Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: si6EcjxoF5Z6NKNVr2YQOZlwMnh4xNI2Ik1a9C0Jg9g=
Subject key identifier: 11:A0:0F:DF:B0:A2:6F:D9:F9:FA:43:6E:21:F5:39:F3:E9:2B:A6:08
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 019A0CDD965C0289BC4EB08B2EB2FAFDA74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 09CB
Signing time: Wed 22 Oct 2025 17:00:39 +0000
Manifest this update: Wed 22 Oct 2025 17:00:39 +0000
Manifest next update: Thu 23 Oct 2025 17:00:39 +0000
Files and hashes: 1: DYFmv5SEYYlddrISWWXVdY1hSCw.roa (hash: TKf7tOlhVLq0cOqQ0nNkYPFgdP68RF3GWaqOQkMnAHw=)
2: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: /JlljyKoyhOFk5XHeLwN4QrevphD3GWW9W0P5OpE8aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:dd:96:5c:02:89:bc:4e:b0:8b:2e:b2:fa:fd:a7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Oct 22 17:00:39 2025 GMT
Not After : Oct 23 17:00:39 2025 GMT
Subject: CN=11a00fdfb0a26fd9f9fa436e21f539f3e92ba608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:6c:a4:52:04:a2:c2:a2:9e:1a:bd:d1:f9:
5a:2e:39:5d:cd:da:21:5d:e9:2c:51:3e:2c:0a:e3:
eb:41:8d:26:e8:2b:a6:26:8c:18:24:2e:e6:fd:1b:
1f:1d:df:85:40:b5:59:d8:23:35:de:12:5b:ce:5f:
e6:b4:31:4f:40:64:a6:75:48:83:ce:b6:47:15:aa:
55:cb:f4:7c:d9:f3:a8:bb:d1:24:d3:18:4d:30:46:
ea:ec:0a:e1:e2:5f:17:97:15:4f:13:12:ca:4c:5a:
f9:55:8e:c8:ba:64:8a:5b:53:1f:b6:30:9d:63:fb:
7b:81:e9:dc:b2:a1:43:28:b4:e0:3a:83:25:b9:24:
10:17:bc:18:34:68:6c:bc:5e:6c:98:f1:01:1e:a5:
e7:d7:9c:80:fe:5b:7c:cf:18:9e:ac:b4:ac:fe:b6:
2c:32:ed:8e:d1:5a:e4:bc:3c:6b:58:a0:d6:b9:51:
1e:eb:60:d8:0e:ee:7e:71:4e:b2:67:c2:9c:be:36:
30:de:53:6a:64:5d:54:cb:f4:2c:2e:4f:47:08:20:
1a:f2:ae:70:21:4f:95:c5:f8:e8:10:43:4d:cc:e7:
bc:ee:95:f6:ef:c6:78:a7:14:78:59:d0:5e:c2:5e:
d7:a2:31:b0:27:01:9d:63:83:72:75:92:09:67:6e:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A0:0F:DF:B0:A2:6F:D9:F9:FA:43:6E:21:F5:39:F3:E9:2B:A6:08
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f9:a9:8d:68:ab:e6:35:b1:84:d4:98:18:c4:93:22:03:85:
51:24:83:b4:49:ad:62:f7:b7:e3:b3:75:6b:0b:d7:05:0d:09:
98:ad:9a:95:69:01:36:0b:8e:61:fe:e0:22:de:00:74:08:08:
c7:1f:5d:1e:89:65:ab:07:72:63:2e:28:c6:d8:2a:8b:24:6b:
36:3d:3c:e0:45:b2:32:43:d7:39:39:b5:0a:fa:36:c6:0d:e6:
bc:ee:73:9a:3f:27:4a:b0:91:53:b7:cd:df:39:b2:4a:c2:39:
3c:35:95:6f:85:b8:c5:ea:1f:2d:79:2a:31:d3:82:e4:88:01:
67:80:6e:78:24:8e:ec:72:0c:01:8a:b6:79:34:e3:af:15:43:
e0:f9:ad:5e:4a:ef:57:46:61:cb:4b:12:18:42:c3:a5:d2:75:
cf:f0:fa:2d:91:a5:38:8e:59:92:3e:ee:fb:ae:36:3a:ec:86:
56:b8:0a:9c:04:f7:15:2c:24:42:30:26:9c:9a:b3:70:59:48:
23:24:b7:e6:70:cd:0a:75:fe:d2:5b:55:f6:30:4d:a8:ea:84:
c0:92:9d:a9:ea:f1:4c:f0:ea:e4:e3:4a:53:af:47:b2:33:d7:
18:b0:a9:5a:c5:85:b4:07:93:05:66:a3:05:b8:64:6c:e8:45:
11:c9:37:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoM3ZZcAom8TrCLLrL6/adMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZTY5NmU2ZTI1YjQ5MmJiN2UwN2NiMzI5YmI0MzU0YjEx
MWE2ODEwHhcNMjUxMDIyMTcwMDM5WhcNMjUxMDIzMTcwMDM5WjAzMTEwLwYDVQQD
EygxMWEwMGZkZmIwYTI2ZmQ5ZjlmYTQzNmUyMWY1MzlmM2U5MmJhNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk9spFIEosKinhq90flaLjldzdoh
XeksUT4sCuPrQY0m6CumJowYJC7m/RsfHd+FQLVZ2CM13hJbzl/mtDFPQGSmdUiD
zrZHFapVy/R82fOou9Ek0xhNMEbq7Arh4l8XlxVPExLKTFr5VY7IumSKW1MftjCd
Y/t7gencsqFDKLTgOoMluSQQF7wYNGhsvF5smPEBHqXn15yA/lt8zxierLSs/rYs
Mu2O0VrkvDxrWKDWuVEe62DYDu5+cU6yZ8KcvjYw3lNqZF1Uy/QsLk9HCCAa8q5w
IU+VxfjoEENNzOe87pX278Z4pxR4WdBewl7XojGwJwGdY4NydZIJZ24BxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGgD9+wom/Z+fpDbiH1OfPpK6YIMB8GA1UdIwQY
MBaAFFDmlubiW0krt+B8sym7Q1SxEaaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3Njgt
NjE0MWQ5OTYzNGI1LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3NjgtNjE0MWQ5OTYzNGI1
LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfmpjWir
5jWxhNSYGMSTIgOFUSSDtEmtYve347N1awvXBQ0JmK2alWkBNguOYf7gIt4AdAgI
xx9dHollqwdyYy4oxtgqiyRrNj084EWyMkPXOTm1Cvo2xg3mvO5zmj8nSrCRU7fN
3zmySsI5PDWVb4W4xeofLXkqMdOC5IgBZ4BueCSO7HIMAYq2eTTjrxVD4PmtXkrv
V0Zhy0sSGELDpdJ1z/D6LZGlOI5Zkj7u+642OuyGVrgKnAT3FSwkQjAmnJqzcFlI
IyS35nDNCnX+0ltV9jBNqOqEwJKdqerxTPDq5ONKU69HsjPXGLCpWsWFtAeTBWaj
BbhkbOhFEck3mQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 19:42:58 2025 by rpki-client