Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
File: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft (raw, json)
Hash identifier: xHfkbBF8A60C5pbU7fUPaADHkUmuVu6PviTYQn9g/Qc=
Subject key identifier: 5E:90:69:97:A4:B5:12:7C:49:FA:88:CD:0E:B4:23:90:09:EE:F4:72
Authority key identifier: 52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
Certificate issuer: /CN=5259796c5f60c55501e458008611623b5049d479
Certificate serial: 019A71B7B3A4DDBD01C3A87BBBA93762D17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
Manifest number: 013A
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl (hash: DO2GYglSDwCGJ7X58CfOc6OXPrB6cDSo53uwdPNZY7U=)
2: n6xqmighFn7Vnqg53_v_ZExOLTk.roa (hash: Vp9Yf4e/IJuX8klPo+kJIwSDYNXo9hKqOgWcowfTXuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b3:a4:dd:bd:01:c3:a8:7b:bb:a9:37:62:d1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259796c5f60c55501e458008611623b5049d479
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=5e906997a4b5127c49fa88cd0eb4239009eef472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:24:39:45:22:d2:bf:7a:61:cd:d3:7b:69:
73:8d:f4:b1:32:fc:01:e6:ad:fd:2c:bd:07:94:ca:
8a:24:e1:bd:c3:c2:f8:00:a1:f0:50:dc:3d:e9:e2:
82:3f:3c:29:0d:6e:54:5f:58:a8:22:00:f5:8b:a1:
3d:a2:1d:92:9b:10:52:c3:62:55:d2:e7:b5:3a:c2:
6d:12:8b:49:b3:2d:98:36:18:3f:6d:d3:23:f9:a8:
f5:64:97:8f:bd:63:c5:9b:9d:a9:55:08:b5:d6:5c:
b6:3e:46:97:eb:ce:06:66:4b:c1:d4:d5:a2:cf:62:
a0:d1:28:9c:2d:2f:a3:4a:b0:af:85:57:19:1d:d9:
0a:a1:ac:71:45:51:f5:a8:f2:9d:4a:68:1c:06:48:
d9:4b:90:c9:e7:03:8d:ad:1f:95:9b:75:36:4d:93:
bc:60:22:2b:23:e2:66:db:87:ba:93:0d:31:67:8a:
09:ea:a0:16:0e:cd:15:b9:44:56:2e:92:fa:76:1f:
30:a9:d4:38:f7:7a:0e:39:fe:a1:80:e8:cb:7e:27:
1a:ba:aa:09:fe:2f:28:e3:19:c0:bb:d4:d1:9f:36:
e6:71:26:ce:68:73:3e:69:06:cd:dc:7c:2b:4e:43:
f6:59:c4:bc:7f:66:a4:74:0d:78:d0:a3:08:68:09:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:90:69:97:A4:B5:12:7C:49:FA:88:CD:0E:B4:23:90:09:EE:F4:72
X509v3 Authority Key Identifier:
keyid:52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ff:e8:e5:a1:8e:f4:d8:8f:65:d0:be:e8:89:47:52:c8:78:
94:a9:cb:d5:52:eb:0d:c3:df:76:fe:61:8e:ed:46:f8:c3:0f:
70:46:38:83:c2:40:fe:68:e7:b8:2c:16:aa:28:9d:15:42:ec:
a5:76:23:c0:e1:89:ac:31:a1:46:44:1b:48:84:05:e2:f0:6f:
d1:af:bb:19:44:cd:0a:af:03:cb:2b:75:8a:80:e0:9b:89:91:
77:2f:a4:cd:3b:9b:41:3e:28:f8:40:e0:2f:b4:08:f4:78:5f:
aa:fb:a0:69:d6:17:c0:70:cb:c4:c2:ca:b3:ef:2f:b2:a9:79:
c9:9a:37:90:ad:25:9f:db:8b:66:19:06:11:b1:73:21:d8:93:
f6:c1:f5:41:b7:8b:37:48:99:a4:d2:34:04:58:cc:eb:40:89:
c8:ba:17:ea:98:3c:74:23:e8:7c:f5:7c:88:07:7f:55:0c:ec:
04:a9:c9:ec:26:89:f1:f5:a1:c5:2c:c7:08:0c:18:c8:08:96:
0e:41:bc:d2:cc:1e:cf:47:c5:c8:83:0a:91:62:be:47:99:fe:
95:7b:f5:11:ea:b9:72:65:e9:1f:be:92:97:19:59:cd:e5:03:
a1:c1:5d:0b:64:61:82:25:72:79:72:d8:68:5a:0f:c6:b5:ba:
3c:33:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:42 2025 by rpki-client