Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: nDao5I/oMOyvWNyoMnkcQf52s8sylgRSy5eB9XATJz8=
Subject key identifier: B7:1D:8E:DD:00:4B:C7:F8:3C:74:AB:AA:D2:5D:23:45:C3:29:45:51
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019A02227650602EFE75FEBDC254CB283B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0E74
Signing time: Mon 20 Oct 2025 15:00:04 +0000
Manifest this update: Mon 20 Oct 2025 15:00:04 +0000
Manifest next update: Tue 21 Oct 2025 15:00:04 +0000
Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: OXOq4FmnBlThpGI3ZXyopWv01se130ahmJj6NSMxSJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:76:50:60:2e:fe:75:fe:bd:c2:54:cb:28:3b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Oct 20 15:00:04 2025 GMT
Not After : Oct 21 15:00:04 2025 GMT
Subject: CN=b71d8edd004bc7f83c74abaad25d2345c3294551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:38:19:a7:42:f9:41:ac:73:39:8b:20:85:
ec:16:dd:ce:4f:b6:29:f1:76:1e:84:d2:a1:c3:69:
d0:35:4e:fc:d5:98:da:be:a7:82:b8:86:7b:0c:9f:
35:92:0d:62:0c:3e:a8:53:d2:ed:89:7a:cc:de:cb:
28:95:ab:d8:f0:cd:90:f5:5c:b6:93:82:4e:4b:19:
17:fd:bb:c1:15:13:45:51:78:b2:6f:d8:ff:6f:bb:
2b:c9:82:79:fa:e7:e6:f3:7e:8c:0d:93:9a:14:25:
1a:c3:3f:f7:c3:1e:2f:c0:83:73:93:ef:d0:ea:5c:
25:07:84:71:31:94:b9:d1:95:63:e0:99:3c:b8:96:
11:c2:bf:95:13:fe:ca:11:8f:20:f3:f7:e5:78:72:
c3:70:d9:e0:8a:75:2a:08:62:d8:f5:03:cf:70:50:
d0:af:bc:29:9d:83:0c:b8:e5:bf:48:9e:e5:ec:56:
a5:bd:5f:54:5e:39:77:d2:e5:58:f8:72:e2:78:41:
f6:7d:ee:6c:af:4f:60:ce:e5:a6:34:9b:00:9b:b3:
85:f1:4b:ce:6a:c1:e5:de:01:ce:bb:5f:98:a0:0c:
a4:61:98:7b:b5:23:d7:d1:b8:f6:7a:44:7b:05:85:
30:cc:f1:df:9c:22:ed:55:91:20:9f:bc:7a:f4:97:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:8E:DD:00:4B:C7:F8:3C:74:AB:AA:D2:5D:23:45:C3:29:45:51
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:42:34:f2:67:1b:79:a5:0e:9c:cf:82:5f:26:39:91:d5:a0:
d5:ab:44:45:1a:8d:bf:3a:c5:d3:55:17:d7:71:fa:16:e7:19:
4a:de:17:59:46:93:70:ca:68:56:ab:37:22:b0:1d:ac:f5:9e:
49:11:fa:03:4d:09:0a:41:00:7f:b8:31:93:ac:6a:ca:22:27:
8c:c7:d2:ce:b3:c7:94:8b:c0:a4:f6:8c:05:7a:21:45:11:dc:
4d:43:47:0a:e5:91:bb:58:69:09:e6:5d:43:e8:6e:f3:48:b3:
ae:c6:6b:ed:fe:16:2e:e7:a2:3f:07:67:6c:bd:f6:d0:2e:77:
d8:7d:87:05:97:a6:d0:29:2a:8f:bc:18:52:bc:ce:e1:17:ac:
e1:ab:27:99:bb:50:51:e1:ba:32:f4:b8:14:ef:92:5e:58:4c:
1c:79:38:35:39:31:8f:b4:6e:26:41:15:9e:cc:5c:f3:b0:89:
df:15:9a:70:b3:86:fc:f2:ee:b0:3c:a0:59:ce:1d:b8:b9:8e:
86:9b:9c:a6:27:2e:89:55:fe:92:3f:3b:54:d7:b9:02:94:52:
82:1d:2a:8f:6d:ae:73:de:07:fd:23:4e:29:d3:18:c7:49:80:
61:c8:5b:55:9b:55:32:c3:ba:95:63:14:a3:27:aa:54:98:9a:
f4:18:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:28:23 2025 by rpki-client