Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: DtRQlFomTIjIG2KQSrONQMAHSVavX1QvOVq4vnY8tS8=
Subject key identifier: 17:C4:41:0A:0F:1A:5D:09:72:3A:AA:56:60:D9:94:29:D8:0B:B7:B2
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 019A7149E6830F6657BB42E2B005699AF669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 15AF
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: Uj39WezDBoURNPVq6SBm40isgJQ6g3Uv58h5AV0mbEs=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e6:83:0f:66:57:bb:42:e2:b0:05:69:9a:f6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=17c4410a0f1a5d09723aaa5660d99429d80bb7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:40:e7:a5:67:87:26:92:2b:85:0b:3e:df:
91:99:65:10:39:39:8c:16:c4:2e:1d:c2:5f:ef:45:
f3:2e:1a:ab:19:23:fd:79:fc:44:3c:19:41:23:ff:
76:56:c7:d2:48:91:24:8a:d7:22:46:4b:2b:a5:39:
89:e0:98:ba:1f:a0:12:c4:a7:41:57:44:a8:a9:de:
03:52:77:d1:eb:b9:b3:c2:6e:c7:4e:0b:3c:fc:05:
71:43:ba:97:bc:41:dd:0c:de:ea:96:d7:62:31:f6:
54:d0:9b:08:33:15:be:1c:bb:ef:7e:be:f3:9d:81:
e6:2a:f2:ed:4a:cb:dd:f4:78:53:43:4e:66:b7:5b:
af:db:b9:7d:18:88:96:c7:4b:06:97:e7:ca:dd:95:
10:df:59:81:77:95:ed:48:c1:26:d6:21:27:55:a2:
76:68:fc:5f:65:96:04:db:d0:a5:c0:e0:18:e6:23:
06:92:70:5a:24:b3:48:d0:f4:08:c2:fc:d8:1c:37:
e9:d7:16:2e:52:d6:c3:37:20:ff:37:ce:0d:00:f8:
b8:2a:aa:13:07:80:7b:df:e3:34:76:17:c4:dd:09:
df:e5:a9:19:55:e5:e5:67:a2:33:e1:ad:3a:5a:44:
8b:76:46:7d:56:d7:a8:a0:f4:1d:8e:b8:e0:ee:07:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C4:41:0A:0F:1A:5D:09:72:3A:AA:56:60:D9:94:29:D8:0B:B7:B2
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:03:7b:03:15:91:d9:e4:33:35:5c:20:f2:cc:91:ac:c9:75:
ba:fe:84:f9:e4:c7:e9:cf:54:a0:86:d9:2b:24:3e:07:d1:05:
8c:30:f9:9f:fe:d2:0c:38:2f:ca:8f:33:a1:f4:c0:fd:c4:47:
8c:70:25:a1:2d:07:c6:ec:23:cf:26:5e:65:06:04:9b:72:5b:
3b:1a:a9:12:9e:20:6b:3a:48:f1:d4:af:0a:b1:c1:ed:b5:f7:
07:86:59:4f:bb:d2:78:42:48:88:bb:b9:b5:1e:ef:5c:c9:ec:
91:fa:4b:c8:19:1c:7f:be:fd:1e:87:41:27:62:cf:54:57:58:
66:16:53:cf:5f:fb:2d:16:6a:6d:03:06:01:82:63:23:4e:4e:
27:6b:50:39:75:ce:9f:74:b0:8a:be:ec:84:ef:19:ab:90:e8:
25:36:83:7c:65:ef:77:1c:af:16:14:43:9a:0e:86:c3:a5:58:
0d:29:19:1c:76:5a:b7:28:8f:dd:bb:c8:17:cb:b4:ec:66:80:
de:d3:3b:c2:6c:89:c4:ec:f7:36:33:a7:ab:83:46:77:ba:50:
39:c9:4f:c8:92:09:34:c9:8b:61:ec:9f:51:7a:d9:1c:d1:a0:
5b:2b:1b:f2:ac:89:52:6d:16:03:e2:05:df:60:97:c6:38:61:
ba:6f:00:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSeaDD2ZXu0LisAVpmvZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzAwNmQ2NDAxZWY0MmZhNTBlMjQwOTU1MDBiMmZkYWZh
ZDViYWEwHhcNMjUxMTExMDUwMDU5WhcNMjUxMTEyMDUwMDU5WjAzMTEwLwYDVQQD
EygxN2M0NDEwYTBmMWE1ZDA5NzIzYWFhNTY2MGQ5OTQyOWQ4MGJiN2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FZA56VnhyaSK4ULPt+RmWUQOTmM
FsQuHcJf70XzLhqrGSP9efxEPBlBI/92VsfSSJEkitciRksrpTmJ4Ji6H6ASxKdB
V0Soqd4DUnfR67mzwm7HTgs8/AVxQ7qXvEHdDN7qltdiMfZU0JsIMxW+HLvvfr7z
nYHmKvLtSsvd9HhTQ05mt1uv27l9GIiWx0sGl+fK3ZUQ31mBd5XtSMEm1iEnVaJ2
aPxfZZYE29ClwOAY5iMGknBaJLNI0PQIwvzYHDfp1xYuUtbDNyD/N84NAPi4KqoT
B4B73+M0dhfE3Qnf5akZVeXlZ6Iz4a06WkSLdkZ9VteooPQdjrjg7gceNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfEQQoPGl0JcjqqVmDZlCnYC7eyMB8GA1UdIwQY
MBaAFFDABtZAHvQvpQ4kCVUAsv2vrVuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEt
YzJkY2RjODVlNTg0LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEtYzJkY2RjODVlNTg0
LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwN7AxWR
2eQzNVwg8syRrMl1uv6E+eTH6c9UoIbZKyQ+B9EFjDD5n/7SDDgvyo8zofTA/cRH
jHAloS0HxuwjzyZeZQYEm3JbOxqpEp4gazpI8dSvCrHB7bX3B4ZZT7vSeEJIiLu5
tR7vXMnskfpLyBkcf779HodBJ2LPVFdYZhZTz1/7LRZqbQMGAYJjI05OJ2tQOXXO
n3Swir7shO8Zq5DoJTaDfGXvdxyvFhRDmg6Gw6VYDSkZHHZatyiP3bvIF8u07GaA
3tM7wmyJxOz3NjOnq4NGd7pQOclPyJIJNMmLYeyfUXrZHNGgWysb8qyJUm0WA+IF
32CXxjhhum8A2g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:46 2025 by rpki-client