Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
File: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft (raw, json)
Hash identifier: xQlBhXb9mvnhWkImJZwdy20ZxE+sna2r1g0Yz1ePzdY=
Subject key identifier: C7:C6:08:7E:DD:BC:DD:83:1D:FC:39:D2:82:6F:EC:76:F3:27:08:BA
Authority key identifier: 52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
Certificate issuer: /CN=5259796c5f60c55501e458008611623b5049d479
Certificate serial: 0199239FC619BEFC3EEB0C7EE055FAB964AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
Manifest number: 8D
Signing time: Sun 07 Sep 2025 10:01:37 +0000
Manifest this update: Sun 07 Sep 2025 10:01:37 +0000
Manifest next update: Mon 08 Sep 2025 10:01:37 +0000
Files and hashes: 1: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl (hash: w9TbFivVpLkC+zi+vrM8DxLeC53F1ZSrYqVwgd4Ebd0=)
2: n6xqmighFn7Vnqg53_v_ZExOLTk.roa (hash: Vp9Yf4e/IJuX8klPo+kJIwSDYNXo9hKqOgWcowfTXuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:c6:19:be:fc:3e:eb:0c:7e:e0:55:fa:b9:64:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259796c5f60c55501e458008611623b5049d479
Validity
Not Before: Sep 7 10:01:37 2025 GMT
Not After : Sep 8 10:01:37 2025 GMT
Subject: CN=c7c6087eddbcdd831dfc39d2826fec76f32708ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:d9:90:3b:ea:f4:8c:40:3a:ea:f8:0a:c8:
3a:91:2e:31:2b:71:8e:97:6c:18:dc:41:81:4a:2d:
40:03:9e:5f:44:1c:9f:00:f7:00:7c:7a:d3:75:88:
cd:05:e3:cc:dd:25:ee:52:85:5e:e6:07:75:ad:5d:
00:5f:df:f2:3b:fe:2f:71:b5:fa:68:7c:af:6c:08:
08:0c:fc:af:11:c0:0c:7c:28:ce:38:83:44:dd:dd:
cc:7a:7f:1e:b6:6d:0f:ea:41:c9:04:f1:2a:ec:49:
18:45:ae:56:6c:25:15:f2:2a:f3:95:fd:02:8f:1d:
ce:43:87:ef:ce:13:5d:8e:ce:96:e6:3d:9f:4f:bf:
f6:2b:5a:ae:1d:71:5f:7f:b6:ae:32:da:da:2c:61:
01:58:94:bc:1f:4c:7d:b9:3a:19:8f:10:18:0f:64:
a5:fb:79:19:de:09:7c:4e:5f:a9:f0:03:aa:3a:bf:
52:54:f3:80:c6:8e:3d:59:ce:31:85:17:c5:36:be:
f5:b3:ed:7d:68:b9:b0:7b:1d:e4:c8:f0:79:ab:de:
e3:89:28:db:1e:1e:de:33:03:a0:ca:db:3c:26:bd:
39:25:8f:09:ea:9d:46:d5:bd:a3:33:28:0c:c3:00:
1b:f9:75:95:d1:d8:18:5b:79:9e:9e:06:be:0d:dc:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C6:08:7E:DD:BC:DD:83:1D:FC:39:D2:82:6F:EC:76:F3:27:08:BA
X509v3 Authority Key Identifier:
keyid:52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5f:9e:b1:f1:ca:18:e0:f3:d4:7d:3b:ec:b7:e3:12:9e:f8:
00:d7:cb:e9:d7:af:29:1f:de:0d:08:c0:b0:c2:0a:95:07:99:
b1:bb:ad:73:32:40:d8:fb:36:28:5b:25:91:04:63:20:86:4a:
32:a0:9b:e8:85:08:4e:b9:59:cf:02:4d:f7:98:58:15:a1:34:
86:ac:46:d5:62:9f:f4:11:43:3c:15:9e:96:ac:fe:44:74:a3:
51:c4:d5:83:7c:50:c9:1c:0a:de:63:cf:12:77:a6:69:28:be:
42:04:78:c2:1e:d7:66:37:99:d6:1a:f3:b6:af:c7:a2:43:89:
df:d4:3d:ca:ea:5e:83:c1:6c:92:19:24:0b:fe:61:6f:1b:38:
37:bd:78:e7:28:08:7f:2f:9b:40:e4:e4:9c:7a:09:4f:96:65:
37:a1:1d:08:0c:24:bb:93:a6:82:17:c1:fb:ba:e3:fd:ba:56:
ee:f1:38:2a:37:89:8f:db:8b:0a:dc:cf:b6:49:0a:a0:a1:85:
d2:9d:b9:e3:02:b5:d2:fd:0d:83:e3:2a:0c:6c:31:68:7c:33:
2d:1d:b6:97:85:92:de:4c:db:dd:94:2b:bb:ea:1d:d7:a6:36:
8c:cd:6c:c3:1c:34:fc:ed:8b:86:16:e3:4b:71:b5:fd:30:ca:
22:58:73:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn8YZvvw+6wx+4FX6uWStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNTk3OTZjNWY2MGM1NTUwMWU0NTgwMDg2MTE2MjNiNTA0
OWQ0NzkwHhcNMjUwOTA3MTAwMTM3WhcNMjUwOTA4MTAwMTM3WjAzMTEwLwYDVQQD
EyhjN2M2MDg3ZWRkYmNkZDgzMWRmYzM5ZDI4MjZmZWM3NmYzMjcwOGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bbZkDvq9IxAOur4Csg6kS4xK3GO
l2wY3EGBSi1AA55fRByfAPcAfHrTdYjNBePM3SXuUoVe5gd1rV0AX9/yO/4vcbX6
aHyvbAgIDPyvEcAMfCjOOINE3d3Men8etm0P6kHJBPEq7EkYRa5WbCUV8irzlf0C
jx3OQ4fvzhNdjs6W5j2fT7/2K1quHXFff7auMtraLGEBWJS8H0x9uToZjxAYD2Sl
+3kZ3gl8Tl+p8AOqOr9SVPOAxo49Wc4xhRfFNr71s+19aLmwex3kyPB5q97jiSjb
Hh7eMwOgyts8Jr05JY8J6p1G1b2jMygMwwAb+XWV0dgYW3menga+DdwvYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfGCH7dvN2DHfw50oJv7HbzJwi6MB8GA1UdIwQY
MBaAFFJZeWxfYMVVAeRYAIYRYjtQSdR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWxsNWJGOWd4VlVCNUZnQWhoRmlPMUJKMUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mYWUwNWMtOWExZS00OWI4LTgwNDYt
ZThiYmI1NTE5MjM2LzEvVWxsNWJGOWd4VlVCNUZnQWhoRmlPMUJKMUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mYWUwNWMtOWExZS00OWI4LTgwNDYtZThiYmI1NTE5MjM2
LzEvVWxsNWJGOWd4VlVCNUZnQWhoRmlPMUJKMUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1+esfHK
GODz1H077LfjEp74ANfL6devKR/eDQjAsMIKlQeZsbutczJA2Ps2KFslkQRjIIZK
MqCb6IUITrlZzwJN95hYFaE0hqxG1WKf9BFDPBWelqz+RHSjUcTVg3xQyRwK3mPP
EnemaSi+QgR4wh7XZjeZ1hrztq/HokOJ39Q9yupeg8FskhkkC/5hbxs4N7145ygI
fy+bQOTknHoJT5ZlN6EdCAwku5OmghfB+7rj/bpW7vE4KjeJj9uLCtzPtkkKoKGF
0p254wK10v0Ng+MqDGwxaHwzLR22l4WS3kzb3ZQru+od16Y2jM1swxw0/O2Lhhbj
S3G1/TDKIlhzSw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:20 2025 by rpki-client