Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File: UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier: CdgkNJsIErST06CeU0cHKBUbxfff+STMEX9n86V5w+4=
Subject key identifier: EA:7F:69:CF:A5:03:56:8E:9B:89:32:78:B8:CB:71:60:D9:09:2F:F2
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial: 019A4F991BE08C06C5F1191D7B30A9E46CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number: 0A7B
Signing time: Tue 04 Nov 2025 16:00:25 +0000
Manifest this update: Tue 04 Nov 2025 16:00:25 +0000
Manifest next update: Wed 05 Nov 2025 16:00:25 +0000
Files and hashes: 1: C8OuOurMHam6ULOHJv9GhDHbke0.roa (hash: FCUaWvRRTTPQBQKJI7hbkOja4mLEhLWKn2frcis10m4=)
2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: zppk/6AxLW66iEbyeuvTR815XNN5Kpv2ifwTmvtff2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:1b:e0:8c:06:c5:f1:19:1d:7b:30:a9:e4:6c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
Validity
Not Before: Nov 4 16:00:25 2025 GMT
Not After : Nov 5 16:00:25 2025 GMT
Subject: CN=ea7f69cfa503568e9b893278b8cb7160d9092ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:55:c9:79:7b:73:a2:60:41:10:5d:3d:18:68:
e3:b0:12:ac:1c:4d:e0:ed:ca:e6:20:06:8e:d2:5b:
e7:94:30:76:98:10:0d:e6:ae:9b:11:f7:72:68:35:
62:be:e3:b2:dc:09:3c:44:82:ff:d3:b4:ce:90:5e:
d5:cb:03:d0:6c:af:ec:cb:cf:84:ef:44:a5:67:65:
f2:92:b6:c5:f9:26:4e:fe:b3:de:55:e0:0c:46:80:
e5:8e:ef:24:42:69:1e:34:f6:fc:e1:ef:51:9b:44:
80:ad:40:66:d8:88:68:d1:96:d5:1c:0f:48:73:83:
31:59:28:25:75:7f:88:c5:c3:fe:34:42:af:2b:f8:
bc:11:c2:f1:1a:8b:d9:e3:05:b6:23:ec:fd:a7:48:
bf:50:b6:5c:7f:18:3d:a8:0a:ce:39:26:73:0c:4b:
83:51:58:04:12:d1:36:42:4f:11:d8:ac:be:a0:cc:
5f:7d:e8:5c:f5:ec:ff:e1:41:57:ab:c6:5d:99:d4:
84:7e:d1:07:f3:3f:5e:94:c0:33:6e:6d:19:5e:52:
e1:59:e5:97:bc:1d:8c:b3:05:4e:75:43:2c:aa:24:
97:ce:bb:df:f1:7c:5e:80:b2:e2:36:f1:7d:f3:88:
b2:1f:88:4a:3c:46:3a:42:a0:3e:ef:4c:d7:ad:69:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7F:69:CF:A5:03:56:8E:9B:89:32:78:B8:CB:71:60:D9:09:2F:F2
X509v3 Authority Key Identifier:
keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dd:30:ac:66:31:65:91:3f:ce:00:55:29:fc:b8:40:89:d1:
a9:fe:ce:c4:10:a7:85:42:bd:21:05:c7:89:6e:0f:a1:c0:a0:
07:9b:fa:79:92:af:58:b7:5d:c6:06:8f:ca:67:be:c4:ca:c0:
78:dd:2b:68:af:72:6b:8e:f0:64:a6:90:9d:0d:28:d2:39:5f:
af:80:f9:e7:4d:76:ca:0f:eb:90:33:d1:23:a4:5d:2c:b9:11:
46:a8:4f:d2:2f:f8:5c:90:f5:5f:5d:d8:66:3a:88:2d:00:bf:
24:c7:9d:1d:7e:3c:dd:a6:83:58:a1:c4:23:2f:ae:1b:8f:f0:
40:fe:b4:9f:2c:7e:49:d6:97:79:83:14:55:f0:48:b4:50:da:
21:b8:fc:6c:91:c8:46:0b:5a:4a:00:ad:e3:27:04:06:e3:d5:
91:fa:cd:90:6f:dd:4f:c6:b1:02:1b:91:5a:06:b7:00:5f:d9:
ce:76:91:f0:5d:45:d6:74:57:59:16:72:5e:7f:59:37:1d:32:
95:89:d6:9d:83:61:15:07:ac:d1:e3:c6:49:57:5e:d2:03:5e:
4e:cc:74:39:4a:66:2e:bd:64:9e:4e:4c:f6:79:6a:1d:be:44:
91:5b:63:79:ef:ab:30:41:fd:08:83:77:03:89:57:af:74:6e:
85:11:6b:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmRvgjAbF8RkdezCp5GyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjM0ODA0ZjliNjZhNzFjMjQ3MjViMmQ3N2Y5NDkxMTIx
ODVlYjEwHhcNMjUxMTA0MTYwMDI1WhcNMjUxMTA1MTYwMDI1WjAzMTEwLwYDVQQD
EyhlYTdmNjljZmE1MDM1NjhlOWI4OTMyNzhiOGNiNzE2MGQ5MDkyZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lXJeXtzomBBEF09GGjjsBKsHE3g
7crmIAaO0lvnlDB2mBAN5q6bEfdyaDVivuOy3Ak8RIL/07TOkF7VywPQbK/sy8+E
70SlZ2XykrbF+SZO/rPeVeAMRoDlju8kQmkeNPb84e9Rm0SArUBm2Iho0ZbVHA9I
c4MxWSgldX+IxcP+NEKvK/i8EcLxGovZ4wW2I+z9p0i/ULZcfxg9qArOOSZzDEuD
UVgEEtE2Qk8R2Ky+oMxffehc9ez/4UFXq8ZdmdSEftEH8z9elMAzbm0ZXlLhWeWX
vB2MswVOdUMsqiSXzrvf8XxegLLiNvF984iyH4hKPEY6QqA+70zXrWnWPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOp/ac+lA1aOm4kyeLjLcWDZCS/yMB8GA1UdIwQY
MBaAFFGzSAT5tmpxwkclstd/lJESGF6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYt
NWE3Mjg5ZWY1ZjYzLzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYtNWE3Mjg5ZWY1ZjYz
LzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPN0wrGYx
ZZE/zgBVKfy4QInRqf7OxBCnhUK9IQXHiW4PocCgB5v6eZKvWLddxgaPyme+xMrA
eN0raK9ya47wZKaQnQ0o0jlfr4D55012yg/rkDPRI6RdLLkRRqhP0i/4XJD1X13Y
ZjqILQC/JMedHX483aaDWKHEIy+uG4/wQP60nyx+SdaXeYMUVfBItFDaIbj8bJHI
RgtaSgCt4ycEBuPVkfrNkG/dT8axAhuRWga3AF/ZznaR8F1F1nRXWRZyXn9ZNx0y
lYnWnYNhFQes0ePGSVde0gNeTsx0OUpmLr1knk5M9nlqHb5EkVtjee+rMEH9CIN3
A4lXr3RuhRFrbQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:39 2025 by rpki-client