Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: fXIZVGjHNdc5SfPDCvkAdWfyhxw7cvMpPFtn4gSouvA=
Subject key identifier: EA:6A:C2:BE:91:B0:FF:F1:83:3F:D4:75:22:AB:49:F1:B5:2A:B1:E1
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 0199FC58DFD50F3FFFF8684C68C964851723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 0AB0
Signing time: Sun 19 Oct 2025 12:01:46 +0000
Manifest this update: Sun 19 Oct 2025 12:01:46 +0000
Manifest next update: Mon 20 Oct 2025 12:01:46 +0000
Files and hashes: 1: UKpsyLZnsONm3nziQLW_Dy86-kc.roa (hash: sOSR0eDOaucZOE58pbyPZwUjeC+8MtIsg4Yj+A0vOoE=)
2: bkhY0JpEEO9e7LOCTStEAO3KiFg.roa (hash: nFRZrXuS6GoRY3BCOn9rQkEjbqjSmpEWfOS5j9kS+AQ=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: bQ06j2M4A7ewn1w1hxwJRINz516T0mPmCVq8M3zvUI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:df:d5:0f:3f:ff:f8:68:4c:68:c9:64:85:17:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Oct 19 12:01:46 2025 GMT
Not After : Oct 20 12:01:46 2025 GMT
Subject: CN=ea6ac2be91b0fff1833fd47522ab49f1b52ab1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:12:09:e6:ce:95:19:4e:46:af:47:03:61:
f8:24:b2:ba:74:5e:42:9d:c8:06:dc:5b:fd:37:e4:
ed:0d:c0:aa:37:28:4f:e0:c2:00:93:ec:7f:74:43:
83:93:af:db:f9:4c:5d:0d:db:da:fc:40:df:04:95:
8b:ed:82:4c:2c:d9:60:38:f6:59:94:8f:b5:6d:f8:
89:e9:7e:d0:57:09:76:ed:cf:ae:b9:af:64:7b:b3:
23:60:78:d9:56:01:be:7e:ed:0f:db:bf:fe:77:8f:
c2:48:59:64:87:ae:ef:64:58:b5:2e:c5:1a:04:ca:
97:2e:0c:2e:8a:5e:95:f4:8c:c8:29:8e:f9:72:4c:
d2:8a:b6:ff:28:4d:69:64:7b:cf:9a:ce:9e:c9:1e:
ad:bc:c4:9b:be:2e:bb:73:e9:a3:2e:87:cf:9a:e2:
87:4d:d7:e1:0b:96:04:f2:41:f2:e0:b9:b0:a3:0d:
1b:5e:ed:33:c8:eb:f7:c9:95:43:78:0b:70:3b:de:
5b:76:57:10:92:62:65:51:5c:ee:7a:5f:0f:00:ec:
de:c1:a0:b7:86:7a:99:a2:13:70:d6:01:a1:2b:7e:
28:26:5e:44:05:af:45:1d:9c:6f:c1:b4:cf:2b:8e:
5a:8c:8c:52:87:17:a2:44:af:d7:30:bd:e7:d4:16:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6A:C2:BE:91:B0:FF:F1:83:3F:D4:75:22:AB:49:F1:B5:2A:B1:E1
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:72:ad:bb:13:09:bd:08:a4:d3:32:48:b6:0b:70:04:72:fb:
ed:a2:f0:5e:1b:39:24:da:62:cb:60:4f:23:1a:0e:bc:03:bf:
98:3c:af:37:e2:13:91:0d:2a:1e:f4:e0:3d:38:3e:de:84:96:
d8:48:c6:ff:d8:1e:61:a1:e7:1a:62:fd:fa:65:4b:52:5c:cc:
93:41:59:c9:73:02:c8:25:23:cd:cc:d9:d4:dd:fb:27:df:56:
d2:cb:b3:49:3d:74:a6:b4:74:15:02:8b:21:7c:22:0c:2c:7c:
ba:60:c6:45:4b:1d:54:64:4f:af:6a:70:9f:00:38:fe:b2:c2:
ac:b5:bb:03:2c:1f:f2:76:68:26:d8:08:3a:51:80:b1:9a:1a:
c0:cf:63:a7:13:86:56:71:c8:7c:58:0c:5c:a8:c9:bb:7f:b6:
65:d1:42:05:9d:de:f0:c4:ff:e2:bd:30:fa:94:0d:ad:9d:90:
58:e9:fa:b5:42:e7:97:73:50:85:d5:af:7d:72:5e:3b:08:c6:
e9:7b:48:05:16:fc:5a:d8:b1:9a:f9:33:5c:18:a5:1a:9a:fa:
ac:0a:17:de:71:1f:12:16:36:cc:a2:d3:5d:0c:5e:7c:0f:52:
54:98:8a:e0:ce:6a:dd:09:cd:b3:cf:df:0d:50:35:e3:1c:a2:
7f:94:1e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WN/VDz//+GhMaMlkhRcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjgxMzk5OTNiZTY2NWYzYjVkMGY2OTA5ZWYwNThmYThm
OTc5MjIwHhcNMjUxMDE5MTIwMTQ2WhcNMjUxMDIwMTIwMTQ2WjAzMTEwLwYDVQQD
EyhlYTZhYzJiZTkxYjBmZmYxODMzZmQ0NzUyMmFiNDlmMWI1MmFiMWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNISCebOlRlORq9HA2H4JLK6dF5C
ncgG3Fv9N+TtDcCqNyhP4MIAk+x/dEODk6/b+UxdDdva/EDfBJWL7YJMLNlgOPZZ
lI+1bfiJ6X7QVwl27c+uua9ke7MjYHjZVgG+fu0P27/+d4/CSFlkh67vZFi1LsUa
BMqXLgwuil6V9IzIKY75ckzSirb/KE1pZHvPms6eyR6tvMSbvi67c+mjLofPmuKH
TdfhC5YE8kHy4Lmwow0bXu0zyOv3yZVDeAtwO95bdlcQkmJlUVzuel8PAOzewaC3
hnqZohNw1gGhK34oJl5EBa9FHZxvwbTPK45ajIxShxeiRK/XML3n1BY1yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpqwr6RsP/xgz/UdSKrSfG1KrHhMB8GA1UdIwQY
MBaAFLm4E5mTvmZfO10PaQnvBY+o+XkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEt
N2JjNzNlZWUxNDQ3LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEtN2JjNzNlZWUxNDQ3
LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnKtuxMJ
vQik0zJItgtwBHL77aLwXhs5JNpiy2BPIxoOvAO/mDyvN+ITkQ0qHvTgPTg+3oSW
2EjG/9geYaHnGmL9+mVLUlzMk0FZyXMCyCUjzczZ1N37J99W0suzST10prR0FQKL
IXwiDCx8umDGRUsdVGRPr2pwnwA4/rLCrLW7Aywf8nZoJtgIOlGAsZoawM9jpxOG
VnHIfFgMXKjJu3+2ZdFCBZ3e8MT/4r0w+pQNrZ2QWOn6tULnl3NQhdWvfXJeOwjG
6XtIBRb8WtixmvkzXBilGpr6rAoX3nEfEhY2zKLTXQxefA9SVJiK4M5q3QnNs8/f
DVA14xyif5Qegg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:03 2025 by rpki-client