Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: X0e+lA6EUKYmfkzeCZLj7Fv9O1ExmRcOvy0rmXA09Wc=
Subject key identifier: B3:FB:1E:5E:54:0C:BB:C5:C5:66:EF:49:BD:8D:5C:8B:4B:B9:E3:9B
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 0199FB46301096DA87174E9CD2065CC6A900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 0873
Signing time: Sun 19 Oct 2025 07:01:45 +0000
Manifest this update: Sun 19 Oct 2025 07:01:45 +0000
Manifest next update: Mon 20 Oct 2025 07:01:45 +0000
Files and hashes: 1: 0_BivZleQqQTDIIA1zuJgrTZcsU.roa (hash: 1e4TcEyXBttiFq9j+bwnnfrMc5xlrfiEhLRAJpiXu2M=)
2: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: D+Ooep0LYPniY7yXCLXddZp8ZOz4usdWCyfl8mPZgM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:30:10:96:da:87:17:4e:9c:d2:06:5c:c6:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Oct 19 07:01:45 2025 GMT
Not After : Oct 20 07:01:45 2025 GMT
Subject: CN=b3fb1e5e540cbbc5c566ef49bd8d5c8b4bb9e39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:4e:e6:02:e3:66:a0:86:7f:a7:d2:b1:bc:
0f:30:6f:f8:6c:91:65:3c:b6:6a:df:9d:2b:4f:3c:
b6:4f:cc:b7:df:ee:b0:76:1a:cb:49:ad:c3:b2:fb:
4f:7e:88:a6:b4:cf:04:4e:9e:aa:47:41:f9:3b:d1:
d5:53:7b:41:64:61:71:79:bc:22:20:db:cd:3c:b1:
16:f0:24:67:17:2b:95:ee:79:e2:be:c0:4c:db:e5:
b4:90:86:ea:a8:b7:f5:fc:f1:e8:ee:24:da:73:75:
20:70:01:39:0c:9f:06:84:f3:48:c8:90:d5:15:7c:
63:0d:25:f0:eb:00:89:ab:a1:ac:6c:05:28:27:fc:
5f:61:80:ab:3d:e9:80:0d:a3:40:db:28:76:90:fd:
08:ff:7f:5b:b1:c6:70:5a:9d:85:06:ad:09:5e:fc:
18:98:cb:11:25:16:87:7e:13:f0:07:8d:a3:5a:43:
8b:3f:0b:42:30:d0:6f:01:7d:5e:ca:f1:5b:17:ca:
ec:8e:ab:83:27:bb:3c:99:df:0b:82:83:0a:96:df:
37:72:2d:15:3b:7a:bb:64:de:6f:fe:ab:17:cc:d6:
3c:c4:9c:73:50:75:b1:2b:42:0d:57:e6:72:93:c1:
0a:46:8e:6f:4b:a7:51:2a:e4:11:59:3e:53:bd:c4:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FB:1E:5E:54:0C:BB:C5:C5:66:EF:49:BD:8D:5C:8B:4B:B9:E3:9B
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:09:f1:d5:d1:9b:4b:8d:c3:46:cd:02:b6:a5:07:ec:78:57:
1f:d3:55:2a:f3:5f:6e:58:c4:c7:08:ad:ac:2d:f2:a3:be:f1:
16:df:b2:c1:82:a9:2d:95:9d:fd:19:e2:4c:df:27:e4:e4:f7:
93:e2:ae:ff:7c:1e:4d:55:76:b5:4f:5f:7d:83:de:64:8e:31:
31:b4:03:ec:2e:e7:3c:3e:e4:51:2d:7c:84:ce:b4:5b:73:07:
c2:13:e0:b3:d3:5c:88:40:7a:75:65:89:de:0d:e2:58:e2:5c:
1b:56:a0:f3:7b:52:1d:17:64:e3:ae:c2:62:aa:2c:cc:a9:60:
36:62:97:a2:8e:67:aa:54:a8:61:f6:e9:e1:94:4b:ec:91:f1:
da:25:1b:81:23:d7:3a:a2:41:be:db:42:96:91:33:2d:42:0e:
d3:03:88:b0:24:f7:9a:03:19:69:ca:19:f8:a2:4b:eb:cf:db:
02:25:68:47:9f:ab:d1:59:5e:e7:c1:c3:9d:14:36:6e:13:e1:
df:dd:e6:80:d6:15:86:2d:f7:3c:ab:be:e6:1b:92:95:4c:f8:
68:06:a8:9d:2c:e1:20:f5:26:70:c5:ea:ae:b8:37:0f:aa:f3:
c6:46:e0:ae:5b:4f:a6:44:a6:bb:f6:3b:2c:91:65:8c:33:80:
33:6d:64:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RjAQltqHF06c0gZcxqkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWQxYzQ5NTViMmVmYmYwMDllOWU0MWIxZTcyZWE2ZGZm
ODI0YjMwHhcNMjUxMDE5MDcwMTQ1WhcNMjUxMDIwMDcwMTQ1WjAzMTEwLwYDVQQD
EyhiM2ZiMWU1ZTU0MGNiYmM1YzU2NmVmNDliZDhkNWM4YjRiYjllMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcJO5gLjZqCGf6fSsbwPMG/4bJFl
PLZq350rTzy2T8y33+6wdhrLSa3DsvtPfoimtM8ETp6qR0H5O9HVU3tBZGFxebwi
INvNPLEW8CRnFyuV7nnivsBM2+W0kIbqqLf1/PHo7iTac3UgcAE5DJ8GhPNIyJDV
FXxjDSXw6wCJq6GsbAUoJ/xfYYCrPemADaNA2yh2kP0I/39bscZwWp2FBq0JXvwY
mMsRJRaHfhPwB42jWkOLPwtCMNBvAX1eyvFbF8rsjquDJ7s8md8LgoMKlt83ci0V
O3q7ZN5v/qsXzNY8xJxzUHWxK0INV+Zyk8EKRo5vS6dRKuQRWT5TvcS5kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLP7Hl5UDLvFxWbvSb2NXItLueObMB8GA1UdIwQY
MBaAFFJdHElVsu+/AJ6eQbHnLqbf+CSzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQt
NjYyN2E0ZWI1OTYzLzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQtNjYyN2E0ZWI1OTYz
LzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgnx1dGb
S43DRs0CtqUH7HhXH9NVKvNfbljExwitrC3yo77xFt+ywYKpLZWd/RniTN8n5OT3
k+Ku/3weTVV2tU9ffYPeZI4xMbQD7C7nPD7kUS18hM60W3MHwhPgs9NciEB6dWWJ
3g3iWOJcG1ag83tSHRdk467CYqoszKlgNmKXoo5nqlSoYfbp4ZRL7JHx2iUbgSPX
OqJBvttClpEzLUIO0wOIsCT3mgMZacoZ+KJL68/bAiVoR5+r0Vle58HDnRQ2bhPh
393mgNYVhi33PKu+5huSlUz4aAaonSzhIPUmcMXqrrg3D6rzxkbgrltPpkSmu/Y7
LJFljDOAM21kxw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:08 2025 by rpki-client