Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File: ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier: y25eilEepBk1kb6OG5CUVzVzJyLZicWJcRk3bAuNqIc=
Subject key identifier: 4E:94:03:D6:8B:EB:66:BB:00:A1:87:B8:DD:02:8D:71:A5:D1:5E:C7
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer: /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial: 019A4EF50742CA21D3B964A33D2F4FB7D463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 13:01:12 +0000
Manifest this update: Tue 04 Nov 2025 13:01:12 +0000
Manifest next update: Wed 05 Nov 2025 13:01:12 +0000
Files and hashes: 1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: M5PHdRInAgTE/AXV1taazGhobGakpPMiigBbxKqX1gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:07:42:ca:21:d3:b9:64:a3:3d:2f:4f:b7:d4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
Validity
Not Before: Nov 4 13:01:12 2025 GMT
Not After : Nov 5 13:01:12 2025 GMT
Subject: CN=4e9403d68beb66bb00a187b8dd028d71a5d15ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:ab:ae:20:0a:09:42:81:63:07:1f:9d:1c:
32:d5:dc:50:91:10:3e:a5:ff:a5:dc:d8:d8:8a:f9:
db:a3:cc:a1:8b:2e:61:3a:62:20:15:37:3a:c7:22:
37:fd:59:f2:d0:8d:55:b5:7b:68:06:ab:14:d1:f9:
41:de:ca:5a:b7:f4:12:5f:19:1e:73:17:08:5b:b0:
dd:71:12:06:f3:ff:f9:20:ef:aa:7d:15:f8:f4:74:
b3:33:fd:0f:e3:2a:82:49:c2:63:fc:2d:f2:da:18:
d6:fe:fd:58:28:2d:cb:1b:b6:eb:54:e7:e2:1c:2d:
59:41:13:c7:c2:6e:cc:44:03:48:a6:1e:5b:71:b0:
24:12:6f:8d:d2:7c:3a:14:23:cc:1a:9b:95:58:17:
ca:cf:d7:d5:35:c8:d2:98:10:a2:8c:4d:3a:ca:a5:
2b:7f:05:b5:4f:32:80:bb:a1:e0:40:4d:e8:78:9a:
dc:eb:fd:2b:c8:ff:c2:88:c0:25:c1:a9:d4:97:61:
9e:92:30:cd:1d:96:49:1c:70:b0:79:28:9d:1e:ee:
a3:e4:7f:1f:2d:7b:2a:af:24:ae:e0:a9:de:00:42:
1b:9d:80:94:fc:dd:b2:18:4f:0a:e2:e9:d0:c8:b2:
f6:8d:d0:58:3e:f4:9b:28:8f:51:6f:e1:b9:6e:88:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:94:03:D6:8B:EB:66:BB:00:A1:87:B8:DD:02:8D:71:A5:D1:5E:C7
X509v3 Authority Key Identifier:
keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b6:0e:50:ef:b8:1c:d9:30:76:46:a2:0c:fa:95:39:95:55:
5f:08:8f:cc:52:ce:2e:57:2e:d5:f9:1f:c5:29:12:da:e0:ef:
76:90:b0:6a:1a:01:02:f5:39:0b:07:48:d8:49:1d:07:22:d3:
aa:f5:79:6a:67:47:63:e1:f9:8c:a5:de:6d:12:af:0f:1b:95:
42:84:54:b7:0d:b5:6a:b4:a3:2b:96:b9:54:40:81:ed:a6:dc:
95:9b:e9:ec:5f:36:8c:02:78:c3:d7:06:f4:fd:a0:1b:cf:39:
71:a3:00:1b:30:3a:16:8d:85:f7:99:e7:e8:ca:e2:cc:cb:cc:
5f:8d:a1:18:b1:de:7d:1d:ba:19:8a:2b:e1:57:47:27:fe:ac:
4d:9f:1f:82:a3:82:c8:90:42:72:9b:70:7c:18:22:a2:88:c3:
1e:ef:1e:d3:76:87:79:4f:89:b3:aa:ff:0e:bd:f0:21:7f:78:
4c:51:93:75:85:ac:bc:a9:a9:aa:8b:9a:b2:b5:41:f6:c4:24:
21:e7:fd:94:5a:73:d5:e2:fc:1e:d3:d5:52:97:e3:26:73:61:
68:35:e6:4e:bd:01:28:39:aa:be:7b:ed:ea:f6:34:28:84:de:
e9:71:97:9f:b8:a0:0f:b3:1c:f2:ea:d7:c0:61:22:ce:5c:2e:
24:98:9c:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9QdCyiHTuWSjPS9Pt9RjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTlkOWY1YWYzY2VlNDQyMDE0YjczNTk2MWM3M2I5Njky
NjBlMTkwHhcNMjUxMTA0MTMwMTEyWhcNMjUxMTA1MTMwMTEyWjAzMTEwLwYDVQQD
Eyg0ZTk0MDNkNjhiZWI2NmJiMDBhMTg3YjhkZDAyOGQ3MWE1ZDE1ZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NarriAKCUKBYwcfnRwy1dxQkRA+
pf+l3NjYivnbo8yhiy5hOmIgFTc6xyI3/Vny0I1VtXtoBqsU0flB3spat/QSXxke
cxcIW7DdcRIG8//5IO+qfRX49HSzM/0P4yqCScJj/C3y2hjW/v1YKC3LG7brVOfi
HC1ZQRPHwm7MRANIph5bcbAkEm+N0nw6FCPMGpuVWBfKz9fVNcjSmBCijE06yqUr
fwW1TzKAu6HgQE3oeJrc6/0ryP/CiMAlwanUl2GekjDNHZZJHHCweSidHu6j5H8f
LXsqrySu4KneAEIbnYCU/N2yGE8K4unQyLL2jdBYPvSbKI9Rb+G5boglbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6UA9aL62a7AKGHuN0CjXGl0V7HMB8GA1UdIwQY
MBaAFLpZ2fWvPO5EIBS3NZYcc7lpJg4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxuWjlhODg3a1FnRkxjMWxoeHp1V2ttRGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wM2QzZmEtOWUyMi00NDFlLWI1YzUt
ZDIwM2UyMDAxOGY1LzEvdWxuWjlhODg3a1FnRkxjMWxoeHp1V2ttRGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wM2QzZmEtOWUyMi00NDFlLWI1YzUtZDIwM2UyMDAxOGY1
LzEvdWxuWjlhODg3a1FnRkxjMWxoeHp1V2ttRGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7YOUO+4
HNkwdkaiDPqVOZVVXwiPzFLOLlcu1fkfxSkS2uDvdpCwahoBAvU5CwdI2EkdByLT
qvV5amdHY+H5jKXebRKvDxuVQoRUtw21arSjK5a5VECB7abclZvp7F82jAJ4w9cG
9P2gG885caMAGzA6Fo2F95nn6MrizMvMX42hGLHefR26GYor4VdHJ/6sTZ8fgqOC
yJBCcptwfBgioojDHu8e03aHeU+Js6r/Dr3wIX94TFGTdYWsvKmpqouasrVB9sQk
Ief9lFpz1eL8HtPVUpfjJnNhaDXmTr0BKDmqvnvt6vY0KITe6XGXn7igD7Mc8urX
wGEizlwuJJicZw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:24 2025 by rpki-client