Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier: dR+dCV5eaTkdYX/3N4VjAoH1I/spF7ingh0YU3w9Lek=
Subject key identifier: 9E:F7:AD:06:68:49:A5:7B:E0:99:B1:8F:50:9B:DD:2E:9A:3D:4E:1C
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial: 0199E22A58C2B1EBB11F33453DAF6296A9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number: 0D98
Signing time: Tue 14 Oct 2025 10:00:50 +0000
Manifest this update: Tue 14 Oct 2025 10:00:50 +0000
Manifest next update: Wed 15 Oct 2025 10:00:50 +0000
Files and hashes: 1: Q2LTA1GKdHj7d0i_1GvyqSIwjxQ.roa (hash: xu02NdCI991FR8WiB+pSZuZa9Qgpw7qq1Oeg+OkFXG4=)
2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: Gw+842W8GhomWQxCMkyyc0M3lxYlkr2lA0v0AXjq84I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Oct 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:2a:58:c2:b1:eb:b1:1f:33:45:3d:af:62:96:a9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Validity
Not Before: Oct 14 10:00:50 2025 GMT
Not After : Oct 15 10:00:50 2025 GMT
Subject: CN=9ef7ad066849a57be099b18f509bdd2e9a3d4e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:4b:af:44:ed:aa:7a:83:f8:70:e1:a4:3a:
89:15:f4:ef:06:d4:80:a9:9a:d2:05:d8:61:61:3e:
6a:1d:dd:6e:69:ee:9e:2f:67:2c:ff:1d:d8:7e:53:
09:da:32:63:71:01:b7:c9:19:08:ca:fa:e6:e0:c3:
9d:2d:2e:be:86:ca:0a:c0:77:fc:0f:8c:e2:ad:aa:
c9:d1:f0:4b:71:9e:b6:fb:66:2c:e9:28:92:22:e1:
53:1d:ae:b7:29:1e:a3:f7:d1:7d:21:a9:56:2e:fc:
00:43:90:81:83:65:78:9f:6a:14:cb:f7:5b:7d:4a:
b4:82:06:e7:59:94:0e:cc:c4:97:66:d9:81:05:ad:
dc:c2:26:ed:3a:ee:b4:ef:35:f8:58:3e:46:3a:74:
0a:d8:2d:b9:94:f8:c9:cc:1c:86:85:bd:8c:47:0a:
8e:17:c6:97:2c:50:18:a6:80:28:e6:a0:b2:fa:fc:
11:6d:dc:e8:e7:da:11:0a:4a:ae:4c:e9:ef:2e:17:
af:f4:cc:1a:65:f8:f0:ae:0c:bf:cb:68:99:6b:41:
0a:01:f5:b5:3c:20:ff:cd:8f:36:fa:13:1c:47:2e:
87:86:15:36:12:b2:59:2c:46:f3:2c:df:e7:9b:72:
f5:ee:69:43:99:c2:24:c9:3d:22:2d:7b:31:9a:97:
f0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F7:AD:06:68:49:A5:7B:E0:99:B1:8F:50:9B:DD:2E:9A:3D:4E:1C
X509v3 Authority Key Identifier:
keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9f:3c:01:96:4a:90:e8:fe:01:c0:47:0e:d0:49:a2:7a:0f:
32:8e:c1:42:c5:bc:a2:25:00:be:5b:78:60:1c:97:e8:88:2f:
8f:26:75:e0:13:10:b7:14:72:e8:d3:f3:aa:62:77:86:46:65:
37:61:06:e1:2e:68:d2:1c:53:33:8c:32:45:07:1d:27:4d:d7:
ef:63:8e:25:18:c0:da:f1:d2:fb:57:49:15:a4:5b:a1:55:a2:
d5:24:91:c9:bf:74:b0:8a:fc:4b:dc:b9:76:dc:95:0e:dc:c6:
c0:e9:8e:0c:12:4d:00:3d:6f:bd:04:bf:f3:ca:f2:94:b4:3a:
0a:4d:36:db:1c:a1:7c:4b:09:83:d5:5d:62:61:8d:53:88:02:
05:5f:87:ca:0b:97:7e:1d:a6:51:42:85:6f:ad:9a:19:9a:91:
bc:5b:58:ff:0d:3d:fa:76:ec:19:5a:6b:16:dd:a4:5a:f8:2d:
0f:c4:56:86:9a:42:6b:89:99:a2:a6:d7:2e:44:f6:90:8a:e0:
0e:48:46:c0:58:3a:05:33:bb:42:06:8a:bd:03:f9:c4:af:84:
9d:0a:9b:8c:5d:a0:4a:9b:3c:d3:cc:8c:80:bb:a3:8e:5b:7d:
3b:8f:0e:02:1d:40:a6:4e:fc:36:2d:60:d7:01:ce:6d:c7:12:
42:d3:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 11:26:33 2025 by rpki-client