Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier: OQ0vaVDoPcXvyvWU00b632+bpxIFzKYNysC1vPQ22lg=
Subject key identifier: 86:F0:BB:97:19:CE:E2:9C:8B:B4:9F:78:24:4C:AC:EA:AE:1B:71:95
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial: 0199FAD7BA2533E9D48805CB422B885F2341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number: 0304
Signing time: Sun 19 Oct 2025 05:01:05 +0000
Manifest this update: Sun 19 Oct 2025 05:01:05 +0000
Manifest next update: Mon 20 Oct 2025 05:01:05 +0000
Files and hashes: 1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=)
2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: 6YgGIpZtwu4kWzprj/jRrgmHJIHqwSfqeiqkh7G2qHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ba:25:33:e9:d4:88:05:cb:42:2b:88:5f:23:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Validity
Not Before: Oct 19 05:01:05 2025 GMT
Not After : Oct 20 05:01:05 2025 GMT
Subject: CN=86f0bb9719cee29c8bb49f78244caceaae1b7195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bc:09:e8:bd:37:76:e2:1d:ee:c1:77:98:e8:
1b:0c:bf:86:b6:a8:b7:e1:58:d9:3c:68:8c:79:70:
c8:e0:3d:9b:8e:ff:47:e2:9c:36:35:b6:7f:f5:cd:
19:9c:6f:ec:ca:a7:75:1b:b4:2c:9a:ef:79:ad:5f:
10:f0:1f:4a:76:99:7a:93:ed:39:4a:97:c4:9f:59:
84:bc:32:de:76:bb:8a:e7:f3:5b:2a:7d:97:90:cc:
bc:5c:70:a0:4d:4b:49:81:38:a2:aa:38:52:51:2f:
fa:78:b5:08:05:e3:44:8a:34:cb:0f:10:96:a6:a8:
37:02:60:ca:1c:61:e3:b6:65:69:72:20:15:88:79:
56:f9:9e:c1:a7:9c:b4:d7:52:6f:83:52:86:c5:60:
61:d3:c7:41:fa:79:76:b1:b6:1f:fb:d2:a5:7f:7c:
7a:03:e1:c4:e4:dd:81:f0:f8:3e:18:8f:d2:c3:8a:
ab:06:62:4f:6e:7b:95:42:f4:02:53:34:42:a4:61:
5a:67:55:cd:4a:0c:39:6c:2e:95:f3:9c:a4:eb:5d:
ec:18:99:c1:06:1a:97:ab:e4:67:e4:8a:f6:6d:30:
6d:af:19:43:41:f5:6e:53:37:65:03:41:2d:31:04:
d9:09:55:ad:77:00:34:b4:82:ce:8d:5b:e0:ec:28:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:BB:97:19:CE:E2:9C:8B:B4:9F:78:24:4C:AC:EA:AE:1B:71:95
X509v3 Authority Key Identifier:
keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c0:95:18:ee:9e:d6:bb:64:96:23:46:b0:55:d6:06:28:4f:
90:2e:32:d4:39:44:2c:0d:e5:99:b7:b4:6e:a4:36:24:8c:da:
cf:d6:1d:8e:20:cf:44:c4:1d:5a:02:b8:51:9a:8f:f9:08:a4:
d3:a2:a9:7d:ae:f5:7c:e3:a4:34:ab:6a:4c:7f:fd:e9:d9:6e:
19:3c:c9:da:7d:41:f1:de:cf:93:6b:f6:26:5a:35:cf:98:aa:
36:3d:96:01:2d:09:4b:6b:e2:7e:0b:b5:f4:ef:5a:b8:3b:c0:
16:0f:9d:11:3a:86:6e:d3:01:db:ff:e8:d1:58:14:4b:4c:5c:
7c:05:9f:c1:cf:a7:1b:b2:1e:48:cc:79:4d:8e:df:4e:1d:12:
25:cd:55:1d:af:c9:4c:c3:3a:a3:b9:a4:77:c0:12:cb:35:2a:
40:16:64:fa:7f:64:9c:2c:89:51:05:7c:36:5b:37:66:5e:7b:
74:1d:16:f3:e8:0f:1a:9c:12:24:db:68:9a:39:7e:c7:37:a3:
0c:52:d5:c3:03:14:24:f6:16:37:56:25:af:2e:b2:41:9c:48:
40:d1:31:92:df:0a:55:5f:2d:d8:98:cc:b1:60:48:5c:49:80:
c3:46:0b:2c:3c:83:dc:bd:bb:4b:59:69:0e:1e:fb:63:5f:b1:
4d:4f:b7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:42 2025 by rpki-client