Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
File: _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json)
Hash identifier: Lu0oCkFp2wmJsqc8NmhsfzwLiNqAVf896idZ1PiUT6s=
Subject key identifier: 3B:32:3F:5F:47:1B:F8:05:B3:C3:5C:21:3E:2A:01:B1:75:3B:DB:0C
Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
Certificate issuer: /CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Certificate serial: 0199FAD7E05124F06F9BD0C37055B054DC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
Manifest number: 43
Signing time: Sun 19 Oct 2025 05:01:15 +0000
Manifest this update: Sun 19 Oct 2025 05:01:15 +0000
Manifest next update: Mon 20 Oct 2025 05:01:15 +0000
Files and hashes: 1: IV6LAMTesDGR72HXRT_RM2ewtd0.roa (hash: Ji82TeFvw2AWO7ouVte9FvWBgNe+1lXjlT4zAWwBKBg=)
2: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: XTnRH2iJxZpClTw6yjTCHLGY1UiNHRJrcwojrQWWaNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:e0:51:24:f0:6f:9b:d0:c3:70:55:b0:54:dc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Validity
Not Before: Oct 19 05:01:15 2025 GMT
Not After : Oct 20 05:01:15 2025 GMT
Subject: CN=3b323f5f471bf805b3c35c213e2a01b1753bdb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:1b:b8:3b:ae:58:cb:4c:a1:c8:ae:03:6d:
23:51:3f:4a:cb:09:d6:8c:4a:0d:b0:0d:d5:86:64:
cd:5a:88:bf:b5:5a:88:8a:38:6f:35:dd:75:33:57:
a2:e5:1b:cf:1a:8f:db:7f:e1:2e:fb:76:5f:69:ca:
19:d7:c4:a5:e0:39:8b:d9:9d:ce:a4:fd:2d:17:df:
2d:08:a9:fb:93:23:8d:56:58:47:28:23:87:25:b6:
96:05:2e:b1:fb:f0:f3:59:03:55:48:93:16:f4:b4:
c8:8c:f2:02:82:61:97:9b:70:d4:96:ec:af:dc:c4:
d9:6b:8e:a9:07:bf:23:bd:c0:bf:d8:40:20:06:f1:
58:48:a3:b1:3a:1d:9c:dc:7a:63:8e:0b:e9:9a:12:
62:e9:a5:3a:fd:a3:84:75:75:6c:e4:6d:cc:78:0a:
54:a6:ca:17:df:69:51:39:73:c6:e9:d7:2d:d0:8b:
c1:fa:4f:4a:71:47:5d:07:2c:2d:03:fe:2c:2b:15:
18:5c:87:69:06:42:47:e7:93:ad:01:1a:c2:c2:5f:
cd:8f:c6:75:48:7c:6e:39:d0:6c:1f:60:d8:ce:85:
7f:c2:a7:9e:c6:96:ac:fd:8d:cc:44:d8:06:4c:2e:
b8:12:64:b8:dd:09:1c:f4:37:51:b5:78:ff:c6:c2:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:32:3F:5F:47:1B:F8:05:B3:C3:5C:21:3E:2A:01:B1:75:3B:DB:0C
X509v3 Authority Key Identifier:
keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c2:18:c6:ce:78:69:d0:d5:d0:5f:a8:de:58:84:3e:a2:d1:
70:32:8d:07:2e:39:77:55:d0:a1:6a:7f:11:45:1a:0d:fc:c8:
a8:2c:7c:75:a0:c9:0f:91:2f:8c:38:67:4e:f5:98:29:1d:19:
01:d1:8a:c6:56:60:e3:f3:32:c6:62:91:92:ec:75:0b:12:a4:
48:0a:f3:54:50:26:6f:7b:74:87:3c:32:20:b1:d9:63:4b:5c:
52:cb:91:3f:6c:08:22:87:c2:bb:4b:7f:b6:14:ae:97:39:b5:
d0:a6:5c:e1:2a:c4:06:2b:a9:29:4d:5d:e1:af:bc:fa:11:f7:
3b:79:80:b7:f2:af:15:27:7c:4c:3f:8b:82:23:17:c9:14:8f:
a7:d5:9e:a9:4f:66:61:d0:b0:d8:64:61:d8:30:a9:99:b8:33:
5d:ed:a2:6a:48:e1:89:19:a5:c6:de:d3:25:c5:12:22:2c:1d:
03:cf:45:9e:43:54:27:6c:ed:16:c1:28:8f:f3:ee:c3:e6:67:
f7:86:02:0d:9d:d7:4f:dc:11:2b:54:23:80:19:d1:93:e7:5d:
ea:d0:bb:71:1a:30:55:19:72:d1:fa:c4:ef:07:a7:a0:ba:5c:
55:7d:8b:6d:ba:24:cd:59:54:d2:01:0e:9e:04:de:27:a7:00:
d1:d7:3b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:46 2025 by rpki-client