Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: vLVGqMECunx4TFwqdZK0As56pBPi9xpDmcAbQz6v9rk=
Subject key identifier: 84:71:95:C2:18:EB:FD:BE:68:BF:29:80:00:74:3A:0C:D6:D3:42:24
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 019A04111F32B3AB76E2906A8B1ECD7A753F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 16E7
Signing time: Tue 21 Oct 2025 00:00:22 +0000
Manifest this update: Tue 21 Oct 2025 00:00:22 +0000
Manifest next update: Wed 22 Oct 2025 00:00:22 +0000
Files and hashes: 1: tUE8baZVU1NdKeMuH6kAeF6d40U.roa (hash: oR4YGvS/x8NPWIpEMxxjQSUvcEGgnnG9XZinqPPpzBA=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: EUP8rbsHIOJ31qzklg+YhM+Urz4PB4nn+/S6bzC2nRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:1f:32:b3:ab:76:e2:90:6a:8b:1e:cd:7a:75:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Oct 21 00:00:22 2025 GMT
Not After : Oct 22 00:00:22 2025 GMT
Subject: CN=847195c218ebfdbe68bf298000743a0cd6d34224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:95:b3:b7:b1:b8:d4:eb:89:de:7c:5a:8b:a7:
d6:c2:de:5e:7b:5d:5e:3a:3b:50:d0:a2:97:78:ab:
d2:b2:83:58:af:1e:be:7f:5f:68:9b:8c:ef:09:77:
72:20:15:cf:f0:b1:36:e0:89:47:94:09:ab:d8:e1:
b7:09:d8:ea:15:ab:8f:04:8a:f0:a4:3c:18:34:c1:
b3:de:73:58:7e:2c:e9:21:c3:c7:87:e4:18:bb:18:
90:8d:60:6e:ae:3d:ca:d1:1d:e6:ae:4c:7e:ad:a0:
b5:bd:45:4c:ed:dc:60:a9:3b:ad:ff:fb:0f:af:30:
ac:5c:08:68:f9:7d:1b:7b:84:ff:48:47:39:94:08:
a1:f5:5a:f8:a6:76:5b:8b:7f:f2:5a:8c:00:69:a5:
e8:11:e3:7e:3c:26:41:f8:e9:57:fb:8c:a4:52:50:
dc:0f:b1:e1:8d:9e:7d:2f:32:42:1e:8e:36:13:bf:
6e:4a:31:51:38:45:90:64:ca:ff:4b:df:5c:85:af:
f9:e1:bb:f2:95:5b:7c:ba:e1:da:d1:f5:b5:40:f3:
91:96:86:9f:6e:de:b1:4e:cf:17:a2:37:f2:00:1f:
6a:b5:90:c9:e0:46:be:17:be:00:71:87:2b:a8:bc:
1e:c0:a9:e0:d4:1d:19:c6:ef:5e:df:61:f7:35:3a:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:71:95:C2:18:EB:FD:BE:68:BF:29:80:00:74:3A:0C:D6:D3:42:24
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f8:bb:90:72:e4:76:7e:7a:13:ff:1c:0b:52:6d:28:92:63:
39:e3:d0:ff:f8:5e:e2:14:40:75:f7:49:b3:f7:71:f5:89:ec:
53:be:27:a2:80:94:ce:b5:f5:f4:b5:3f:ca:a2:78:31:3a:cc:
62:77:4b:cd:0d:39:80:94:32:6f:ca:16:b8:87:7f:f2:df:6b:
c1:3b:f2:87:ae:0f:63:49:fc:0a:40:c2:a7:88:67:0b:1d:3c:
2c:38:b2:f5:d4:fa:81:08:e2:66:23:13:00:67:f6:e8:21:6d:
9f:1f:6d:53:15:0d:71:b7:28:d0:2e:71:a6:88:e0:da:39:bb:
db:d5:af:67:ac:47:24:5f:06:51:9e:4d:10:88:92:3b:3c:47:
41:70:dc:01:8f:cf:f5:32:10:df:11:48:d3:23:f0:ba:b5:5b:
b2:c0:fe:b5:b8:3b:43:57:f9:1e:dc:f3:52:7c:39:97:3d:75:
13:ac:31:65:ca:71:a3:4d:ad:eb:b1:cb:7c:bd:32:7b:d1:9e:
5e:8e:a9:c6:3b:9a:69:eb:32:37:8d:4b:54:26:4e:fa:f6:73:
6e:58:94:b9:6a:af:43:31:11:4c:bf:f1:e6:d2:fc:14:57:93:
dd:fc:7f:47:a5:1c:d5:ca:d6:b9:57:94:a6:f9:8e:b3:00:ea:
fb:af:a7:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoEER8ys6t24pBqix7NenU/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZGNjOGMzNzcyMTc0ZTQ3YmFjOGI5MzJlNWJlYzdiNDdi
MWQ5MmIwHhcNMjUxMDIxMDAwMDIyWhcNMjUxMDIyMDAwMDIyWjAzMTEwLwYDVQQD
Eyg4NDcxOTVjMjE4ZWJmZGJlNjhiZjI5ODAwMDc0M2EwY2Q2ZDM0MjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pWzt7G41OuJ3nxai6fWwt5ee11e
OjtQ0KKXeKvSsoNYrx6+f19om4zvCXdyIBXP8LE24IlHlAmr2OG3CdjqFauPBIrw
pDwYNMGz3nNYfizpIcPHh+QYuxiQjWBurj3K0R3mrkx+raC1vUVM7dxgqTut//sP
rzCsXAho+X0be4T/SEc5lAih9Vr4pnZbi3/yWowAaaXoEeN+PCZB+OlX+4ykUlDc
D7HhjZ59LzJCHo42E79uSjFROEWQZMr/S99cha/54bvylVt8uuHa0fW1QPORloaf
bt6xTs8XojfyAB9qtZDJ4Ea+F74AcYcrqLwewKng1B0Zxu9e32H3NToa2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRxlcIY6/2+aL8pgAB0OgzW00IkMB8GA1UdIwQY
MBaAFLvcyMN3IXTke6yLky5b7HtHsdkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjJjMzMtY2M5Yy00YmFmLWEwZWUt
ZWQxNDJlNDY0MzM1LzEvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNjJjMzMtY2M5Yy00YmFmLWEwZWUtZWQxNDJlNDY0MzM1
LzEvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/i7kHLk
dn56E/8cC1JtKJJjOePQ//he4hRAdfdJs/dx9YnsU74nooCUzrX19LU/yqJ4MTrM
YndLzQ05gJQyb8oWuId/8t9rwTvyh64PY0n8CkDCp4hnCx08LDiy9dT6gQjiZiMT
AGf26CFtnx9tUxUNcbco0C5xpojg2jm729WvZ6xHJF8GUZ5NEIiSOzxHQXDcAY/P
9TIQ3xFI0yPwurVbssD+tbg7Q1f5HtzzUnw5lz11E6wxZcpxo02t67HLfL0ye9Ge
Xo6pxjuaaesyN41LVCZO+vZzbliUuWqvQzERTL/x5tL8FFeT3fx/R6Uc1crWuVeU
pvmOswDq+6+ncw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:18 2025 by rpki-client