Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: RS49tMJfj0ZwUVu5kahOwF3dQej3ZGLi5CIq55tB0JA=
Subject key identifier: 73:FD:19:90:14:31:7F:73:6B:C6:61:8F:CE:D3:86:88:48:60:C1:E7
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 0199FC8F942712FBBD8979543871E4D32D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 0ED8
Signing time: Sun 19 Oct 2025 13:01:31 +0000
Manifest this update: Sun 19 Oct 2025 13:01:31 +0000
Manifest next update: Mon 20 Oct 2025 13:01:31 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: z3s9I18kBePMHGBZCB+ZysYc5krkmvhs9/mDAeI5S4A=)
2: vkVOKzv8_S2fkG1izpq7kTixdUE.roa (hash: piMEcgAOMMddSvNaBzKcgAojln/bHlikM4A3Z6HENXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:94:27:12:fb:bd:89:79:54:38:71:e4:d3:2d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Oct 19 13:01:31 2025 GMT
Not After : Oct 20 13:01:31 2025 GMT
Subject: CN=73fd199014317f736bc6618fced386884860c1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a3:9b:ad:29:90:8e:73:e4:69:d8:73:51:b8:
ea:b5:22:59:6f:4f:ab:38:03:56:33:03:a7:bc:fa:
9a:69:6f:62:0e:6c:90:10:68:a0:48:28:85:41:55:
fb:8f:d2:22:b5:6f:af:2a:6c:f7:a4:06:dc:09:ee:
26:d3:ef:4d:f1:64:06:01:96:9b:13:37:a3:88:9c:
96:40:50:48:f8:f2:8c:7a:7b:6a:a9:1f:b4:95:50:
6b:7e:5c:a0:37:79:db:8d:4e:15:75:44:ee:58:0a:
f6:c4:a6:1e:80:eb:38:e4:f4:78:f7:14:f8:1e:a0:
27:26:df:61:9f:b6:dc:bf:9e:71:1e:1d:fe:eb:a1:
77:1f:9a:b7:60:af:89:ed:7b:3b:eb:9c:12:e6:5b:
ab:a2:c9:36:8b:ca:df:2d:9d:dc:6b:e0:cb:6d:cc:
8c:4c:0f:d9:1a:fc:7a:a1:67:79:61:71:ee:e8:f9:
5d:4d:42:46:aa:fa:ac:d1:51:c4:dc:30:aa:a9:02:
52:13:3b:d4:d4:c1:96:22:05:d1:15:28:11:3a:75:
29:7d:03:73:d7:0f:ea:ad:7a:06:d5:89:93:5d:76:
a9:91:92:29:b6:24:cc:a1:ce:02:81:a4:66:04:d6:
5e:23:a8:04:34:5e:7a:dc:fc:f6:2e:e3:6d:7f:4a:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FD:19:90:14:31:7F:73:6B:C6:61:8F:CE:D3:86:88:48:60:C1:E7
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:12:ab:db:e9:67:78:28:a2:68:8c:86:45:41:6f:48:ef:1c:
ea:b5:0e:d9:43:41:4b:2d:97:35:f8:60:71:23:23:0e:aa:30:
cc:39:3c:72:f5:c5:35:75:b5:49:24:ac:bd:39:7e:af:03:db:
29:54:58:e8:63:5e:68:c3:9b:2e:16:10:97:17:50:70:2a:e2:
66:c6:03:10:96:6e:a3:6a:1d:6d:4a:22:06:d9:e5:37:b9:4a:
8c:9c:92:cf:c7:4d:1c:65:a5:00:8c:81:25:94:06:86:fb:76:
24:a9:11:88:06:31:fb:b8:a0:68:77:19:5b:73:a9:dd:1f:98:
6f:b9:a8:05:2c:29:1a:83:73:e3:8f:cf:95:72:42:57:84:dc:
f9:df:3c:61:42:56:87:89:e4:5f:6b:9c:96:02:9e:05:81:26:
02:aa:3b:38:cd:7a:db:24:61:e4:06:6c:d3:9d:30:04:93:16:
22:ba:94:f0:4c:85:9a:3b:60:65:55:c4:47:bd:a2:de:19:11:
1b:f6:63:4d:c1:33:e3:c4:52:ec:6e:2f:3b:0f:11:f7:e5:d8:
c9:5b:58:42:f1:11:a5:0c:dd:cc:62:0c:c0:01:04:18:17:5d:
0c:74:fe:41:66:d5:7e:ef:6e:d6:a7:25:38:dc:12:c9:9d:20:
24:c5:e7:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5QnEvu9iXlUOHHk0y1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNDExZTUyZGFiN2QwYmUyNjc0MzEzYjZiNWQyZTc0YmQx
MTM2MGUwHhcNMjUxMDE5MTMwMTMxWhcNMjUxMDIwMTMwMTMxWjAzMTEwLwYDVQQD
Eyg3M2ZkMTk5MDE0MzE3ZjczNmJjNjYxOGZjZWQzODY4ODQ4NjBjMWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46ObrSmQjnPkadhzUbjqtSJZb0+r
OANWMwOnvPqaaW9iDmyQEGigSCiFQVX7j9IitW+vKmz3pAbcCe4m0+9N8WQGAZab
EzejiJyWQFBI+PKMentqqR+0lVBrflygN3nbjU4VdUTuWAr2xKYegOs45PR49xT4
HqAnJt9hn7bcv55xHh3+66F3H5q3YK+J7Xs765wS5lurosk2i8rfLZ3ca+DLbcyM
TA/ZGvx6oWd5YXHu6PldTUJGqvqs0VHE3DCqqQJSEzvU1MGWIgXRFSgROnUpfQNz
1w/qrXoG1YmTXXapkZIptiTMoc4CgaRmBNZeI6gENF563Pz2LuNtf0oNEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHP9GZAUMX9za8Zhj87ThohIYMHnMB8GA1UdIwQY
MBaAFFJBHlLat9C+JnQxO2tdLnS9ETYOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85YjFkODUtNzE5OC00YWY2LWE2MzIt
ZDBjZmU0MzAxNmRlLzEvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85YjFkODUtNzE5OC00YWY2LWE2MzItZDBjZmU0MzAxNmRl
LzEvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBKr2+ln
eCiiaIyGRUFvSO8c6rUO2UNBSy2XNfhgcSMjDqowzDk8cvXFNXW1SSSsvTl+rwPb
KVRY6GNeaMObLhYQlxdQcCriZsYDEJZuo2odbUoiBtnlN7lKjJySz8dNHGWlAIyB
JZQGhvt2JKkRiAYx+7igaHcZW3Op3R+Yb7moBSwpGoNz44/PlXJCV4Tc+d88YUJW
h4nkX2uclgKeBYEmAqo7OM162yRh5AZs050wBJMWIrqU8EyFmjtgZVXER72i3hkR
G/ZjTcEz48RS7G4vOw8R9+XYyVtYQvERpQzdzGIMwAEEGBddDHT+QWbVfu9u1qcl
ONwSyZ0gJMXnng==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:38 2025 by rpki-client