Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: WCBCIcX6vGujJOvMy8f8fAED9SWa0z8+fKu0rWg+0jM=
Subject key identifier: E5:FB:ED:19:1D:88:78:9A:9A:13:4D:66:84:32:F8:A4:DB:88:8C:64
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 019A1195DF740507609AA629F5F918B7BC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 0ABB
Signing time: Thu 23 Oct 2025 15:00:26 +0000
Manifest this update: Thu 23 Oct 2025 15:00:26 +0000
Manifest next update: Fri 24 Oct 2025 15:00:26 +0000
Files and hashes: 1: UKpsyLZnsONm3nziQLW_Dy86-kc.roa (hash: sOSR0eDOaucZOE58pbyPZwUjeC+8MtIsg4Yj+A0vOoE=)
2: bkhY0JpEEO9e7LOCTStEAO3KiFg.roa (hash: nFRZrXuS6GoRY3BCOn9rQkEjbqjSmpEWfOS5j9kS+AQ=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: dAvrwqUJnaegh58Ed5U1JqpAXA14EHRN+evf0ziOl4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:95:df:74:05:07:60:9a:a6:29:f5:f9:18:b7:bc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Oct 23 15:00:26 2025 GMT
Not After : Oct 24 15:00:26 2025 GMT
Subject: CN=e5fbed191d88789a9a134d668432f8a4db888c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:7a:ce:ba:d3:fc:c8:7b:5c:18:f4:ba:38:
4e:dd:e9:66:4b:55:43:39:e9:7c:b9:47:0e:90:28:
48:2d:e1:04:d8:82:6d:64:62:66:d7:de:ae:18:89:
80:b6:d4:b0:66:42:e6:d5:28:a3:7b:a0:79:dc:9f:
54:db:4b:e7:b4:22:2f:e2:98:14:f2:df:fc:aa:6a:
73:33:fc:91:40:2a:1f:9d:b2:01:d6:bb:00:f7:3e:
a6:38:b6:a5:15:99:9e:ef:49:e3:b8:59:c6:16:27:
2e:c7:bb:37:15:9d:c2:d6:c8:fe:54:74:d5:15:47:
c5:87:af:8e:73:70:62:41:fc:01:96:53:f5:4d:8d:
5f:c2:8c:84:db:ae:90:de:e9:47:04:84:a0:ca:3a:
49:9c:0c:e6:09:67:18:cd:49:6c:e1:05:a2:0f:4f:
36:88:df:0a:98:29:f9:dd:22:02:fc:81:d9:4d:b1:
7c:af:54:a8:1c:28:3e:7d:49:1a:05:ba:d1:b0:29:
da:29:c9:ac:a0:09:31:23:0f:c2:0d:4b:99:c1:5c:
85:51:60:ae:c4:6b:aa:96:6b:46:34:0c:bf:78:5a:
df:d0:e2:09:7b:d2:f3:1f:05:ba:d3:28:99:55:c1:
27:fb:dd:7f:80:a9:48:74:7a:61:b5:2c:90:e3:93:
6b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FB:ED:19:1D:88:78:9A:9A:13:4D:66:84:32:F8:A4:DB:88:8C:64
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b7:8b:43:07:93:10:6f:a5:27:d3:0d:79:ab:f1:d5:df:df:
4f:ac:b3:7d:ed:a3:06:09:2e:a6:11:6e:68:5d:ed:2a:b3:0c:
93:4e:9d:51:32:b1:b4:66:dc:79:ec:f3:72:f0:59:62:9f:89:
0d:ba:72:6a:10:13:a1:6c:8e:c4:0f:26:99:79:a8:47:8a:de:
dc:2a:6a:0c:f8:4b:6f:bc:02:7c:63:7b:6b:02:d5:8c:03:b5:
e4:4a:20:34:75:f0:9a:b6:3a:86:83:1f:ac:dd:21:e0:23:a5:
4b:87:0d:3b:51:a6:d2:ea:33:2d:e0:c9:19:4c:1c:54:5a:08:
b7:95:3b:36:06:57:bc:9a:42:5c:ed:40:e3:a7:85:7f:98:79:
31:b2:68:65:db:9a:13:d1:5f:1a:ea:a9:ad:73:b8:d4:06:7f:
48:90:8b:c3:65:e8:07:c0:ce:eb:1e:30:ed:5a:41:73:a4:19:
18:47:ae:f8:2d:44:ec:4f:d9:78:6d:13:f6:4a:44:02:8a:f7:
3a:26:c4:51:f6:b6:3a:6c:d1:7d:80:fb:5a:3c:cb:b1:a8:b0:
8c:ef:63:b5:37:fc:b2:e5:ed:a2:c0:8a:21:42:b1:85:7e:f8:
a1:c0:ea:b3:2d:2e:ab:21:ef:6b:78:31:b2:31:cd:af:d2:ef:
68:c5:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:03:33 2025 by rpki-client