Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier: +tsC0JfEMfI2xZwm5uIZ7mSwL9DlSfjQaRaXJeH68I8=
Subject key identifier: BA:FA:83:35:4B:2A:3D:85:61:D8:68:CC:C4:1F:C4:9E:17:73:DF:04
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial: 0199183F56F55172B35393C1AE86B1749B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number: 135D
Signing time: Fri 05 Sep 2025 05:00:28 +0000
Manifest this update: Fri 05 Sep 2025 05:00:28 +0000
Manifest next update: Sat 06 Sep 2025 05:00:28 +0000
Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: KhT32P9zIBEWuepJTxRGrTQKZ/9VOzdKz0Ihmw2ukVE=)
2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:56:f5:51:72:b3:53:93:c1:ae:86:b1:74:9b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
Validity
Not Before: Sep 5 05:00:28 2025 GMT
Not After : Sep 6 05:00:28 2025 GMT
Subject: CN=bafa83354b2a3d8561d868ccc41fc49e1773df04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:20:e7:8a:d8:25:ed:3a:c6:fa:47:ba:21:
42:6d:7f:a6:30:18:06:7e:86:02:3b:ed:f8:89:cd:
c4:f1:2f:95:e9:0d:bb:93:20:55:49:a6:cf:54:01:
0d:d6:fd:3f:10:8c:9f:35:1c:df:cd:56:4e:7e:83:
5b:57:54:9c:0c:32:b2:00:b2:a4:cb:00:94:d3:af:
95:47:18:6d:5b:1d:89:c7:97:30:18:17:f5:a3:95:
0f:64:ea:7c:30:c6:e7:90:ae:fb:15:95:30:f1:e7:
48:a4:11:2b:27:4d:4a:5e:97:f2:16:d6:b2:56:4c:
a2:15:5a:e4:10:b7:c0:f6:9d:8c:1e:d3:fb:c6:b0:
ca:0f:67:93:cb:bd:16:98:42:92:56:fc:fe:58:c3:
d5:2d:7f:49:9a:5c:4b:1a:12:03:62:a6:3c:6f:c0:
fe:cf:03:f3:f8:f3:69:42:d6:ea:37:ee:f4:bc:49:
9b:54:2c:58:b5:82:15:ad:c5:0f:cb:38:c7:69:64:
d7:fc:bf:97:07:a2:a3:3b:be:1b:79:41:0c:46:b8:
11:95:37:df:6f:a2:5e:34:14:b5:94:9b:9c:aa:3f:
eb:f0:70:a4:bf:35:02:5b:15:f0:0c:6f:a1:1e:4d:
55:4c:72:fd:fa:ee:1f:68:d8:65:c9:84:f7:2a:6d:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FA:83:35:4B:2A:3D:85:61:D8:68:CC:C4:1F:C4:9E:17:73:DF:04
X509v3 Authority Key Identifier:
keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:53:2e:ea:3a:cc:7e:9c:fd:1e:48:50:5a:ad:4c:6a:51:7d:
c4:d0:ad:ff:7c:49:77:e0:a1:0f:21:2d:3d:49:e6:4b:c7:eb:
f5:5c:da:ad:70:32:0a:1d:63:b6:b7:52:61:68:24:4d:c8:67:
3f:2c:ed:6b:d3:0b:34:35:0f:aa:6e:8d:12:c6:8b:cb:7b:ac:
70:a4:53:8a:7b:e7:7a:f4:ed:cf:85:83:b1:51:28:1a:be:d6:
ff:e3:01:c5:54:bd:3f:ed:2e:af:a9:db:0d:fd:71:5b:0d:65:
da:0c:25:da:2f:dd:de:c0:15:3c:b3:5b:a9:5a:8c:fc:6b:e2:
91:ea:42:e4:95:9b:3f:4f:b5:e7:71:a7:b4:9b:01:d5:b1:06:
8e:2c:8d:3d:60:cc:a3:53:a9:e0:9e:15:9d:ca:c4:a6:f8:6d:
cb:cc:7c:9c:58:e6:c6:66:12:0b:c9:0a:67:a3:90:c8:c8:01:
57:68:60:47:b5:10:3a:cd:fb:fd:c1:e5:01:f0:53:43:e8:04:
b1:cd:0f:4a:f6:ab:35:a3:a2:12:2f:de:26:1b:00:dd:ce:74:
b9:e9:ba:86:da:5d:2b:0d:3a:84:3e:ac:c0:64:56:05:b4:1b:
65:13:e3:72:4b:85:4c:04:35:f3:c0:a5:10:55:0d:53:87:cd:
26:12:25:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYP1b1UXKzU5PBroaxdJtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNTkxNWI0YzcyNDA3YWZiNzk0MWU1YmUyOTRhYzcxMzNi
MTA3YjMwHhcNMjUwOTA1MDUwMDI4WhcNMjUwOTA2MDUwMDI4WjAzMTEwLwYDVQQD
EyhiYWZhODMzNTRiMmEzZDg1NjFkODY4Y2NjNDFmYzQ5ZTE3NzNkZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGUg54rYJe06xvpHuiFCbX+mMBgG
foYCO+34ic3E8S+V6Q27kyBVSabPVAEN1v0/EIyfNRzfzVZOfoNbV1ScDDKyALKk
ywCU06+VRxhtWx2Jx5cwGBf1o5UPZOp8MMbnkK77FZUw8edIpBErJ01KXpfyFtay
VkyiFVrkELfA9p2MHtP7xrDKD2eTy70WmEKSVvz+WMPVLX9JmlxLGhIDYqY8b8D+
zwPz+PNpQtbqN+70vEmbVCxYtYIVrcUPyzjHaWTX/L+XB6KjO74beUEMRrgRlTff
b6JeNBS1lJucqj/r8HCkvzUCWxXwDG+hHk1VTHL9+u4faNhlyYT3Km0HUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLr6gzVLKj2FYdhozMQfxJ4Xc98EMB8GA1UdIwQY
MBaAFFJZFbTHJAevt5QeW+KUrHEzsQezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWxrVnRNY2tCNi0zbEI1YjRwU3NjVE94QjdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NTE3MDgtMTlmOS00ZWNjLWE0NDIt
MGNlM2EyZWZjOGRkLzEvVWxrVnRNY2tCNi0zbEI1YjRwU3NjVE94QjdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84NTE3MDgtMTlmOS00ZWNjLWE0NDItMGNlM2EyZWZjOGRk
LzEvVWxrVnRNY2tCNi0zbEI1YjRwU3NjVE94QjdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1Mu6jrM
fpz9HkhQWq1MalF9xNCt/3xJd+ChDyEtPUnmS8fr9VzarXAyCh1jtrdSYWgkTchn
Pyzta9MLNDUPqm6NEsaLy3uscKRTinvnevTtz4WDsVEoGr7W/+MBxVS9P+0ur6nb
Df1xWw1l2gwl2i/d3sAVPLNbqVqM/GvikepC5JWbP0+153GntJsB1bEGjiyNPWDM
o1Op4J4VncrEpvhty8x8nFjmxmYSC8kKZ6OQyMgBV2hgR7UQOs37/cHlAfBTQ+gE
sc0PSvarNaOiEi/eJhsA3c50uem6htpdKw06hD6swGRWBbQbZRPjckuFTAQ188Cl
EFUNU4fNJhIlLg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:07 2025 by rpki-client