Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
File: u7hl_W36q6dxJJt-uujr1SgKDJc.mft (raw, json)
Hash identifier: y2CPVahL6tHP9oiG+fJbgpsXy7vOtj8HrtrFhh4UFng=
Subject key identifier: F4:99:BE:D7:F1:2B:4D:F4:48:5A:3A:33:31:B8:2E:32:81:86:D8:B2
Authority key identifier: BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
Certificate issuer: /CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Certificate serial: 0199FCC6667E2D6C4264CB2FFFFE9AF82E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
Manifest number: 122D
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: kr3FPTrUbvprQB5gOzb6Xm9In9I.roa (hash: hZOcB5l1wSRFBsah9a6wwCM7j6k84PdiP/Urp0eSJlg=)
2: u7hl_W36q6dxJJt-uujr1SgKDJc.crl (hash: N8B/aUvdGaZDwPvuH3cm6Ho79hMvVjcaQztrj1Nz0j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:66:7e:2d:6c:42:64:cb:2f:ff:fe:9a:f8:2e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=f499bed7f12b4df4485a3a3331b82e328186d8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:62:71:c8:d1:28:5f:a3:2c:8a:b1:02:73:
f8:b4:0a:49:cb:2f:97:8b:d4:f8:2e:cf:8c:b6:a3:
43:d4:91:42:9e:1a:a5:46:b5:6f:6c:f8:e0:22:ed:
fc:bc:61:ec:0d:c2:bb:b5:81:bc:07:3b:61:26:23:
9b:7e:c2:10:2f:68:32:55:5c:ae:98:c7:a5:70:b1:
7a:cf:2c:8a:04:9b:28:a0:22:2c:a5:c5:38:d4:c8:
a2:8c:c5:3f:92:52:67:5f:a2:89:9a:0c:78:b6:2e:
36:01:9d:95:7e:03:34:7c:27:22:e9:59:7d:68:17:
1c:3e:81:e7:75:fe:cc:12:bc:c1:03:36:18:bc:e1:
22:2e:49:19:75:b4:89:e0:37:33:f9:fe:fe:52:19:
15:51:47:6f:18:04:f7:41:75:40:73:e3:04:fc:e4:
74:cd:a2:9d:43:8a:cb:5c:cd:84:66:60:ea:78:da:
18:d5:46:06:69:b1:2e:b7:65:0f:5c:87:f3:31:c4:
ff:67:cf:73:e6:10:c3:ee:06:ce:49:1c:59:8a:61:
9c:61:60:5f:a4:0b:f9:b4:23:56:e3:f5:35:53:d8:
b3:f4:ca:6d:2b:23:b6:42:0e:3a:bd:60:58:bc:1e:
93:b5:f8:5c:da:ec:fb:b1:4c:1c:c3:54:b7:da:bb:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:BE:D7:F1:2B:4D:F4:48:5A:3A:33:31:B8:2E:32:81:86:D8:B2
X509v3 Authority Key Identifier:
keyid:BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1d:3d:96:70:e8:2a:2d:f8:8d:58:39:cc:6f:54:20:82:2e:
de:64:a3:87:7a:7f:54:6f:97:88:e1:d4:7e:1c:58:fa:f5:f4:
6c:a7:74:5a:f6:48:4f:bd:4b:df:0f:88:79:96:5b:78:d7:0a:
9c:a8:86:c3:51:89:ff:5d:a6:07:22:6b:5d:28:0d:94:4f:52:
50:08:6d:6e:25:9e:76:6d:c1:4a:d3:a3:5c:ed:dd:4d:bd:5a:
0d:df:76:51:7e:7a:0a:a7:8b:39:b1:e7:0d:58:8e:20:4f:72:
f6:0c:03:9d:ae:42:e9:2c:e1:57:02:a2:75:fe:42:0e:34:7d:
c0:93:77:23:d3:9e:83:f3:9e:c9:a1:7d:d6:f3:b5:f5:26:6e:
27:46:16:53:19:97:61:bc:25:90:fb:20:a6:33:d0:10:d7:8a:
1c:9d:6a:5a:50:a4:c4:2c:1a:4d:a1:2a:7c:35:64:8c:59:49:
41:03:9c:8b:4c:75:df:9f:fd:8c:ef:f6:18:d3:05:38:c9:24:
3f:af:b7:90:85:ab:b2:f2:3b:09:a8:0b:f8:d6:cb:28:da:b7:
7b:ae:80:c7:01:f0:53:e6:ab:97:ad:42:62:7b:31:02:f0:0c:
43:27:8f:8e:dc:b1:54:0b:c5:a2:b5:40:d3:46:7a:54:12:6a:
03:37:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:31 2025 by rpki-client