Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
File: UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json)
Hash identifier: B74H0PYv70WlDaArb7eggqkynUg9wBbFFRpP0Lvm9r0=
Subject key identifier: 30:DB:14:D5:B3:8C:64:46:21:66:97:33:8A:EC:10:E3:7E:93:52:F3
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial: 019A73011C18E07B281C12C0C06480F5E21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:00:43 +0000
Manifest this update: Tue 11 Nov 2025 13:00:43 +0000
Manifest next update: Wed 12 Nov 2025 13:00:43 +0000
Files and hashes: 1: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: PzDYZajT6Tw+mkYcPP0qGF+NC0JjNRQWJVNliW/0bFI=)
2: WtJONoz3Ixt7CeZPRU-hgtKyWKs.roa (hash: otXlAL96Q2eQ0JoFnviTH8lX7JlMAqHtqXMBKNXMq+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:1c:18:e0:7b:28:1c:12:c0:c0:64:80:f5:e2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
Validity
Not Before: Nov 11 13:00:43 2025 GMT
Not After : Nov 12 13:00:43 2025 GMT
Subject: CN=30db14d5b38c6446216697338aec10e37e9352f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:c8:e8:26:04:1d:5d:99:27:77:17:be:51:
a2:9d:1c:f9:97:fe:db:a7:d9:3e:ff:9f:7f:57:55:
1b:64:3c:f3:92:db:5b:45:10:86:b7:5a:70:51:68:
e7:39:24:b7:80:82:3e:cb:c5:c0:5c:7e:93:ef:a8:
02:f3:4d:5e:fc:55:a7:60:93:ba:bf:51:f8:47:9e:
c4:d2:81:83:07:3b:f8:de:29:69:ef:d1:59:1c:26:
c5:e8:4a:6f:4d:d4:b2:ff:78:24:69:54:29:24:35:
a7:80:4a:d5:f1:c3:e7:a5:0a:ab:c7:83:de:94:53:
0d:fb:a9:a3:0f:78:88:5e:2e:6c:31:7d:96:04:75:
fa:14:13:70:34:80:94:1e:45:f9:bb:36:d0:01:52:
fa:95:c7:ba:fa:f2:37:19:b8:d8:f8:17:00:ba:5f:
6b:a2:39:f1:85:fe:f2:56:91:f6:62:1d:cb:a1:c8:
b7:08:4c:9b:1a:a1:cc:94:19:77:7d:17:c3:04:1a:
fa:e6:5e:0e:1b:df:d3:c5:f9:09:e2:b5:9d:5a:e7:
f8:69:0f:1f:c0:19:64:87:93:d1:cc:6a:15:c7:cd:
c2:76:29:c7:f8:b8:0f:00:cc:85:48:d3:5b:cc:f8:
df:fc:b5:9a:70:ad:7e:f9:93:2c:c9:3c:52:70:f9:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DB:14:D5:B3:8C:64:46:21:66:97:33:8A:EC:10:E3:7E:93:52:F3
X509v3 Authority Key Identifier:
keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c0:75:65:a9:e1:14:b9:0c:21:0c:f9:2b:54:8e:2a:7c:97:
8f:c5:1d:03:37:39:5c:ae:6d:f1:63:94:39:19:ed:7f:9b:14:
0d:3b:d9:4e:3a:3f:2d:e7:9c:8b:b5:fc:a4:77:85:b7:ef:2b:
02:63:f1:fe:08:62:e1:5b:d5:e3:5a:54:59:17:3c:e2:a2:34:
2c:09:7e:e2:f4:78:f1:df:48:2f:54:f6:49:55:9a:06:26:84:
c0:49:49:04:28:50:ac:c5:7a:c9:f7:1e:69:ee:e3:f3:49:b5:
65:53:05:30:6c:3d:18:e5:58:69:b1:ec:44:1c:ac:10:7b:54:
d4:0f:ed:e4:b8:18:6c:4e:a4:90:d2:d7:c4:d9:36:70:83:67:
df:6c:98:e6:61:7c:ac:5f:32:80:f1:1a:13:8a:05:93:e8:2d:
63:59:a1:66:e3:92:f1:b1:75:51:c8:1b:41:d7:2c:f4:0d:48:
c8:1d:a8:7d:56:5b:3c:fe:59:6d:ea:32:48:b5:f2:45:1b:38:
d6:60:a8:ab:b9:56:37:2c:b9:de:c4:db:8d:49:6a:c7:5f:7f:
f8:eb:5d:81:09:9b:ea:fd:3a:4a:96:11:b7:05:66:c6:88:f3:
f8:02:ad:0d:66:4e:2e:94:f5:17:37:dc:d8:23:b9:97:33:10:
9c:cf:c3:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzARwY4HsoHBLAwGSA9eIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMjcxOGJhNjgzOTM5N2M2YzU3ZWNlZDZkNTA5NTcxZWFl
Y2VkZGYwHhcNMjUxMTExMTMwMDQzWhcNMjUxMTEyMTMwMDQzWjAzMTEwLwYDVQQD
EygzMGRiMTRkNWIzOGM2NDQ2MjE2Njk3MzM4YWVjMTBlMzdlOTM1MmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki3I6CYEHV2ZJ3cXvlGinRz5l/7b
p9k+/59/V1UbZDzzkttbRRCGt1pwUWjnOSS3gII+y8XAXH6T76gC801e/FWnYJO6
v1H4R57E0oGDBzv43ilp79FZHCbF6EpvTdSy/3gkaVQpJDWngErV8cPnpQqrx4Pe
lFMN+6mjD3iIXi5sMX2WBHX6FBNwNICUHkX5uzbQAVL6lce6+vI3GbjY+BcAul9r
ojnxhf7yVpH2Yh3Loci3CEybGqHMlBl3fRfDBBr65l4OG9/TxfkJ4rWdWuf4aQ8f
wBlkh5PRzGoVx83CdinH+LgPAMyFSNNbzPjf/LWacK1++ZMsyTxScPluTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDbFNWzjGRGIWaXM4rsEON+k1LzMB8GA1UdIwQY
MBaAFFAnGLpoOTl8bFfs7W1QlXHq7O3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2Ut
Y2Q4MWZjNTgwZjQ3LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2UtY2Q4MWZjNTgwZjQ3
LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsB1Zanh
FLkMIQz5K1SOKnyXj8UdAzc5XK5t8WOUORntf5sUDTvZTjo/Leeci7X8pHeFt+8r
AmPx/ghi4VvV41pUWRc84qI0LAl+4vR48d9IL1T2SVWaBiaEwElJBChQrMV6yfce
ae7j80m1ZVMFMGw9GOVYabHsRBysEHtU1A/t5LgYbE6kkNLXxNk2cINn32yY5mF8
rF8ygPEaE4oFk+gtY1mhZuOS8bF1UcgbQdcs9A1IyB2ofVZbPP5ZbeoySLXyRRs4
1mCoq7lWNyy53sTbjUlqx19/+OtdgQmb6v06SpYRtwVmxojz+AKtDWZOLpT1Fzfc
2CO5lzMQnM/D6A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:18 2025 by rpki-client