Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier: 8hhsDzInF+PNVfewuaqn6tNlCH5TuC+MUvBSUkhOM90=
Subject key identifier: C1:5D:A3:D5:15:5D:EA:94:24:AC:9C:39:AD:AA:BD:2D:10:BA:47:FC
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial: 019A4EF5D99BB05C726A5EEFACAFFBF9FA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number: 12E8
Signing time: Tue 04 Nov 2025 13:02:06 +0000
Manifest this update: Tue 04 Nov 2025 13:02:06 +0000
Manifest next update: Wed 05 Nov 2025 13:02:06 +0000
Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: aQktLQY2ls4X8S2A1YKEXg/CMxKc5TJCc7zeV2+aW1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d9:9b:b0:5c:72:6a:5e:ef:ac:af:fb:f9:fa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
Validity
Not Before: Nov 4 13:02:06 2025 GMT
Not After : Nov 5 13:02:06 2025 GMT
Subject: CN=c15da3d5155dea9424ac9c39adaabd2d10ba47fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:92:be:8f:ec:5b:be:d7:3a:9b:ea:35:8d:
1a:e2:0d:ac:44:56:0f:c2:3f:a4:ca:f8:6c:c0:81:
10:1d:de:9a:b2:c9:d7:fb:a7:c5:7d:61:4d:36:0a:
c8:d3:64:09:a2:25:24:07:93:69:dd:2b:bc:e9:4f:
b5:f1:70:a6:4d:39:aa:5e:1e:7c:66:21:7c:75:41:
93:fd:e3:c0:db:ce:0d:88:dd:95:74:6c:5f:ae:52:
1c:68:7b:d6:af:e0:06:d0:6b:94:44:bc:07:06:56:
b7:87:24:83:59:3d:e6:77:b8:39:f0:92:5a:7a:00:
9d:40:82:84:b4:12:4c:0d:f1:c2:80:82:24:87:00:
21:dd:46:57:e6:31:7c:06:f5:c4:e7:e7:55:e7:cd:
85:38:d0:22:1c:4f:a1:3d:a4:59:65:0d:c3:38:7d:
b1:31:6c:68:8e:bc:b6:48:64:02:19:72:a6:76:5e:
ca:5b:23:05:ea:62:9b:7c:e0:86:02:73:3b:7b:a3:
9d:5b:21:92:ba:6e:10:e4:39:d1:18:37:02:42:94:
6c:3b:86:de:8d:e2:10:94:a0:95:1e:2e:c5:78:19:
0e:b6:d4:63:4a:34:a5:6f:ac:db:c8:c0:ee:d8:b4:
69:ce:2a:97:6e:d0:29:73:2b:22:0f:72:b6:54:13:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5D:A3:D5:15:5D:EA:94:24:AC:9C:39:AD:AA:BD:2D:10:BA:47:FC
X509v3 Authority Key Identifier:
keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:40:d0:b6:36:b0:db:c6:3a:05:0e:e1:4d:89:1a:5d:af:9c:
37:3a:81:a3:93:09:4e:33:07:e2:9c:45:63:8d:6e:7d:f7:b4:
09:d2:d0:73:f2:1e:e2:15:44:2e:2e:de:ef:81:8a:57:1b:22:
48:4c:34:55:5c:09:fb:b9:71:40:8d:2c:1b:25:a8:66:8f:ac:
51:c9:00:24:b0:b9:12:fa:f8:0b:20:42:2e:70:cb:49:74:6c:
2f:06:9f:2f:85:7c:a9:e9:72:d9:cf:23:d4:73:77:30:00:81:
5f:74:10:4a:b0:38:8c:55:9b:5f:a9:61:03:6f:03:70:02:e3:
09:65:71:7a:0b:8a:74:a8:71:02:cd:d3:af:a5:3b:36:99:82:
38:25:05:fe:47:7a:19:d9:3b:8e:52:34:fb:13:b3:08:72:5e:
3a:b6:05:f1:a6:73:02:d4:43:2a:13:30:71:7c:de:b7:df:62:
45:cb:d3:66:13:05:02:f5:64:e5:3f:d5:32:2f:ee:29:5d:d2:
06:41:a4:19:e6:a6:58:c5:a7:1b:f3:3a:76:c4:c2:4c:92:0f:
c6:ad:a9:df:b6:81:c1:aa:07:29:22:4d:d1:b6:34:1a:b3:5b:
a1:fd:32:81:d2:fc:aa:0b:4b:18:60:69:19:d8:cb:ba:d4:61:
e8:79:8a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9dmbsFxyal7vrK/7+foMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTgyNzU1NzI0MzQ4OTNiOWNiZDE0ZTRhZGU3MDg5Mjll
NDY3ZjgwHhcNMjUxMTA0MTMwMjA2WhcNMjUxMTA1MTMwMjA2WjAzMTEwLwYDVQQD
EyhjMTVkYTNkNTE1NWRlYTk0MjRhYzljMzlhZGFhYmQyZDEwYmE0N2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQWSvo/sW77XOpvqNY0a4g2sRFYP
wj+kyvhswIEQHd6assnX+6fFfWFNNgrI02QJoiUkB5Np3Su86U+18XCmTTmqXh58
ZiF8dUGT/ePA284NiN2VdGxfrlIcaHvWr+AG0GuURLwHBla3hySDWT3md7g58JJa
egCdQIKEtBJMDfHCgIIkhwAh3UZX5jF8BvXE5+dV582FONAiHE+hPaRZZQ3DOH2x
MWxojry2SGQCGXKmdl7KWyMF6mKbfOCGAnM7e6OdWyGSum4Q5DnRGDcCQpRsO4be
jeIQlKCVHi7FeBkOttRjSjSlb6zbyMDu2LRpziqXbtApcysiD3K2VBOCAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFdo9UVXeqUJKycOa2qvS0Qukf8MB8GA1UdIwQY
MBaAFLpYJ1VyQ0iTucvRTkrecIkp5Gf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNmFiM2MtN2YxYi00MDYyLTg3OTIt
MjYyNTU3Yzc0ZDRjLzEvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wNmFiM2MtN2YxYi00MDYyLTg3OTItMjYyNTU3Yzc0ZDRj
LzEvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0DQtjaw
28Y6BQ7hTYkaXa+cNzqBo5MJTjMH4pxFY41uffe0CdLQc/Ie4hVELi7e74GKVxsi
SEw0VVwJ+7lxQI0sGyWoZo+sUckAJLC5Evr4CyBCLnDLSXRsLwafL4V8qely2c8j
1HN3MACBX3QQSrA4jFWbX6lhA28DcALjCWVxeguKdKhxAs3Tr6U7NpmCOCUF/kd6
Gdk7jlI0+xOzCHJeOrYF8aZzAtRDKhMwcXzet99iRcvTZhMFAvVk5T/VMi/uKV3S
BkGkGeamWMWnG/M6dsTCTJIPxq2p37aBwaoHKSJN0bY0GrNbof0ygdL8qgtLGGBp
GdjLutRh6HmKvQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:12 2025 by rpki-client