Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: emQLxQDHgJH84nPp5al4ZWvmoOGBpNWvuOsz2pJkyp8=
Subject key identifier: FB:94:0B:80:F7:B9:F1:9D:00:FE:C4:8A:42:74:02:E1:77:92:33:0B
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 019A4F62A87F9BABE8D2F3309E2C607EB79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 0ADB
Signing time: Tue 04 Nov 2025 15:00:56 +0000
Manifest this update: Tue 04 Nov 2025 15:00:56 +0000
Manifest next update: Wed 05 Nov 2025 15:00:56 +0000
Files and hashes: 1: UKpsyLZnsONm3nziQLW_Dy86-kc.roa (hash: sOSR0eDOaucZOE58pbyPZwUjeC+8MtIsg4Yj+A0vOoE=)
2: bkhY0JpEEO9e7LOCTStEAO3KiFg.roa (hash: nFRZrXuS6GoRY3BCOn9rQkEjbqjSmpEWfOS5j9kS+AQ=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: VrtuJOwTDjdPDUKidvO7s6uf98YB+S6gZo7n46VZ/hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a8:7f:9b:ab:e8:d2:f3:30:9e:2c:60:7e:b7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Nov 4 15:00:56 2025 GMT
Not After : Nov 5 15:00:56 2025 GMT
Subject: CN=fb940b80f7b9f19d00fec48a427402e17792330b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:f0:b0:55:5a:ad:c3:21:65:5f:1f:4d:ce:
99:67:d6:eb:e8:56:7d:93:a9:43:91:42:18:58:55:
22:47:01:34:76:24:75:a4:10:f9:4a:c1:db:1f:28:
51:09:ef:df:7d:dd:d0:a9:b3:d2:8c:6f:ba:d8:e1:
8a:e8:0a:7b:da:0e:eb:83:22:41:9a:aa:45:b9:0d:
cc:45:a4:46:f5:38:a4:76:fd:e6:e1:5d:6b:c8:02:
6f:ef:30:15:0c:6b:78:d5:cb:f2:71:f5:ba:9a:49:
51:fe:94:d0:3c:6a:00:9f:4a:83:ba:95:ea:04:ee:
90:8a:e3:6b:6c:05:d8:8a:9d:94:2f:82:42:24:b2:
63:9e:11:40:47:b7:df:bd:9e:a2:c7:6a:9e:f3:dd:
55:de:19:b8:db:25:59:8a:09:36:53:3c:93:2d:87:
f8:56:42:13:c4:c3:29:c9:79:ad:61:94:56:73:52:
81:14:2d:87:75:f0:6b:03:f8:e0:95:58:35:91:57:
3c:d7:d0:84:e0:15:ce:af:99:32:a8:c9:d1:20:38:
5a:5a:3d:54:3b:b7:28:c9:d2:39:f6:26:10:ae:43:
72:da:82:6d:d7:42:04:75:1f:fc:b7:2f:fd:55:fb:
10:d2:eb:18:86:ad:41:c3:80:0a:99:0e:e4:a7:ae:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:94:0B:80:F7:B9:F1:9D:00:FE:C4:8A:42:74:02:E1:77:92:33:0B
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b2:f4:e9:00:03:eb:86:c5:df:02:8e:ea:c5:e5:a2:87:96:
8b:8a:f1:03:1d:90:5f:db:09:4e:fd:99:4a:d8:0e:5f:67:3d:
b4:af:ef:35:2d:de:49:a1:f8:ab:74:78:f6:58:56:91:1b:0b:
80:e0:5a:76:e7:21:21:b0:7f:6a:28:2f:31:31:a8:59:a4:8e:
2b:30:10:ed:5c:64:9d:6c:09:ba:1a:a7:6f:83:36:82:66:c6:
b1:c6:58:db:ed:2e:29:4b:44:c8:7f:e2:9d:ff:2d:cb:b8:0c:
72:e3:3c:bf:1c:1f:08:24:7f:34:0d:2d:ee:f6:48:ff:ac:72:
43:4e:cc:4f:f8:8f:d5:fd:db:5e:71:e0:fc:19:a4:2c:13:47:
e5:0b:5c:f5:8d:4f:56:91:3d:61:dc:80:3b:f1:d9:f9:7f:5c:
88:d0:d2:af:e6:a9:9c:be:fb:02:19:bc:a5:c7:4d:3d:4f:40:
ba:9a:2c:bb:1e:33:71:65:c1:72:cb:a9:bd:41:d6:f2:3f:b3:
55:8e:1c:36:ad:c4:b1:9c:c4:90:54:7c:fb:ce:c3:e1:64:af:
2a:5a:9f:32:07:91:9e:dd:b2:f4:25:66:ce:2c:90:ca:a0:e5:
34:3e:22:3a:fd:2c:fa:30:65:22:5e:49:38:08:8e:50:c8:eb:
dd:de:51:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:05 2025 by rpki-client