Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
File: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft (raw, json)
Hash identifier: 30kNvnfg+1QNMDZSRH8a7GvOaBJmAR9w6ZS4V7G+0OE=
Subject key identifier: 3E:71:6D:B7:9C:00:76:A2:83:59:33:E7:24:CD:61:58:35:48:F6:07
Authority key identifier: 52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
Certificate issuer: /CN=5259796c5f60c55501e458008611623b5049d479
Certificate serial: 0199FDD9794D812046308336576B108F2319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
Manifest number: FE
Signing time: Sun 19 Oct 2025 19:01:51 +0000
Manifest this update: Sun 19 Oct 2025 19:01:51 +0000
Manifest next update: Mon 20 Oct 2025 19:01:51 +0000
Files and hashes: 1: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl (hash: Nu8/bUr2Mrrsn5/HpG0vsS33ruW9T7jQvxMwuWG14jI=)
2: n6xqmighFn7Vnqg53_v_ZExOLTk.roa (hash: Vp9Yf4e/IJuX8klPo+kJIwSDYNXo9hKqOgWcowfTXuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:79:4d:81:20:46:30:83:36:57:6b:10:8f:23:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259796c5f60c55501e458008611623b5049d479
Validity
Not Before: Oct 19 19:01:51 2025 GMT
Not After : Oct 20 19:01:51 2025 GMT
Subject: CN=3e716db79c0076a2835933e724cd61583548f607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c2:4f:d0:0e:bb:2a:94:b4:6e:89:05:80:72:
66:58:4c:8f:e2:f9:59:a4:c0:93:b1:a7:8f:02:dc:
ef:51:5b:99:76:ef:5e:8f:05:3d:31:f5:9d:82:90:
cf:b8:eb:18:ab:bc:8d:c5:e8:82:75:ab:84:92:b4:
e7:bb:45:8f:75:e9:49:89:bb:96:0b:51:4c:d8:fe:
e2:fb:8a:00:a2:fe:82:e5:9e:e4:86:4a:65:39:a3:
5f:03:42:03:72:bd:d9:ba:83:1c:f2:1e:78:f8:fa:
d9:87:c5:bb:55:f8:06:55:4b:36:28:a9:1e:4a:f0:
8e:b7:ea:96:e5:e5:5c:e2:17:5a:25:66:02:e1:21:
20:9c:18:4f:27:8c:93:05:de:ec:17:73:f1:ab:ab:
f0:74:31:7b:c1:70:21:8c:69:44:2b:cd:a5:fa:49:
b4:d9:80:54:41:e3:39:49:1e:cd:52:fb:79:39:a9:
e6:2a:ad:9d:ce:c9:f1:15:f4:2d:ab:30:0b:da:7f:
53:14:44:4d:f0:a1:e0:2f:1e:9b:80:59:68:d3:c5:
4d:07:72:62:67:38:94:ab:51:21:10:ba:33:3a:42:
51:8e:1c:27:51:a9:53:b2:50:5c:5a:16:91:76:e2:
c0:dd:53:dd:bb:2e:4f:c2:f8:4b:71:86:2c:97:4a:
ff:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:71:6D:B7:9C:00:76:A2:83:59:33:E7:24:CD:61:58:35:48:F6:07
X509v3 Authority Key Identifier:
keyid:52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:17:2b:4e:a8:dc:0c:ac:f2:e0:f7:4f:b9:69:54:52:a6:fc:
d6:06:63:8d:4d:ca:ce:d5:bf:b5:75:7c:69:d8:07:7c:d0:e9:
35:7f:11:ec:c9:fd:3a:d9:98:d7:5e:44:df:dc:b5:aa:c3:59:
87:07:b1:51:76:11:25:9f:3d:30:c4:67:13:ac:97:96:ab:74:
20:70:77:a6:63:4e:60:b8:57:d8:a6:08:55:ea:12:17:4f:3d:
d6:76:20:2b:78:ff:de:fb:4a:b7:34:6e:ec:b5:ef:70:e3:19:
59:d4:88:55:ca:56:be:9e:b1:5a:c8:b7:a5:e9:e7:cc:90:2f:
5c:47:57:64:fa:17:1d:18:5c:56:40:9e:7c:a9:0d:c8:ad:c7:
7e:4a:1a:9e:81:dc:fa:10:25:08:d6:75:e3:c0:0f:b6:16:23:
5f:de:40:56:8f:b4:a9:5e:51:65:89:03:61:51:4a:de:44:33:
cf:5f:51:a3:64:c6:32:e6:7a:cc:90:ae:6e:f1:a8:37:6f:25:
e8:1c:01:24:c3:63:ed:95:15:b5:07:7b:ee:1e:ff:6f:05:c1:
51:79:b9:35:bf:5e:a9:b1:cb:4c:b1:4d:f6:a6:73:f9:82:29:
37:a0:f2:54:2f:0e:c4:76:88:b9:e4:f5:ef:8e:1f:b3:10:fd:
cf:cd:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:19 2025 by rpki-client