Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: +EI6cqUUteWc64i5UsIcAMKAyb2i/gDclu+fTldlmNc=
Subject key identifier: 0D:70:AA:AB:E5:EE:B7:5B:40:6E:D8:21:B8:BF:16:66:AF:6C:24:EC
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 019A1AD031233D5771DC5C3BAF3864FCEB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 0625
Signing time: Sat 25 Oct 2025 10:00:42 +0000
Manifest this update: Sat 25 Oct 2025 10:00:42 +0000
Manifest next update: Sun 26 Oct 2025 10:00:42 +0000
Files and hashes: 1: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (hash: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: LLZILEkHbEg+pwpk5FTOz5a6XS9OMn386mPZa4nx8xg=)
3: mqm7Jg5-zPabxGFXHWcZsQaK2dY.roa (hash: /oBnHrhig1strh5pSaVLSZyr3E+b/5bhNvAnJC6HiAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:31:23:3d:57:71:dc:5c:3b:af:38:64:fc:eb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Oct 25 10:00:42 2025 GMT
Not After : Oct 26 10:00:42 2025 GMT
Subject: CN=0d70aaabe5eeb75b406ed821b8bf1666af6c24ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:87:b7:60:72:40:71:ca:63:fd:74:09:64:
31:08:fb:8d:18:f5:4c:ae:1b:73:f1:1c:29:ac:31:
b5:9b:2b:5f:94:2f:53:40:70:c9:98:f4:dc:19:e2:
88:67:25:a0:85:40:19:eb:bc:18:be:cd:70:c9:eb:
ab:d6:2b:74:4c:97:97:f4:d5:f2:d2:78:ce:64:0f:
da:16:39:dc:16:de:11:26:74:9e:98:d2:1c:d7:9c:
12:67:b5:ce:7b:e9:6b:c5:36:24:fa:e8:6a:39:51:
d0:fc:d5:65:ec:8d:0c:0d:68:22:c6:00:07:aa:12:
aa:e2:20:b6:8d:8e:28:e1:54:c7:94:53:55:c6:09:
4f:98:ce:d6:22:24:a4:ef:0f:e7:1f:69:b4:5b:65:
aa:c8:e2:65:9d:e1:d3:57:00:51:ea:77:89:13:1c:
6c:8e:a0:2a:65:dc:26:07:be:66:e6:f7:ba:f0:90:
0f:1e:38:8e:5a:cc:e8:1c:bb:a0:a5:a5:d5:2c:75:
14:36:87:b0:17:1e:98:ec:1e:6b:72:36:d6:f0:26:
7b:a4:7a:93:54:0c:a8:79:aa:9b:64:c4:8b:a2:0b:
db:8c:f5:11:f8:df:5c:56:07:28:be:ab:8e:fc:f3:
48:a2:56:3f:2b:a4:c7:a0:e5:fe:09:9e:eb:2f:36:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:70:AA:AB:E5:EE:B7:5B:40:6E:D8:21:B8:BF:16:66:AF:6C:24:EC
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:54:a3:2a:0c:d3:69:7c:f4:0c:12:21:ad:52:2d:3b:08:47:
dc:09:10:a1:d5:40:59:e4:0f:0e:c9:99:88:c0:e6:5a:fc:58:
5a:2d:d6:80:2b:55:ae:c5:2b:c9:a1:d0:cc:7a:78:df:74:3d:
19:9c:12:3d:1c:b6:73:10:6a:e7:8f:a7:0b:7e:93:d1:9c:0a:
68:b3:4c:4b:1a:88:dc:7b:84:0c:87:4a:5d:cf:ac:b1:e5:24:
70:d5:ea:ec:b1:ac:55:23:2f:26:e8:b9:29:e5:90:c9:0d:b3:
51:ee:8d:e1:e2:c7:d1:f1:6b:c2:60:74:f4:8a:18:af:4b:59:
b1:b9:05:83:bb:94:0d:9f:a8:66:10:bc:85:a4:87:98:b1:3e:
62:e0:1f:18:92:9d:d4:4b:11:4e:b8:2c:bb:78:83:a1:12:4d:
52:8d:5d:ba:be:3c:e3:ea:d6:b2:ec:a7:e2:05:a5:dd:5f:52:
9d:0a:19:fc:fd:02:13:18:bf:01:d5:05:87:10:e4:ff:d0:a9:
07:aa:bb:b2:df:7e:49:0b:69:71:14:7d:9e:f9:cc:f1:6b:b3:
a9:dc:76:11:2d:7f:f2:aa:6a:7c:f9:6d:29:1a:62:68:28:c2:
12:b7:38:46:68:78:f6:7d:30:e9:84:46:d0:f7:9d:e7:38:93:
cd:81:37:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoa0DEjPVdx3Fw7rzhk/OswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOTYzZjBlNjdmNGQ4OTNjZjNkNzAxYTIzNjEwZTZmMzg5
NTkyNjAwHhcNMjUxMDI1MTAwMDQyWhcNMjUxMDI2MTAwMDQyWjAzMTEwLwYDVQQD
EygwZDcwYWFhYmU1ZWViNzViNDA2ZWQ4MjFiOGJmMTY2NmFmNmMyNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli2Ht2ByQHHKY/10CWQxCPuNGPVM
rhtz8RwprDG1mytflC9TQHDJmPTcGeKIZyWghUAZ67wYvs1wyeur1it0TJeX9NXy
0njOZA/aFjncFt4RJnSemNIc15wSZ7XOe+lrxTYk+uhqOVHQ/NVl7I0MDWgixgAH
qhKq4iC2jY4o4VTHlFNVxglPmM7WIiSk7w/nH2m0W2WqyOJlneHTVwBR6neJExxs
jqAqZdwmB75m5ve68JAPHjiOWszoHLugpaXVLHUUNoewFx6Y7B5rcjbW8CZ7pHqT
VAyoeaqbZMSLogvbjPUR+N9cVgcovquO/PNIolY/K6THoOX+CZ7rLzaeowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1wqqvl7rdbQG7YIbi/FmavbCTsMB8GA1UdIwQY
MBaAFFCWPw5n9NiTzz1wGiNhDm84lZJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgt
MGYzYzE2NThkMGI3LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgtMGYzYzE2NThkMGI3
LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFSjKgzT
aXz0DBIhrVItOwhH3AkQodVAWeQPDsmZiMDmWvxYWi3WgCtVrsUryaHQzHp433Q9
GZwSPRy2cxBq54+nC36T0ZwKaLNMSxqI3HuEDIdKXc+sseUkcNXq7LGsVSMvJui5
KeWQyQ2zUe6N4eLH0fFrwmB09IoYr0tZsbkFg7uUDZ+oZhC8haSHmLE+YuAfGJKd
1EsRTrgsu3iDoRJNUo1dur484+rWsuyn4gWl3V9SnQoZ/P0CExi/AdUFhxDk/9Cp
B6q7st9+SQtpcRR9nvnM8Wuzqdx2ES1/8qpqfPltKRpiaCjCErc4Rmh49n0w6YRG
0Ped5ziTzYE3Tg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 14:43:25 2025 by rpki-client