Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File: UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier: 3FjbCTUKTSQrXuDUYDiNCRwP2NqtLWcb8lc4kO+GGoY=
Subject key identifier: 2C:F3:17:1A:44:2E:BB:92:E5:5A:DE:C8:34:DA:8C:F8:40:99:74:E2
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer: /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial: 0199FC58D3CBEBE57DA6BCDEEB186E2ABD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number: 0A46
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: gHhx34zCx6BleZaTc51vUUI42NfWDSrIzh8bOAoC2rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d3:cb:eb:e5:7d:a6:bc:de:eb:18:6e:2a:bd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=2cf3171a442ebb92e55adec834da8cf8409974e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:ce:9c:d2:f3:66:72:01:e3:a2:0c:15:d3:
8b:18:7d:ab:ac:5a:8f:d3:ec:4f:98:4e:bc:6e:e5:
14:73:b6:4d:d4:a6:8a:d4:44:11:6c:a2:25:ac:49:
a9:6e:e0:c7:f5:bb:f0:3c:0a:2d:01:fc:82:7b:1a:
31:a3:25:0d:93:97:09:16:18:a7:9c:73:b0:c9:72:
a5:25:92:3a:31:d9:c8:d0:1e:47:2c:85:dd:21:c3:
36:7c:b0:99:3c:9b:10:dd:9f:5c:7f:d6:a6:8f:66:
b6:57:ab:46:3c:b7:94:0d:0c:86:5a:84:89:2f:1d:
43:bc:b5:c5:8e:e3:27:35:6c:a5:95:67:8d:98:40:
b5:fc:d8:b8:a7:3b:93:88:25:21:32:76:ef:c6:4a:
6d:1e:11:7a:4a:4e:d9:9a:c2:ef:a3:23:9c:ea:a1:
4f:02:85:a3:45:81:c9:82:03:30:5b:c7:24:8f:e3:
56:de:f0:d2:4f:f2:55:18:d5:78:63:d8:6f:a8:ac:
21:e8:af:d3:36:bd:02:ef:e8:47:6f:5d:1a:e9:7e:
0c:54:04:c2:a5:68:9c:f3:aa:f3:8c:b1:45:f6:f3:
46:82:f0:e7:dd:9f:4d:33:e6:89:08:70:61:d2:04:
2a:7c:40:e3:5b:48:78:d0:fd:1d:c2:04:ed:c1:57:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F3:17:1A:44:2E:BB:92:E5:5A:DE:C8:34:DA:8C:F8:40:99:74:E2
X509v3 Authority Key Identifier:
keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0f:09:eb:56:ef:ee:43:07:f5:44:19:96:93:10:8f:0c:24:
8b:33:72:69:a4:40:97:48:b1:ad:9d:2f:f6:f9:b2:07:7b:f1:
76:22:4f:fd:e0:08:72:9f:2b:00:b4:6e:bf:a6:a3:a0:b4:b7:
ef:fc:bd:a7:3a:f9:ed:e4:6c:37:b0:98:62:32:63:9a:d3:f0:
50:cd:e4:b1:09:66:38:bb:23:75:42:e7:91:0e:49:40:f2:15:
d7:c1:f1:5d:66:62:8c:26:24:ea:ed:8f:3a:1e:4c:de:cf:87:
19:1c:be:26:2c:82:4d:eb:ff:f4:b8:b0:dc:5a:0b:69:8c:8e:
db:ab:b0:40:3c:c3:70:34:a2:aa:4b:ae:18:bb:47:31:57:80:
be:7d:06:a3:d0:a0:94:02:ad:94:2b:ff:d5:ed:aa:d4:ac:4d:
c7:86:da:c0:49:a2:69:2b:d3:09:e2:a2:95:e5:7a:69:54:94:
94:6a:98:b2:88:01:04:81:a7:c9:ed:14:1d:2a:38:18:d3:e1:
9a:5a:c9:ed:ee:37:78:6f:2f:86:07:04:22:ab:d0:e5:ce:62:
14:69:5f:26:d5:c0:33:c2:63:94:44:e3:98:66:db:cc:0b:e7:
2f:55:93:96:c6:d2:6e:da:f4:10:fe:27:c8:c3:5a:c6:7d:9c:
a3:6e:cc:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNPL6+V9prze6xhuKr1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTAzOTc1NmNjZjMxZjY0YTg4MzQ0M2UxZjE3MzI4MzRk
MmI4YjIwHhcNMjUxMDE5MTIwMTQzWhcNMjUxMDIwMTIwMTQzWjAzMTEwLwYDVQQD
EygyY2YzMTcxYTQ0MmViYjkyZTU1YWRlYzgzNGRhOGNmODQwOTk3NGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrnOnNLzZnIB46IMFdOLGH2rrFqP
0+xPmE68buUUc7ZN1KaK1EQRbKIlrEmpbuDH9bvwPAotAfyCexoxoyUNk5cJFhin
nHOwyXKlJZI6MdnI0B5HLIXdIcM2fLCZPJsQ3Z9cf9amj2a2V6tGPLeUDQyGWoSJ
Lx1DvLXFjuMnNWyllWeNmEC1/Ni4pzuTiCUhMnbvxkptHhF6Sk7ZmsLvoyOc6qFP
AoWjRYHJggMwW8ckj+NW3vDST/JVGNV4Y9hvqKwh6K/TNr0C7+hHb10a6X4MVATC
pWic86rzjLFF9vNGgvDn3Z9NM+aJCHBh0gQqfEDjW0h40P0dwgTtwVeMlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzzFxpELruS5VreyDTajPhAmXTiMB8GA1UdIwQY
MBaAFFAQOXVszzH2Sog0Q+Hxcyg00riyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAt
Y2RhMjZjMzYwNjJhLzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAtY2RhMjZjMzYwNjJh
LzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALw8J61bv
7kMH9UQZlpMQjwwkizNyaaRAl0ixrZ0v9vmyB3vxdiJP/eAIcp8rALRuv6ajoLS3
7/y9pzr57eRsN7CYYjJjmtPwUM3ksQlmOLsjdULnkQ5JQPIV18HxXWZijCYk6u2P
Oh5M3s+HGRy+JiyCTev/9Liw3FoLaYyO26uwQDzDcDSiqkuuGLtHMVeAvn0Go9Cg
lAKtlCv/1e2q1KxNx4bawEmiaSvTCeKileV6aVSUlGqYsogBBIGnye0UHSo4GNPh
mlrJ7e43eG8vhgcEIqvQ5c5iFGlfJtXAM8JjlETjmGbbzAvnL1WTlsbSbtr0EP4n
yMNaxn2co27M/w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:28 2025 by rpki-client