Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File: UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier: 2I8FXZsqeZ6AipTPnDcI1ywhkNXO4su9ej4wOZ2EBrQ=
Subject key identifier: 67:F9:B8:51:8E:B1:1F:5A:FB:0A:CE:7D:A6:87:4B:C7:A6:8D:46:1F
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial: 0199FC8F45BB5330D7E77636F9BEF322F1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number: 0A50
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: C8OuOurMHam6ULOHJv9GhDHbke0.roa (hash: FCUaWvRRTTPQBQKJI7hbkOja4mLEhLWKn2frcis10m4=)
2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: XBMRfKeG3dQdArO2+HN4n0wRVhJAcNfawj+EHIe6ux0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:45:bb:53:30:d7:e7:76:36:f9:be:f3:22:f1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=67f9b8518eb11f5afb0ace7da6874bc7a68d461f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:8b:83:fb:2e:83:6d:a8:5f:94:5c:66:14:
f1:5d:a7:b3:65:36:9a:03:82:c7:c4:1b:c7:68:6d:
36:d3:13:bb:9f:65:85:c8:08:eb:7a:6c:ba:f5:48:
9b:6d:3a:24:7f:d6:ec:e2:78:f5:e1:de:44:f1:ef:
31:86:9b:50:ca:b3:86:8c:ca:9b:01:da:63:13:90:
28:60:78:1c:32:b8:56:a7:09:e4:a5:97:5d:36:aa:
2b:33:07:18:5b:66:b4:ff:10:73:b3:6b:95:d3:c3:
6f:dd:38:34:05:9f:52:b6:34:f1:f1:7b:2a:65:51:
ed:45:41:31:67:c0:26:7c:80:32:c4:5e:d6:56:92:
51:ae:f6:cb:36:55:86:77:ab:56:13:96:1a:38:c0:
c0:7c:ea:e2:46:d7:1b:b8:38:09:9f:57:77:3b:f6:
d5:21:ef:e9:2b:da:5b:86:c4:95:8c:12:c9:2f:fd:
ad:ef:93:28:0a:f7:45:84:2b:a4:c9:80:0e:06:4c:
2f:9a:cd:5a:11:9c:14:6f:47:81:3a:a7:d3:75:8e:
4b:f1:51:dc:ee:10:18:1c:9b:e7:64:ec:42:2a:69:
27:c4:50:50:61:a9:7f:77:e3:88:67:39:89:29:b0:
50:2c:82:d8:ae:3c:8c:93:f6:8e:57:34:df:b2:c3:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F9:B8:51:8E:B1:1F:5A:FB:0A:CE:7D:A6:87:4B:C7:A6:8D:46:1F
X509v3 Authority Key Identifier:
keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:41:ad:28:53:42:6b:9f:53:97:f6:37:83:92:27:b1:27:dd:
71:f3:7f:1b:1a:ff:d6:5f:29:64:75:49:0b:f8:a9:f8:29:ea:
33:35:ef:94:71:00:5e:17:f7:18:51:8f:42:42:7b:ca:55:07:
88:76:a1:27:5e:3d:01:55:9a:d5:0d:5f:11:96:4e:9e:1f:c6:
45:d3:b6:83:78:b1:b9:4d:67:63:d0:a0:cb:99:6b:8d:0b:1e:
3b:d0:d1:d1:19:db:7e:19:a3:1b:24:a8:4f:3b:1d:ab:f4:19:
82:ec:3c:6b:be:bd:d8:56:9f:4c:05:88:fd:dc:48:b7:82:bf:
c2:6d:30:1b:1d:16:1e:b6:53:b8:22:97:9a:45:44:3a:1a:ab:
d8:70:a9:67:4e:45:42:1c:52:43:ab:4b:ac:c7:8a:65:b6:d5:
07:65:3b:6f:8f:a7:45:09:d3:91:41:64:e5:28:c3:88:d1:cc:
fb:9d:46:94:dc:57:12:a7:c3:82:35:7a:a9:49:3e:40:d9:a8:
50:7d:e2:15:cb:3b:19:11:b9:44:48:c0:37:46:8b:48:51:4b:
15:14:e3:8d:59:31:0e:f2:64:f7:52:29:c5:02:34:c9:c9:f3:
f2:39:4a:f3:05:61:01:ed:a7:f0:d3:b8:26:3b:c2:5f:12:af:
33:b2:ee:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:23 2025 by rpki-client