Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: JYRVe1TXDPygicbyiRCl8sau6+XTSnk64NycNwUI+n0=
Subject key identifier: 43:44:34:38:80:C4:17:7F:00:DA:66:72:4D:78:86:B4:49:5C:5E:0E
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 0199FB0F55EC89C5C48E97803C04E615E3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0DE8
Signing time: Sun 19 Oct 2025 06:01:49 +0000
Manifest this update: Sun 19 Oct 2025 06:01:49 +0000
Manifest next update: Mon 20 Oct 2025 06:01:49 +0000
Files and hashes: 1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: yVaDH44AuPdmsu1oSzFA0ILWNz2nsoKXIkxOmu4MGyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:55:ec:89:c5:c4:8e:97:80:3c:04:e6:15:e3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Oct 19 06:01:49 2025 GMT
Not After : Oct 20 06:01:49 2025 GMT
Subject: CN=4344343880c4177f00da66724d7886b4495c5e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:98:9a:7a:29:d1:2d:b8:6f:4b:51:49:0a:
fe:ea:56:a6:ea:06:28:e4:f5:2c:10:1e:14:29:66:
93:32:02:15:a5:45:39:00:0f:42:ea:17:3b:85:ac:
64:06:7c:19:69:af:c2:4d:b4:dd:2f:69:ac:d1:57:
b2:0d:30:ee:5f:4c:83:6c:4a:ca:26:eb:2f:f7:39:
d9:2a:cb:ca:bb:fd:cf:64:51:a2:8f:81:ad:e7:67:
9c:e0:05:60:ab:c2:f7:be:88:34:0b:9d:ab:a5:c5:
40:fe:24:d2:34:53:24:03:d6:46:85:92:a9:3a:04:
1b:c0:12:91:2d:6d:d2:2e:59:ab:9f:1a:53:2e:97:
40:71:b4:e2:07:d8:45:9b:72:11:0a:3f:39:33:ac:
69:38:b2:09:86:1c:9f:84:92:26:5b:ce:c0:61:7d:
68:c6:c4:fc:9c:57:ee:f4:3a:a8:06:d8:80:a2:e4:
58:81:26:4c:7e:de:d3:0e:e2:4b:06:7c:8b:24:2a:
03:c0:70:23:35:11:78:1e:a4:a8:15:ff:49:e1:62:
df:00:a2:1c:91:6f:66:29:bc:69:7e:fb:08:27:a4:
73:0a:30:ca:70:fc:56:25:b2:d6:36:9c:7f:db:a3:
8b:52:59:26:71:e3:8b:6b:91:74:2b:cc:8a:c4:fc:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:34:38:80:C4:17:7F:00:DA:66:72:4D:78:86:B4:49:5C:5E:0E
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7f:44:bf:2a:a0:d0:4b:48:44:eb:10:2d:8f:e8:24:dd:1d:
da:8b:86:6b:e5:01:2c:6a:b6:ba:80:3d:a1:bd:59:49:9a:ad:
1b:4b:9c:95:7e:a8:a4:09:86:55:2a:bf:e1:4e:53:03:00:f9:
a9:c5:a4:49:6b:b3:14:d7:43:88:e1:7c:a9:5d:f9:5e:7e:29:
ed:48:7e:84:ac:3f:6b:34:66:c8:63:32:d0:37:89:f0:43:00:
c7:b8:98:b9:fc:01:9f:db:98:55:d0:25:d6:63:77:e5:40:af:
ed:12:dc:05:7e:0e:92:de:fc:c4:f1:85:ea:9a:b7:17:d8:5c:
99:35:78:1d:6f:db:1f:7d:56:68:e8:84:d6:39:2a:38:bc:80:
5b:21:19:d8:53:1f:72:16:e7:1d:56:7f:64:d8:51:9d:c0:2d:
f8:06:73:46:4d:ac:09:db:0f:69:1d:64:7c:da:aa:a4:ee:5a:
41:a9:36:4f:c9:22:fa:db:84:ba:76:30:13:7a:29:eb:ad:8f:
27:70:51:17:29:93:0b:a6:f3:10:07:a3:5e:d2:00:2d:ae:2f:
0f:df:90:77:ca:1a:bb:c7:b3:db:e7:d8:71:44:ae:38:95:b6:
2d:00:1b:32:fe:e2:84:ba:09:71:3d:e7:bb:a4:d3:5e:9f:6c:
0c:d4:1d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:45 2025 by rpki-client