Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File: UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier: yj6t7Yjj/wz0sQ6Rrdn5b5ZPt7XD18YWziAZaGEZVlU=
Subject key identifier: 91:1D:AB:BF:4E:80:8C:E4:B7:9E:30:0F:C0:BC:27:DA:12:94:7E:15
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial: 0199FEB5196E46C1B5BD2CBF9CE8CE9594DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number: 0189
Signing time: Sun 19 Oct 2025 23:01:45 +0000
Manifest this update: Sun 19 Oct 2025 23:01:45 +0000
Manifest next update: Mon 20 Oct 2025 23:01:45 +0000
Files and hashes: 1: HmBHMAAoUy9qKm5EF-apsYNvL-Y.roa (hash: l1nynbFOV66i2gHUQws1+HFlLSzuk9i9xbBDIJI0tVk=)
2: RJxr8FfYNXMH1JQVOwgGzONUVKU.roa (hash: DR8gGJ69xVF1vRltrSd3W6LpV3g9f3689+1YFT6WiyI=)
3: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: TTpp6tDlXt5VZ1/4MbfI35COtc4AcpqqYI4RMVAl1pw=)
4: VD-LSAHFyPqWUZ2Vjm-KKmr8eKM.roa (hash: rKVzKhQ4K6eAovmJ6rMHEI/c6Cx2HmuMrN4fBqn4Zxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:19:6e:46:c1:b5:bd:2c:bf:9c:e8:ce:95:94:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Validity
Not Before: Oct 19 23:01:45 2025 GMT
Not After : Oct 20 23:01:45 2025 GMT
Subject: CN=911dabbf4e808ce4b79e300fc0bc27da12947e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:e0:61:97:25:9a:33:8d:6c:5a:5b:f9:53:
6d:5a:ec:b9:d2:44:69:b2:cb:b6:04:6b:f9:12:85:
48:00:aa:12:9a:46:07:66:75:bb:ef:a7:59:1e:20:
94:68:52:2d:5a:90:5c:32:44:35:9c:25:26:db:6e:
ff:7b:e5:34:5f:71:db:c9:dd:67:56:db:15:e5:12:
69:e8:40:99:d9:51:40:3a:31:46:40:af:b5:42:b6:
01:c8:b1:7f:03:87:db:9a:7c:20:d4:b9:31:9d:2a:
91:d2:92:9c:e7:06:28:ed:60:f8:eb:2d:5f:34:1d:
2c:94:e7:be:64:3b:ff:b7:67:c9:1e:c3:ef:03:89:
a8:74:b6:9d:e5:7e:ad:75:df:f9:89:bb:7b:f4:fd:
eb:d5:f4:5a:7c:b0:76:1d:6d:80:38:b7:a7:10:7c:
36:3f:d0:d3:dd:77:17:8d:c7:ab:0e:27:fe:a0:fa:
a6:7c:d6:97:6f:25:da:f2:61:57:08:d9:f1:1f:68:
67:58:d6:f1:04:00:e3:7d:da:83:e1:44:33:c5:de:
bf:0f:c0:e7:f4:e2:d7:66:ff:47:5b:29:68:78:3a:
3e:ea:fc:ea:19:91:ec:6f:91:cb:d9:ec:5a:38:7b:
61:2c:2c:21:d7:f1:46:3b:d2:bf:34:bb:32:e4:9f:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1D:AB:BF:4E:80:8C:E4:B7:9E:30:0F:C0:BC:27:DA:12:94:7E:15
X509v3 Authority Key Identifier:
keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:89:85:2b:a2:7b:25:19:13:db:14:a2:bf:db:30:92:4d:84:
76:1b:58:1d:9a:6a:b6:fe:78:d4:e7:c5:4d:3d:5c:ef:a3:12:
02:0a:4d:ea:29:04:a7:4c:f5:ee:fb:c1:20:c6:d8:4d:40:91:
e1:dc:c6:d4:de:e9:40:95:62:db:cc:7b:1b:1e:9e:f9:70:03:
43:3e:c5:b1:14:d2:0f:8b:28:c0:c5:ce:35:1e:87:e1:d5:dc:
de:aa:38:c0:40:c2:c3:b2:70:81:32:64:15:f6:f5:6d:71:9e:
5c:3e:a4:60:58:4c:5c:68:8a:39:66:44:dd:d0:4b:91:a9:27:
8b:3a:ba:62:e8:97:fc:f1:5a:8f:2c:6f:3b:e7:0c:fa:ef:a1:
79:e9:d2:4a:43:b7:bc:84:41:40:e6:88:f8:53:31:24:a2:31:
f0:9d:5f:3f:38:f8:59:97:b6:82:2d:d9:f7:9e:df:cc:2c:74:
e7:d8:5e:34:34:d4:fa:a4:aa:00:42:9c:aa:a1:59:5d:ef:48:
50:db:f7:eb:a4:09:eb:ca:75:4f:f8:4d:8c:d8:cd:8c:24:8c:
28:5d:19:81:7a:67:04:77:04:d6:a3:b1:40:65:87:88:ae:cb:
b7:af:49:db:40:72:25:ef:50:cf:4d:22:08:70:8a:ad:cd:45:
9c:41:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:17 2025 by rpki-client