Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft
File: ubrpYJaypQez1LDCdLwv9Ynp-aI.mft (raw, json)
Hash identifier: ofaGl9Fti2KernmP7Hn7eKEVVs4fm8/MjCFT2IyWPWc=
Subject key identifier: 70:AC:80:FC:E3:9D:14:F6:AA:CD:50:29:45:77:41:45:BD:B8:F1:E7
Authority key identifier: B9:BA:E9:60:96:B2:A5:07:B3:D4:B0:C2:74:BC:2F:F5:89:E9:F9:A2
Certificate issuer: /CN=b9bae96096b2a507b3d4b0c274bc2ff589e9f9a2
Certificate serial: 0199FE1038CB6456AF5B7C8F1BB9C7172B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubrpYJaypQez1LDCdLwv9Ynp-aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft
Manifest number: E9
Signing time: Sun 19 Oct 2025 20:01:39 +0000
Manifest this update: Sun 19 Oct 2025 20:01:39 +0000
Manifest next update: Mon 20 Oct 2025 20:01:39 +0000
Files and hashes: 1: ubrpYJaypQez1LDCdLwv9Ynp-aI.crl (hash: nsKdy5OjYVy8o9jtvi+GB9KHxiRdO78zj74Z8wV1hLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubrpYJaypQez1LDCdLwv9Ynp-aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:38:cb:64:56:af:5b:7c:8f:1b:b9:c7:17:2b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9bae96096b2a507b3d4b0c274bc2ff589e9f9a2
Validity
Not Before: Oct 19 20:01:39 2025 GMT
Not After : Oct 20 20:01:39 2025 GMT
Subject: CN=70ac80fce39d14f6aacd502945774145bdb8f1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f9:f0:0e:dd:36:64:2f:dc:e4:a3:11:24:45:
b1:a6:9e:e0:1b:1e:07:6e:28:44:0f:7b:40:eb:0c:
eb:4f:ab:f0:cc:80:52:3d:6b:73:e1:33:db:e8:0f:
7a:61:ce:37:cb:fa:25:4e:e0:4d:36:4e:78:37:97:
3c:f4:e9:13:3e:4f:44:a6:70:da:53:e9:ff:c5:2a:
c7:9f:16:41:49:d6:11:68:b9:08:09:fa:6b:9b:8c:
52:28:70:45:a3:60:61:c5:ed:06:6d:e3:74:99:92:
60:3d:b1:70:b5:7e:99:fc:bd:46:06:68:2a:da:45:
6c:c9:78:d5:51:88:79:35:e5:ca:0c:3e:b5:87:99:
d2:a6:02:2e:d2:7a:f3:5b:1c:77:a1:25:6c:26:a8:
f0:53:68:67:0c:31:75:52:4e:36:0e:ec:d7:84:2a:
30:fd:82:4c:98:77:3d:d9:9c:4d:81:a9:e6:67:42:
48:0e:36:cf:12:46:51:bc:f4:20:a9:ba:55:df:be:
81:ec:37:42:d7:6b:91:46:01:be:a8:b3:be:02:43:
0f:76:3f:54:57:de:8f:75:a8:a5:b3:a8:e7:55:c1:
9d:11:f4:8a:0e:e5:28:ad:79:0b:48:ef:a8:94:61:
42:4f:d6:ef:31:f6:6d:0c:d9:3c:f5:fd:3a:84:b6:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AC:80:FC:E3:9D:14:F6:AA:CD:50:29:45:77:41:45:BD:B8:F1:E7
X509v3 Authority Key Identifier:
keyid:B9:BA:E9:60:96:B2:A5:07:B3:D4:B0:C2:74:BC:2F:F5:89:E9:F9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubrpYJaypQez1LDCdLwv9Ynp-aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d7:9d:20:79:bc:72:dc:87:56:37:ac:b0:cf:4b:f5:93:e8:
af:af:55:60:4f:48:e7:a4:c9:03:90:47:3c:5d:c9:be:ae:09:
ed:a9:8b:82:94:c5:b7:7b:6b:95:18:ff:a7:e0:83:b1:06:5b:
93:36:5b:4b:c0:29:91:fd:27:dc:bd:2d:93:ac:b5:1f:3c:32:
81:b4:7d:8c:f3:fb:ec:f0:f5:22:96:a2:40:47:29:4a:44:4b:
78:a5:f6:3e:a4:64:8f:e6:c8:0d:80:28:61:94:2c:7c:79:22:
62:bf:8e:01:69:a4:7c:da:ac:15:02:e6:67:47:ef:61:0b:95:
57:4a:d1:8d:78:9e:94:1d:cc:d5:49:a5:68:c3:be:bf:aa:ba:
7f:dd:e9:58:b9:a3:87:b7:e3:ab:e9:d6:ab:00:b7:63:9e:88:
e2:ee:01:92:55:cb:91:bd:50:63:dd:43:eb:82:c3:33:98:a9:
9a:ef:f2:b3:0d:84:79:67:24:85:ef:e8:1e:fb:6c:cf:4c:c1:
cb:59:3c:34:fb:78:19:90:b1:60:b9:76:58:9d:fa:e3:a1:4b:
43:72:ec:c5:07:4b:1b:dc:c6:a5:21:47:f5:3f:76:94:8e:2e:
bc:88:b5:c9:f3:f6:3e:b4:a8:01:c2:fa:02:e4:ae:02:6f:e9:
86:e9:47:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EDjLZFavW3yPG7nHFyuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YmFlOTYwOTZiMmE1MDdiM2Q0YjBjMjc0YmMyZmY1ODll
OWY5YTIwHhcNMjUxMDE5MjAwMTM5WhcNMjUxMDIwMjAwMTM5WjAzMTEwLwYDVQQD
Eyg3MGFjODBmY2UzOWQxNGY2YWFjZDUwMjk0NTc3NDE0NWJkYjhmMWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vnwDt02ZC/c5KMRJEWxpp7gGx4H
bihED3tA6wzrT6vwzIBSPWtz4TPb6A96Yc43y/olTuBNNk54N5c89OkTPk9EpnDa
U+n/xSrHnxZBSdYRaLkICfprm4xSKHBFo2Bhxe0GbeN0mZJgPbFwtX6Z/L1GBmgq
2kVsyXjVUYh5NeXKDD61h5nSpgIu0nrzWxx3oSVsJqjwU2hnDDF1Uk42DuzXhCow
/YJMmHc92ZxNganmZ0JIDjbPEkZRvPQgqbpV376B7DdC12uRRgG+qLO+AkMPdj9U
V96Pdails6jnVcGdEfSKDuUorXkLSO+olGFCT9bvMfZtDNk89f06hLZkaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCsgPzjnRT2qs1QKUV3QUW9uPHnMB8GA1UdIwQY
MBaAFLm66WCWsqUHs9SwwnS8L/WJ6fmiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJycFlKYXlwUWV6MUxEQ2RMd3Y5WW5wLWFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zNGU3NTktYzllMy00NWJhLTg4MWIt
MDg3Mzg2NWU0NDMyLzEvdWJycFlKYXlwUWV6MUxEQ2RMd3Y5WW5wLWFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zNGU3NTktYzllMy00NWJhLTg4MWItMDg3Mzg2NWU0NDMy
LzEvdWJycFlKYXlwUWV6MUxEQ2RMd3Y5WW5wLWFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNedIHm8
ctyHVjessM9L9ZPor69VYE9I56TJA5BHPF3Jvq4J7amLgpTFt3trlRj/p+CDsQZb
kzZbS8Apkf0n3L0tk6y1HzwygbR9jPP77PD1IpaiQEcpSkRLeKX2PqRkj+bIDYAo
YZQsfHkiYr+OAWmkfNqsFQLmZ0fvYQuVV0rRjXielB3M1UmlaMO+v6q6f93pWLmj
h7fjq+nWqwC3Y56I4u4BklXLkb1QY91D64LDM5ipmu/ysw2EeWckhe/oHvtsz0zB
y1k8NPt4GZCxYLl2WJ3646FLQ3LsxQdLG9zGpSFH9T92lI4uvIi1yfP2PrSoAcL6
AuSuAm/phulHzQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:58 2025 by rpki-client