Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: JxcWE6GYCpMN4Ef4N8zHLRG+iPqk27HxjAKXSZ/0AIc=
Subject key identifier: 91:C7:77:3A:FD:28:81:46:C4:27:2F:30:5E:BF:9C:5B:01:25:0E:20
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 019A70DC5352C55DA2157354A973F5BDDBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0E25
Signing time: Tue 11 Nov 2025 03:01:18 +0000
Manifest this update: Tue 11 Nov 2025 03:01:18 +0000
Manifest next update: Wed 12 Nov 2025 03:01:18 +0000
Files and hashes: 1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: YS5jpZ9EM/UX6ZkNBIWfbCesMXShKVYoUQUiDGo07Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:53:52:c5:5d:a2:15:73:54:a9:73:f5:bd:db:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Nov 11 03:01:18 2025 GMT
Not After : Nov 12 03:01:18 2025 GMT
Subject: CN=91c7773afd288146c4272f305ebf9c5b01250e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:3f:ee:4b:9c:5b:94:0b:3d:79:c5:91:66:
ad:0a:e5:f1:32:40:9a:d7:eb:08:eb:2c:7b:fa:46:
55:6e:ae:13:c7:7a:75:d7:b3:16:2c:42:62:a4:ed:
99:14:03:19:2a:d7:ef:35:7d:fd:33:3a:e9:a4:b0:
9b:5f:ec:da:14:c3:25:52:a2:dc:78:ef:a7:9a:dc:
f0:dd:e7:c3:ad:41:eb:f7:e5:f0:90:ae:7a:86:84:
a1:e1:89:bf:13:0e:5e:37:01:0f:f5:85:c7:c1:5a:
9c:86:4d:b3:cc:1e:4e:01:82:41:f1:de:e4:da:af:
2e:fb:3f:53:ca:ca:ff:a8:6b:83:13:4e:da:f0:f7:
c1:f3:6f:bf:dc:ea:0b:57:f2:d5:71:7e:d0:dc:c9:
df:97:03:eb:39:bf:20:06:f8:86:7c:21:b7:f7:d2:
17:8c:8f:65:aa:74:68:00:d6:9d:35:4a:9c:38:0a:
18:76:36:ea:a3:2e:7a:07:22:b2:fb:eb:91:80:f0:
0f:72:4f:63:a4:1d:c6:bc:79:84:3d:65:ce:fc:9e:
51:83:b5:8a:c3:f4:35:5e:ec:c0:e3:d3:ef:f6:1d:
4c:4a:09:e0:5f:30:24:0f:69:91:ce:29:1d:97:d5:
a8:99:cb:00:0a:73:ed:2f:53:6a:7a:99:9a:fa:24:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:77:3A:FD:28:81:46:C4:27:2F:30:5E:BF:9C:5B:01:25:0E:20
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d6:a6:0f:e0:98:24:fb:77:6e:ff:ae:06:ef:d9:ae:e8:e8:
8c:51:36:c1:82:7a:9a:18:15:55:e9:c4:a0:eb:b4:20:b4:b6:
3d:90:a0:24:54:03:92:7f:f6:04:c5:63:9e:c7:d1:9f:20:ab:
4a:8e:49:79:18:d0:8f:ec:89:d3:c5:7f:5c:cc:d0:a3:4b:df:
be:6e:6e:ec:63:ef:38:34:94:dd:9a:cf:7f:32:6f:b6:92:67:
2d:db:77:a0:f8:16:78:15:40:dd:c0:67:d6:ed:7e:bd:30:e5:
6b:62:87:d2:93:2f:d3:12:82:0c:1d:7a:a6:d7:38:ba:40:26:
d9:01:5a:35:26:e6:ef:b8:b8:85:a1:8b:fe:24:aa:3f:bb:ae:
25:a0:98:29:71:e1:72:ee:7c:0c:00:d2:1c:41:40:78:10:3f:
11:53:2f:91:c3:9a:14:44:68:b4:03:12:16:23:46:a3:0f:ac:
ad:32:ea:9b:14:04:c3:6c:cc:b5:28:10:fd:7a:ee:d3:a9:08:
7d:bf:c5:08:8a:21:80:06:85:06:b4:13:2a:40:41:70:8a:79:
1f:75:53:e1:93:7c:70:f2:7a:06:90:11:12:5d:f7:fa:c6:b5:
6d:01:05:09:ba:5f:41:21:9b:a0:42:a9:49:79:2f:e9:b8:d4:
63:de:f9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:33 2025 by rpki-client