Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File: UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier: 5YkNzNY2bw2nJS88b9G2NRxu59sWekhpij3/SYpwSKM=
Subject key identifier: 6B:2A:A2:1D:D5:08:9D:D0:13:DD:21:88:8B:60:58:FF:7C:89:97:36
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial: 019A70A551668FF53B7E828BBB85891B508A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number: 01C4
Signing time: Tue 11 Nov 2025 02:01:13 +0000
Manifest this update: Tue 11 Nov 2025 02:01:13 +0000
Manifest next update: Wed 12 Nov 2025 02:01:13 +0000
Files and hashes: 1: HmBHMAAoUy9qKm5EF-apsYNvL-Y.roa (hash: l1nynbFOV66i2gHUQws1+HFlLSzuk9i9xbBDIJI0tVk=)
2: RJxr8FfYNXMH1JQVOwgGzONUVKU.roa (hash: DR8gGJ69xVF1vRltrSd3W6LpV3g9f3689+1YFT6WiyI=)
3: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: ca8TJBhclAFatxEUHGELOIYNM9XYEZnkmVqoLDp8K3Q=)
4: VD-LSAHFyPqWUZ2Vjm-KKmr8eKM.roa (hash: rKVzKhQ4K6eAovmJ6rMHEI/c6Cx2HmuMrN4fBqn4Zxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:51:66:8f:f5:3b:7e:82:8b:bb:85:89:1b:50:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Validity
Not Before: Nov 11 02:01:13 2025 GMT
Not After : Nov 12 02:01:13 2025 GMT
Subject: CN=6b2aa21dd5089dd013dd21888b6058ff7c899736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:a8:2e:04:5a:21:d0:0c:3e:68:0e:2e:de:
25:72:6f:39:7f:d6:fd:94:f1:02:74:fd:e8:55:d7:
45:62:fc:14:cd:3f:b8:65:35:24:81:bf:b7:c5:7e:
24:cf:ca:c5:36:eb:b0:e3:35:44:10:7b:15:6c:be:
6d:31:bc:20:67:87:55:bf:5f:84:8f:fa:db:99:ee:
20:e3:ca:16:33:86:ef:fb:90:47:7c:fc:15:c4:82:
f1:ba:40:ab:85:c2:26:7b:5f:66:26:83:54:8b:53:
87:b2:ad:b7:1e:1e:54:eb:50:64:ab:07:d7:b8:d4:
f0:10:e7:17:87:18:5b:e7:b5:55:63:91:4e:22:15:
80:ed:e7:51:59:a0:3a:66:99:4a:4b:10:13:08:cf:
12:21:53:91:bc:d7:70:0c:9b:22:8e:dc:f0:15:24:
3d:31:55:d8:e1:52:f8:af:6c:88:b3:59:30:d8:52:
23:9e:15:99:85:63:bd:4f:ff:b0:f5:04:94:1c:c6:
fa:71:19:dc:79:55:15:d3:87:bd:54:c3:04:a4:7f:
53:20:ee:f7:15:3c:69:1a:9e:18:b7:a4:c9:15:68:
b5:32:ff:38:0b:08:78:93:a6:c0:98:c0:eb:2c:da:
09:ca:19:69:0f:79:90:a5:67:72:29:a2:91:92:36:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2A:A2:1D:D5:08:9D:D0:13:DD:21:88:8B:60:58:FF:7C:89:97:36
X509v3 Authority Key Identifier:
keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1c:ec:83:ac:17:8e:9b:37:10:8e:8c:09:59:c1:f7:79:df:
de:af:9a:a1:ef:47:81:8c:62:4c:ad:84:0c:62:d6:f5:ac:16:
f5:a4:a2:69:e5:0b:09:08:aa:f6:31:40:00:c1:37:3d:6f:b0:
6b:49:b4:a4:9c:48:52:07:58:50:42:46:19:71:a2:fd:92:9d:
b8:1b:7e:a4:1c:89:33:7a:74:4d:94:fa:b3:80:ae:8b:bf:79:
f7:4d:26:73:06:d9:79:77:ce:04:55:e1:21:c5:0e:45:1e:e5:
df:23:7f:82:7e:03:fe:27:d0:97:0c:40:14:ea:c4:cd:37:e7:
06:80:c4:ab:53:5e:84:14:27:c9:d4:22:8e:40:6b:7a:a3:64:
7e:a8:8e:8c:36:36:3d:51:c5:23:0c:41:a7:7e:46:5d:4e:7f:
0f:3f:db:9f:0f:48:39:ad:93:b3:41:b6:f5:01:d1:54:13:86:
87:e1:b2:17:be:6d:d4:0a:25:d9:73:d1:3d:df:56:8d:38:c1:
11:5e:2b:1e:34:79:4e:ca:f6:33:25:a6:ba:c2:51:a1:41:e3:
d4:e1:73:28:af:4e:e6:24:1e:c6:8f:cb:66:8a:18:7a:0e:27:
b4:c1:9b:78:da:f1:af:b8:7e:3e:5b:01:5c:42:6d:f2:b6:b0:
df:8b:53:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpVFmj/U7foKLu4WJG1CKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjJjNDAxY2U1YzllODgxY2Q5YTNiZThlZmVjNjAwMjJk
YTBlYjYwHhcNMjUxMTExMDIwMTEzWhcNMjUxMTEyMDIwMTEzWjAzMTEwLwYDVQQD
Eyg2YjJhYTIxZGQ1MDg5ZGQwMTNkZDIxODg4YjYwNThmZjdjODk5NzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdioLgRaIdAMPmgOLt4lcm85f9b9
lPECdP3oVddFYvwUzT+4ZTUkgb+3xX4kz8rFNuuw4zVEEHsVbL5tMbwgZ4dVv1+E
j/rbme4g48oWM4bv+5BHfPwVxILxukCrhcIme19mJoNUi1OHsq23Hh5U61BkqwfX
uNTwEOcXhxhb57VVY5FOIhWA7edRWaA6ZplKSxATCM8SIVORvNdwDJsijtzwFSQ9
MVXY4VL4r2yIs1kw2FIjnhWZhWO9T/+w9QSUHMb6cRnceVUV04e9VMMEpH9TIO73
FTxpGp4Yt6TJFWi1Mv84Cwh4k6bAmMDrLNoJyhlpD3mQpWdyKaKRkjaR1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsqoh3VCJ3QE90hiItgWP98iZc2MB8GA1UdIwQY
MBaAFFGyxAHOXJ6IHNmjvo7+xgAi2g62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMt
OTRkMWIxZDE2Yjg1LzEvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMtOTRkMWIxZDE2Yjg1
LzEvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBzsg6wX
jps3EI6MCVnB93nf3q+aoe9HgYxiTK2EDGLW9awW9aSiaeULCQiq9jFAAME3PW+w
a0m0pJxIUgdYUEJGGXGi/ZKduBt+pByJM3p0TZT6s4Cui795900mcwbZeXfOBFXh
IcUORR7l3yN/gn4D/ifQlwxAFOrEzTfnBoDEq1NehBQnydQijkBreqNkfqiOjDY2
PVHFIwxBp35GXU5/Dz/bnw9IOa2Ts0G29QHRVBOGh+GyF75t1Aol2XPRPd9WjTjB
EV4rHjR5Tsr2MyWmusJRoUHj1OFzKK9O5iQexo/LZooYeg4ntMGbeNrxr7h+PlsB
XEJt8raw34tTgQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:45 2025 by rpki-client