Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
File: ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json)
Hash identifier: yvZOXyfCgx8aZRZIqglYUBDz6bjlijv8K7Cypm6oats=
Subject key identifier: 95:D4:5A:B6:37:5F:B7:E3:D0:F5:58:65:B7:0B:05:22:69:17:74:28
Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
Certificate issuer: /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Certificate serial: 0199FC58AA8EBF253574BBFEB42BD6281B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
Manifest number: 0A65
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: P3b7DFzAl1mF00eFO0q0Hvx6uqg.roa (hash: 4Vw9mbX/VAtbgUX/fX/IcrRcZH092D/s4XK4tYr5SHw=)
2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: oj5wXXBqO9oXnlutqxRr6wqOSQdQxCcH6hC61os2Bwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:aa:8e:bf:25:35:74:bb:fe:b4:2b:d6:28:1b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=95d45ab6375fb7e3d0f55865b70b052269177428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:0f:02:6a:29:b1:8c:29:74:27:4f:bd:d4:
d5:6e:24:7f:f7:a2:74:6a:d2:f9:cb:03:3e:24:bf:
ca:80:c4:58:f7:53:07:b1:35:e8:97:10:39:3c:b9:
17:f8:d6:b1:48:1d:9a:22:dc:c6:9b:2d:f6:0b:94:
21:f8:6f:86:9b:bc:c9:3b:14:d9:6c:d0:e6:a9:33:
e6:ba:cc:1b:53:9f:e9:5e:ad:e6:22:e4:ed:b2:bc:
e1:4a:fa:37:4e:82:c5:97:a1:6f:7c:1c:2a:ad:13:
cf:c7:c7:6a:e6:96:76:2c:1d:d5:d6:7c:bd:44:7f:
6c:00:53:87:61:56:d0:5c:21:22:26:de:a8:8e:20:
e4:bc:5c:e0:2e:a7:96:48:b5:35:e5:72:5c:4f:62:
0c:d5:13:95:86:88:fb:54:e5:9b:25:25:7a:aa:c7:
f6:5a:3f:dc:41:4b:ad:b7:28:04:d5:e2:12:a9:57:
68:24:a9:59:1b:9e:f4:26:39:34:ea:29:27:1e:e3:
dc:47:dc:e4:d6:8b:9f:ad:29:c5:a8:c3:21:21:c9:
7f:92:8d:4d:6d:95:a9:bb:6d:51:72:b1:0a:15:20:
e1:9e:9a:0f:fc:f9:8f:7e:78:b4:de:aa:59:5a:17:
d4:b1:61:a7:d5:2c:d8:d4:10:03:5b:92:9e:8d:28:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D4:5A:B6:37:5F:B7:E3:D0:F5:58:65:B7:0B:05:22:69:17:74:28
X509v3 Authority Key Identifier:
keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fb:db:1b:da:84:8e:67:16:1d:ee:5a:69:e8:c1:66:f5:3e:
db:1d:e7:dc:c8:a8:43:d5:35:bd:a5:01:e8:4f:1d:70:10:d8:
12:ad:8b:d0:a4:d2:8b:be:7f:18:33:29:a6:7a:5e:18:aa:ca:
94:1a:d9:a4:21:13:6b:dd:4d:01:2f:6d:e8:f6:ed:49:9f:4b:
b9:03:b3:2a:d3:67:af:0f:33:ff:72:ae:d1:62:4c:88:0a:e3:
19:13:98:fc:a2:c6:73:d3:db:bb:ca:9a:bb:1e:79:8a:f2:28:
a7:29:49:2d:ba:44:d2:ff:f7:2e:e7:44:b1:ba:a2:35:44:47:
c4:ce:87:c4:9d:da:d4:89:e3:22:33:cf:87:e8:ff:3f:1a:38:
51:95:07:1b:77:d0:32:c0:38:d9:be:b0:7c:50:57:05:fd:47:
4e:bd:a1:6f:b7:d7:aa:b9:fe:83:1f:d3:af:8a:74:2d:69:e4:
33:de:29:21:7d:19:29:15:22:b9:f7:79:0b:5b:89:1e:69:f9:
4f:fb:28:cd:3d:1f:3a:c6:01:17:cb:35:6d:61:34:53:6e:47:
bf:dc:17:5c:5f:96:b4:91:fe:c5:dc:c2:1c:57:ca:dc:b6:40:
a5:c3:0c:3a:6e:a2:50:75:d4:bd:1b:d4:43:7f:4a:4e:32:b1:
90:88:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:46 2025 by rpki-client