Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: xHmIFmUahOlKmd/OmK2FUAXhvWL5fEsbB+wl4/dsFAw=
Subject key identifier: A5:76:4F:A3:48:25:EE:4A:9A:B5:C6:E7:39:1A:BE:AC:D7:43:1E:81
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 0199FC587F1E45A2473FF9795E2F1590DE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=)
2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: drp221QiV3mmEr/RWR71cfkWyTCfyCJnj669itRY0cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7f:1e:45:a2:47:3f:f9:79:5e:2f:15:90:de:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=a5764fa34825ee4a9ab5c6e7391abeacd7431e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:93:14:fb:bd:12:00:a0:56:e1:92:82:2f:
69:7e:6f:e3:d5:d8:23:67:a8:7d:10:18:60:cb:ac:
a0:c8:55:76:88:cb:1b:21:61:69:19:32:ef:6d:67:
b1:b1:82:f6:28:14:a7:fb:a2:96:15:2a:d4:fa:3b:
7f:f5:f1:13:08:1b:39:3c:de:21:7d:ad:c0:f7:73:
32:47:02:a2:64:28:e7:dd:40:38:19:7b:09:69:a8:
19:fd:01:9a:25:68:e5:fe:66:eb:7b:6b:47:1a:f5:
47:98:39:bd:4d:07:1e:4a:e6:7c:cd:03:91:40:c1:
8e:43:b9:75:0e:d3:9c:d7:a9:55:c9:76:3f:54:c4:
09:23:63:b8:b7:39:14:d7:93:cd:4f:37:42:6d:99:
b4:e7:86:fb:fd:27:73:ca:e5:d4:c5:0e:fa:8c:9a:
25:a3:20:d0:2f:6c:de:e1:3c:8c:c5:16:67:47:29:
4c:ce:fa:ab:34:15:b1:ad:5b:d0:d7:5e:59:6e:fd:
18:56:de:97:ec:49:3d:fe:65:c8:4a:5f:57:4e:c2:
56:c5:06:3c:8b:42:c8:21:e3:9c:ef:7d:d0:03:fb:
73:1d:2d:46:ed:7d:d1:91:58:68:6e:8b:83:8c:56:
b9:4f:e9:7d:42:bb:a5:b8:40:13:a3:db:c0:4f:13:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:76:4F:A3:48:25:EE:4A:9A:B5:C6:E7:39:1A:BE:AC:D7:43:1E:81
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:be:02:84:1d:c6:7b:bf:3a:6a:7f:49:60:f9:e6:45:3c:cc:
81:c8:7f:76:33:ad:de:3b:31:63:a1:dd:0d:2d:b5:5d:bc:d2:
54:d8:2b:e5:ef:ea:e0:5f:37:a5:8a:7d:ef:f6:33:7f:ec:7b:
4f:af:88:c9:ef:f2:62:ed:e6:a7:e8:ac:a4:c2:32:03:f3:9d:
f4:8b:8a:bf:9b:87:a1:27:de:2b:ec:b8:47:03:58:30:7e:09:
a7:e9:08:fd:cf:b8:39:24:62:c8:b3:33:26:36:3c:0f:2f:81:
d5:54:55:04:3e:fd:ca:ae:99:3a:07:88:08:11:2b:49:46:be:
0f:08:ea:82:96:66:6a:33:a9:52:0c:36:64:77:85:3b:d8:d6:
66:b5:b5:cf:a2:f3:69:67:ff:2f:3f:e8:c7:ce:ec:29:8d:57:
a9:d0:60:76:85:3d:43:31:63:2c:12:b7:84:72:4c:25:b2:db:
21:9a:1f:8a:68:71:62:15:52:6f:c6:96:b7:0e:72:96:c9:61:
12:c2:f6:3f:0e:41:a8:2e:a5:ef:c4:3c:99:e3:b9:ad:d1:82:
e0:c2:0e:50:3a:9a:05:68:66:78:ba:9b:f6:0f:97:b5:7a:b7:
ed:d2:2f:ce:e3:b3:94:3b:1b:28:c1:30:de:af:97:03:b0:6b:
c9:84:d0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:08 2025 by rpki-client