Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier: BcTMz8tNd2glcD/rlPSSiGqaJWHBxDCXdX427lQNN+E=
Subject key identifier: 8A:BC:EA:62:76:85:60:C0:DB:75:40:FF:E3:06:02:ED:88:4B:F4:C2
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial: 019A51BEB11A4DC50B32DA8519765F05E8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number: 0331
Signing time: Wed 05 Nov 2025 02:00:42 +0000
Manifest this update: Wed 05 Nov 2025 02:00:42 +0000
Manifest next update: Thu 06 Nov 2025 02:00:42 +0000
Files and hashes: 1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=)
2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: L7Vd5d/hkjdQYCukrlg1MPzC4Fm7bnB/zJw722b3DNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:b1:1a:4d:c5:0b:32:da:85:19:76:5f:05:e8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Validity
Not Before: Nov 5 02:00:42 2025 GMT
Not After : Nov 6 02:00:42 2025 GMT
Subject: CN=8abcea62768560c0db7540ffe30602ed884bf4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:d9:c3:b5:64:f4:df:ce:ae:e0:a4:ab:10:
ae:7c:b1:66:22:6c:06:45:db:7c:ce:01:f6:7f:7b:
9a:87:f5:dd:23:c4:92:92:83:5d:63:b5:6d:99:e3:
d6:87:76:b8:aa:e3:56:f3:ac:24:92:8d:80:2c:ac:
21:40:7a:d4:f7:b2:e2:e1:33:2d:39:0f:87:18:75:
8b:d2:d0:32:37:fb:46:01:45:85:79:18:b5:45:ae:
5c:04:9f:5b:9b:aa:a4:67:2c:78:5f:fe:e0:75:0a:
e5:6c:42:3d:27:c0:93:6f:3e:66:de:da:78:df:ff:
33:d8:f5:f5:62:49:db:8d:45:d1:13:89:19:0d:0c:
fa:40:f2:6c:2c:14:d2:8b:10:a8:f7:b0:13:93:5a:
40:8c:5e:e5:03:70:9e:83:d9:aa:5f:3f:fa:0e:7b:
ea:04:c3:4e:96:33:24:ea:dd:4e:77:e8:97:79:b4:
13:8c:9b:cb:23:04:6e:25:9c:13:85:c5:59:e4:88:
1b:cd:df:86:3a:02:35:9f:a9:8a:3b:4a:46:e7:a8:
18:b4:f3:ef:03:a0:93:dd:54:3e:ac:2e:31:03:67:
85:48:fc:a1:e0:1f:0a:ed:a6:72:10:f1:cf:e3:a0:
f2:58:68:b8:9b:2b:0d:21:11:e1:be:ac:d5:72:74:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BC:EA:62:76:85:60:C0:DB:75:40:FF:E3:06:02:ED:88:4B:F4:C2
X509v3 Authority Key Identifier:
keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:10:80:01:37:55:57:53:38:c4:ae:71:02:87:cf:ad:09:2e:
f8:d6:1d:ff:6d:49:c6:d0:17:24:74:1b:dd:0d:a6:53:f0:11:
ec:7b:a0:f3:07:1c:bb:ac:b7:4a:b8:dc:2c:ac:4a:b4:c0:e5:
0a:e7:0e:fb:78:16:6e:9d:ef:25:e2:c6:53:59:e8:85:29:34:
07:9a:81:c8:88:07:69:8c:9b:f5:48:9b:a4:1a:c7:a2:24:d8:
f6:72:ee:9d:62:c2:de:f1:09:5c:40:a2:70:df:97:29:23:9c:
44:5c:73:e3:62:44:3e:ca:4a:8b:da:2e:b4:c9:f2:50:95:56:
45:73:67:7f:37:ed:56:31:4a:b9:dd:8c:32:25:eb:e3:d9:2b:
95:16:17:29:58:1d:73:bc:74:26:d4:fa:e4:3b:c2:70:ca:96:
4d:59:0a:3a:ae:bf:ed:79:84:18:4a:86:ce:68:db:0d:29:8e:
5b:4d:c7:96:48:1d:5d:05:e2:e1:7f:85:4d:44:45:fc:7c:1e:
b9:e8:8e:e7:28:c6:f8:f2:7f:9a:8f:04:e8:bf:ce:21:e3:35:
32:b0:ff:14:db:42:da:87:0e:5b:ac:df:7c:b9:1b:7e:b4:cf:
89:a0:d9:75:ae:88:b2:a0:d4:f7:88:6c:ef:89:f2:ae:20:b0:
f1:88:b5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:48 2025 by rpki-client