Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
File: UKiPmoNBAa34dwN6UcgdEzqpRuw.mft (raw, json)
Hash identifier: g1XpNXTSRvY0uiUdq4BnY2InHyQh2BzromCvuagpVMg=
Subject key identifier: B7:B3:5D:86:29:9D:C8:3D:CA:E5:33:AC:0F:43:2A:C1:19:02:A5:34
Authority key identifier: 50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
Certificate issuer: /CN=50a88f9a834101adf877037a51c81d133aa946ec
Certificate serial: 0199FBEBDA5E0B21DEDF2FB9F45F44A5BAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
Manifest number: 0E6D
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: UKiPmoNBAa34dwN6UcgdEzqpRuw.crl (hash: qM3ky1V8V49IWeu4QC5+3FZnEkI4L+aoCulFClmlsVs=)
2: kc-RSMe4Oew5F8NEK8PnK5Ztook.roa (hash: RrPN8D12kwMiREonpEUwGrZPp2WKXYrir6fymPU5Gvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:da:5e:0b:21:de:df:2f:b9:f4:5f:44:a5:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a88f9a834101adf877037a51c81d133aa946ec
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=b7b35d86299dc83dcae533ac0f432ac11902a534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:fc:ab:58:c5:78:81:dd:d0:78:ba:6b:13:
9d:49:f0:99:46:5a:73:0c:eb:35:48:61:90:eb:d9:
39:ea:1c:c7:cf:e5:2b:2b:4f:11:bb:0e:32:26:e8:
45:b0:57:ca:a8:17:4a:29:6a:de:dd:24:9b:40:82:
47:e4:2a:f1:29:39:e8:4e:b4:5e:da:6e:96:7d:82:
aa:80:9a:38:0a:1f:e8:4b:91:d3:db:4d:cf:63:cc:
8b:7b:dc:0a:d4:67:09:e8:4e:97:ca:fa:fc:c0:bb:
fe:2a:74:27:22:4f:41:05:28:cf:a3:af:e7:d0:14:
5d:e4:87:97:84:62:05:f5:a3:95:f9:31:a9:a0:40:
c9:8a:58:2b:f3:b8:a0:97:39:8a:2d:e7:d3:8a:85:
1a:e0:2e:f5:48:c6:cb:6a:bb:b6:61:f0:0a:15:c4:
e9:10:28:ad:7f:59:6b:dd:4f:4e:74:31:e0:99:f7:
e6:ed:41:25:cc:34:8b:1c:a8:36:0f:ec:fd:41:7d:
5a:b7:89:81:9f:70:52:14:a1:3d:50:2d:87:ae:e0:
08:93:e9:9a:ba:e5:35:35:1d:26:7a:5c:f7:c1:b2:
a4:9c:e3:f3:b0:69:23:20:fa:30:64:0f:1f:19:85:
6a:ef:8c:29:87:45:e9:a7:b0:c5:c3:12:08:35:8d:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B3:5D:86:29:9D:C8:3D:CA:E5:33:AC:0F:43:2A:C1:19:02:A5:34
X509v3 Authority Key Identifier:
keyid:50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d1:35:d4:44:63:b2:84:19:70:36:eb:ae:ef:67:99:4e:0a:
5b:3f:67:c6:c6:21:a2:00:e2:07:bf:66:01:67:08:b1:93:8d:
f5:c0:1e:0d:88:b6:36:69:fb:38:6a:44:49:b1:59:fa:3c:83:
35:8f:6f:e2:c3:6e:f8:4c:01:ef:20:fd:c0:5c:40:58:06:d9:
70:cc:25:00:c7:cf:e7:2f:f8:7a:df:e0:a3:24:21:69:7e:9d:
ab:93:0d:76:ff:e7:62:06:44:19:66:31:1c:82:b3:9f:21:b2:
b1:42:fe:e6:28:96:6a:3b:cf:b2:a7:db:a0:19:f0:69:fb:20:
62:a8:d8:aa:3b:13:e4:47:ed:3f:ac:57:b2:59:97:07:8b:5f:
57:fb:a7:43:3a:33:ab:af:da:fb:27:8e:23:f3:5f:45:b8:cb:
87:cc:14:38:a6:2b:7f:6b:92:7a:da:74:f3:bd:f8:f1:d2:7f:
62:b6:23:10:24:e6:5b:51:08:2d:11:3b:e7:3d:d0:d5:8e:2a:
1b:11:cb:bf:f8:79:75:b5:6b:6e:a6:59:2a:24:be:1d:8d:91:
d8:4d:6b:c9:f3:2e:2c:a2:47:72:c5:d1:04:d7:50:f7:c2:50:
a2:1b:f2:04:0f:62:64:68:e0:e5:86:ea:94:3a:c0:86:1d:f3:
b3:de:c0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:19 2025 by rpki-client