Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: FRuu1kjidKOpDhAnKPiSQH24oxICNWUoCKcPpYbBUow=
Subject key identifier: DD:A7:C1:59:A3:3A:6B:28:D7:9E:C5:7E:9E:08:D7:F7:26:A5:BB:49
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 0198D65F3C5C356AFD77E2C3D81A2EFC4651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0A11
Signing time: Sat 23 Aug 2025 10:00:22 +0000
Manifest this update: Sat 23 Aug 2025 10:00:22 +0000
Manifest next update: Sun 24 Aug 2025 10:00:22 +0000
Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: KQeKIOAs/7lrKxi+JTzc0i3M0zgVw4zcxmk0Qvad8xw=)
2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=)
3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3c:5c:35:6a:fd:77:e2:c3:d8:1a:2e:fc:46:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Aug 23 10:00:22 2025 GMT
Not After : Aug 24 10:00:22 2025 GMT
Subject: CN=dda7c159a33a6b28d79ec57e9e08d7f726a5bb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:50:7e:f5:9e:f3:13:fb:7b:0b:9f:20:54:05:
c6:71:35:ff:fd:8e:81:3f:ac:d7:8e:9c:40:5f:8a:
8f:61:e7:16:14:13:bb:0b:15:c5:75:81:ea:71:43:
79:99:8b:ac:67:ad:87:43:04:84:a7:fb:25:0d:11:
b7:ea:b7:38:68:bd:38:05:8d:8f:ab:ae:84:e1:8a:
fa:8d:82:fb:e3:7c:54:b0:ef:28:6a:0d:e5:57:e1:
04:37:fb:8e:88:39:63:f5:4e:1e:e3:99:61:c8:b7:
6a:ed:c0:e0:e5:d6:64:78:d4:bf:61:d8:fe:33:8d:
33:db:34:9d:7b:ce:50:f5:ac:5e:ce:91:d4:ea:05:
66:fa:48:18:7c:89:30:89:71:be:42:0a:94:63:8a:
47:60:25:64:cf:bc:b5:b4:e1:ab:36:1b:a7:10:3a:
f5:6c:5c:1b:6e:b8:40:ff:1e:48:83:22:fb:68:4f:
4a:c1:a7:ae:ce:a6:a7:4f:bb:d5:d8:b5:05:8a:e3:
b1:fd:c5:06:6b:4c:a5:2e:27:d1:c3:21:f9:ae:cd:
97:2c:22:7d:07:18:d2:23:d0:66:8a:ea:f1:e3:d6:
a6:d7:5e:df:32:44:9b:76:cc:96:11:7d:22:2a:69:
88:0e:fa:3e:8f:f5:fa:b3:1e:bb:43:93:16:45:15:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A7:C1:59:A3:3A:6B:28:D7:9E:C5:7E:9E:08:D7:F7:26:A5:BB:49
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6e:1f:9a:fe:05:8f:7a:e9:cf:17:d8:df:4f:ab:cc:7d:6d:
b6:aa:02:20:a5:4a:e6:b6:e0:f0:fd:1a:b6:60:3d:07:8b:b4:
49:3b:e3:de:6e:46:57:a0:a9:c2:06:00:7e:05:2f:ec:a2:7f:
3c:dd:29:02:21:d3:67:f6:79:d5:c3:6c:8a:cc:b3:59:fb:a3:
37:33:49:af:9e:35:62:e1:9d:6e:db:70:b4:0c:a6:a2:dd:04:
02:0e:1f:11:a7:31:30:47:bb:44:f5:1b:94:a9:e4:82:e1:29:
75:38:9e:c1:0d:7b:3d:8e:c2:b8:b1:69:db:d8:e1:eb:4a:89:
80:93:21:ff:91:4c:f2:1d:d8:42:3e:53:71:f0:51:0b:41:21:
3c:d1:fc:f5:cd:6c:d8:0e:58:f8:80:96:21:ba:2c:41:56:87:
39:ea:26:2b:ae:d0:3a:47:55:68:80:56:31:2a:54:8d:db:ed:
3b:5d:c3:0f:78:ed:4b:e8:a4:2c:d1:db:b9:1e:9c:11:2a:be:
61:ee:27:5b:42:1e:27:dd:c3:6b:0f:62:08:1f:e4:d3:d1:33:
c9:de:8c:34:bb:45:91:d3:82:1a:d9:67:5c:b4:c0:c9:56:f8:
b8:7c:51:af:30:cb:0e:43:ad:af:9f:90:71:b1:bb:dd:5f:23:
1d:e5:09:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:21 2025 by rpki-client