Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: pDC83evSS0f/iket/JIFmycv81o4GoFp2onPqC812Vo=
Subject key identifier: DD:65:BC:CC:C1:44:E9:22:5A:16:A4:1C:00:D9:26:D5:E0:8C:28:B8
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 0199FB45D9720F7E10462B7CAA71CC1EE5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 07:01:22 +0000
Manifest this update: Sun 19 Oct 2025 07:01:22 +0000
Manifest next update: Mon 20 Oct 2025 07:01:22 +0000
Files and hashes: 1: 6XCQPd-gBaWI9uUfOl9Oxd_9HlY.roa (hash: rYTYbZJWQOZnH0RagwK8UwoxwTXRP+nIxOLYvS6LJxg=)
2: Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa (hash: XD1k9LSsxBfImI/ORmlcMWAQZfP4H0hZi+Dr1QtMaAI=)
3: bvhxhmAqyDusWG8L2BubxFp6Byg.roa (hash: SHS3jK9UFMV78c0xUf6ZLaaMiJ9/VJhwk1oZbalxq7g=)
4: q0ZcAaJC0NdgaZbJABmMG3a-wuc.roa (hash: SUYYeTh6yzkAt8ag+Tk4xijbvUF82bkEC5ALi/AihH0=)
5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: g/1C4pTd2hKjP/8mH+H5ov5aXOYHrCQhCXBQ5oX7UjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d9:72:0f:7e:10:46:2b:7c:aa:71:cc:1e:e5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Oct 19 07:01:22 2025 GMT
Not After : Oct 20 07:01:22 2025 GMT
Subject: CN=dd65bcccc144e9225a16a41c00d926d5e08c28b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:b7:8a:72:d9:9b:e4:55:f9:a4:88:47:3e:
a8:b3:e5:5d:f1:e7:6f:dc:f9:8a:bd:28:ca:13:93:
27:f3:85:9b:dd:1c:6b:8a:e3:72:1f:11:a5:48:8c:
7c:d5:58:42:eb:6e:f0:62:4f:f8:3b:d4:2e:34:9a:
1f:a9:43:3e:f1:6a:e4:a3:17:8e:c5:cf:d3:76:14:
ad:cf:98:4e:52:0b:65:77:9f:bd:52:7d:f2:0b:c2:
07:33:12:48:05:28:e1:91:71:82:7a:29:47:6b:38:
88:48:d8:75:a4:9e:1c:42:bd:7c:23:15:ec:1c:8e:
29:4c:af:0d:03:e6:8f:cf:d2:47:92:c5:51:77:21:
34:4d:6c:1c:92:4a:29:b1:72:b0:57:39:ae:34:08:
6d:b3:f1:d6:9f:27:81:db:e6:dc:c8:85:81:0e:66:
0e:fc:ee:5a:0f:74:f9:a7:3d:c7:68:05:b2:6e:ba:
1c:52:1f:d1:ca:33:90:97:a8:ea:d3:71:1f:6c:0b:
2d:44:ff:f8:62:9a:99:37:2f:87:8c:45:22:4b:19:
fc:c8:f6:18:5b:28:60:f7:26:d5:d2:ac:22:7c:26:
db:14:9d:3d:33:0a:80:56:29:43:f9:7a:95:d4:df:
fb:b9:25:d8:89:08:06:c2:b6:f9:c0:f7:7c:c8:9e:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:65:BC:CC:C1:44:E9:22:5A:16:A4:1C:00:D9:26:D5:E0:8C:28:B8
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:40:ed:30:98:b4:8b:ab:ef:73:63:cb:91:f5:47:15:67:fa:
c3:f5:ed:4e:29:f5:0a:ab:52:2f:69:1f:31:c2:62:a3:57:21:
be:09:5c:80:77:dc:b0:43:a7:46:13:a1:77:ce:25:79:8e:ec:
ec:f2:d1:db:47:d9:80:69:96:82:30:28:76:90:22:14:a7:5a:
24:a3:59:2c:e4:eb:30:8b:c0:e1:a2:70:ca:ce:f1:9c:97:62:
52:ff:4a:d1:ef:cf:66:b7:8d:b3:ae:54:72:1e:08:52:df:c6:
ed:43:d3:0e:d9:7d:37:4f:e4:e7:64:5b:9c:ee:3e:e2:44:ed:
dd:75:18:19:c1:aa:48:cb:9f:c8:9f:7b:42:62:e2:35:97:5a:
05:b0:48:fd:d8:64:4c:89:e1:2b:c8:23:a2:79:01:bd:38:2f:
42:27:1b:9e:4f:fb:84:d2:a1:d8:0c:b0:f4:65:ea:1a:ec:30:
c2:2b:e9:f7:31:b8:b1:95:1a:af:04:d0:54:30:31:77:e0:a8:
6a:13:89:ab:ad:70:57:86:00:0e:12:6c:b3:4c:e2:19:67:89:
5c:a2:db:e0:de:e1:da:32:30:03:7b:8e:59:ee:9a:09:69:51:
74:31:03:ad:ed:7f:07:f1:fa:31:58:da:04:d6:c4:93:26:0a:
50:e3:0a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:23 2025 by rpki-client