Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: pRSwliXTitkZjdpYcFUNw0wmqUmV6FFvGpf2ZU2H6cs=
Subject key identifier: 3D:47:22:C5:2E:50:6C:A9:9B:57:18:31:9B:02:15:FB:94:FA:F9:6C
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 0198D6CDCC929DD574AA93DE86C1460DC911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 0A18
Signing time: Sat 23 Aug 2025 12:01:07 +0000
Manifest this update: Sat 23 Aug 2025 12:01:07 +0000
Manifest next update: Sun 24 Aug 2025 12:01:07 +0000
Files and hashes: 1: UKpsyLZnsONm3nziQLW_Dy86-kc.roa (hash: sOSR0eDOaucZOE58pbyPZwUjeC+8MtIsg4Yj+A0vOoE=)
2: bkhY0JpEEO9e7LOCTStEAO3KiFg.roa (hash: nFRZrXuS6GoRY3BCOn9rQkEjbqjSmpEWfOS5j9kS+AQ=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: LU+/+BGTqVuPNuf2AsMBymrorSTd3jWrnzq0aL10Igo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:cc:92:9d:d5:74:aa:93:de:86:c1:46:0d:c9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Aug 23 12:01:07 2025 GMT
Not After : Aug 24 12:01:07 2025 GMT
Subject: CN=3d4722c52e506ca99b5718319b0215fb94faf96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:1d:11:8c:97:63:d6:7d:56:09:e0:8b:7c:
d8:9e:15:1d:e2:9a:3b:3c:d6:f6:ff:01:d8:67:36:
f4:77:b2:99:2f:e7:41:f0:74:e5:d6:bf:cc:0c:e4:
45:71:2f:66:40:87:47:d5:af:6f:37:95:a5:f3:68:
8e:89:52:1a:ca:fb:d7:46:3a:bd:c5:e4:54:c9:82:
73:29:48:1f:b2:c2:ca:93:3d:c5:ce:34:90:d3:55:
cc:90:65:b8:2e:d1:5a:78:7e:ea:4b:60:05:75:53:
c6:c6:45:08:b4:d8:60:51:92:0e:94:e3:30:b7:29:
16:b9:c8:46:b7:4f:88:8d:03:b0:14:5a:ef:ed:23:
06:47:45:6b:5a:10:f4:08:32:c7:18:b2:52:aa:36:
a2:c7:06:44:d4:b4:d5:46:19:9c:55:b9:dd:7e:66:
8d:78:d5:e6:4c:42:0a:63:cb:9b:18:f4:61:2e:dc:
af:83:fa:00:b8:f7:e0:78:fb:98:f0:30:2a:10:84:
51:25:37:44:a1:1b:64:8b:53:fc:fd:12:fc:34:75:
01:fd:3a:6f:67:02:ad:62:fb:a0:45:4a:ea:e9:da:
1f:74:04:03:b3:d8:8d:08:2b:b8:65:7a:8f:38:e0:
49:98:cb:d6:82:80:21:6e:fc:81:21:ac:79:b8:34:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:47:22:C5:2E:50:6C:A9:9B:57:18:31:9B:02:15:FB:94:FA:F9:6C
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:85:1a:56:88:62:97:52:d5:65:67:3e:eb:78:43:45:87:4c:
01:d5:86:53:46:21:94:11:0e:d1:04:50:f9:d8:ed:94:26:22:
40:d2:86:9a:72:17:5b:56:53:08:b7:e4:9f:96:e7:14:38:70:
4a:3a:32:6d:26:86:3c:10:3d:37:56:24:af:f7:1c:e2:eb:86:
a5:3e:07:c1:25:69:26:77:0e:a2:07:bd:aa:d8:c1:c3:b8:62:
69:9e:91:dd:74:e9:e6:e0:0e:b3:77:0e:2e:ec:76:97:ab:e2:
69:9f:28:99:dc:83:18:d4:d6:29:12:9b:fa:46:2a:b1:31:b1:
1b:30:f2:2d:5f:e0:26:81:6e:4d:e8:00:81:c4:d0:d4:4e:7f:
44:1a:3d:11:31:38:d6:87:c9:10:2e:81:fe:f7:08:92:75:93:
ab:6a:f5:24:54:8f:a5:35:fa:17:3f:62:52:fd:1d:50:19:16:
f2:1f:41:e9:a4:23:fa:06:cc:56:8f:18:62:b3:e1:f2:a2:2f:
7f:ac:28:28:50:57:df:80:3e:c8:01:55:0f:14:c4:c3:f6:fe:
6c:8e:fd:87:40:92:a4:da:b6:db:3e:d6:b6:47:7c:24:00:6e:
15:b4:59:cb:01:5e:9a:cd:f5:03:90:c4:25:c3:d2:48:11:c1:
83:d3:31:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzcySndV0qpPehsFGDckRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjgxMzk5OTNiZTY2NWYzYjVkMGY2OTA5ZWYwNThmYThm
OTc5MjIwHhcNMjUwODIzMTIwMTA3WhcNMjUwODI0MTIwMTA3WjAzMTEwLwYDVQQD
EygzZDQ3MjJjNTJlNTA2Y2E5OWI1NzE4MzE5YjAyMTVmYjk0ZmFmOTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNMdEYyXY9Z9Vgngi3zYnhUd4po7
PNb2/wHYZzb0d7KZL+dB8HTl1r/MDORFcS9mQIdH1a9vN5Wl82iOiVIayvvXRjq9
xeRUyYJzKUgfssLKkz3FzjSQ01XMkGW4LtFaeH7qS2AFdVPGxkUItNhgUZIOlOMw
tykWuchGt0+IjQOwFFrv7SMGR0VrWhD0CDLHGLJSqjaixwZE1LTVRhmcVbndfmaN
eNXmTEIKY8ubGPRhLtyvg/oAuPfgePuY8DAqEIRRJTdEoRtki1P8/RL8NHUB/Tpv
ZwKtYvugRUrq6dofdAQDs9iNCCu4ZXqPOOBJmMvWgoAhbvyBIax5uDQgFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1HIsUuUGypm1cYMZsCFfuU+vlsMB8GA1UdIwQY
MBaAFLm4E5mTvmZfO10PaQnvBY+o+XkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEt
N2JjNzNlZWUxNDQ3LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEtN2JjNzNlZWUxNDQ3
LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYUaVohi
l1LVZWc+63hDRYdMAdWGU0YhlBEO0QRQ+djtlCYiQNKGmnIXW1ZTCLfkn5bnFDhw
SjoybSaGPBA9N1Ykr/cc4uuGpT4HwSVpJncOoge9qtjBw7hiaZ6R3XTp5uAOs3cO
Lux2l6viaZ8omdyDGNTWKRKb+kYqsTGxGzDyLV/gJoFuTegAgcTQ1E5/RBo9ETE4
1ofJEC6B/vcIknWTq2r1JFSPpTX6Fz9iUv0dUBkW8h9B6aQj+gbMVo8YYrPh8qIv
f6woKFBX34A+yAFVDxTEw/b+bI79h0CSpNq22z7Wtkd8JABuFbRZywFems31A5DE
JcPSSBHBg9Mxvw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:10:57 2025 by rpki-client