Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: j2hwJzuw1occQA9HcARGuAGh2WEQQdXTKA0YhBotCU4=
Subject key identifier: EA:77:81:CC:E5:A7:36:C1:3F:70:D1:C8:7D:94:E6:0D:D1:E7:CC:EE
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 019A0B25A43059A95028DEDF4FB3901FDC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0AB1
Signing time: Wed 22 Oct 2025 09:00:07 +0000
Manifest this update: Wed 22 Oct 2025 09:00:07 +0000
Manifest next update: Thu 23 Oct 2025 09:00:07 +0000
Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: hstg17Q0v1T3XG2gmj7NEdv3aJZTMLvtrul4UveY5C0=)
2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=)
3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:25:a4:30:59:a9:50:28:de:df:4f:b3:90:1f:dc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Oct 22 09:00:07 2025 GMT
Not After : Oct 23 09:00:07 2025 GMT
Subject: CN=ea7781cce5a736c13f70d1c87d94e60dd1e7ccee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:a9:5a:f4:40:83:56:61:87:4b:22:4f:51:
a3:d2:36:8b:11:c0:78:9f:da:a3:3e:ed:75:fd:d3:
a8:3f:64:c6:e6:5a:29:bf:f7:a1:75:f2:cf:c8:1c:
75:aa:3d:7c:c6:33:40:43:93:20:b5:a6:3a:0c:e5:
0a:22:b8:b0:fb:fa:01:7f:54:2f:59:a4:2a:0c:e0:
eb:6e:0f:3c:f7:d4:08:18:82:41:77:58:80:d3:6f:
f7:03:b6:45:06:3e:e5:3f:a7:88:51:d5:20:91:3f:
93:28:50:38:b7:ce:41:a0:e8:c5:73:b1:74:b6:73:
dc:18:b8:9c:33:e2:7d:e4:c7:94:b2:23:79:e1:40:
f9:c0:9d:1f:bf:53:1d:7a:06:51:42:ba:53:48:37:
d1:3f:39:f9:50:89:99:22:a6:6c:c2:bf:cd:5c:24:
6f:20:de:96:b3:32:45:75:8f:ec:a3:1b:27:6b:21:
87:fe:9d:09:a5:37:a4:b6:0b:70:c4:98:80:6b:77:
e8:96:af:3a:9b:b0:57:fa:6a:e6:0b:68:e1:d1:42:
04:58:cc:61:af:8e:19:75:a4:9c:66:ed:6a:ef:c2:
bc:02:e5:da:51:ad:59:a0:53:c2:75:38:6b:52:6b:
87:a9:d5:51:ba:2d:fe:06:29:4e:8b:c6:08:81:c7:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:77:81:CC:E5:A7:36:C1:3F:70:D1:C8:7D:94:E6:0D:D1:E7:CC:EE
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:96:2b:e2:a5:2e:11:fa:e6:ba:c4:f5:2d:40:64:da:bc:b2:
d8:82:8b:8e:25:33:26:6e:2d:c7:87:3b:93:06:31:d6:91:f0:
0a:c4:4e:95:41:5f:6e:79:d7:68:10:8f:83:6f:af:a9:dc:c3:
1a:9f:26:7f:a6:a3:fd:23:40:06:50:cc:61:55:16:78:a7:d9:
b4:36:65:bc:d5:21:da:44:7c:4f:4d:4b:ed:47:20:d0:74:86:
82:25:a3:e6:18:59:77:31:be:9b:91:d1:e5:36:bb:db:20:e0:
ca:2a:a8:30:41:b4:ed:6e:4c:10:f3:eb:b5:59:cf:48:81:b5:
f9:c5:d4:06:f6:b5:8a:ae:d8:23:b4:f9:35:ef:00:33:b5:2f:
cd:70:12:57:24:d8:46:0a:a6:41:5e:9e:d0:2e:b9:8a:8b:69:
4c:b7:1d:df:fc:e3:4c:be:3d:f7:0f:b8:d8:c8:e1:2e:9e:fd:
64:c7:49:24:3c:8e:ae:44:43:35:11:39:21:0b:74:52:27:5f:
62:85:a2:a8:87:39:7c:b1:06:0e:7a:72:99:21:4d:06:a8:c2:
ef:e1:87:f3:22:fb:a9:4a:10:c4:ed:3c:0d:10:ea:5c:0a:b9:
de:ef:ed:b8:a2:b3:c3:fb:87:da:36:11:35:e3:ef:e7:26:81:
d4:b7:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:31:43 2025 by rpki-client