Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier: rr9hE+tEPGsAqJeyX7iTlw8Kx+qWeXykGSUTibWiOgA=
Subject key identifier: AD:D9:01:DF:0F:A3:9D:6C:3F:18:A5:93:57:19:A4:99:CB:A4:E8:FD
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 019A71B8FDDB5DFD18F242CE34D88AEC7042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (hash: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=)
2: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (hash: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=)
3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: FsYb1Vqymf3ORSKdjraCYTs3HT/VoboHswrVFW07Qa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fd:db:5d:fd:18:f2:42:ce:34:d8:8a:ec:70:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=add901df0fa39d6c3f18a5935719a499cba4e8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:cb:85:37:98:55:e5:c8:21:e7:7b:08:4d:
68:27:93:6a:4a:7d:14:17:98:fa:b2:c7:03:e2:90:
9d:30:6a:eb:56:b0:df:fd:47:e3:40:7e:04:3f:af:
b7:85:b9:bc:24:ec:11:8e:a3:d7:83:53:33:6f:7a:
af:bd:54:91:cf:8d:3f:00:f8:89:c3:ab:eb:96:10:
b9:4c:e9:73:bf:e1:17:88:86:5a:a7:fa:40:c9:5b:
b6:25:c7:01:af:d8:8a:9b:d8:61:a6:38:e7:cf:76:
d1:5d:15:4f:02:29:f6:16:62:3a:13:9d:4c:4e:de:
e2:70:31:29:37:e9:e3:d0:8b:3e:d9:a6:86:db:72:
7a:03:3d:ac:6f:6f:5d:f5:e9:5b:84:6a:73:f9:54:
99:f6:00:90:c6:6d:81:39:39:9a:35:83:7d:79:04:
7e:ba:a8:23:e7:1e:52:9a:e7:88:b6:b1:fe:d4:f6:
5f:03:e3:33:80:ff:7e:16:35:60:a1:8d:c6:6f:50:
74:8a:00:e7:c2:e9:c7:54:95:c0:b4:64:31:a7:33:
68:d4:67:73:15:bb:2b:e9:b2:a0:2e:cd:15:2a:cf:
92:29:10:f5:a6:d5:be:45:b6:83:66:47:b8:bc:ea:
ea:51:50:7f:8c:31:8e:f4:fd:98:d4:31:6a:2f:09:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D9:01:DF:0F:A3:9D:6C:3F:18:A5:93:57:19:A4:99:CB:A4:E8:FD
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e0:82:b6:79:b4:24:78:4b:58:0f:39:48:8e:76:34:dc:51:
35:c3:07:3b:22:ee:90:05:41:4e:7a:e7:1a:b4:e3:0d:5a:46:
a6:b4:0d:4f:81:a8:a0:c5:57:73:13:5f:ed:7d:57:bd:df:8a:
8a:c0:29:e8:9f:88:84:5d:01:6e:c2:96:04:8f:b4:4e:c2:13:
d8:e4:50:d1:d9:fd:08:c2:f6:36:50:b5:7d:27:c7:12:f6:ca:
34:87:66:6a:5d:01:c5:40:94:54:e2:82:1a:35:10:b1:ea:b7:
5b:ce:2a:97:15:62:9b:7c:86:74:88:89:da:1f:91:47:f0:82:
b3:fd:93:05:45:bd:09:65:48:57:3a:c0:ba:3b:36:03:ed:a2:
47:eb:09:8a:cb:dd:7e:d5:6e:c4:d5:9e:cd:5a:e7:d0:e5:09:
a1:80:3d:93:e9:28:77:d7:2c:47:2f:ea:a3:ce:8e:b9:df:88:
e4:9e:bc:9c:9e:fa:fb:ce:ae:76:da:06:95:3b:9e:63:58:ca:
d3:c9:92:59:2a:21:5b:bc:8c:62:97:5a:0a:51:73:5e:e6:88:
ea:cb:1e:84:bc:5d:2b:0e:c5:5b:ee:68:f1:ec:38:b3:28:1c:
5d:85:0c:53:cf:df:22:c3:aa:37:84:a8:8b:1a:3c:57:96:93:
fc:11:7a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:29 2025 by rpki-client