Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File: UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier: pBt6CntxtY3PpmedSIp2UpwV7J5CaeTxd9taKj/9MFI=
Subject key identifier: 5B:B4:3F:4F:53:B5:55:33:6D:24:41:D2:08:48:A0:4C:21:2F:9D:7C
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial: 019A51BE453150B611412652B633F3917BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number: 01B4
Signing time: Wed 05 Nov 2025 02:00:15 +0000
Manifest this update: Wed 05 Nov 2025 02:00:15 +0000
Manifest next update: Thu 06 Nov 2025 02:00:15 +0000
Files and hashes: 1: HmBHMAAoUy9qKm5EF-apsYNvL-Y.roa (hash: l1nynbFOV66i2gHUQws1+HFlLSzuk9i9xbBDIJI0tVk=)
2: RJxr8FfYNXMH1JQVOwgGzONUVKU.roa (hash: DR8gGJ69xVF1vRltrSd3W6LpV3g9f3689+1YFT6WiyI=)
3: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: 8g5hbYp2EKXhkm+8REiqCxAXcHKcN3hCu4y5De6QtUY=)
4: VD-LSAHFyPqWUZ2Vjm-KKmr8eKM.roa (hash: rKVzKhQ4K6eAovmJ6rMHEI/c6Cx2HmuMrN4fBqn4Zxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:45:31:50:b6:11:41:26:52:b6:33:f3:91:7b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Validity
Not Before: Nov 5 02:00:15 2025 GMT
Not After : Nov 6 02:00:15 2025 GMT
Subject: CN=5bb43f4f53b555336d2441d20848a04c212f9d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ed:36:eb:88:ca:2e:bc:ad:34:10:93:80:b8:
8f:39:09:8d:2f:d5:0c:28:7f:6a:f8:e7:d6:9b:b1:
38:07:0d:ed:c8:2c:c4:cf:a2:70:87:c5:e0:16:de:
ce:ac:ce:81:99:e3:0a:d2:2a:af:80:5b:f7:32:dc:
7a:1d:59:1a:e7:31:86:71:b1:f2:2c:ea:52:55:6d:
14:06:d3:f7:f0:dd:5f:b6:61:79:3b:65:c9:04:14:
31:ab:4a:f1:6e:89:07:f6:b1:22:ce:7c:28:24:1d:
8e:e6:3f:db:09:fb:bf:e1:04:eb:c4:57:45:7c:b5:
00:84:2e:99:d2:b1:40:53:a0:44:57:d7:a6:8b:73:
06:c7:13:95:ba:8f:09:90:f4:a1:21:b2:0a:e3:c4:
5d:b9:17:07:d3:c2:6e:4e:a7:63:79:f0:84:bc:0e:
ae:64:08:81:43:16:99:ac:b6:73:2c:38:de:f2:a0:
d0:0c:f6:51:bd:90:51:c5:2d:61:3a:22:df:4a:ef:
15:e2:ea:fe:d0:16:04:e6:94:4d:31:6f:be:e9:c9:
34:01:c3:65:85:df:16:06:5a:a3:36:32:d7:0b:29:
b0:63:49:df:53:01:3c:6b:ab:60:06:f8:18:1e:be:
ff:6a:23:6c:09:2a:c3:ad:82:63:3d:3b:5b:ab:11:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B4:3F:4F:53:B5:55:33:6D:24:41:D2:08:48:A0:4C:21:2F:9D:7C
X509v3 Authority Key Identifier:
keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1b:17:54:7a:38:b1:92:d8:27:61:3d:1b:af:aa:e7:c0:22:
1e:a2:06:13:bf:5d:0b:18:89:dd:9c:8d:cf:b1:77:a7:94:b2:
bc:d3:bf:76:2f:02:37:07:02:00:63:59:e4:04:4c:7e:67:98:
54:53:18:10:ff:b6:b8:77:83:2c:a7:3e:81:88:cc:94:1b:ab:
cf:55:c5:2e:c8:e2:f9:2d:f5:e3:ad:53:45:37:29:25:ac:c3:
c2:07:d5:45:d1:85:7d:4e:57:13:12:84:c8:64:10:3e:a0:96:
ee:2c:48:c1:d4:19:4b:ba:78:04:24:a9:66:fa:d5:84:75:0c:
6e:10:d1:c1:31:20:28:df:f9:70:75:7e:72:85:0c:f3:cc:8d:
fe:e1:dc:55:34:3c:e4:5d:ae:3e:a9:24:dc:8a:67:06:56:12:
5b:92:82:0b:60:45:a5:37:f6:3b:84:b8:3b:5f:20:f6:48:78:
e8:af:c7:52:b3:e2:be:42:2b:a6:4d:75:08:72:fe:a8:ac:62:
63:b8:a0:2b:41:60:60:78:3c:e9:b0:cb:18:69:22:78:10:cd:
4f:14:e1:30:fe:e2:91:4b:8a:3b:19:07:fb:49:e3:59:22:7b:
8b:fc:44:c1:46:ef:4a:8d:14:ca:f9:02:52:c1:16:7a:ea:7c:
1b:3c:74:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvkUxULYRQSZStjPzkXvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjJjNDAxY2U1YzllODgxY2Q5YTNiZThlZmVjNjAwMjJk
YTBlYjYwHhcNMjUxMTA1MDIwMDE1WhcNMjUxMTA2MDIwMDE1WjAzMTEwLwYDVQQD
Eyg1YmI0M2Y0ZjUzYjU1NTMzNmQyNDQxZDIwODQ4YTA0YzIxMmY5ZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8e0264jKLrytNBCTgLiPOQmNL9UM
KH9q+OfWm7E4Bw3tyCzEz6Jwh8XgFt7OrM6BmeMK0iqvgFv3Mtx6HVka5zGGcbHy
LOpSVW0UBtP38N1ftmF5O2XJBBQxq0rxbokH9rEiznwoJB2O5j/bCfu/4QTrxFdF
fLUAhC6Z0rFAU6BEV9emi3MGxxOVuo8JkPShIbIK48RduRcH08JuTqdjefCEvA6u
ZAiBQxaZrLZzLDje8qDQDPZRvZBRxS1hOiLfSu8V4ur+0BYE5pRNMW++6ck0AcNl
hd8WBlqjNjLXCymwY0nfUwE8a6tgBvgYHr7/aiNsCSrDrYJjPTtbqxFSEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFu0P09TtVUzbSRB0ghIoEwhL518MB8GA1UdIwQY
MBaAFFGyxAHOXJ6IHNmjvo7+xgAi2g62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMt
OTRkMWIxZDE2Yjg1LzEvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMtOTRkMWIxZDE2Yjg1
LzEvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxsXVHo4
sZLYJ2E9G6+q58AiHqIGE79dCxiJ3ZyNz7F3p5SyvNO/di8CNwcCAGNZ5ARMfmeY
VFMYEP+2uHeDLKc+gYjMlBurz1XFLsji+S31461TRTcpJazDwgfVRdGFfU5XExKE
yGQQPqCW7ixIwdQZS7p4BCSpZvrVhHUMbhDRwTEgKN/5cHV+coUM88yN/uHcVTQ8
5F2uPqkk3IpnBlYSW5KCC2BFpTf2O4S4O18g9kh46K/HUrPivkIrpk11CHL+qKxi
Y7igK0FgYHg86bDLGGkieBDNTxThMP7ikUuKOxkH+0njWSJ7i/xEwUbvSo0UyvkC
UsEWeup8Gzx06w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:25 2025 by rpki-client