
14:28:67:2a:d2:ac:34:ec:e5:19:87:6a:56:10:cd:
81:9f:18:13:2c:e0:75:b6:9a:6a:99:d8:d4:7b:cc:
8a:c6:8a:0c:48:24:95:43:b9:bd:cd:ad:64:1a:f2:
e1:06:53:cf:e9:07:85:1a:84:04:45:6e:ff:a4:0a:
06:23:79:f3:1e:30:b0:43:21:85:ad:e6:89:8d:87:
2d:36:47:23:a6:a0:d1:f0:e4:4a:ad:e6:bb:b7:ed:
df:83:ee:a9:30:12:4e:e3:88:32:17:46:a4:9d:51:
95:6e:91:d1:16:d8:1b:46:ce:5d:83:d3:f3:db:df:
50:be:6b:6b:7b:d5:78:5a:91:9c:94:59:b9:11:dc:
7a:9b:3d:cc:fe:42:34:7f:d9:5a:81:ca:ac:50:a7:
b5:a5:1f:80:3c:ac:ae:7f:6c:6b:e8:06:1b:84:ad:
6a:0d:77:dd:dc:6e:da:57:9a:d1:ff:cd:a8:a0:82:
49:2a:81:4c:19:9c:36:17:42:36:fe:03:f0:b2:73:
85:03:0f:61:97:99:0b:c8:ab:e1:d5:66:7f:3d:ba:
fb:98:0e:b4:0d:ca:57:c6:47:a8:09:68:d4:3e:36:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5A:DC:64:45:B8:D6:FC:FE:FD:D2:F1:71:9E:49:7C:2B:C4:26:58
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b1:ee:90:ed:5d:a8:be:7f:da:af:2e:fd:b8:96:c0:a6:7d:
ef:82:82:56:4d:4f:97:2e:00:53:90:06:b5:bb:cb:c9:bc:47:
a9:a0:74:8b:c4:18:4e:d4:64:ab:c2:bf:c4:0f:2b:e3:1c:bd:
9a:46:64:a8:a7:1b:8c:93:57:21:ea:ac:93:09:6b:39:f0:4c:
95:15:ba:c9:79:5c:b2:4f:38:d5:4c:10:41:68:73:79:5e:8e:
55:f5:4f:98:02:df:a0:69:9a:dd:1a:47:5b:50:dd:6d:3e:70:
14:f0:c7:01:d0:16:20:b9:5e:72:ce:30:6b:67:ef:9f:e6:95:
0d:b4:cf:6e:48:98:0c:5d:0f:fa:f9:ed:11:f1:54:3e:49:78:
29:91:8c:7c:d4:67:50:3e:eb:3e:d9:ab:a0:82:dc:b0:00:e6:
b5:0c:89:7a:c7:a9:1b:4c:75:3d:46:82:eb:63:ff:30:64:84:
51:bb:b3:3b:b2:89:b1:e0:d1:71:b1:8a:d2:c3:43:0f:67:a0:
7f:a9:6e:7c:fa:08:cb:fe:2f:eb:fb:1c:62:39:78:33:f6:15:
a9:d9:5c:6b:17:9a:06:5d:a9:b3:8d:2a:04:a8:7e:43:ab:e6:
73:90:05:89:1e:c9:67:1d:75:bc:04:c9:09:f4:d1:c7:0c:4e:
74:71:10:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:45:52 2025 by rpki-client