Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier: LQBvGRB5ajw4SN10KHtbX7FUs+xqVzdUOvu8z9FuA1I=
Subject key identifier: 81:CE:83:21:61:4A:81:F8:73:62:2F:83:E9:0A:27:21:1D:5B:64:63
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial: 0199FD34823ABF9F790862C0B3F747C6765C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number: 0DA6
Signing time: Sun 19 Oct 2025 16:01:40 +0000
Manifest this update: Sun 19 Oct 2025 16:01:40 +0000
Manifest next update: Mon 20 Oct 2025 16:01:40 +0000
Files and hashes: 1: Q2LTA1GKdHj7d0i_1GvyqSIwjxQ.roa (hash: xu02NdCI991FR8WiB+pSZuZa9Qgpw7qq1Oeg+OkFXG4=)
2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: EwX60otWpG1HMtOkKp3RHWzW/0othljl6FvskB2BzWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:82:3a:bf:9f:79:08:62:c0:b3:f7:47:c6:76:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Validity
Not Before: Oct 19 16:01:40 2025 GMT
Not After : Oct 20 16:01:40 2025 GMT
Subject: CN=81ce8321614a81f873622f83e90a27211d5b6463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:43:b0:a6:8f:7b:3e:e8:63:51:df:60:87:40:
d1:cd:38:b6:05:fd:2e:15:3c:bc:ef:b6:a7:cb:f7:
5d:10:4a:1b:40:19:f4:05:03:c8:47:c6:62:12:a7:
4d:b1:08:5f:be:56:34:c9:64:28:e9:3b:71:64:46:
0e:a4:42:dd:c4:40:05:bb:90:7d:b0:c6:52:60:1e:
80:04:4b:15:0d:2e:c4:87:64:2b:fd:88:7c:ff:cb:
d4:9a:12:20:01:de:ab:03:b2:ea:e1:63:72:65:c2:
c9:20:2a:0e:47:c2:29:bb:b7:75:2b:08:98:d8:c4:
c4:0e:14:af:e5:44:c6:07:2d:91:4b:20:8c:63:6c:
b7:b1:8c:55:f8:5c:b8:33:ce:b8:12:e1:10:77:2e:
55:9e:31:4d:bc:f2:65:d7:7c:fe:59:2c:c4:3e:80:
5d:74:13:65:71:4d:27:8b:e8:5e:78:dd:11:fe:b7:
66:10:47:2b:d1:4f:da:be:7c:30:6b:15:16:83:7d:
63:5a:10:73:13:17:7d:70:4a:09:9d:1d:c3:0f:ac:
5c:43:3f:62:11:5b:99:00:41:5b:e3:3c:f4:c4:dc:
e9:89:62:4e:3b:cc:65:07:5c:a4:22:7c:d0:a6:61:
48:18:02:0e:da:f3:d7:72:2d:09:70:20:4e:88:27:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:83:21:61:4A:81:F8:73:62:2F:83:E9:0A:27:21:1D:5B:64:63
X509v3 Authority Key Identifier:
keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bc:6c:a6:43:50:66:0d:e5:ca:a8:97:ed:7b:69:07:e1:18:
c3:43:86:b7:27:91:8f:17:a3:34:09:88:7a:17:87:c9:7b:e6:
68:f0:2f:5c:67:07:51:d2:0a:ee:82:74:30:63:d2:37:f8:2d:
c2:08:c9:ab:af:44:51:c5:10:2f:6c:31:cd:d1:f1:de:47:b5:
c9:e5:d7:fc:0b:b9:ef:d6:0c:85:e3:16:7c:11:36:fb:33:72:
1c:3d:f7:a7:66:ed:f9:97:5a:34:ef:0e:d9:1f:b3:35:6a:04:
f0:32:6f:12:da:1f:07:97:f5:5a:d1:8b:46:b5:90:13:fa:5c:
aa:5d:ed:35:8c:11:bd:26:da:ea:34:4f:a1:dc:bb:47:5f:5b:
26:c4:1c:86:00:52:fe:e7:f1:30:40:3d:00:5f:f2:c7:e2:82:
aa:02:ed:a8:50:ea:90:b2:1e:d6:c1:f4:81:12:10:27:33:8f:
86:fb:a3:df:6c:96:8d:86:ae:42:59:12:59:18:ff:6c:56:0a:
47:ec:32:5b:33:43:51:9a:bc:5d:77:97:92:c6:c0:de:a2:52:
ef:44:24:eb:f2:da:e8:10:09:e5:18:0b:4a:04:d2:de:6e:0f:
30:dc:fa:e2:de:0b:a5:03:f4:83:13:14:17:84:ae:a5:ce:cd:
3e:d5:b0:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NII6v595CGLAs/dHxnZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTE1ODM2YWYzMDBmN2M3MWY3MWRkMThiOWMzZjUxYzI1
MmJiOTQwHhcNMjUxMDE5MTYwMTQwWhcNMjUxMDIwMTYwMTQwWjAzMTEwLwYDVQQD
Eyg4MWNlODMyMTYxNGE4MWY4NzM2MjJmODNlOTBhMjcyMTFkNWI2NDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EOwpo97PuhjUd9gh0DRzTi2Bf0u
FTy877any/ddEEobQBn0BQPIR8ZiEqdNsQhfvlY0yWQo6TtxZEYOpELdxEAFu5B9
sMZSYB6ABEsVDS7Eh2Qr/Yh8/8vUmhIgAd6rA7Lq4WNyZcLJICoOR8Ipu7d1KwiY
2MTEDhSv5UTGBy2RSyCMY2y3sYxV+Fy4M864EuEQdy5VnjFNvPJl13z+WSzEPoBd
dBNlcU0ni+heeN0R/rdmEEcr0U/avnwwaxUWg31jWhBzExd9cEoJnR3DD6xcQz9i
EVuZAEFb4zz0xNzpiWJOO8xlB1ykInzQpmFIGAIO2vPXci0JcCBOiCf4WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHOgyFhSoH4c2Ivg+kKJyEdW2RjMB8GA1UdIwQY
MBaAFLpRWDavMA98cfcd0YucP1HCUruUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUt
YmM5MTM0NjZkNDNkLzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUtYmM5MTM0NjZkNDNk
LzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarxspkNQ
Zg3lyqiX7XtpB+EYw0OGtyeRjxejNAmIeheHyXvmaPAvXGcHUdIK7oJ0MGPSN/gt
wgjJq69EUcUQL2wxzdHx3ke1yeXX/Au579YMheMWfBE2+zNyHD33p2bt+ZdaNO8O
2R+zNWoE8DJvEtofB5f1WtGLRrWQE/pcql3tNYwRvSba6jRPody7R19bJsQchgBS
/ufxMEA9AF/yx+KCqgLtqFDqkLIe1sH0gRIQJzOPhvuj32yWjYauQlkSWRj/bFYK
R+wyWzNDUZq8XXeXksbA3qJS70Qk6/La6BAJ5RgLSgTS3m4PMNz64t4LpQP0gxMU
F4Supc7NPtWwHw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:55 2025 by rpki-client