Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: XH5KAQFdiaZ/vzwIjjOtSLbDdcQMSwDzJSzUuJXSUTI=
Subject key identifier: 7F:69:2F:97:6C:5E:54:A4:C4:BC:F2:B0:82:56:7A:70:97:58:82:24
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 0199FFFE6133CB7223A36A4E2408A31F134F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 05:01:25 +0000
Manifest this update: Mon 20 Oct 2025 05:01:25 +0000
Manifest next update: Tue 21 Oct 2025 05:01:25 +0000
Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=)
2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: a2G/Brqj7ES7RjmpAaFMUXwdJfRyPkXy/fgeMN/6NIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:61:33:cb:72:23:a3:6a:4e:24:08:a3:1f:13:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Oct 20 05:01:25 2025 GMT
Not After : Oct 21 05:01:25 2025 GMT
Subject: CN=7f692f976c5e54a4c4bcf2b082567a7097588224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:5b:96:c7:2b:a1:0d:38:24:07:a2:de:7f:
38:63:9a:89:5d:05:60:58:53:2d:95:ec:1c:62:d0:
cf:38:b8:0c:c1:c8:d4:68:66:56:66:45:a9:20:5e:
9b:77:a8:4e:1c:a0:37:46:83:ee:19:a0:88:2f:0e:
62:9a:ea:5d:47:d7:07:e4:b2:81:6c:0e:e0:21:37:
91:38:c2:b0:b6:1a:8c:4c:46:5f:fa:3c:50:9b:b1:
63:3b:ba:77:b2:c6:02:35:7c:e6:ef:4c:1e:79:d1:
58:69:80:e8:9c:c8:cd:7c:6c:e0:ad:70:f5:c5:e6:
5b:33:e1:84:a3:8f:aa:a5:05:56:2a:32:b6:55:38:
98:23:62:49:cc:89:d8:57:b9:0f:7a:73:04:f4:15:
59:ae:db:4d:b2:ea:6a:8d:99:f4:23:66:68:f4:9a:
47:6b:89:61:e8:fe:e0:e2:d0:dd:3a:0d:f4:ec:fc:
b8:04:44:a3:b3:e3:7f:79:b8:45:3c:11:db:41:1e:
a5:9a:7d:59:fe:c2:e4:b8:7b:ca:e1:76:74:56:b1:
74:61:26:ff:66:3d:57:f5:45:46:8a:7c:22:fa:54:
0a:50:10:85:2f:18:20:da:e0:9c:d6:b5:e9:9b:e7:
c0:14:41:e2:1e:d8:8b:e5:ea:10:03:67:b2:87:82:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:69:2F:97:6C:5E:54:A4:C4:BC:F2:B0:82:56:7A:70:97:58:82:24
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c7:f7:9f:76:e1:b0:e3:31:c0:f0:14:a7:1b:05:5b:b1:82:
0c:d8:27:f8:f8:34:d6:0c:49:c3:db:d1:69:dd:ab:62:6a:7c:
4c:12:c2:74:ef:9e:68:fe:1a:de:8b:48:75:2b:d5:d9:21:3d:
e0:06:69:72:be:e0:63:8b:ef:05:6f:41:c0:5c:87:df:93:81:
88:5d:6d:41:74:33:cd:72:01:c7:1e:fe:4f:5b:84:b6:4a:ad:
2d:e1:be:b5:04:d6:bd:93:70:58:d7:e9:a5:8b:03:ec:eb:b9:
f0:c8:75:cf:e8:23:6e:03:e8:d6:ec:46:ea:80:4b:84:ef:56:
a7:fc:fc:d2:14:b2:7e:18:99:fd:73:0d:85:a8:3f:d8:f6:39:
5d:2d:a5:ed:51:ec:90:88:e6:b9:73:37:be:41:68:cf:91:e5:
be:c1:df:70:65:24:4e:8e:80:7f:71:52:6e:03:f1:d4:b6:38:
ac:33:c0:11:e0:a1:7f:f8:43:02:25:4c:b7:63:7e:42:9a:2a:
a0:d9:db:0b:24:66:07:19:46:13:32:86:40:f7:24:af:90:35:
67:c9:c1:98:18:e5:18:da:4c:75:01:a9:39:81:98:35:92:eb:
c9:f5:2a:44:95:0b:ee:ce:63:8b:b3:49:69:72:9a:09:31:61:
73:77:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:36 2025 by rpki-client