Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier: PGFMLlbLurT8hi97+ZA+24dfYtIRH6roN1RUctGHyP4=
Subject key identifier: 18:DA:26:43:8E:16:6C:22:FC:9D:76:09:0F:34:32:53:EB:D3:40:A0
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 019A4EF468FDC8B8C20D69B75BBB6AA8CE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:00:31 +0000
Manifest this update: Tue 04 Nov 2025 13:00:31 +0000
Manifest next update: Wed 05 Nov 2025 13:00:31 +0000
Files and hashes: 1: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (hash: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=)
2: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (hash: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=)
3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: 7Y0q+JEp6FqRv68mv2rdouyEo9WdHYjkkw53UYjLSQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:68:fd:c8:b8:c2:0d:69:b7:5b:bb:6a:a8:ce:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Nov 4 13:00:31 2025 GMT
Not After : Nov 5 13:00:31 2025 GMT
Subject: CN=18da26438e166c22fc9d76090f343253ebd340a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:ea:65:c9:33:bb:68:f6:51:8e:45:15:3e:
74:81:30:30:74:89:96:e5:e3:00:ed:3d:56:2e:c0:
62:62:20:27:60:ba:62:62:15:e3:c7:4a:50:f9:38:
86:f7:85:1d:6a:ca:e6:76:39:b7:dc:85:03:ef:a6:
f7:b2:24:7d:a1:0d:b1:49:b1:2f:38:3f:1c:07:48:
11:83:e8:35:84:da:75:41:b8:9e:cf:19:87:e5:d3:
f3:5e:0d:c2:a7:72:53:aa:d8:c9:1e:09:7f:83:e2:
f8:9c:10:3a:13:49:92:13:4d:b3:7c:31:13:7e:da:
a4:3e:6f:c2:d0:1f:99:e5:a5:e8:05:8f:33:12:ba:
3d:27:c8:49:51:5c:fa:66:33:a1:31:c2:3d:a6:af:
46:02:7e:4a:3d:1e:24:f1:f8:35:fc:cd:6d:aa:b5:
23:b3:fd:74:e6:aa:42:59:d2:96:18:f6:67:14:73:
4b:71:3f:01:a2:c0:83:8c:17:69:8e:75:6c:63:25:
ba:b0:2c:d2:83:02:86:62:ca:b4:46:3b:dd:0a:33:
1a:63:aa:a5:25:a3:d6:8e:af:50:a9:5f:25:37:8e:
db:73:e6:21:e9:95:35:30:4e:b4:1e:88:d1:e2:60:
70:91:b1:13:2e:7d:eb:af:23:16:31:7c:c2:0c:6d:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DA:26:43:8E:16:6C:22:FC:9D:76:09:0F:34:32:53:EB:D3:40:A0
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:31:e5:8a:31:e1:f6:d9:a8:f0:c4:85:df:29:40:39:f0:e7:
be:c2:51:c7:2a:f6:af:56:1d:79:68:45:2e:a9:f2:76:6e:ce:
2c:2b:b1:00:35:61:53:80:55:fe:9c:0b:38:11:2e:65:44:ee:
15:91:ab:0d:1b:98:3f:23:67:6c:df:92:6d:5a:97:e1:70:b3:
a0:b0:75:4f:84:26:f5:82:fb:77:7d:e8:bc:d5:6c:1f:56:92:
08:d6:80:8f:20:89:27:0b:b8:9b:de:79:e1:36:1a:52:d6:ac:
ed:f9:ad:a2:a8:ca:70:f1:eb:d0:69:53:8b:71:bc:e3:d2:97:
12:99:4c:84:b6:50:63:4c:bf:f0:0e:88:83:b7:83:7b:a0:bc:
7a:72:66:4a:50:20:20:94:34:bc:81:97:67:76:ae:2e:ac:df:
4c:13:5a:63:7c:c4:f4:14:b9:33:b0:17:8f:1e:f6:8b:a9:fd:
3e:17:29:65:35:29:2d:ea:96:0d:f0:91:c4:af:52:65:29:75:
ce:40:92:fb:6b:78:1d:de:ec:ab:10:ee:27:5e:22:a3:9e:d7:
85:f7:5c:08:da:2f:9f:29:38:54:81:5b:0d:b9:0f:9a:50:d7:
7d:a6:f6:bd:2e:db:4c:9c:6b:57:9f:e2:66:4f:8c:77:eb:fd:
67:64:d0:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Gj9yLjCDWm3W7tqqM4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTRiNmU1ZmNjYTMwOGIzNmRjOGYxNjc2MDZiMmQ2NTk4
MzljZjEwHhcNMjUxMTA0MTMwMDMxWhcNMjUxMTA1MTMwMDMxWjAzMTEwLwYDVQQD
EygxOGRhMjY0MzhlMTY2YzIyZmM5ZDc2MDkwZjM0MzI1M2ViZDM0MGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtLqZckzu2j2UY5FFT50gTAwdImW
5eMA7T1WLsBiYiAnYLpiYhXjx0pQ+TiG94Udasrmdjm33IUD76b3siR9oQ2xSbEv
OD8cB0gRg+g1hNp1QbiezxmH5dPzXg3Cp3JTqtjJHgl/g+L4nBA6E0mSE02zfDET
ftqkPm/C0B+Z5aXoBY8zEro9J8hJUVz6ZjOhMcI9pq9GAn5KPR4k8fg1/M1tqrUj
s/105qpCWdKWGPZnFHNLcT8BosCDjBdpjnVsYyW6sCzSgwKGYsq0RjvdCjMaY6ql
JaPWjq9QqV8lN47bc+Yh6ZU1ME60HojR4mBwkbETLn3rryMWMXzCDG2WywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjaJkOOFmwi/J12CQ80MlPr00CgMB8GA1UdIwQY
MBaAFLpUtuX8yjCLNtyPFnYGstZZg5zxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi83OGIxOTAtOGEwMi00Y2I4LWI0ODQt
NTI2ZjdjYzUyOWI3LzEvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi83OGIxOTAtOGEwMi00Y2I4LWI0ODQtNTI2ZjdjYzUyOWI3
LzEvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjHlijHh
9tmo8MSF3ylAOfDnvsJRxyr2r1YdeWhFLqnydm7OLCuxADVhU4BV/pwLOBEuZUTu
FZGrDRuYPyNnbN+SbVqX4XCzoLB1T4Qm9YL7d33ovNVsH1aSCNaAjyCJJwu4m955
4TYaUtas7fmtoqjKcPHr0GlTi3G849KXEplMhLZQY0y/8A6Ig7eDe6C8enJmSlAg
IJQ0vIGXZ3auLqzfTBNaY3zE9BS5M7AXjx72i6n9PhcpZTUpLeqWDfCRxK9SZSl1
zkCS+2t4Hd7sqxDuJ14io57XhfdcCNovnyk4VIFbDbkPmlDXfab2vS7bTJxrV5/i
Zk+Md+v9Z2TQyA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:34:56 2025 by rpki-client