Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: xdmP9e/Z2aX3tmd+R9omaLkHyLKLCs68Ha53T/Nyp3Q=
Subject key identifier: 6A:1D:3F:39:B6:30:C6:59:97:21:19:28:62:1F:B8:B9:98:B7:9B:FC
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 0199FBB36F441A31AF44DBDA4067C43A5CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0AA9
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: 41agJ/ulfNnjlIyS/qJD69Asdxzjcr+m1Gw4TQxsOiQ=)
2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=)
3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6f:44:1a:31:af:44:db:da:40:67:c4:3a:5c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=6a1d3f39b630c65997211928621fb8b998b79bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:7e:a1:b7:e0:83:8e:5d:26:4e:2c:3a:0c:
37:d3:e9:ad:1a:b1:ab:c5:9f:f6:5c:d8:01:00:0f:
dd:3a:e1:79:65:c0:52:ad:94:97:59:ab:34:3b:fe:
0a:ef:1d:f5:86:a7:3d:8a:44:29:37:f5:0a:cf:b1:
49:f1:1d:66:9c:a9:6a:e2:52:3c:c5:10:f3:3c:85:
64:72:b5:94:7e:d4:93:85:32:a3:a0:91:d3:f0:9e:
ee:e6:06:db:a6:32:59:63:ce:b1:b7:d6:70:b4:6c:
c3:39:d0:02:b1:d1:27:b9:83:20:32:89:60:45:f0:
c8:e4:d2:3f:9c:61:c6:ab:65:91:27:41:09:7d:f9:
f9:be:68:54:1c:ba:36:34:e0:4a:82:60:49:4c:c2:
82:44:0e:15:7a:ce:42:f6:00:05:be:50:cf:55:73:
66:8d:8b:cb:dd:71:6f:86:b6:f2:0b:0e:83:e9:c4:
33:a3:d4:7c:86:6e:d1:5a:94:96:82:81:1e:51:19:
20:70:7f:b8:13:d1:a2:a4:45:de:36:83:b7:14:20:
f7:61:da:ca:c9:58:a0:8e:6b:ae:9d:4f:de:dd:9b:
c4:7e:1d:aa:1b:e4:d2:68:3a:ac:66:e2:1d:25:e0:
68:2a:54:80:b6:60:f9:a6:9e:7d:94:b0:90:e1:5b:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1D:3F:39:B6:30:C6:59:97:21:19:28:62:1F:B8:B9:98:B7:9B:FC
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:02:15:ed:2f:7c:fc:0a:b7:8e:b8:6a:44:81:ac:84:f3:7f:
fd:18:98:b9:58:ec:6e:ca:3e:70:ae:df:28:83:fe:f9:0a:69:
61:c4:30:e6:ab:c8:a9:6d:63:b4:e4:ef:c1:54:6a:e2:f2:05:
b7:f5:41:3c:ce:43:8c:7f:13:13:1b:1f:d5:89:c5:28:d5:13:
2f:3f:80:c2:e3:f7:ed:3f:2b:9f:27:55:5a:fa:eb:cb:0f:64:
17:43:c3:08:5c:04:72:45:49:8b:36:2e:89:e3:00:c2:87:ef:
f7:90:7a:af:f0:a1:4d:78:65:88:f3:2a:c0:72:9a:47:fe:4a:
9b:f0:b1:d2:da:b6:93:cf:80:6b:1f:85:2e:61:b8:85:aa:e4:
de:c7:18:b7:e9:ba:70:2c:7a:87:f5:65:f5:a8:26:56:30:0d:
42:97:4b:c2:83:fc:04:ee:e9:0d:12:ef:71:cc:93:8b:f8:16:
6d:83:25:02:07:59:80:e9:92:ae:c6:a7:09:e1:4d:31:92:2a:
b2:7a:68:0f:98:3c:24:6a:6e:63:6a:46:27:e8:55:01:76:8c:
cd:69:f5:d5:38:7e:a1:24:f9:52:0e:ee:69:11:5c:a9:76:c3:
43:72:af:b0:20:ee:f8:60:b5:6a:d5:53:b6:ab:3e:e2:69:0a:
b4:84:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:12 2025 by rpki-client