Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier: jM2qfkiTl9IMN0CNjTyKFjiK4XVqnKsrMIkuFsBtFDQ=
Subject key identifier: 9C:63:62:67:3F:36:6D:6D:6A:B0:98:A2:E2:35:47:8F:60:78:BF:72
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 019A0035381A383DB83FE4F741AD1BF9AD59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number: 152A
Signing time: Mon 20 Oct 2025 06:01:18 +0000
Manifest this update: Mon 20 Oct 2025 06:01:18 +0000
Manifest next update: Tue 21 Oct 2025 06:01:18 +0000
Files and hashes: 1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: rpDsBkkQv7SPA39+anQvB0SvuQ/mRcHXUVtKfBo5Cr4=)
2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:38:1a:38:3d:b8:3f:e4:f7:41:ad:1b:f9:ad:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Oct 20 06:01:18 2025 GMT
Not After : Oct 21 06:01:18 2025 GMT
Subject: CN=9c6362673f366d6d6ab098a2e235478f6078bf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:f5:fd:ba:ba:36:c2:67:ba:40:be:ce:19:
2a:82:f8:7e:d2:12:91:a7:f4:1e:69:5b:83:39:58:
3e:20:5b:96:3d:93:70:a4:3e:3e:54:97:37:2a:0f:
9b:67:2d:dc:f5:3d:1f:2c:5b:77:a9:a3:4e:86:32:
9b:dd:73:bc:82:92:47:42:c1:03:2d:11:4b:a1:96:
94:46:4e:74:b9:63:89:24:d1:e0:7b:d1:5c:9a:bd:
8b:b1:1f:a9:54:53:49:27:7a:b9:21:ef:e3:ce:7b:
e2:54:09:e6:4e:66:50:b3:c1:13:75:bf:db:4a:45:
48:28:2f:7b:d4:23:1b:25:c9:86:ee:31:8c:ee:d5:
5a:77:13:b6:9d:3f:f7:1e:7a:bb:fb:5f:87:30:85:
9c:27:bd:79:29:ad:d7:71:64:2b:30:2b:d4:37:79:
5d:35:83:85:cb:31:6b:11:c2:3e:02:df:93:3b:04:
ff:18:8e:55:41:b4:49:69:a6:cf:be:9b:bc:5a:31:
78:0c:20:d5:0b:48:b1:a7:ac:c9:c7:db:77:06:13:
72:21:e7:22:1c:54:e7:67:e0:b1:77:2f:54:9d:dc:
25:e2:02:1b:08:ea:56:a0:04:c8:02:96:f3:97:20:
3d:c8:08:80:93:06:56:6b:b0:55:cc:44:f8:e6:82:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:63:62:67:3F:36:6D:6D:6A:B0:98:A2:E2:35:47:8F:60:78:BF:72
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:08:44:e2:79:ec:e7:ad:88:2e:f0:bb:03:c4:9a:ec:bb:11:
15:b7:a7:92:69:ba:27:97:a7:f8:96:58:51:f4:80:45:6f:7d:
dd:62:b0:54:da:ee:65:7c:8d:97:f2:91:a4:51:6c:54:27:c5:
e7:8e:f5:06:af:d0:57:d7:b2:31:c2:02:33:39:1f:17:02:1a:
3c:91:80:fd:24:03:13:d0:29:1a:c5:39:bc:10:90:36:24:00:
a3:01:f8:f6:f5:02:c2:a8:a0:38:5e:e5:93:ba:ba:ee:17:39:
c2:57:56:36:21:49:66:80:bf:87:42:a5:cf:64:f1:43:92:06:
e6:2f:61:5d:38:4c:64:82:17:32:c8:a3:8b:e6:13:d7:c1:90:
63:ea:25:17:d2:0c:ec:bc:58:95:e3:de:3a:bc:06:fb:fb:94:
1b:4d:6d:55:06:f1:b5:c1:da:d4:a6:8e:01:34:a2:f7:14:4c:
51:8b:55:91:64:6b:4c:79:59:35:1b:ff:9d:17:fe:44:61:72:
a8:06:de:fa:de:af:2a:7e:ac:7d:d3:bf:fb:af:d5:6a:e5:0e:
da:a5:c7:c2:18:d3:6b:88:bb:2c:6d:7e:90:b0:db:71:72:0d:
36:51:dc:ba:66:d7:fc:23:45:92:66:4a:6a:cc:6f:3c:59:85:
11:49:85:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANTgaOD24P+T3Qa0b+a1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYWI5NjUzOGM3NjRkMjMyMDVkMzMyYmUxMzdiZGUwNDYy
ZjFiOGMwHhcNMjUxMDIwMDYwMTE4WhcNMjUxMDIxMDYwMTE4WjAzMTEwLwYDVQQD
Eyg5YzYzNjI2NzNmMzY2ZDZkNmFiMDk4YTJlMjM1NDc4ZjYwNzhiZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU31/bq6NsJnukC+zhkqgvh+0hKR
p/QeaVuDOVg+IFuWPZNwpD4+VJc3Kg+bZy3c9T0fLFt3qaNOhjKb3XO8gpJHQsED
LRFLoZaURk50uWOJJNHge9Fcmr2LsR+pVFNJJ3q5Ie/jznviVAnmTmZQs8ETdb/b
SkVIKC971CMbJcmG7jGM7tVadxO2nT/3Hnq7+1+HMIWcJ715Ka3XcWQrMCvUN3ld
NYOFyzFrEcI+At+TOwT/GI5VQbRJaabPvpu8WjF4DCDVC0ixp6zJx9t3BhNyIeci
HFTnZ+Cxdy9Undwl4gIbCOpWoATIApbzlyA9yAiAkwZWa7BVzET45oIovwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxjYmc/Nm1tarCYouI1R49geL9yMB8GA1UdIwQY
MBaAFFKrllOMdk0jIF0zK+E3veBGLxuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUt
MzhhZDQxNzlmZjI5LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUtMzhhZDQxNzlmZjI5
LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAhE4nns
562ILvC7A8Sa7LsRFbenkmm6J5en+JZYUfSARW993WKwVNruZXyNl/KRpFFsVCfF
5471Bq/QV9eyMcICMzkfFwIaPJGA/SQDE9ApGsU5vBCQNiQAowH49vUCwqigOF7l
k7q67hc5wldWNiFJZoC/h0Klz2TxQ5IG5i9hXThMZIIXMsiji+YT18GQY+olF9IM
7LxYlePeOrwG+/uUG01tVQbxtcHa1KaOATSi9xRMUYtVkWRrTHlZNRv/nRf+RGFy
qAbe+t6vKn6sfdO/+6/VauUO2qXHwhjTa4i7LG1+kLDbcXINNlHcumbX/CNFkmZK
asxvPFmFEUmFqQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:06 2025 by rpki-client