Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
File: M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json)
Hash identifier: lD7cS9VNiX15dDEBJHU2VYmWlaZPQj7QbefBn66p74I=
Subject key identifier: 4A:1F:8E:13:5F:16:83:E3:66:25:B2:D8:3E:C1:BF:86:A1:20:75:E3
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial: 0199FEEBA112D5737FB2C35115B2C1436292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
Manifest number: 1470
Signing time: Mon 20 Oct 2025 00:01:18 +0000
Manifest this update: Mon 20 Oct 2025 00:01:18 +0000
Manifest next update: Tue 21 Oct 2025 00:01:18 +0000
Files and hashes: 1: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: b3cUm+jcp8qt/AVA4p9+YLxJt8KbfI/j/ilE6ae0XRg=)
2: pMHjgJekdS1MaOx6NO05QRcLwkA.roa (hash: 0cAR/UsqHx4Uoat+wXKZE3sY02i0A2U0Zxjt7/F3FS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a1:12:d5:73:7f:b2:c3:51:15:b2:c1:43:62:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Validity
Not Before: Oct 20 00:01:18 2025 GMT
Not After : Oct 21 00:01:18 2025 GMT
Subject: CN=4a1f8e135f1683e36625b2d83ec1bf86a12075e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:12:7d:db:95:0f:79:c0:bb:a7:82:68:d2:
61:91:f8:19:82:03:75:da:f9:bc:e8:7f:1b:3d:cd:
e9:2f:01:42:83:70:c0:fc:15:97:01:47:b9:65:5c:
38:2b:62:5e:ac:65:df:92:cf:8b:f7:5f:99:62:d1:
76:af:ba:16:f9:09:85:4c:42:28:45:4f:4d:16:e9:
14:ac:ca:49:b6:13:d9:85:9b:31:b6:f8:2e:6e:2e:
b9:16:39:96:6f:ff:ea:1b:d2:68:86:30:af:20:65:
1a:59:e9:60:0e:3c:6e:01:16:8c:d9:1f:cd:f2:fd:
ed:c4:08:40:b0:19:38:06:26:8e:8b:3d:3f:91:41:
86:96:6c:8a:92:d5:f3:84:05:9a:1d:eb:60:cc:14:
f3:b3:73:f7:6d:76:40:56:de:22:14:df:62:42:90:
df:11:30:63:70:41:24:95:53:b1:7f:bc:fb:76:91:
ab:a6:53:69:97:e2:0d:67:75:7b:b3:cf:49:65:09:
87:3d:e0:5c:0f:07:2e:88:2b:71:de:5b:98:e4:b8:
5e:ad:48:7c:1c:4e:02:71:09:72:73:ee:65:6a:53:
c6:3e:db:f5:30:ad:e0:6d:dd:ef:c9:c8:fc:1b:81:
f4:ba:a7:84:d1:83:01:a0:9a:c5:71:ab:f0:b1:9c:
db:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1F:8E:13:5F:16:83:E3:66:25:B2:D8:3E:C1:BF:86:A1:20:75:E3
X509v3 Authority Key Identifier:
keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ec:8e:2e:31:a6:c6:d4:06:0c:02:47:97:f9:3d:84:08:27:
65:f0:4c:ea:03:80:a7:80:28:c9:c5:d5:3c:01:12:a0:a3:95:
9f:ce:ea:4f:e6:2c:ff:03:74:aa:cb:fe:18:68:96:06:db:ca:
a5:51:7f:d2:cf:80:59:80:86:45:62:be:32:48:ae:82:13:69:
cc:58:be:43:ae:8f:1c:e3:d6:15:9f:ec:21:07:b6:1f:d1:28:
f1:82:be:5e:43:84:db:e0:a1:d5:62:d3:7f:d2:8b:c4:e9:38:
3b:77:91:38:c6:75:1d:69:d5:a3:6c:fd:f9:f8:c6:d1:2b:7e:
d9:55:68:22:8c:64:37:1e:dd:36:7c:21:92:9b:e3:a3:72:dd:
d2:c1:68:25:68:41:93:73:78:af:47:96:f6:c3:fc:35:72:89:
11:97:cc:ef:e1:e1:53:14:8c:7b:4b:04:b5:9a:e0:fe:d0:ef:
cc:f8:e7:12:78:b5:22:ad:3c:ae:83:48:36:6a:a5:cf:bf:64:
90:35:be:4c:21:76:3c:84:b3:c6:40:e2:79:bc:e1:88:8f:ab:
5c:3a:5c:40:01:58:24:e3:b5:0c:f1:d6:b5:d4:80:59:67:af:
28:3f:f4:a1:99:50:e4:9f:de:1e:07:cb:7e:03:ef:6e:54:8c:
2a:c6:39:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+66ES1XN/ssNRFbLBQ2KSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZjUwYThkZTk3MWY4NTQ3ZjViNTZjOTdjMzZjMjg3ZWY1
NGJkYjgwHhcNMjUxMDIwMDAwMTE4WhcNMjUxMDIxMDAwMTE4WjAzMTEwLwYDVQQD
Eyg0YTFmOGUxMzVmMTY4M2UzNjYyNWIyZDgzZWMxYmY4NmExMjA3NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+cSfduVD3nAu6eCaNJhkfgZggN1
2vm86H8bPc3pLwFCg3DA/BWXAUe5ZVw4K2JerGXfks+L91+ZYtF2r7oW+QmFTEIo
RU9NFukUrMpJthPZhZsxtvgubi65FjmWb//qG9JohjCvIGUaWelgDjxuARaM2R/N
8v3txAhAsBk4BiaOiz0/kUGGlmyKktXzhAWaHetgzBTzs3P3bXZAVt4iFN9iQpDf
ETBjcEEklVOxf7z7dpGrplNpl+INZ3V7s89JZQmHPeBcDwcuiCtx3luY5LherUh8
HE4CcQlyc+5lalPGPtv1MK3gbd3vycj8G4H0uqeE0YMBoJrFcavwsZzbuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEofjhNfFoPjZiWy2D7Bv4ahIHXjMB8GA1UdIwQY
MBaAFDP1Co3pcfhUf1tWyXw2wofvVL24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUt
Mjc0ZjEwYTVlMWUzLzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUtMjc0ZjEwYTVlMWUz
LzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOyOLjGm
xtQGDAJHl/k9hAgnZfBM6gOAp4AoycXVPAESoKOVn87qT+Ys/wN0qsv+GGiWBtvK
pVF/0s+AWYCGRWK+MkiughNpzFi+Q66PHOPWFZ/sIQe2H9Eo8YK+XkOE2+Ch1WLT
f9KLxOk4O3eROMZ1HWnVo2z9+fjG0St+2VVoIoxkNx7dNnwhkpvjo3Ld0sFoJWhB
k3N4r0eW9sP8NXKJEZfM7+HhUxSMe0sEtZrg/tDvzPjnEni1Iq08roNINmqlz79k
kDW+TCF2PISzxkDiebzhiI+rXDpcQAFYJOO1DPHWtdSAWWevKD/0oZlQ5J/eHgfL
fgPvblSMKsY5kw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:46 2025 by rpki-client