
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File: ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier: DqsEaHEBij1D3eV1AOH+pPbdf/M3NyjMen9NwRNFXDA=
Subject key identifier: 31:BB:DA:FA:6C:60:5D:98:E6:23:66:B4:A4:23:47:48:CD:D7:F6:E8
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial: 0199FD342FAF52FAF2F616AC7C510427930C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number: 08B2
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: 9qqw5-kT_WV_X39A7wZIImdbzHo.roa (hash: /+5dGBlEHLXX+0YtcqdadMo/w6B/YFbkAqy9tbmNdEg=)
2: D-sLa7SP7XelLhZGOPS-ls06iHQ.roa (hash: O/tqtREZzKy5oPDokpycb2qRKRocKJlF54vVhaheJr4=)
3: XI8GYNvzBktqANN3ULY6yNPZsp4.roa (hash: 0Mxp84Xa3ZGuCVESuvLHwIOTltEO7ZBfIp1LcrOP0ho=)
4: eRUACPCXV-4Ib9JOJdpUbWI_TYw.roa (hash: h9bviEq7QynmkHeqFVqOAhXJmtcEK3L94GyVb2n9ZXc=)
5: hJkdSoDXpzIKTUPp93OLm4_CfgM.roa (hash: GAALV0VthJPoxa0vb/cdFv6fAU1JjHbthL2uNWZeyCc=)
6: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: slHPSLxYaXSU6hfbZ4nmL5X0o3XTDvV91mKDC4cGVJE=)
7: yLW-Wxb-WEK3SlgHfRgcFULgwtU.roa (hash: 47c/8wbrDeeCgPSJoS7prqWBSvhn47quuwVKT8eb4AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2f:af:52:fa:f2:f6:16:ac:7c:51:04:27:93:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=31bbdafa6c605d98e62366b4a4234748cdd7f6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:b4:15:c2:37:90:4c:91:c5:06:d9:77:bc:
91:3f:14:d3:5c:d8:25:a0:d4:98:4b:be:48:ad:2a:
5c:34:c8:a2:d7:37:af:34:48:aa:44:66:2f:19:5c:
2c:ce:52:c2:1a:7e:a6:7c:1d:59:fb:c4:d5:45:76:
af:15:3c:51:bc:d7:04:d3:5e:15:d6:2c:07:9c:dd:
a4:89:33:8e:db:b6:fb:ca:6d:a6:76:cc:43:39:10:
16:1a:f4:69:4e:ac:78:1e:95:7a:c3:7b:64:1e:b2:
e6:53:d0:04:d0:39:b8:5a:ae:b8:85:e7:76:ee:e8:
2a:86:00:1c:b0:1c:db:e1:5d:ab:66:6a:5b:a2:83:
81:48:a1:7b:8d:0d:1e:73:8d:8e:f1:06:2c:4e:c2:
24:c0:09:c3:6a:67:f9:e8:7b:7d:d5:89:39:6a:49:
45:d9:97:32:bf:16:6f:fa:fa:1b:d2:38:07:b6:27:
a9:17:01:14:11:36:7b:f9:f7:de:63:87:29:51:c2:
24:d6:d6:89:21:29:61:a6:36:c7:37:4a:d8:0f:e4:
28:92:0c:d3:fb:da:16:03:61:1e:02:f3:0d:6a:c1:
b9:f5:aa:10:93:84:7d:f9:df:f6:29:b5:a9:59:5b:
e0:19:91:82:3d:0b:a4:fd:83:b9:54:bb:96:b4:1b:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BB:DA:FA:6C:60:5D:98:E6:23:66:B4:A4:23:47:48:CD:D7:F6:E8
X509v3 Authority Key Identifier:
keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e2:aa:19:87:a1:d0:2a:2a:a9:6c:99:5e:16:ab:d2:b3:cf:
b6:ff:35:40:58:62:ae:6d:1c:27:1b:14:1b:41:ea:dc:92:97:
53:5c:f7:5a:73:b4:4d:13:4c:51:b6:48:38:fb:af:44:49:15:
e0:41:6c:92:8a:bd:fc:32:fe:c2:d2:58:e4:0d:d2:be:47:2e:
21:bb:90:f7:52:a7:0c:6d:af:dc:e3:1d:18:04:1a:9a:d6:f4:
41:66:49:7c:b0:c2:3b:13:a0:21:55:3d:70:85:15:49:2b:3a:
5b:ac:41:b6:52:a0:34:8d:e1:d4:0b:b9:b4:d6:df:68:47:30:
04:dd:5e:5c:d9:c8:13:2b:b2:df:11:8d:c3:16:39:43:2a:88:
1b:68:ac:fc:fe:27:a0:15:2b:70:35:7c:da:92:8a:e4:76:80:
2d:b0:00:fc:70:83:0f:50:16:8f:ad:78:a4:49:3e:3d:fa:14:
6e:c6:49:e2:4a:51:bf:ee:77:ce:02:41:a4:fb:44:71:f2:2f:
79:aa:c6:04:69:3b:da:39:b8:db:d4:02:bd:6b:ba:ab:6f:af:
a8:ca:6e:ff:23:b2:00:e7:1f:df:18:9b:31:0a:0a:7e:b9:cd:
db:8f:fb:81:c9:9d:01:13:89:e1:8f:65:42:11:d5:e5:c0:11:
f2:57:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:49 2025 by rpki-client