Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: PgdaJtxfXpSbc0K+twgbRF5EuYc2gzg6wAFuXO0eR6o=
Subject key identifier: 4C:E5:76:DB:69:F0:12:5B:25:02:FB:E9:65:92:DE:DF:5F:77:24:71
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 019879AD90D33E0C356B9EDEA5C9FBDEBB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 09E1
Signing time: Tue 05 Aug 2025 10:01:14 +0000
Manifest this update: Tue 05 Aug 2025 10:01:14 +0000
Manifest next update: Wed 06 Aug 2025 10:01:14 +0000
Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: BOIrMAo14Zz1QL+kluwJF14YxY6/wVSFDAlXVvvsKLU=)
2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=)
3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:90:d3:3e:0c:35:6b:9e:de:a5:c9:fb:de:bb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Aug 5 10:01:14 2025 GMT
Not After : Aug 6 10:01:14 2025 GMT
Subject: CN=4ce576db69f0125b2502fbe96592dedf5f772471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:10:0c:77:ad:07:d0:26:c9:83:28:59:f5:
a4:f9:db:40:7e:3d:ef:94:42:cd:7a:12:ca:50:09:
a7:b9:8f:eb:05:91:50:1c:82:c1:fe:8a:d5:ab:f6:
4b:2d:15:bb:89:03:ff:84:fb:0b:41:39:be:c2:b9:
db:68:61:5a:c8:12:e8:79:82:3a:ba:6d:ef:3a:46:
75:55:da:48:95:53:51:f8:d1:7f:a1:f6:2a:65:97:
74:10:cd:30:d3:31:59:29:3e:cc:84:b5:10:57:15:
41:90:f9:46:ae:e4:8e:70:34:52:bf:72:a5:fb:ca:
89:0a:c5:ec:85:47:31:80:b0:e9:9a:02:c5:0d:d2:
32:1b:91:46:f1:20:11:ff:b0:58:aa:1c:7f:0a:8b:
ac:f1:be:17:59:84:ca:df:c7:33:14:67:ef:b0:95:
ff:45:a3:3c:02:44:f9:12:f2:86:eb:e0:d9:10:3f:
b3:d5:2b:9b:d9:dd:2e:e3:ac:97:f3:9c:55:d9:01:
65:d8:e4:ad:c7:28:ab:5a:e2:75:1d:c2:a8:5e:db:
b5:dc:5b:90:06:57:64:0d:1c:44:3e:52:aa:2c:51:
54:b5:05:e9:fe:26:51:ac:17:50:a9:1a:0c:6b:14:
41:bc:bb:4b:4d:e0:c0:73:75:6d:79:ba:f2:b3:63:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E5:76:DB:69:F0:12:5B:25:02:FB:E9:65:92:DE:DF:5F:77:24:71
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:34:06:9b:22:a3:2f:ad:c4:5b:e4:44:2d:52:d6:d0:f2:8e:
d7:2b:06:26:ae:3e:cf:56:4e:26:af:4c:a6:bc:ec:85:79:6e:
f5:d8:a7:a2:60:72:ed:ec:95:ce:b6:05:37:99:1f:82:a0:af:
ba:8c:01:a2:06:ef:dd:d7:87:6e:37:bb:b5:9c:56:4e:39:24:
2e:e6:d1:aa:a8:3b:bc:5e:f4:7d:d7:54:d3:7b:bd:bc:11:4c:
71:f3:86:d0:9d:d2:02:bc:d3:64:45:a6:b1:6a:e8:4a:39:53:
20:d7:18:14:33:9a:c6:0e:a2:49:9f:11:2e:ea:21:c6:04:34:
88:84:2d:8e:41:00:04:78:df:55:42:e4:bc:59:b9:a0:15:df:
89:6d:ef:a2:2d:4d:09:c5:16:e5:4f:96:4f:fa:bc:92:4a:87:
3a:49:f7:49:68:2b:06:ae:71:c8:74:8f:5b:07:5e:8b:d9:41:
11:9a:e2:cc:fa:a5:6f:f7:36:e9:8a:4a:fc:f0:83:c6:b8:ad:
55:9c:9d:64:bf:da:1e:ec:a1:6b:69:fe:67:d6:de:85:dc:90:
e3:61:3a:ec:98:c8:ff:88:88:8c:f7:a5:7d:7c:5b:d6:9b:dc:
21:7c:54:d5:01:57:41:35:bc:e3:26:6c:08:05:3c:3e:ad:0d:
0b:7a:4c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:18:10 2025 by rpki-client