Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File: ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier: zSmW5CyIEv727r4TEQWfVUlURAFn4tjONdWL38HPPOc=
Subject key identifier: 9D:D2:BC:75:FD:A1:36:0F:40:3E:CD:98:DA:60:F1:56:52:4A:D8:EE
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial: 019A4C60F2387E479851EC78F1BF0354200D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number: 08DB
Signing time: Tue 04 Nov 2025 01:00:13 +0000
Manifest this update: Tue 04 Nov 2025 01:00:13 +0000
Manifest next update: Wed 05 Nov 2025 01:00:13 +0000
Files and hashes: 1: 9qqw5-kT_WV_X39A7wZIImdbzHo.roa (hash: /+5dGBlEHLXX+0YtcqdadMo/w6B/YFbkAqy9tbmNdEg=)
2: D-sLa7SP7XelLhZGOPS-ls06iHQ.roa (hash: O/tqtREZzKy5oPDokpycb2qRKRocKJlF54vVhaheJr4=)
3: XI8GYNvzBktqANN3ULY6yNPZsp4.roa (hash: 0Mxp84Xa3ZGuCVESuvLHwIOTltEO7ZBfIp1LcrOP0ho=)
4: eRUACPCXV-4Ib9JOJdpUbWI_TYw.roa (hash: h9bviEq7QynmkHeqFVqOAhXJmtcEK3L94GyVb2n9ZXc=)
5: hJkdSoDXpzIKTUPp93OLm4_CfgM.roa (hash: GAALV0VthJPoxa0vb/cdFv6fAU1JjHbthL2uNWZeyCc=)
6: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: CSSxpofG0NfH96EXGLfbdDBrpeNnz+KTMeI+LFlOa/k=)
7: yLW-Wxb-WEK3SlgHfRgcFULgwtU.roa (hash: 47c/8wbrDeeCgPSJoS7prqWBSvhn47quuwVKT8eb4AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:f2:38:7e:47:98:51:ec:78:f1:bf:03:54:20:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Validity
Not Before: Nov 4 01:00:13 2025 GMT
Not After : Nov 5 01:00:13 2025 GMT
Subject: CN=9dd2bc75fda1360f403ecd98da60f156524ad8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:33:c9:29:01:94:e7:db:34:e6:70:7f:f2:
bf:2c:93:d4:fa:10:21:b7:6e:b7:68:b9:70:ea:9e:
58:9c:29:55:78:2b:09:72:ed:bb:fc:b1:3b:ce:ca:
5b:49:8b:ab:df:33:38:44:c1:4c:83:80:e2:65:1a:
76:be:16:27:65:3a:46:fa:83:f1:5c:66:f0:af:0b:
6b:aa:ca:61:65:ac:4e:3b:e6:15:4b:d2:07:17:25:
a7:53:f8:db:be:48:6b:fd:95:43:1b:3b:e5:53:8b:
e0:97:2d:b5:e1:36:d9:cf:e0:da:b3:aa:37:4d:7e:
d4:36:c2:77:10:51:ac:f7:62:c2:96:69:e5:86:5f:
2f:50:37:2e:cb:7e:13:fb:9b:a1:aa:d1:aa:1b:f6:
01:57:f6:47:38:55:d2:85:99:9d:b5:fa:6b:04:82:
62:f0:59:4f:c8:b0:70:29:18:61:0f:a3:21:f8:6b:
aa:c6:d1:59:6f:4d:4f:e1:eb:cc:3f:be:9b:1c:cd:
16:9e:ae:23:fb:39:8f:78:a7:09:c5:76:ba:57:15:
a7:1b:4e:d3:08:86:4e:53:f8:14:f9:87:bf:82:b0:
3b:27:6e:d0:6f:1b:63:fb:b9:5d:5e:f9:e8:f6:52:
a2:81:1a:3d:94:c2:17:17:1c:d2:d0:0f:13:0e:ad:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D2:BC:75:FD:A1:36:0F:40:3E:CD:98:DA:60:F1:56:52:4A:D8:EE
X509v3 Authority Key Identifier:
keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fb:9a:20:c9:97:97:87:75:a2:df:63:21:b6:bc:7a:50:f0:
de:af:96:22:8b:a8:42:b7:02:d9:b5:7e:5a:17:f0:02:f4:a7:
80:84:37:49:9c:f8:03:c5:db:a5:ac:b2:51:9b:1e:3b:46:4e:
86:4d:58:cf:37:6e:ca:52:44:41:38:27:3f:c5:35:59:88:f3:
00:d0:96:64:61:c6:e9:f8:8d:01:4b:70:f1:fb:05:16:05:63:
50:8c:51:fb:a2:57:8d:98:91:ea:d1:54:c0:ff:b2:58:47:46:
ce:ca:e2:c3:29:5a:6a:64:8b:44:4b:14:9b:3f:4b:13:35:c8:
ee:22:62:86:c4:6f:d1:aa:b5:2c:47:67:c8:d0:0a:ea:e0:32:
9f:94:c4:33:a4:4c:ca:49:f8:54:4f:d4:d9:fd:6f:3a:6d:f6:
c2:48:97:5d:0d:d6:d4:81:0c:2d:5f:29:98:f7:6f:e4:bb:98:
d9:e6:36:3b:85:f4:3c:06:ce:0c:ad:c8:60:20:47:c7:e6:cc:
84:3c:f6:19:1c:22:fc:43:f7:13:57:b7:f4:17:1e:4b:37:6e:
a1:89:da:fd:2a:94:03:c6:37:a3:dc:07:9c:0a:0d:66:8c:b9:
45:93:b0:69:26:1f:9d:b9:af:bc:85:69:e4:ce:50:c0:0f:c5:
3c:60:57:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:19 2025 by rpki-client