
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier: CtPGEThy6lIxS4p75RG1uSqv8Ygf9YYNU8ITLI7XJOU=
Subject key identifier: 9B:63:8B:5F:2A:BB:D6:83:B1:F1:BE:38:29:12:C7:33:E9:63:1D:5A
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 0199FCC6956861212B52143FED6EA33A287B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number: 0305
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: AnOjAErapOHwpd7AwIATrv6oaPs.roa (hash: Z5NCDzdRe0c7oL58VbkecPbcKaio1C3c2yksvrR6h14=)
2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: 19T2Iv/8aFcIbXQFC1wcMtpKH1qvTEhGztbzZd3siCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:95:68:61:21:2b:52:14:3f:ed:6e:a3:3a:28:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=9b638b5f2abbd683b1f1be382912c733e9631d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:61:a5:03:aa:0e:03:24:6c:8a:2a:d9:72:
27:6a:75:74:5a:6a:2e:df:1a:a3:8e:31:f7:3d:93:
39:3e:96:4c:d5:fa:b7:bc:bf:8b:14:c4:62:5d:6d:
42:4f:90:f6:7d:7e:bc:9e:09:11:17:63:6e:f6:3f:
77:4d:3a:72:74:71:48:09:36:41:dc:42:03:78:22:
28:cd:cb:f5:f5:19:87:89:98:d5:5f:77:a8:a9:70:
4c:a1:b9:3c:fb:2b:dc:3e:f0:4e:2f:92:93:f1:84:
fa:aa:4e:02:48:85:13:80:0e:39:57:24:2c:e4:1e:
b3:f1:31:67:d9:f5:7c:70:4f:4a:f5:da:9f:e1:c6:
a8:9a:32:9a:de:13:cb:d6:f4:8a:dc:bd:7c:88:1b:
75:40:7d:0e:37:3a:31:f3:1b:c3:6f:92:18:35:e4:
e7:e0:d1:9c:81:00:14:d5:78:52:7e:d3:0a:6a:00:
54:01:d7:2b:18:02:4d:2b:00:d8:b9:19:fc:52:6e:
e0:5d:54:60:1f:d7:df:36:0e:00:30:a4:7e:30:47:
a4:79:42:aa:21:51:30:15:6b:f9:13:0f:db:2c:8b:
73:fd:c6:33:17:ce:11:2e:3c:03:42:3d:c0:3e:aa:
ae:e4:1b:89:d7:33:f4:30:ed:4e:4a:9c:92:30:af:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:8B:5F:2A:BB:D6:83:B1:F1:BE:38:29:12:C7:33:E9:63:1D:5A
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e8:a0:4f:2b:d5:a4:b5:86:53:5c:a9:73:b4:77:f2:ab:97:
c4:18:1c:7c:84:e5:53:18:c6:e6:b0:8a:15:bc:31:0c:e3:8a:
21:23:9a:30:34:3b:89:bf:2e:3c:92:b4:c9:2c:5c:11:f8:52:
5a:2a:ae:18:dd:c7:a8:22:57:4a:6a:3f:8c:58:3d:c0:c9:a8:
80:c8:d4:eb:75:a3:5e:b5:cd:a4:99:7f:91:84:da:ff:fa:a8:
71:1e:68:7f:75:3f:a6:58:32:57:f8:31:b8:71:7b:08:49:cf:
94:70:ba:b4:42:61:d6:41:91:e6:e1:99:7b:3e:f1:b6:17:f1:
56:b8:5a:fd:70:9c:68:7a:e6:19:95:b0:6f:f2:6e:c1:3d:b1:
52:fd:b7:b8:28:8e:4f:50:27:ae:c0:18:f4:0e:a5:13:b2:21:
34:6a:8c:6f:ea:2f:85:5b:0c:ac:08:08:33:0b:be:5b:48:48:
5a:6d:5e:08:08:55:4c:22:3e:c4:ca:d4:c7:ef:4d:e0:ba:f2:
b6:e6:33:77:df:ea:93:d7:a4:6e:4d:ef:e4:11:cb:b4:75:02:
d7:23:72:aa:89:05:20:94:cf:26:80:01:55:ed:2f:3e:bd:1d:
a5:36:b0:6e:02:73:df:6e:d0:62:8d:e8:d1:f9:02:e1:93:66:
d7:81:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:00 2025 by rpki-client