Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
File: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft (raw, json)
Hash identifier: sPQE4dMf+aup2492Xu297coNLMWsO16RDaJWwCB+Tdo=
Subject key identifier: 20:B7:C1:49:EE:67:35:E3:B9:39:E8:36:7A:7C:73:14:3E:ED:C1:42
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 019A5376224F9A106E34E65603905663CDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
Manifest number: 1718
Signing time: Wed 05 Nov 2025 10:00:42 +0000
Manifest this update: Wed 05 Nov 2025 10:00:42 +0000
Manifest next update: Thu 06 Nov 2025 10:00:42 +0000
Files and hashes: 1: 3zFq0FANLDCbBiQtGoOdJfGi_EQ.roa (hash: TfmSTeRDZAQ5oGtcUm708DsfM+xSj27+amI7sJGhkx4=)
2: C76yVypN0N2Op8sKr7Mqe8COtzQ.roa (hash: Ne8nENMgrnXh9tXZOU02EkwJbXSV1+1bAC4LbBUrr7I=)
3: ZeRzlTDzmLL9ruSMWEiors7V-CY.roa (hash: 5h/FBtMrMZdufOCQE7QgMCpb+UDEPswHfLnEQXnKhOE=)
4: _H04-tv1ooHj1KmhXwO0mYV3IF8.roa (hash: apIZOTa7xK/4gGTnIysPO6fJUe7VmPIEc4W1/L0W+Ps=)
5: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl (hash: /1yD9531pVIVKR9sRlRUF2xTSX8zNfWgtCDBLzNlBbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:22:4f:9a:10:6e:34:e6:56:03:90:56:63:cd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Nov 5 10:00:42 2025 GMT
Not After : Nov 6 10:00:42 2025 GMT
Subject: CN=20b7c149ee6735e3b939e8367a7c73143eedc142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:dd:cd:bd:0e:55:c6:eb:2d:d6:11:47:9c:
a4:c4:51:67:bb:cc:c8:76:af:20:ac:db:77:0d:ec:
41:47:25:19:f3:d6:9e:5a:80:8b:bb:c6:c5:16:59:
e1:27:0c:d1:b9:13:24:e4:8b:59:2f:93:56:df:e9:
46:52:29:5d:e3:98:b1:5e:d9:51:3b:22:d2:d1:a2:
e6:26:e6:34:6d:ab:7d:96:29:f7:10:e8:bc:64:2a:
a7:21:4d:9b:ec:17:56:90:1f:b4:c4:4a:dc:a4:4a:
bd:19:e4:9a:df:37:9d:5f:a5:49:91:98:16:63:83:
fa:07:cd:dd:80:93:2c:68:8d:40:16:f4:28:74:e9:
03:b8:a8:2e:06:9c:8b:d3:55:a3:9b:7f:09:44:cc:
cb:30:c7:f9:46:06:11:ef:85:58:5f:39:68:59:ff:
1b:28:38:07:82:f5:5d:fd:af:e0:98:8b:fc:bb:18:
12:5a:d0:3b:b6:5b:8d:e3:ff:93:35:ec:3c:0c:d8:
e1:8b:7e:23:88:67:83:d8:26:dd:3b:27:b8:2b:ba:
66:f4:f5:10:70:63:a8:3d:4d:58:98:64:86:89:02:
d7:0a:be:1b:63:67:60:b9:7a:b0:19:64:7f:ae:99:
53:9a:a0:e2:0d:2c:9a:8b:d7:ee:33:d7:2b:3f:e3:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B7:C1:49:EE:67:35:E3:B9:39:E8:36:7A:7C:73:14:3E:ED:C1:42
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:06:93:dd:66:0d:64:59:db:57:09:4b:55:fb:b5:85:3e:0f:
89:64:23:62:b9:7b:3b:d4:0e:3a:41:e9:26:a1:93:05:d5:97:
cf:6b:e8:8b:fe:6f:39:1f:be:58:01:91:af:bd:d1:82:43:bc:
cd:2d:4d:23:b8:29:59:56:41:1a:d6:2b:7f:37:e3:3e:22:2f:
57:cb:43:01:5c:fd:73:c1:b9:6f:a5:89:16:45:6d:ee:99:b2:
7a:e6:53:5b:88:8e:50:65:e3:e6:3d:a1:d8:7b:2c:b1:b6:ee:
3d:bc:83:1a:94:b2:f6:1b:03:45:4e:82:97:f9:c8:45:a5:d0:
9e:84:cc:82:69:a5:35:ee:a9:8f:44:48:50:41:c5:5d:9b:91:
59:18:20:cc:1d:40:78:14:96:01:d6:0b:fa:56:e9:15:7f:40:
1a:de:b0:d1:05:87:0d:c0:72:61:13:02:e4:36:2a:b3:c2:87:
b4:db:d6:ca:8d:20:23:75:22:69:01:7d:99:8c:c9:fe:c3:4b:
f2:f2:c7:dd:2c:73:69:19:3c:0b:8a:1d:8e:0d:3c:0f:a8:58:
29:dd:2d:57:3d:e8:5e:37:23:3f:a1:72:83:76:28:1a:ee:e4:
d7:e8:63:1a:80:cb:0a:68:65:44:55:97:32:53:87:a9:06:3a:
86:79:fb:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdiJPmhBuNOZWA5BWY83lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Yjg3YjNiMDljY2I2OWE2ZGUyMDQ2OGU5MGVjYmIxOGY1
ZWNiYjYwHhcNMjUxMTA1MTAwMDQyWhcNMjUxMTA2MTAwMDQyWjAzMTEwLwYDVQQD
EygyMGI3YzE0OWVlNjczNWUzYjkzOWU4MzY3YTdjNzMxNDNlZWRjMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl63dzb0OVcbrLdYRR5ykxFFnu8zI
dq8grNt3DexBRyUZ89aeWoCLu8bFFlnhJwzRuRMk5ItZL5NW3+lGUild45ixXtlR
OyLS0aLmJuY0bat9lin3EOi8ZCqnIU2b7BdWkB+0xErcpEq9GeSa3zedX6VJkZgW
Y4P6B83dgJMsaI1AFvQodOkDuKguBpyL01Wjm38JRMzLMMf5RgYR74VYXzloWf8b
KDgHgvVd/a/gmIv8uxgSWtA7tluN4/+TNew8DNjhi34jiGeD2CbdOye4K7pm9PUQ
cGOoPU1YmGSGiQLXCr4bY2dguXqwGWR/rplTmqDiDSyai9fuM9crP+PcFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCC3wUnuZzXjuTnoNnp8cxQ+7cFCMB8GA1UdIwQY
MBaAFLm4ezsJzLaabeIEaOkOy7GPXsu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYt
M2I0Y2I5NzVhOWJjLzEvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYtM2I0Y2I5NzVhOWJj
LzEvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAaT3WYN
ZFnbVwlLVfu1hT4PiWQjYrl7O9QOOkHpJqGTBdWXz2voi/5vOR++WAGRr73RgkO8
zS1NI7gpWVZBGtYrfzfjPiIvV8tDAVz9c8G5b6WJFkVt7pmyeuZTW4iOUGXj5j2h
2HsssbbuPbyDGpSy9hsDRU6Cl/nIRaXQnoTMgmmlNe6pj0RIUEHFXZuRWRggzB1A
eBSWAdYL+lbpFX9AGt6w0QWHDcByYRMC5DYqs8KHtNvWyo0gI3UiaQF9mYzJ/sNL
8vLH3SxzaRk8C4odjg08D6hYKd0tVz3oXjcjP6Fyg3YoGu7k1+hjGoDLCmhlRFWX
MlOHqQY6hnn7Dw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:17:11 2025 by rpki-client