Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier: tNR8fIVvg9JEGQb1r6odAUr7k/he0a4l8EAZv5E7MEs=
Subject key identifier: 8D:2B:99:2F:A7:5A:DE:90:3E:6B:FB:D1:70:3B:36:A0:8E:41:BB:A2
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 019A24E5FE55E7CB7062F73061B3804557A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number: 153D
Signing time: Mon 27 Oct 2025 09:00:43 +0000
Manifest this update: Mon 27 Oct 2025 09:00:43 +0000
Manifest next update: Tue 28 Oct 2025 09:00:43 +0000
Files and hashes: 1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: EgO8PJjsCKasnMEJ/sZJWhyCNpyxfUBP0pOb4Hwsj7A=)
2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:fe:55:e7:cb:70:62:f7:30:61:b3:80:45:57:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Oct 27 09:00:43 2025 GMT
Not After : Oct 28 09:00:43 2025 GMT
Subject: CN=8d2b992fa75ade903e6bfbd1703b36a08e41bba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:04:36:63:85:17:99:0e:c2:9a:95:7d:d4:
c1:cd:19:0e:5c:2e:c4:b8:f9:41:cf:5b:34:57:6f:
98:e7:bb:e0:0d:a2:fc:a1:7a:1a:7a:3d:ef:07:04:
ef:f1:f9:95:89:b9:fb:4a:03:4b:7b:50:0e:f0:3f:
57:95:eb:80:c5:53:f6:6d:51:2f:74:34:97:f8:fc:
37:14:de:9a:b2:5a:42:06:fc:34:3d:95:26:47:5f:
62:b7:b8:f6:e1:d1:3a:b7:55:ce:2b:06:32:84:95:
09:82:4d:d2:16:56:0d:06:3f:78:b7:0b:94:ac:7d:
9e:4d:99:bc:c8:78:24:df:71:9a:0e:3c:9a:d6:d2:
af:98:78:41:ef:56:27:2d:fb:ff:d3:9a:64:67:1a:
16:07:34:2d:30:17:1c:da:08:57:e5:f5:ee:f9:6f:
25:65:53:ea:40:c9:fb:1d:b4:a9:9f:db:48:d7:e2:
51:54:e8:fd:e8:78:08:6f:72:47:00:46:46:ec:aa:
2b:19:09:09:28:b8:b6:f1:2a:4f:25:0b:0a:93:f2:
ca:1b:87:14:60:d8:9a:40:99:e4:ac:2e:93:6f:41:
4c:be:68:c4:94:3a:2c:8e:59:6f:4b:dd:21:66:7c:
06:7a:a1:8a:37:0b:bc:59:b3:03:c8:e6:8d:99:77:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:99:2F:A7:5A:DE:90:3E:6B:FB:D1:70:3B:36:A0:8E:41:BB:A2
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0d:c7:df:14:ee:df:a2:c1:90:f7:5d:e9:26:f0:b3:44:6d:
ff:ba:10:ec:d1:67:87:3a:bf:b8:4e:9f:9e:e8:f0:b0:fe:1c:
4b:24:f8:61:32:37:6d:68:4e:5a:18:9e:fa:db:c2:3e:5d:ca:
ff:a9:64:c4:9c:f8:9e:37:81:d0:ac:87:0d:96:36:23:38:fe:
53:c8:18:d4:7a:48:39:8d:e4:35:27:77:d3:c0:1c:ac:0c:ad:
95:89:71:91:7e:6b:cb:51:e6:ec:77:5b:17:6b:25:0f:85:c8:
91:ed:15:22:59:d8:f7:d9:6e:f3:31:08:f3:af:93:f8:c0:0d:
eb:35:8d:9d:51:85:87:6e:83:b9:78:06:55:96:a5:25:9f:d5:
48:fa:a0:fa:b6:e6:50:96:9d:d6:3e:fa:7a:08:44:41:e0:e1:
15:79:31:8e:25:eb:cf:89:78:1c:1d:40:90:b9:98:46:9b:67:
af:50:92:0d:47:a3:f0:7b:d0:cd:0a:35:06:11:fb:8e:0e:37:
73:28:ca:78:10:c4:e4:ed:fa:84:57:11:cd:11:2f:d5:0b:c4:
28:f8:08:b8:44:ba:3b:4f:b2:7d:32:65:b8:12:e2:a9:3f:e6:
56:31:ca:37:38:93:f7:f5:8e:a1:c4:18:84:c5:06:0b:2c:cc:
10:47:f2:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5f5V58twYvcwYbOARVeiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYWI5NjUzOGM3NjRkMjMyMDVkMzMyYmUxMzdiZGUwNDYy
ZjFiOGMwHhcNMjUxMDI3MDkwMDQzWhcNMjUxMDI4MDkwMDQzWjAzMTEwLwYDVQQD
Eyg4ZDJiOTkyZmE3NWFkZTkwM2U2YmZiZDE3MDNiMzZhMDhlNDFiYmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlEENmOFF5kOwpqVfdTBzRkOXC7E
uPlBz1s0V2+Y57vgDaL8oXoaej3vBwTv8fmVibn7SgNLe1AO8D9XleuAxVP2bVEv
dDSX+Pw3FN6aslpCBvw0PZUmR19it7j24dE6t1XOKwYyhJUJgk3SFlYNBj94twuU
rH2eTZm8yHgk33GaDjya1tKvmHhB71YnLfv/05pkZxoWBzQtMBcc2ghX5fXu+W8l
ZVPqQMn7HbSpn9tI1+JRVOj96HgIb3JHAEZG7KorGQkJKLi28SpPJQsKk/LKG4cU
YNiaQJnkrC6Tb0FMvmjElDosjllvS90hZnwGeqGKNwu8WbMDyOaNmXc0AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0rmS+nWt6QPmv70XA7NqCOQbuiMB8GA1UdIwQY
MBaAFFKrllOMdk0jIF0zK+E3veBGLxuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUt
MzhhZDQxNzlmZjI5LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUtMzhhZDQxNzlmZjI5
LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlA3H3xTu
36LBkPdd6Sbws0Rt/7oQ7NFnhzq/uE6fnujwsP4cSyT4YTI3bWhOWhie+tvCPl3K
/6lkxJz4njeB0KyHDZY2Izj+U8gY1HpIOY3kNSd308AcrAytlYlxkX5ry1Hm7Hdb
F2slD4XIke0VIlnY99lu8zEI86+T+MAN6zWNnVGFh26DuXgGVZalJZ/VSPqg+rbm
UJad1j76eghEQeDhFXkxjiXrz4l4HB1AkLmYRptnr1CSDUej8HvQzQo1BhH7jg43
cyjKeBDE5O36hFcRzREv1QvEKPgIuES6O0+yfTJluBLiqT/mVjHKNziT9/WOocQY
hMUGCyzMEEfyyA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 18:14:50 2025 by rpki-client