Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: 7V4KgF6gHB2DL+7jsJwIDd01FhgZnbv7m3uk802rdrE=
Subject key identifier: 4A:1C:28:14:D0:19:AD:9C:A4:C0:31:4D:6F:82:D9:37:DD:4B:8F:B2
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 0199FC8F410BD0EFF36D678C81545825B274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: jre3DxiqUzuLi3M2cLLPT59bWTjUKadggRU5xdxUrJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:41:0b:d0:ef:f3:6d:67:8c:81:54:58:25:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=4a1c2814d019ad9ca4c0314d6f82d937dd4b8fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a4:85:93:f9:bd:c1:6e:62:47:a7:e3:61:08:
14:a3:ba:45:b7:b4:97:3f:5f:ed:51:f5:d3:94:f2:
a3:37:9f:69:b8:ab:2a:d4:7d:13:f9:ea:2f:76:bf:
6e:5c:5d:61:3e:1c:2f:19:e6:a8:bb:0e:34:bc:8f:
4f:c2:8b:83:ef:f1:f4:a6:d4:af:a5:35:86:a2:e6:
98:52:74:56:4a:d9:2e:ff:f4:07:bd:b9:b1:0a:74:
42:c3:69:65:21:d8:f2:69:ff:f4:a8:73:e4:9e:c9:
f9:b1:08:00:e9:6f:3b:2e:27:3a:9a:b5:39:fd:ac:
8c:27:aa:9b:0b:11:55:07:2e:e3:91:63:09:ae:8d:
cd:c4:b8:fe:6b:d6:e9:51:a9:eb:fe:66:af:90:59:
eb:23:6c:8c:bd:d6:3f:4d:ca:1a:8c:e5:07:2c:4a:
c1:07:2c:9e:d5:6c:eb:75:9c:68:52:46:18:7c:5b:
2d:ef:20:0e:53:fb:82:ea:be:9b:d3:6a:16:0b:36:
aa:7c:88:13:d2:f7:15:47:b0:6d:d8:cd:8d:25:64:
db:59:04:bc:bc:83:49:47:c8:cc:c3:36:51:25:58:
2d:6a:d5:e5:08:cc:81:c0:f0:ce:fa:dc:4f:33:39:
38:b0:c3:f4:b7:c7:3c:c6:07:cb:97:68:97:a3:03:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1C:28:14:D0:19:AD:9C:A4:C0:31:4D:6F:82:D9:37:DD:4B:8F:B2
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cf:58:5e:0a:ee:83:1f:6a:a9:c0:43:e6:ff:10:89:29:21:
ba:37:44:4b:3f:74:f7:f2:cf:d8:00:83:b1:26:f5:f8:d8:31:
b1:c1:52:0c:77:48:80:65:69:ce:dc:28:5c:f9:05:7e:2e:00:
71:b5:36:5e:46:78:33:1f:6b:92:5b:e3:c2:fe:aa:fb:81:9c:
ab:5f:54:0d:c9:82:0c:df:ea:7c:dd:a9:c5:59:d2:78:87:89:
aa:67:b3:62:e2:24:4b:e7:e3:18:6e:67:44:bd:e7:9b:be:2d:
ab:e7:c7:fc:a2:47:c2:80:6e:05:42:81:79:36:b0:06:c5:2e:
da:3e:45:5e:bd:f7:7f:0a:be:73:be:70:af:6d:af:d7:64:a1:
3e:4f:7f:73:6a:f1:fe:7b:4a:f8:9d:30:5f:d2:31:fa:f7:88:
92:c9:c4:e0:d0:d0:c9:e3:72:e1:55:d0:0f:0c:36:2a:ea:6b:
f9:15:db:75:9f:88:52:8b:57:23:7d:98:f1:fe:5f:46:0b:1b:
ef:7b:93:a9:47:db:3e:c1:8a:78:c7:9b:4d:1e:a7:98:e8:c0:
ba:63:10:c9:85:45:e3:31:a5:07:0d:11:79:c4:2a:6f:40:92:
84:bf:19:34:f6:5f:04:21:bf:19:81:ef:82:51:38:a8:f5:16:
b1:b5:f0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:11 2025 by rpki-client