
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File: 1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier: sPybcE6Bd4mvtN6JOGJQgsxHoeQQWdEIO5NhsZg1UlI=
Subject key identifier: FB:30:8D:D7:F4:F5:44:18:2A:15:6C:3F:7D:2D:0C:52:8B:A9:80:5C
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer: /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial: 019A5006E7A94B827168CD84485BDAAFBCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 18:00:21 +0000
Manifest this update: Tue 04 Nov 2025 18:00:21 +0000
Manifest next update: Wed 05 Nov 2025 18:00:21 +0000
Files and hashes: 1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: Sg8gnQrmSqYOxC4tidLepMkGF+93VfOKs81lG2xyLCc=)
2: uv22mTMk0LoSy-CXGbpeTi_cOpw.roa (hash: 2QrupXJ+8Kz2Vd606/D0/U753yg1bCscNq3qhZhPAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e7:a9:4b:82:71:68:cd:84:48:5b:da:af:bc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Validity
Not Before: Nov 4 18:00:21 2025 GMT
Not After : Nov 5 18:00:21 2025 GMT
Subject: CN=fb308dd7f4f544182a156c3f7d2d0c528ba9805c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:8e:d4:45:5d:1c:af:98:fc:38:21:fc:39:
96:61:03:0c:61:e0:15:41:a5:23:93:3b:a0:10:fd:
3c:43:e8:8c:fd:b6:91:65:b9:fc:57:e6:cc:b6:24:
f2:0f:2e:17:95:7a:fc:d8:ac:84:83:33:64:bd:fe:
a6:b2:74:42:d5:60:17:5d:b6:4f:f2:1f:5c:a6:83:
ea:69:f9:39:ae:1f:8b:ea:ef:d4:4d:9d:16:e7:d9:
11:15:2d:95:86:70:c8:b9:70:c3:9d:ff:2e:e3:6d:
63:c5:5f:d4:61:fb:87:ac:7f:30:17:42:cd:40:73:
29:7f:9b:5d:30:24:d9:99:9b:05:57:3b:2f:e8:29:
76:e8:cf:95:80:56:45:d3:fa:9d:77:57:c2:40:82:
c1:13:e9:b9:75:86:20:e4:16:03:9a:9a:01:9c:55:
84:d0:58:09:68:9b:d2:79:20:47:c4:df:3d:a8:9a:
02:78:e4:c2:14:bc:74:a3:ca:cc:c7:55:48:1e:6a:
85:2e:25:ac:6c:e1:b4:fc:d8:2a:db:f1:4a:3e:77:
4d:94:e9:e7:34:78:f8:1e:00:fd:a4:e5:95:b4:dd:
02:25:e4:16:74:2b:d4:f2:c0:ba:94:ff:41:7c:56:
bd:25:44:37:45:f8:be:12:8e:b2:48:84:c9:92:b6:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:30:8D:D7:F4:F5:44:18:2A:15:6C:3F:7D:2D:0C:52:8B:A9:80:5C
X509v3 Authority Key Identifier:
keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:15:f3:78:4f:e9:41:00:39:76:53:0d:ab:6e:fe:0f:66:c4:
23:5b:d1:ac:8d:c8:ba:77:06:fe:93:8a:8a:ac:d0:95:71:67:
bd:63:26:81:2b:ad:82:35:23:9a:c2:e5:b0:ce:e5:59:67:73:
9f:08:92:f1:1d:35:af:9c:94:4c:f1:0d:d0:90:b9:eb:4c:a7:
b0:31:15:76:79:aa:8d:19:a0:fc:83:d5:c3:a9:5f:7d:91:4c:
ab:e4:32:68:ea:00:21:db:97:d1:14:ca:35:a0:72:0b:fb:a1:
94:0f:a2:d1:b3:af:0a:7a:24:01:87:6c:0e:62:fa:a0:ee:2d:
9b:0e:a6:fc:66:55:76:7c:76:ab:83:cc:f0:64:78:f3:77:93:
da:43:ce:8b:70:19:73:ab:8c:44:ab:da:83:11:61:33:c2:b4:
c5:bf:0c:5f:3d:5a:9d:a5:b2:34:64:c0:62:2a:c1:f6:4d:33:
f2:17:78:9d:e0:ad:ff:56:4e:bd:bf:1d:38:aa:bb:14:5d:b2:
9e:33:46:64:17:e0:a3:46:c7:4b:62:11:9f:2e:70:40:2f:8f:
df:0a:03:f8:6f:de:ed:77:bb:88:fd:ad:2c:3d:08:a3:98:e9:
83:aa:1d:8d:cf:16:6e:db:e1:a5:be:05:e6:3b:e0:b0:1c:1f:
88:fa:89:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:46 2025 by rpki-client