Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
File: ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json)
Hash identifier: uLTOQ1LGoteb3etPYkUHOapL6zWSDV6OegfZ6A8Ya3k=
Subject key identifier: FA:19:48:EE:CF:96:04:3E:73:73:07:F9:0B:5F:3D:CC:A9:51:D2:82
Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
Certificate issuer: /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Certificate serial: 019A7225B56DAA85052F3BA603039FCB7EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
Manifest number: 0AA2
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: P3b7DFzAl1mF00eFO0q0Hvx6uqg.roa (hash: 4Vw9mbX/VAtbgUX/fX/IcrRcZH092D/s4XK4tYr5SHw=)
2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: fnnmURcbpQbxGa6ChoHd73cMVZPx4O2AaETDR2WvTds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b5:6d:aa:85:05:2f:3b:a6:03:03:9f:cb:7e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=fa1948eecf96043e737307f90b5f3dcca951d282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:a5:e8:d2:1d:f4:67:03:c2:ea:dc:22:8f:
83:d3:39:6d:c3:22:a5:eb:43:6f:dd:30:03:fb:c2:
70:ec:8b:80:09:be:7b:d7:21:45:9b:9b:20:a7:83:
26:57:38:97:a8:3e:7e:fe:fd:06:24:2d:4d:53:67:
6f:22:26:04:e5:0c:75:1a:8d:90:87:7b:41:c8:36:
06:dc:48:13:e6:23:36:21:1d:f2:87:fc:ad:cc:07:
8a:bd:1c:3f:c3:99:17:fc:0d:3a:5f:d2:00:70:d0:
f0:16:18:45:60:8a:87:94:32:f9:8d:e2:cc:c0:c4:
7c:ed:b2:c2:03:b2:8b:9e:85:ad:71:f7:d2:8e:6a:
17:13:d1:22:52:bc:dc:5a:19:62:78:6b:aa:f6:96:
91:bc:46:54:4b:8a:c9:b2:6f:6f:ce:75:ff:ff:04:
56:1d:34:67:27:ae:59:33:a2:c7:e8:49:b6:eb:d6:
31:90:12:55:97:df:9d:a8:d0:8d:5f:56:40:fa:9d:
d0:e8:c7:7e:56:55:89:48:c5:fd:55:62:e7:ca:82:
7c:29:1a:37:cf:95:44:28:5e:45:fc:8f:26:a5:aa:
7d:fa:06:de:92:57:fc:f0:a3:a8:a4:f6:0f:71:c4:
46:92:47:e2:32:f1:bd:e9:f7:c5:ef:20:6b:11:8e:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:19:48:EE:CF:96:04:3E:73:73:07:F9:0B:5F:3D:CC:A9:51:D2:82
X509v3 Authority Key Identifier:
keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:09:c5:c5:6a:26:43:38:ea:f6:db:36:0f:ef:73:04:23:9c:
cb:35:fd:d1:01:ef:7b:c6:00:0b:46:35:fd:30:c4:3f:3a:70:
90:a8:db:b0:74:5a:37:6e:df:bb:80:0d:60:b0:81:62:ce:3e:
e3:60:dc:09:95:b0:9d:66:89:08:52:44:88:0d:c3:c6:7d:b9:
81:63:3d:04:b7:88:65:cc:51:fc:d0:d6:9b:11:a1:4d:ec:c6:
fe:75:b5:80:4f:31:f5:53:da:78:83:f6:8f:89:17:b3:28:79:
53:78:ee:14:fe:58:87:fe:19:64:26:af:7d:14:ca:20:4a:d2:
8a:cb:1c:91:f5:8b:ba:1c:57:10:94:12:d9:fb:f7:7b:47:4c:
4b:27:46:08:99:51:5a:98:ff:e2:e8:4e:4e:0c:b3:14:30:f6:
f1:b3:b3:76:30:09:2a:d1:96:18:02:5e:f7:13:b0:c2:6a:d9:
29:a8:27:74:f7:1a:86:72:7b:69:7c:b4:13:05:97:e9:4e:54:
7c:ec:be:2b:58:af:ec:30:e8:f9:0d:15:3d:1f:d8:3d:89:fa:
43:11:f5:21:b3:d0:36:ea:d7:47:b7:a9:1e:a4:40:f3:6b:6a:
c4:5b:7f:a3:c7:aa:7f:96:60:15:c6:f8:26:9c:12:f1:c8:ec:
3f:34:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:16 2025 by rpki-client