Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: pi4r1mUDyQj5VTltvsAbebZ1ahOwOmqxbph3281zTZ8=
Subject key identifier: 8C:CB:76:8E:0E:DC:7B:5D:DF:75:8E:68:CB:9C:E3:39:2B:A0:13:24
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 0199FFC7951BBF10BBD6BAAB718421009E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 130B
Signing time: Mon 20 Oct 2025 04:01:33 +0000
Manifest this update: Mon 20 Oct 2025 04:01:33 +0000
Manifest next update: Tue 21 Oct 2025 04:01:33 +0000
Files and hashes: 1: E_VTiATzUgc2DhxvquhHUq4XjMM.roa (hash: QY5XIJ7ljEf/JGfsfFT7Yois/7EOyZU9vkUnS75efNE=)
2: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: JahTpiGiTb7WjChm2FZTHh7kVGH8u91LBwTKXJD613k=)
3: wCetPnuHXvivZcvg-nB5WG2XhQ4.roa (hash: 4Yh74lr3J9wyGwv+2vpPjVGwW6ZzDVQ5vG1BmfHb1Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:95:1b:bf:10:bb:d6:ba:ab:71:84:21:00:9e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Oct 20 04:01:33 2025 GMT
Not After : Oct 21 04:01:33 2025 GMT
Subject: CN=8ccb768e0edc7b5ddf758e68cb9ce3392ba01324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3d:86:f4:f6:00:ec:c1:a8:36:93:70:7d:28:
e2:01:96:f2:63:c3:4d:e1:fd:49:e3:6a:e0:84:c8:
29:e2:75:55:ce:f3:6d:c3:6c:32:2f:9a:2d:0d:c3:
e8:a9:1e:f5:85:40:4a:fa:f6:01:31:ab:b4:4b:62:
57:21:1a:98:26:d6:1a:e0:17:12:1e:57:b3:60:60:
f8:e8:e9:f6:bd:b1:30:ed:bc:70:0a:b9:36:a1:10:
ec:20:d8:70:4d:68:43:d0:3e:68:98:be:81:74:48:
60:2f:be:4e:9d:f2:bb:20:d1:31:16:b1:2d:c1:d3:
66:a1:9e:04:c4:e1:3d:18:12:3e:ed:9c:6f:e0:ab:
5d:35:69:3d:4c:c7:5e:fa:fc:a0:1d:e7:5b:b2:19:
eb:53:6e:6a:52:1e:f3:aa:11:2b:28:fa:9a:0c:65:
fd:de:ae:85:c3:83:e4:f1:48:8d:26:3a:42:f9:2c:
58:e1:0f:f7:73:7d:0a:f1:2a:f9:72:48:3b:a1:60:
88:90:b2:89:4f:8f:b1:22:21:ec:df:68:ea:cd:58:
54:90:50:3a:c7:a5:a0:a4:f2:48:10:ba:15:0c:ae:
49:7e:9d:80:36:d3:33:9a:28:e3:69:50:5c:86:8a:
1a:cb:63:f1:30:1b:c4:ca:5b:7d:79:32:e4:3d:8e:
4d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:76:8E:0E:DC:7B:5D:DF:75:8E:68:CB:9C:E3:39:2B:A0:13:24
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a6:a5:7b:01:03:9f:c8:1e:14:29:a3:6a:f6:cb:a2:f6:f3:
8e:32:10:9e:c7:0f:ad:b5:ba:cd:25:be:da:2d:c6:8d:8c:17:
2e:48:08:ca:5a:94:65:2c:f6:bb:fc:fe:8b:b2:6d:30:91:91:
65:4e:9b:1d:8c:ea:b9:6c:c2:89:b7:6f:ca:3a:f5:03:3a:5b:
60:b8:46:a7:cf:04:5b:be:cc:3f:bc:3f:64:8a:8d:84:eb:16:
67:14:cc:7f:95:11:ad:44:dd:47:b1:8a:70:98:5c:90:95:9a:
c2:26:bb:40:63:bf:15:c2:37:de:9c:47:45:36:41:14:0c:cf:
0f:45:61:38:e5:7a:53:1e:50:2a:2e:72:5f:af:0e:c3:7b:36:
df:35:c2:b3:d7:e3:2e:e3:9c:84:84:f9:95:0a:23:ae:9a:f9:
cf:32:5e:66:22:99:d6:9a:fc:7f:15:4a:39:d5:0e:d3:63:e1:
33:60:54:36:79:c4:27:c9:a8:eb:44:bd:ec:af:27:a0:c6:aa:
b5:f0:a3:eb:49:f9:f6:9e:3c:8f:e9:b9:39:5e:91:8e:ca:d2:
b2:a7:2e:c4:a3:32:fe:11:3f:40:1e:75:cd:c5:ef:b3:57:f1:
eb:fb:d9:cb:9d:e5:d6:a8:19:88:86:20:26:4d:70:f5:d5:1b:
45:43:f8:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x5UbvxC71rqrcYQhAJ6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTQyZmJhMGMxN2I0MzkxZTMyOTZjNDM0YjVmZmYyM2E4
MjliNmUwHhcNMjUxMDIwMDQwMTMzWhcNMjUxMDIxMDQwMTMzWjAzMTEwLwYDVQQD
Eyg4Y2NiNzY4ZTBlZGM3YjVkZGY3NThlNjhjYjljZTMzOTJiYTAxMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT2G9PYA7MGoNpNwfSjiAZbyY8NN
4f1J42rghMgp4nVVzvNtw2wyL5otDcPoqR71hUBK+vYBMau0S2JXIRqYJtYa4BcS
HlezYGD46On2vbEw7bxwCrk2oRDsINhwTWhD0D5omL6BdEhgL75OnfK7INExFrEt
wdNmoZ4ExOE9GBI+7Zxv4KtdNWk9TMde+vygHedbshnrU25qUh7zqhErKPqaDGX9
3q6Fw4Pk8UiNJjpC+SxY4Q/3c30K8Sr5ckg7oWCIkLKJT4+xIiHs32jqzVhUkFA6
x6WgpPJIELoVDK5Jfp2ANtMzmijjaVBchooay2PxMBvEylt9eTLkPY5NoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzLdo4O3Htd33WOaMuc4zkroBMkMB8GA1UdIwQY
MBaAFFBUL7oMF7Q5HjKWxDS1//I6gptuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgt
NWU5Nzg3YjZhZWFhLzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgtNWU5Nzg3YjZhZWFh
LzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6alewED
n8geFCmjavbLovbzjjIQnscPrbW6zSW+2i3GjYwXLkgIylqUZSz2u/z+i7JtMJGR
ZU6bHYzquWzCibdvyjr1AzpbYLhGp88EW77MP7w/ZIqNhOsWZxTMf5URrUTdR7GK
cJhckJWawia7QGO/FcI33pxHRTZBFAzPD0VhOOV6Ux5QKi5yX68Ow3s23zXCs9fj
LuOchIT5lQojrpr5zzJeZiKZ1pr8fxVKOdUO02PhM2BUNnnEJ8mo60S97K8noMaq
tfCj60n59p48j+m5OV6RjsrSsqcuxKMy/hE/QB51zcXvs1fx6/vZy53l1qgZiIYg
Jk1w9dUbRUP4XA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:40 2025 by rpki-client