Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File: UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier: /eRP3fLOr/+qzfUEXtLYN7hVB4aIDiyA8yHCWar4MYc=
Subject key identifier: 62:05:03:B1:0A:55:95:C6:08:5E:38:9C:F3:BA:BB:5E:32:EC:1E:8A
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial: 0199FB7CD640571F899C67669295FC7335ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number: D6
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: So7MIth66c0gQ6yZa07PSISd4jAQ4COww9n0epHu1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d6:40:57:1f:89:9c:67:66:92:95:fc:73:35:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=620503b10a5595c6085e389cf3babb5e32ec1e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:d0:10:2b:28:51:9f:ef:5e:2c:51:a2:79:
33:bb:79:f1:e3:28:54:29:80:c0:ea:8f:5c:ae:c6:
aa:8e:4f:e1:eb:f7:23:96:c5:2b:78:06:71:88:85:
33:6d:a4:a5:ba:08:5d:b7:0a:f2:8e:32:1f:ab:22:
4c:d8:75:f0:d8:41:d5:b7:3e:bc:b1:db:31:19:d4:
06:43:1f:7c:07:a0:aa:48:24:ed:12:92:aa:2d:ae:
e8:d1:1b:98:48:3c:59:de:1d:40:d7:fa:b3:f7:e5:
6a:1e:80:17:44:91:e1:cd:f3:41:49:f1:c6:37:2c:
68:62:fe:aa:5f:1c:0e:43:83:d2:fa:7f:bb:77:a7:
8e:dc:d2:13:2e:04:ec:26:c9:e4:8f:06:07:c5:52:
f0:5e:df:43:3d:db:fa:68:6c:da:24:20:df:9d:0a:
f3:06:37:fc:c9:d0:28:ad:c8:51:7e:d5:37:ed:8f:
4e:20:cb:ef:5f:30:e6:96:52:a3:c6:22:07:5f:a2:
59:fc:45:c7:79:a7:d7:b9:e7:04:88:98:5c:31:b2:
1a:fa:43:b4:00:b3:a4:3e:50:dd:b4:06:74:ad:45:
91:e6:78:21:36:ea:03:83:5a:9a:0a:81:28:e5:6a:
e2:ea:7d:67:76:d1:06:e0:43:83:df:4e:0d:32:de:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:05:03:B1:0A:55:95:C6:08:5E:38:9C:F3:BA:BB:5E:32:EC:1E:8A
X509v3 Authority Key Identifier:
keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cc:7b:f6:24:fb:7f:41:fa:ed:1c:98:1d:50:db:70:20:ac:
f9:33:56:19:2e:a7:36:0f:3d:cc:7c:74:a3:5b:8e:67:58:73:
b7:13:e5:72:f3:8b:94:a4:49:62:2b:ea:1c:ac:0b:b6:de:7b:
07:03:35:fe:f4:66:46:42:1c:d0:bd:73:66:8c:ee:9a:01:94:
1c:b5:d5:b1:8f:e1:3b:5c:2e:05:2e:ef:4c:87:b2:77:75:6d:
55:81:22:3e:a0:87:cf:20:c0:9b:22:44:2b:25:30:c8:67:b0:
bf:26:10:e7:74:18:c5:ba:e8:0b:21:69:fc:80:b2:a1:f5:2c:
3d:3c:a2:c2:8d:e2:8a:b7:7f:11:90:07:44:d1:f5:b9:12:06:
54:a8:d8:4d:79:e8:38:04:6b:ca:71:72:1d:cf:90:b5:d3:96:
77:56:02:a1:0f:28:57:0e:1f:72:84:54:72:f1:de:b9:71:47:
e9:db:2c:4d:3b:1c:b0:77:1c:1f:54:7b:81:61:b0:90:bd:6a:
55:52:34:09:48:0c:70:24:a4:83:19:79:a8:21:69:e7:26:c4:
06:99:71:36:8f:7d:25:c1:c2:83:73:40:6b:a5:16:56:7e:51:
5d:27:99:e9:66:69:6f:36:2a:5a:c2:65:b4:63:9e:66:51:6d:
ce:b7:05:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNZAVx+JnGdmkpX8czXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZjI5ZDE4NGJjYzUwZmU2NTRkZGVmNDAxNWRlMTdkMjQ2
ZmQyYTMwHhcNMjUxMDE5MDgwMTI2WhcNMjUxMDIwMDgwMTI2WjAzMTEwLwYDVQQD
Eyg2MjA1MDNiMTBhNTU5NWM2MDg1ZTM4OWNmM2JhYmI1ZTMyZWMxZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHzQECsoUZ/vXixRonkzu3nx4yhU
KYDA6o9crsaqjk/h6/cjlsUreAZxiIUzbaSlughdtwryjjIfqyJM2HXw2EHVtz68
sdsxGdQGQx98B6CqSCTtEpKqLa7o0RuYSDxZ3h1A1/qz9+VqHoAXRJHhzfNBSfHG
NyxoYv6qXxwOQ4PS+n+7d6eO3NITLgTsJsnkjwYHxVLwXt9DPdv6aGzaJCDfnQrz
Bjf8ydAorchRftU37Y9OIMvvXzDmllKjxiIHX6JZ/EXHeafXuecEiJhcMbIa+kO0
ALOkPlDdtAZ0rUWR5nghNuoDg1qaCoEo5Wri6n1ndtEG4EOD304NMt7K6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIFA7EKVZXGCF44nPO6u14y7B6KMB8GA1UdIwQY
MBaAFFHynRhLzFD+ZU3e9AFd4X0kb9KjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYjUwYzgtNjc4Yi00YzcyLWJjMGMt
YjMzYTFmN2Q5YzI2LzEvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zYjUwYzgtNjc4Yi00YzcyLWJjMGMtYjMzYTFmN2Q5YzI2
LzEvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8x79iT7
f0H67RyYHVDbcCCs+TNWGS6nNg89zHx0o1uOZ1hztxPlcvOLlKRJYivqHKwLtt57
BwM1/vRmRkIc0L1zZozumgGUHLXVsY/hO1wuBS7vTIeyd3VtVYEiPqCHzyDAmyJE
KyUwyGewvyYQ53QYxbroCyFp/ICyofUsPTyiwo3iird/EZAHRNH1uRIGVKjYTXno
OARrynFyHc+QtdOWd1YCoQ8oVw4fcoRUcvHeuXFH6dssTTscsHccH1R7gWGwkL1q
VVI0CUgMcCSkgxl5qCFp5ybEBplxNo99JcHCg3NAa6UWVn5RXSeZ6WZpbzYqWsJl
tGOeZlFtzrcFQQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:08:02 2025 by rpki-client