Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: /1duC48/ZCEKyVRWOGbKDbQMZY09OGmQNsC2/+PKBn8=
Subject key identifier: A0:49:F5:31:3A:06:90:B6:A4:63:3D:C7:67:38:A1:9A:75:83:88:CA
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 0199FE47131CCA9C6B4B77BA8A9751F86AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0E72
Signing time: Sun 19 Oct 2025 21:01:34 +0000
Manifest this update: Sun 19 Oct 2025 21:01:34 +0000
Manifest next update: Mon 20 Oct 2025 21:01:34 +0000
Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: S5p8xDeWx3nNVmbEQ89oFqwHjkcuISI52kGOGlN8oPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:13:1c:ca:9c:6b:4b:77:ba:8a:97:51:f8:6a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Oct 19 21:01:34 2025 GMT
Not After : Oct 20 21:01:34 2025 GMT
Subject: CN=a049f5313a0690b6a4633dc76738a19a758388ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:c5:ec:78:94:01:4d:2c:24:1b:47:fc:34:
0c:fa:54:81:f2:6b:b2:a0:de:54:63:ee:0b:fc:55:
76:0d:4a:9e:ed:0e:8a:40:65:87:e4:2f:6f:c4:86:
6a:9f:64:94:8a:72:fc:1a:54:b3:ec:9e:85:ba:15:
2c:a7:c1:56:54:7b:e7:8d:35:01:bb:11:cd:54:99:
68:02:5a:a4:ba:c9:47:4d:3e:ee:fa:71:a1:e7:88:
9e:a6:d4:87:b2:29:d1:56:0b:b4:b2:5d:54:09:83:
bb:72:8a:10:c7:64:74:33:d2:93:bd:14:c2:79:fb:
dc:33:2a:74:59:98:70:29:62:55:9c:02:ad:a6:5a:
08:43:cc:9b:74:8c:d6:11:50:c4:76:79:ef:bc:3f:
23:93:0e:c9:39:d5:bd:d0:b9:ac:66:9a:d3:70:6a:
58:e7:b9:cf:ef:74:f4:ac:b4:74:de:b0:84:9d:77:
de:42:f2:38:f5:da:9a:0f:76:92:dc:0b:dc:c9:5d:
54:07:86:48:8e:df:68:e0:09:ce:6e:1b:bb:69:c4:
90:f1:48:e2:2c:1d:8f:a6:61:d4:de:85:62:d9:1a:
70:f7:42:dd:a4:2a:65:e4:20:96:c5:fa:14:fa:5b:
bb:6d:a1:d0:37:70:df:b2:c0:3b:4b:f7:74:27:ed:
45:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:49:F5:31:3A:06:90:B6:A4:63:3D:C7:67:38:A1:9A:75:83:88:CA
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:61:56:a0:d4:28:dc:fa:b6:b9:c1:5c:15:bb:50:ad:4c:52:
d7:36:5a:57:f7:7f:d1:c4:8e:5b:a3:26:44:b2:9d:74:89:54:
9c:28:2c:6d:fe:d2:fa:82:cf:34:fe:10:4e:70:65:54:b3:95:
82:6b:98:13:cd:0f:4c:f5:ee:ca:37:89:a6:84:ac:ac:39:45:
64:19:1b:aa:39:20:cb:da:e6:8f:77:5d:5a:bb:33:77:c9:a9:
41:d0:9c:27:03:1a:92:aa:c1:ac:63:1f:80:4e:e4:aa:b1:5c:
f6:17:18:d5:4c:be:d6:ef:a0:a2:88:75:ea:8d:aa:71:fa:3c:
ed:19:df:e9:22:d8:d3:b9:80:ef:a0:45:2e:2b:f8:8a:a7:5a:
bf:33:6f:94:af:de:7e:bd:2c:48:48:df:8a:d4:84:53:a7:fc:
84:74:df:68:72:3a:2c:c8:23:32:61:36:63:84:39:bc:ec:fb:
08:e4:fa:7d:57:c0:b3:1d:ca:f4:ba:5a:ca:59:e7:81:1e:a6:
b9:e5:31:b4:6f:01:63:0c:1d:95:0f:83:7f:cb:a6:0e:be:b3:
70:d7:c5:29:3c:dc:d7:57:bb:ca:3a:cf:25:6b:7c:f2:e3:55:
69:2c:0a:24:42:0e:de:2d:f0:7c:89:a8:4d:07:50:53:00:e1:
e2:87:33:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RxMcypxrS3e6ipdR+Gq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDczMTg4NGJhMGY1NzNmYTYxOGI2ZTdhZDUwM2ExMmM5
NjVhZjMwHhcNMjUxMDE5MjEwMTM0WhcNMjUxMDIwMjEwMTM0WjAzMTEwLwYDVQQD
EyhhMDQ5ZjUzMTNhMDY5MGI2YTQ2MzNkYzc2NzM4YTE5YTc1ODM4OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YPF7HiUAU0sJBtH/DQM+lSB8muy
oN5UY+4L/FV2DUqe7Q6KQGWH5C9vxIZqn2SUinL8GlSz7J6FuhUsp8FWVHvnjTUB
uxHNVJloAlqkuslHTT7u+nGh54ieptSHsinRVgu0sl1UCYO7cooQx2R0M9KTvRTC
efvcMyp0WZhwKWJVnAKtploIQ8ybdIzWEVDEdnnvvD8jkw7JOdW90LmsZprTcGpY
57nP73T0rLR03rCEnXfeQvI49dqaD3aS3AvcyV1UB4ZIjt9o4AnObhu7acSQ8Uji
LB2PpmHU3oVi2Rpw90LdpCpl5CCWxfoU+lu7baHQN3DfssA7S/d0J+1FzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBJ9TE6BpC2pGM9x2c4oZp1g4jKMB8GA1UdIwQY
MBaAFLtHMYhLoPVz+mGLbnrVA6EsllrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYt
ODM1YTU4NDJiOTRjLzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYtODM1YTU4NDJiOTRj
LzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWFWoNQo
3Pq2ucFcFbtQrUxS1zZaV/d/0cSOW6MmRLKddIlUnCgsbf7S+oLPNP4QTnBlVLOV
gmuYE80PTPXuyjeJpoSsrDlFZBkbqjkgy9rmj3ddWrszd8mpQdCcJwMakqrBrGMf
gE7kqrFc9hcY1Uy+1u+gooh16o2qcfo87Rnf6SLY07mA76BFLiv4iqdavzNvlK/e
fr0sSEjfitSEU6f8hHTfaHI6LMgjMmE2Y4Q5vOz7COT6fVfAsx3K9LpaylnngR6m
ueUxtG8BYwwdlQ+Df8umDr6zcNfFKTzc11e7yjrPJWt88uNVaSwKJEIO3i3wfImo
TQdQUwDh4oczvA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:52:23 2025 by rpki-client