Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: RjMPE5D49k52JRmoKaLkACpt76kOtKodCC1cq82AiWU=
Subject key identifier: D5:19:A3:65:E9:8A:ED:C2:52:CF:16:0E:D5:46:FB:42:0E:62:15:E9
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 019A0C387D6FEA53F2646E4FD0A6D47A5995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 0549
Signing time: Wed 22 Oct 2025 14:00:19 +0000
Manifest this update: Wed 22 Oct 2025 14:00:19 +0000
Manifest next update: Thu 23 Oct 2025 14:00:19 +0000
Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=)
2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: RC5Zi4Ae9AzmkJjmJWSe2IHyYKEqpE4DfVrfdcUSTIo=)
3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:7d:6f:ea:53:f2:64:6e:4f:d0:a6:d4:7a:59:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Oct 22 14:00:19 2025 GMT
Not After : Oct 23 14:00:19 2025 GMT
Subject: CN=d519a365e98aedc252cf160ed546fb420e6215e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:04:57:51:89:d1:d1:95:b5:2f:42:25:40:
72:b6:17:42:bb:01:67:ee:a2:2c:cb:e2:c5:5c:f1:
1f:fe:a3:5c:48:82:db:a3:73:ec:1a:c7:f0:86:8c:
c3:4b:ab:6a:56:a9:27:a6:e9:05:b0:bd:ad:41:b4:
fa:63:80:55:4c:9b:89:9f:c5:12:1a:cd:6f:24:04:
f2:e1:ea:b1:6e:ad:7d:6b:0d:91:b2:37:ef:9b:16:
2e:8e:6a:5c:e8:9e:0b:5f:5e:00:c0:d0:37:9d:80:
c5:ab:2c:a5:43:ac:73:43:32:7c:59:75:74:97:59:
d3:9e:8b:fb:6b:a0:26:e7:9f:9f:e2:55:1f:40:40:
9e:fa:96:8a:45:30:ea:2d:30:f6:70:64:a0:1b:2a:
ba:9a:e3:df:ee:4b:c6:74:e0:43:4d:c9:8d:6c:aa:
ba:23:f1:0b:bc:2f:84:c5:33:34:04:72:7c:a9:42:
b3:d8:92:dc:08:e4:c9:a6:90:4a:7f:76:49:63:84:
c9:be:f4:0a:2b:46:cb:3e:dd:27:4d:18:e8:cc:4e:
f8:6e:99:36:3a:73:f5:81:ce:cd:6e:12:56:d0:a3:
9f:9f:0c:aa:6f:2e:be:4d:2d:3f:2c:12:1f:1f:b4:
7d:1e:96:50:ba:1f:c9:a3:b0:94:6f:b3:2b:14:7d:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:19:A3:65:E9:8A:ED:C2:52:CF:16:0E:D5:46:FB:42:0E:62:15:E9
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0d:55:1e:b9:9d:94:cf:fa:0d:45:c9:f7:ff:8f:b2:db:7d:
b7:7f:90:ae:28:53:74:a8:71:c0:23:ef:ed:21:34:58:db:11:
35:28:5c:a8:3a:7e:d8:95:d4:1e:38:21:d2:f5:06:21:e1:79:
20:50:3a:11:2d:85:67:d3:8b:8f:81:91:cf:ba:5e:07:26:3a:
87:cb:91:9f:d8:d3:a9:fb:8c:ba:0c:b0:44:07:74:0d:66:e7:
4f:2b:bc:53:9c:b6:57:e8:b4:aa:a6:54:ca:ee:9b:2d:ec:3d:
61:c6:8e:53:7f:c7:66:fb:d8:3c:21:f3:22:cb:21:7d:be:ef:
e1:f0:ed:2c:f0:77:28:67:aa:1e:38:dc:3a:90:27:84:8b:0f:
49:09:8b:a7:34:a8:7c:81:47:7e:e3:d5:b3:7e:1d:0e:03:36:
a8:3c:19:9a:2a:9f:bd:7b:9d:cf:fa:7b:2f:92:02:4c:ac:93:
a3:2a:a7:1f:c8:4d:e2:32:c6:7d:cf:b3:ed:0b:8b:7e:7b:6a:
d1:59:3a:b5:7b:f7:87:85:8b:d6:d6:b8:23:23:90:67:5e:e1:
43:6c:6f:27:90:7f:f8:7f:c8:fa:3e:6f:af:2a:67:d4:11:a9:
82:4d:2c:73:26:59:e3:98:ae:58:8b:87:e0:b3:a9:8b:31:50:
19:f0:c1:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMOH1v6lPyZG5P0KbUelmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWVjOTNkN2NhNzM3NDRiMmMxZmJiNmRkYTY0NDkzYzJh
NDk1YzEwHhcNMjUxMDIyMTQwMDE5WhcNMjUxMDIzMTQwMDE5WjAzMTEwLwYDVQQD
EyhkNTE5YTM2NWU5OGFlZGMyNTJjZjE2MGVkNTQ2ZmI0MjBlNjIxNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25sEV1GJ0dGVtS9CJUBythdCuwFn
7qIsy+LFXPEf/qNcSILbo3PsGsfwhozDS6tqVqknpukFsL2tQbT6Y4BVTJuJn8US
Gs1vJATy4eqxbq19aw2RsjfvmxYujmpc6J4LX14AwNA3nYDFqyylQ6xzQzJ8WXV0
l1nTnov7a6Am55+f4lUfQECe+paKRTDqLTD2cGSgGyq6muPf7kvGdOBDTcmNbKq6
I/ELvC+ExTM0BHJ8qUKz2JLcCOTJppBKf3ZJY4TJvvQKK0bLPt0nTRjozE74bpk2
OnP1gc7NbhJW0KOfnwyqby6+TS0/LBIfH7R9HpZQuh/Jo7CUb7MrFH3XXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUZo2Xpiu3CUs8WDtVG+0IOYhXpMB8GA1UdIwQY
MBaAFFJeyT18pzdEssH7tt2mRJPCpJXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2Et
ODM2NmIxNjRkZDY2LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2EtODM2NmIxNjRkZDY2
LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfA1VHrmd
lM/6DUXJ9/+Pstt9t3+QrihTdKhxwCPv7SE0WNsRNShcqDp+2JXUHjgh0vUGIeF5
IFA6ES2FZ9OLj4GRz7peByY6h8uRn9jTqfuMugywRAd0DWbnTyu8U5y2V+i0qqZU
yu6bLew9YcaOU3/HZvvYPCHzIsshfb7v4fDtLPB3KGeqHjjcOpAnhIsPSQmLpzSo
fIFHfuPVs34dDgM2qDwZmiqfvXudz/p7L5ICTKyToyqnH8hN4jLGfc+z7QuLfntq
0Vk6tXv3h4WL1ta4IyOQZ17hQ2xvJ5B/+H/I+j5vrypn1BGpgk0scyZZ45iuWIuH
4LOpizFQGfDBWQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 17:49:20 2025 by rpki-client