Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
File: ULb-4OehTH4dOGCdm8PC78yvM6w.mft (raw, json)
Hash identifier: lh/IXuuYNP/7fX7gML2CzcXY2POUkXFcOrpqlRAv22A=
Subject key identifier: FC:45:B3:78:CB:5D:06:41:ED:D9:C1:85:D3:C7:60:F2:30:38:94:ED
Authority key identifier: 50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC
Certificate issuer: /CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac
Certificate serial: 019A71B879BC0E440C57F36EC28A7006282A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
Manifest number: 02FD
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: ULb-4OehTH4dOGCdm8PC78yvM6w.crl (hash: vNccehtZ1VxZLo6YADBFEPL5jqmrdSPibojcdQkmbyU=)
2: ZnDO_rePAntHP4QbrCH1ZMUFU88.roa (hash: 1CLa3f+zgWechWD7s3i+GnMCuHYkW66e1IkcJJq2REw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:79:bc:0e:44:0c:57:f3:6e:c2:8a:70:06:28:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=fc45b378cb5d0641edd9c185d3c760f2303894ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:87:b9:4c:bf:55:5b:99:c2:ef:e7:c0:00:
74:45:35:0f:97:0e:9d:3d:68:d8:26:55:8c:87:dc:
74:d2:40:7a:4e:5d:88:99:60:cb:3f:e7:85:dd:92:
29:f4:05:19:9c:ac:c6:08:14:c8:45:41:de:dd:ea:
56:f3:08:56:50:f1:c1:5f:fd:b2:b2:f3:bf:ee:b6:
c1:be:4f:3e:f3:6d:46:3d:c1:2b:24:26:88:1a:d0:
d0:c9:db:97:c9:2e:58:00:74:66:ea:8d:84:b3:fa:
f9:80:e3:58:bd:f3:ce:b9:41:8b:09:c2:54:5b:69:
e4:ef:a4:10:04:bb:48:35:f2:27:1d:cb:8e:ab:90:
13:ec:f1:4e:77:84:08:dd:8c:2a:67:f1:fd:2e:12:
31:f5:17:54:75:f6:84:b5:98:c5:fc:1e:52:0a:67:
bb:e5:a0:27:4f:a1:df:4d:d4:00:e2:60:34:20:ee:
9e:8f:5d:45:92:9b:51:d8:9e:85:9b:68:62:6d:f5:
3e:19:8b:76:2e:cd:9b:a2:ba:14:5f:60:81:73:ce:
6f:d5:aa:6c:d5:6e:d8:08:82:1b:27:cb:09:71:97:
d6:27:f6:71:89:14:c9:68:cf:0a:1f:93:d1:cf:6c:
c3:1c:7d:ba:6f:f5:76:c0:d6:2e:8f:42:d6:b1:ef:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:45:B3:78:CB:5D:06:41:ED:D9:C1:85:D3:C7:60:F2:30:38:94:ED
X509v3 Authority Key Identifier:
keyid:50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c9:4b:ea:d6:f8:21:c8:c1:3a:02:e3:04:bc:c1:52:b4:28:
65:19:c2:b4:ed:d7:d4:06:4d:a6:70:41:38:95:49:4b:1f:c2:
23:62:18:d1:13:2c:8a:6d:80:8b:c1:a5:77:8b:7b:41:6a:c9:
4d:74:64:92:9b:55:ec:cf:02:b7:cc:d9:32:83:bd:c2:e0:a5:
a8:b1:e6:ba:59:06:6c:5c:00:d2:ac:b2:8f:d0:bc:d4:c0:5d:
a1:68:e6:bd:91:ea:9b:e6:a0:56:54:29:ba:98:e0:90:26:59:
ce:a5:ad:2f:0f:69:f1:01:f8:bb:82:7e:6c:4d:75:7c:58:01:
c1:77:01:36:33:fb:9f:d0:ff:75:7c:66:7a:f2:f8:43:57:97:
75:9f:64:02:96:33:96:31:05:c2:e0:64:52:c7:73:63:04:60:
3a:d4:5e:71:e5:86:44:89:7f:37:7d:81:77:96:b3:cd:21:97:
6d:48:7f:bd:b4:44:9a:3e:e6:a7:43:a6:df:c0:2d:a9:be:13:
72:03:5b:e8:54:b9:9d:71:bc:98:d0:5e:19:7e:10:fc:1b:32:
3b:95:4b:d9:71:42:da:2a:ac:61:fa:1c:1f:ba:a5:a0:1d:7f:
3c:17:13:4a:e0:25:6e:ed:0b:96:93:0c:07:8f:fd:13:d5:38:
21:e8:a0:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHm8DkQMV/NuwopwBigqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYjZmZWUwZTdhMTRjN2UxZDM4NjA5ZDliYzNjMmVmY2Nh
ZjMzYWMwHhcNMjUxMTExMDcwMTQ2WhcNMjUxMTEyMDcwMTQ2WjAzMTEwLwYDVQQD
EyhmYzQ1YjM3OGNiNWQwNjQxZWRkOWMxODVkM2M3NjBmMjMwMzg5NGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p+HuUy/VVuZwu/nwAB0RTUPlw6d
PWjYJlWMh9x00kB6Tl2ImWDLP+eF3ZIp9AUZnKzGCBTIRUHe3epW8whWUPHBX/2y
svO/7rbBvk8+821GPcErJCaIGtDQyduXyS5YAHRm6o2Es/r5gONYvfPOuUGLCcJU
W2nk76QQBLtINfInHcuOq5AT7PFOd4QI3YwqZ/H9LhIx9RdUdfaEtZjF/B5SCme7
5aAnT6HfTdQA4mA0IO6ej11FkptR2J6Fm2hibfU+GYt2Ls2boroUX2CBc85v1aps
1W7YCIIbJ8sJcZfWJ/ZxiRTJaM8KH5PRz2zDHH26b/V2wNYuj0LWse/CAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxFs3jLXQZB7dnBhdPHYPIwOJTtMB8GA1UdIwQY
MBaAFFC2/uDnoUx+HThgnZvDwu/MrzOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jZDhmZTgtOGMwOC00NmIyLWI1N2Qt
ZmQ2NjRmMDMyOTgwLzEvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jZDhmZTgtOGMwOC00NmIyLWI1N2QtZmQ2NjRmMDMyOTgw
LzEvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARslL6tb4
IcjBOgLjBLzBUrQoZRnCtO3X1AZNpnBBOJVJSx/CI2IY0RMsim2Ai8Gld4t7QWrJ
TXRkkptV7M8Ct8zZMoO9wuClqLHmulkGbFwA0qyyj9C81MBdoWjmvZHqm+agVlQp
upjgkCZZzqWtLw9p8QH4u4J+bE11fFgBwXcBNjP7n9D/dXxmevL4Q1eXdZ9kApYz
ljEFwuBkUsdzYwRgOtReceWGRIl/N32Bd5azzSGXbUh/vbREmj7mp0Om38Atqb4T
cgNb6FS5nXG8mNBeGX4Q/BsyO5VL2XFC2iqsYfocH7qloB1/PBcTSuAlbu0LlpMM
B4/9E9U4Ieig1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:11 2025 by rpki-client