Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: 45Bt12oYuoH3bZhRGt6eKVztK2Ul0oa0YDz4M/B4mM4=
Subject key identifier: 1E:81:51:9F:14:70:72:FB:14:A5:92:50:62:22:B9:BC:4D:C7:89:90
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 019A0035140CCDB72D34585BD69E5968C016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 06:01:09 +0000
Manifest this update: Mon 20 Oct 2025 06:01:09 +0000
Manifest next update: Tue 21 Oct 2025 06:01:09 +0000
Files and hashes: 1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: hpMXmNm94J/h8y53wulgzspiUz/dl+owhGHpSYNDmtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:14:0c:cd:b7:2d:34:58:5b:d6:9e:59:68:c0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Oct 20 06:01:09 2025 GMT
Not After : Oct 21 06:01:09 2025 GMT
Subject: CN=1e81519f147072fb14a592506222b9bc4dc78990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:2f:3d:d4:d2:f8:37:4b:3f:21:d1:c2:91:
57:10:2c:c2:98:59:ba:cc:68:7f:ad:c2:01:bb:28:
57:6b:0e:85:86:dd:47:fd:43:63:2b:e9:13:ec:f4:
b2:f5:03:fe:01:a8:ee:20:24:69:71:61:8e:20:76:
ae:c6:e6:20:20:43:94:d5:46:07:a2:c0:6f:ad:0b:
05:55:35:c0:92:d3:5c:7a:50:15:81:b3:0b:39:6c:
11:ec:29:41:60:ba:93:96:46:b4:2f:70:39:d8:03:
94:35:c1:db:5f:1d:5a:98:d4:60:aa:17:a9:e7:95:
e9:14:06:99:3a:f3:cb:aa:b5:49:ce:8d:fc:a3:e2:
1e:7e:b5:b1:69:70:c4:8e:dc:e9:ea:c5:b3:bd:fd:
df:e7:61:1b:9c:94:c5:5d:a9:e7:65:3f:5a:d7:1b:
00:ba:cc:6c:bd:68:2b:82:6c:20:03:8f:dd:91:d8:
a6:a7:fe:30:ca:01:62:26:03:6a:b1:6a:b1:da:ca:
7f:69:f2:48:1a:0f:53:fa:b2:9c:ad:73:f6:ae:0f:
8a:fa:43:14:e8:16:6f:c8:45:f8:76:5e:89:b2:b3:
01:68:85:37:29:59:65:63:c4:18:f5:fc:fe:ad:90:
3e:65:98:a9:80:74:f7:e6:2b:1a:6d:8f:3e:8d:0a:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:81:51:9F:14:70:72:FB:14:A5:92:50:62:22:B9:BC:4D:C7:89:90
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:94:9e:ec:6b:0d:27:14:73:47:24:10:fc:2d:0c:de:e8:f6:
08:23:64:b0:5a:a3:30:43:32:49:74:32:82:2d:04:36:5b:28:
2a:b4:59:00:08:dd:d3:97:1c:0f:f4:78:43:a6:b0:71:02:61:
2e:d9:66:9c:68:00:0f:e9:2d:3d:74:8f:8e:8c:4a:a4:cd:b9:
5b:62:51:57:7b:25:0c:20:ef:36:7a:47:2b:0f:7a:3a:6f:4c:
61:e0:52:ce:eb:1d:ad:ba:a0:ce:be:01:a9:24:f0:b8:1e:a3:
bf:9b:52:36:17:80:63:96:63:db:de:fd:90:e9:0e:25:a9:f0:
ed:8a:c6:c3:2c:48:f9:c8:32:1c:da:be:88:db:aa:62:d5:67:
26:b2:a7:fe:3a:56:db:95:09:f3:59:29:3c:d2:1d:7b:2e:52:
e0:d9:cc:18:fb:fa:50:61:d2:db:71:71:e4:5f:d3:94:3b:e0:
3b:1d:59:94:69:29:2f:83:9e:d0:f1:61:0e:c0:e6:21:1f:f7:
22:cb:47:12:1b:ee:11:3c:57:70:18:5c:f2:5c:f9:49:d8:98:
38:04:ce:10:25:dc:dc:d1:25:cb:90:f1:b7:ca:10:a4:43:06:
9c:9a:5a:10:e2:bc:7b:88:c2:18:70:63:6e:9a:62:cb:5d:94:
eb:c1:6a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANRQMzbctNFhb1p5ZaMAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNDNkZWQ3NDViMDVmNDAzOGU5ODNmYjlkNzhlZGY1NmYy
NTEzNDYwHhcNMjUxMDIwMDYwMTA5WhcNMjUxMDIxMDYwMTA5WjAzMTEwLwYDVQQD
EygxZTgxNTE5ZjE0NzA3MmZiMTRhNTkyNTA2MjIyYjliYzRkYzc4OTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZEvPdTS+DdLPyHRwpFXECzCmFm6
zGh/rcIBuyhXaw6Fht1H/UNjK+kT7PSy9QP+AajuICRpcWGOIHauxuYgIEOU1UYH
osBvrQsFVTXAktNcelAVgbMLOWwR7ClBYLqTlka0L3A52AOUNcHbXx1amNRgqhep
55XpFAaZOvPLqrVJzo38o+IefrWxaXDEjtzp6sWzvf3f52EbnJTFXannZT9a1xsA
usxsvWgrgmwgA4/dkdimp/4wygFiJgNqsWqx2sp/afJIGg9T+rKcrXP2rg+K+kMU
6BZvyEX4dl6JsrMBaIU3KVllY8QY9fz+rZA+ZZipgHT35isabY8+jQpnYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6BUZ8UcHL7FKWSUGIiubxNx4mQMB8GA1UdIwQY
MBaAFFJD3tdFsF9AOOmD+5147fVvJRNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMt
YzUzNmRmNWMyNzRlLzEvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMtYzUzNmRmNWMyNzRl
LzEvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpSe7GsN
JxRzRyQQ/C0M3uj2CCNksFqjMEMySXQygi0ENlsoKrRZAAjd05ccD/R4Q6awcQJh
LtlmnGgAD+ktPXSPjoxKpM25W2JRV3slDCDvNnpHKw96Om9MYeBSzusdrbqgzr4B
qSTwuB6jv5tSNheAY5Zj2979kOkOJanw7YrGwyxI+cgyHNq+iNuqYtVnJrKn/jpW
25UJ81kpPNIdey5S4NnMGPv6UGHS23Fx5F/TlDvgOx1ZlGkpL4Oe0PFhDsDmIR/3
IstHEhvuETxXcBhc8lz5SdiYOATOECXc3NEly5Dxt8oQpEMGnJpaEOK8e4jCGHBj
bppiy12U68FqAw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:23 2025 by rpki-client