Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier: /xOyb3lzI9RgxZASpsKeJPysqzoml/iO90jKfj9pXY8=
Subject key identifier: CF:24:A5:05:21:B4:3F:4F:B0:36:98:12:55:DD:AF:0E:77:2A:FF:F9
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial: 019A70A55789AC35EDDF4582C55566258B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number: 0341
Signing time: Tue 11 Nov 2025 02:01:15 +0000
Manifest this update: Tue 11 Nov 2025 02:01:15 +0000
Manifest next update: Wed 12 Nov 2025 02:01:15 +0000
Files and hashes: 1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=)
2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: DbeX//uJTp25B00h4p/yB8Doz1OP6Bc5DQ7bWsvCu7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:57:89:ac:35:ed:df:45:82:c5:55:66:25:8b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Validity
Not Before: Nov 11 02:01:15 2025 GMT
Not After : Nov 12 02:01:15 2025 GMT
Subject: CN=cf24a50521b43f4fb036981255ddaf0e772afff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:58:33:66:3c:78:39:94:c5:86:95:15:38:
75:30:f2:70:f0:97:77:dc:e9:c9:e3:93:84:fc:1e:
e1:e9:b4:96:02:e2:4b:05:7e:31:01:9e:56:f4:e3:
9b:f8:81:ee:48:82:46:98:72:9b:4f:91:dd:74:56:
a0:ae:7c:bc:68:c6:73:8b:39:09:0b:35:81:10:62:
a7:1e:30:d5:5c:91:84:d0:28:ce:6c:d8:8c:bf:fe:
49:e0:0c:62:43:82:96:90:4e:a4:ac:ed:1e:f4:a5:
d1:5a:4f:d3:14:90:e4:f1:ee:08:8b:f4:1a:b2:74:
9a:53:c9:17:ff:01:74:29:78:aa:8a:6f:22:02:6f:
88:79:f8:19:cf:94:41:00:6e:2d:16:14:f2:13:cc:
10:1b:cd:92:2f:bc:69:60:36:6b:ab:31:f3:25:c9:
60:33:3a:2e:4d:70:5a:9a:5f:64:b3:ef:6e:33:07:
09:59:ca:fc:9e:e8:9f:52:ea:d5:2a:51:ad:5f:f3:
1e:03:db:5a:84:19:18:5e:5b:b2:50:6d:73:f0:aa:
fd:33:38:2c:29:bb:15:bd:cd:40:28:12:ac:28:b0:
1b:f9:d4:8c:9e:6c:57:19:69:4b:f0:02:f3:93:b6:
8b:99:32:70:fd:f6:3a:f4:47:c2:ff:f0:75:fe:15:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:24:A5:05:21:B4:3F:4F:B0:36:98:12:55:DD:AF:0E:77:2A:FF:F9
X509v3 Authority Key Identifier:
keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7c:a4:80:ed:cf:6b:f6:8c:63:a0:65:a4:53:1f:0a:fc:98:
da:8d:2d:07:b3:d1:0c:48:ee:56:d5:57:d0:6b:13:f2:ff:83:
a8:58:5d:eb:35:5a:93:c0:2e:dd:a7:b2:5f:bd:75:df:92:d5:
c2:72:40:56:d3:6e:30:e8:7c:bf:c1:a7:67:d9:6f:66:f5:db:
7b:8a:10:e2:97:8f:a5:1e:c0:19:f7:c3:33:29:01:3f:d4:d5:
2f:3f:1d:cb:55:73:ed:c6:c1:bf:53:c4:c6:31:50:93:5c:2e:
d4:80:13:c5:eb:08:c9:42:25:2e:63:6b:c8:3c:e1:d8:27:2b:
67:5f:8e:67:f3:7a:69:55:c7:7a:2e:72:de:63:f9:b9:a5:23:
3d:0c:8d:be:6a:d8:e3:7a:2b:01:b8:8d:da:99:a0:2f:e5:7f:
ec:17:56:3b:39:09:9a:56:f7:c4:6c:2c:91:14:18:62:fa:70:
a1:1c:2d:d3:93:16:25:07:15:f2:b9:1c:29:2b:b5:b9:a3:64:
42:6b:6d:fc:f9:be:fd:d4:8c:89:34:c8:ff:a7:d0:3e:a6:83:
34:01:76:0d:cd:d3:60:75:fa:c3:f7:9b:18:f2:f3:dc:1e:e1:
25:66:a3:9d:44:99:be:d7:55:b0:fb:db:3e:54:27:c4:81:08:
13:3e:62:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:03 2025 by rpki-client