Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
File: ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json)
Hash identifier: rdLWA4DGWQTbulrW7LR2oKJbBIc5FAoVjs6tRsBoOFo=
Subject key identifier: 4D:A5:E0:FD:A4:01:EB:C9:E8:7A:88:D7:A3:AD:F9:5B:B2:37:3D:FC
Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
Certificate issuer: /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Certificate serial: 019A533EF082396A6BD19B912F212E52FBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
Manifest number: 0A92
Signing time: Wed 05 Nov 2025 09:00:24 +0000
Manifest this update: Wed 05 Nov 2025 09:00:24 +0000
Manifest next update: Thu 06 Nov 2025 09:00:24 +0000
Files and hashes: 1: P3b7DFzAl1mF00eFO0q0Hvx6uqg.roa (hash: 4Vw9mbX/VAtbgUX/fX/IcrRcZH092D/s4XK4tYr5SHw=)
2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: Ig3lz7RaAvV0a7iDCHlK0Xrm3KM0DORTyZAbZhx4h88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:f0:82:39:6a:6b:d1:9b:91:2f:21:2e:52:fb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Validity
Not Before: Nov 5 09:00:24 2025 GMT
Not After : Nov 6 09:00:24 2025 GMT
Subject: CN=4da5e0fda401ebc9e87a88d7a3adf95bb2373dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:ec:4b:a0:b6:0c:70:6d:b3:ef:31:a7:92:
8a:0a:1d:be:b2:16:dd:fb:3b:db:28:bc:27:d7:31:
72:e2:66:06:e9:1d:c4:6e:87:51:47:f6:57:71:99:
b6:4b:43:dc:8f:8d:91:15:78:88:68:c5:ac:02:de:
45:9c:dd:29:de:5a:60:bf:cd:6d:35:66:e7:a1:5c:
da:03:9a:77:d6:3e:db:a6:ed:69:6a:9c:04:88:bf:
a9:74:64:5e:81:4c:15:68:33:fe:11:9e:d2:77:13:
59:43:2d:89:42:a0:28:5e:2f:a8:d8:9d:d5:33:34:
ca:9a:f5:f3:3a:6a:9a:02:0c:99:df:72:99:15:71:
14:48:17:f3:08:67:97:b5:58:3b:76:c1:dd:c6:95:
60:54:52:50:bc:e2:f4:29:a7:81:a2:3c:aa:a9:2c:
e6:0e:6b:c6:31:c3:f7:51:f9:fe:d4:5b:65:9f:c8:
c9:90:c9:b7:e4:6e:2f:ff:47:e0:27:e1:a3:9e:83:
d7:25:ca:b7:3d:9b:a9:75:af:ea:91:32:63:50:1f:
f9:db:87:2e:0d:86:d5:3a:0a:9e:89:49:6e:e9:9f:
87:38:e2:d7:d6:34:84:b6:6a:08:1d:4c:23:02:4b:
23:cc:63:e9:6c:11:3a:a6:1f:07:2b:20:d8:68:a2:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:E0:FD:A4:01:EB:C9:E8:7A:88:D7:A3:AD:F9:5B:B2:37:3D:FC
X509v3 Authority Key Identifier:
keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5d:d5:a7:45:d0:bf:20:0c:f9:7f:da:4a:d9:77:4f:6c:2b:
34:55:60:32:88:a9:41:22:60:b0:0f:53:4f:28:bc:3e:7e:a2:
61:96:3e:01:23:83:73:bf:0b:74:b2:90:3d:c4:c4:be:e9:cf:
f3:db:25:f7:27:6b:65:62:f5:a2:cf:aa:20:3e:df:f7:24:49:
8f:a3:bf:77:1a:80:88:a5:6f:a4:a8:04:04:e0:b1:1d:c8:fa:
ac:65:be:f7:a9:ce:04:6a:26:79:46:d8:1c:88:f7:96:3f:cd:
67:1f:19:20:4c:69:b1:ee:97:30:4d:a1:14:88:66:49:a8:d9:
84:a3:d2:3a:11:7f:35:9b:ec:cf:3f:9a:17:c9:10:7c:f5:ae:
d4:1b:2f:d1:2d:9f:8f:0e:73:9a:01:31:dc:34:85:22:37:d3:
75:16:9d:da:f2:23:63:4d:6b:37:e2:4a:86:2e:18:0d:e5:0f:
be:63:64:b1:91:22:c7:a9:f0:16:90:15:da:11:9b:46:50:79:
e9:c0:da:11:2d:14:95:4a:e8:35:8c:ba:b6:db:c7:c7:f5:90:
86:54:b1:20:2b:30:2e:70:90:71:8a:bd:60:b9:fa:30:39:d9:
94:d6:d9:e1:4a:20:b0:e5:76:6f:25:9a:4b:c6:cd:9b:fa:54:
ff:8b:c5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:03:46 2025 by rpki-client