Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier: 7qugEARxdboadpMvw9r6HIttuufo/YYlM328+fuoBF4=
Subject key identifier: 59:4D:B0:10:EE:AD:A0:7F:D2:AD:CD:CB:DE:C3:46:56:5E:F9:A5:4D
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial: 0199FC21C0DF463DBACD5EC73D8FCC3E6CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: lwgNYbPYGSJL5T7eK3byYHkPpQWF9I5zzWYZa+0+oUc=)
2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c0:df:46:3d:ba:cd:5e:c7:3d:8f:cc:3e:6c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=594db010eeada07fd2adcdcbdec346565ef9a54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:f2:47:7c:f4:7e:8e:d5:ae:e7:d3:5f:df:
36:91:67:ce:41:c8:1d:73:ac:09:2e:73:3f:77:cc:
2a:ce:9e:4f:ba:51:1e:26:45:2b:09:35:13:d8:fa:
73:d9:7c:03:77:4f:20:38:37:d9:ac:49:e8:ef:e0:
82:cc:c6:d0:66:c6:20:ca:b1:46:fc:68:78:51:19:
de:82:a0:c9:1c:fc:40:da:8e:0f:e5:48:0a:ce:54:
ea:3d:09:e6:8d:14:aa:50:79:28:80:64:b5:bf:d0:
ae:08:8e:0a:04:b2:ed:c8:44:b1:19:fa:fd:05:23:
50:66:de:46:ca:b0:4c:ed:e9:ca:14:48:37:6e:71:
78:32:f3:c1:37:74:23:58:b6:95:f4:79:2b:c9:1a:
c7:aa:d9:a4:15:b0:08:16:ec:8d:f8:b3:2f:83:9f:
40:1d:b7:4b:aa:13:3a:aa:d9:53:b1:a2:4a:0c:82:
66:eb:44:cd:03:ac:ba:85:b3:df:a9:db:58:43:53:
89:0a:5c:c9:ca:b9:a6:e5:1e:02:bd:6d:f7:af:07:
07:8a:84:db:28:82:50:b7:44:1f:e3:a7:6d:de:52:
d8:58:4d:1d:2e:a7:33:e9:59:7e:bb:41:63:95:25:
df:01:9b:6f:76:fb:df:3b:ef:1f:86:2f:8e:07:bd:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4D:B0:10:EE:AD:A0:7F:D2:AD:CD:CB:DE:C3:46:56:5E:F9:A5:4D
X509v3 Authority Key Identifier:
keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f9:1e:2d:e2:4d:45:e6:3d:d8:2b:9b:33:de:2d:44:11:f9:
77:c8:ff:fe:a6:fb:0d:1f:52:1c:97:39:ed:fd:10:7e:2c:76:
9b:36:13:82:9f:f5:01:7e:a2:54:53:db:a5:05:3f:98:73:f6:
bd:3e:79:9a:26:61:4b:da:6f:1d:7a:8a:85:9e:66:73:1e:db:
d2:dc:b1:42:cb:50:1b:41:28:7a:bf:46:3a:01:e4:5c:fe:12:
bb:4b:5d:48:1a:3d:86:aa:45:44:c0:0f:9a:4c:94:d0:f2:37:
90:64:b8:ec:fc:36:81:2e:fb:57:2d:e7:8c:16:db:ab:9a:bc:
40:8c:d0:c9:d6:4a:91:f5:0a:f5:74:a8:9e:25:d9:85:ae:e4:
cb:c5:99:2a:b1:52:83:c5:2b:16:ed:bf:34:6b:c8:d7:44:ce:
93:c7:aa:87:90:4d:e2:4f:b2:98:1a:1e:ea:5e:5c:99:f1:b1:
60:0a:14:ef:f1:72:ce:52:71:49:ac:a7:13:71:df:ce:65:97:
96:93:f4:19:12:c3:ee:c9:3c:f5:63:4d:47:32:f6:ea:db:b7:
8c:da:af:22:50:d8:5c:c0:2c:d1:fe:26:8b:57:18:2c:2e:ad:
54:b7:71:4f:4b:e2:12:dc:86:9c:a2:35:73:d9:2c:12:79:9e:
46:f8:24:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:48 2025 by rpki-client