Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
File: u_mPikT9YO72t0nSFOVsgRiXZgw.mft (raw, json)
Hash identifier: 8tm8+xSFQHnKF5vDxq9dtOPankJmbVvZ3cmkITEkNRY=
Subject key identifier: 43:A0:22:BE:96:12:85:12:88:44:2D:F9:8C:76:14:79:64:7E:66:98
Authority key identifier: BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
Certificate issuer: /CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Certificate serial: 0198D515D0B95E4216F1960D43B826A7F5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
Manifest number: 0135
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: u_mPikT9YO72t0nSFOVsgRiXZgw.crl (hash: Dfyhfgff+wttUyC9azgNBAw1lpe5XcLeyfuEBaXcc8w=)
2: xkzazz831mQOXNGmSz3uWho6Ohk.roa (hash: kcYkLf+1B2AuNTj7vUuf68FA8ProRpgWzdWOYFENYJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d0:b9:5e:42:16:f1:96:0d:43:b8:26:a7:f5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=43a022be9612851288442df98c761479647e6698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:cf:bb:17:8c:f1:cb:a2:2f:cd:c3:85:61:
62:d7:27:b2:cd:42:7e:38:b3:57:10:f8:06:f4:af:
51:d7:92:a9:20:8d:78:ad:f7:a1:d2:6f:46:62:98:
bd:d1:f6:ad:9b:95:0d:8b:5d:8d:e4:d0:7f:d3:25:
02:47:2f:64:62:ae:3c:5b:80:b1:84:7d:f7:4a:80:
ba:f3:e3:0f:6c:04:23:cc:6d:b9:5a:32:6a:8c:ef:
e0:74:8e:39:0e:bc:2c:69:aa:5d:6c:31:9e:36:89:
ed:a9:97:4a:11:f7:0a:fc:96:4b:b9:d4:f0:f3:c7:
78:36:a7:a1:5e:2b:0b:cd:cb:5f:2e:2c:32:ee:db:
8c:e8:1c:ab:ba:1b:fd:ee:95:61:77:59:f8:38:36:
f9:5c:ae:ef:e0:99:cb:29:6c:1c:c8:ac:6c:03:31:
c9:92:fa:0a:3e:e0:c4:4c:ff:48:3d:a1:90:42:a9:
ca:4c:1b:57:d7:84:e4:ce:f8:1a:58:b8:1a:e5:58:
50:f9:f2:7b:8d:b1:83:ea:b0:44:4b:fe:b3:3e:33:
96:29:c8:f4:94:5c:22:8a:5a:6d:de:19:33:3f:10:
bd:9e:46:4f:c8:23:35:e4:f8:f4:3b:c5:a3:80:26:
95:b5:da:04:30:ce:d4:e1:af:20:28:b9:02:0a:39:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A0:22:BE:96:12:85:12:88:44:2D:F9:8C:76:14:79:64:7E:66:98
X509v3 Authority Key Identifier:
keyid:BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:69:21:b9:dc:51:b3:85:f2:b7:b4:84:e6:8d:97:80:c3:05:
16:15:d7:02:c2:25:85:51:d4:8c:4d:26:51:dc:26:fa:f7:d2:
d9:d7:05:d9:d7:17:61:6a:a2:1b:ca:5f:4c:3f:ce:b0:d1:bc:
79:49:d3:92:18:47:94:2b:31:bd:0a:14:d4:41:89:42:5a:bc:
cc:d8:46:00:14:b6:e8:4a:71:66:37:c8:8c:00:ca:8d:49:31:
63:10:be:93:d9:f0:7a:a5:67:1e:f9:ad:7c:81:2a:c9:bb:cb:
27:18:75:7f:24:87:70:32:cb:61:3e:17:f8:7f:9f:6a:4d:18:
50:32:2e:4e:44:d8:17:63:e4:f5:5e:3b:ac:47:87:a4:b8:e1:
3d:da:8e:d3:9c:a3:cb:c8:1e:31:01:9a:f5:ca:33:53:01:36:
59:a7:dd:62:59:65:be:6f:0a:4f:f4:ac:53:b3:65:78:6e:44:
56:10:2c:92:14:80:8d:2b:d8:52:7e:75:f7:5c:2a:eb:24:3f:
bc:25:7b:fb:6b:26:43:7c:f3:a9:62:dc:7d:9f:b5:b0:c5:d4:
b5:df:04:7e:62:03:0e:74:b6:ac:97:51:d9:4a:76:be:bd:17:
15:79:99:81:2e:fd:7c:9a:7d:a0:08:5d:24:ed:2b:44:3b:3c:
2d:e3:27:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFdC5XkIW8ZYNQ7gmp/WmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjk4ZjhhNDRmZDYwZWVmNmI3NDlkMjE0ZTU2YzgxMTg5
NzY2MGMwHhcNMjUwODIzMDQwMDMzWhcNMjUwODI0MDQwMDMzWjAzMTEwLwYDVQQD
Eyg0M2EwMjJiZTk2MTI4NTEyODg0NDJkZjk4Yzc2MTQ3OTY0N2U2Njk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa7PuxeM8cuiL83DhWFi1yeyzUJ+
OLNXEPgG9K9R15KpII14rfeh0m9GYpi90fatm5UNi12N5NB/0yUCRy9kYq48W4Cx
hH33SoC68+MPbAQjzG25WjJqjO/gdI45DrwsaapdbDGeNontqZdKEfcK/JZLudTw
88d4NqehXisLzctfLiwy7tuM6Byruhv97pVhd1n4ODb5XK7v4JnLKWwcyKxsAzHJ
kvoKPuDETP9IPaGQQqnKTBtX14TkzvgaWLga5VhQ+fJ7jbGD6rBES/6zPjOWKcj0
lFwiilpt3hkzPxC9nkZPyCM15Pj0O8WjgCaVtdoEMM7U4a8gKLkCCjm+3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOgIr6WEoUSiEQt+Yx2FHlkfmaYMB8GA1UdIwQY
MBaAFLv5j4pE/WDu9rdJ0hTlbIEYl2YMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9tUGlrVDlZTzcydDBuU0ZPVnNnUmlYWmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wYjRiNzAtNmQ2MS00M2M2LTg5ODYt
NDE5MzM5NTViNzNmLzEvdV9tUGlrVDlZTzcydDBuU0ZPVnNnUmlYWmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wYjRiNzAtNmQ2MS00M2M2LTg5ODYtNDE5MzM5NTViNzNm
LzEvdV9tUGlrVDlZTzcydDBuU0ZPVnNnUmlYWmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGkhudxR
s4Xyt7SE5o2XgMMFFhXXAsIlhVHUjE0mUdwm+vfS2dcF2dcXYWqiG8pfTD/OsNG8
eUnTkhhHlCsxvQoU1EGJQlq8zNhGABS26EpxZjfIjADKjUkxYxC+k9nweqVnHvmt
fIEqybvLJxh1fySHcDLLYT4X+H+fak0YUDIuTkTYF2Pk9V47rEeHpLjhPdqO05yj
y8geMQGa9cozUwE2WafdYlllvm8KT/SsU7NleG5EVhAskhSAjSvYUn5191wq6yQ/
vCV7+2smQ3zzqWLcfZ+1sMXUtd8EfmIDDnS2rJdR2Up2vr0XFXmZgS79fJp9oAhd
JO0rRDs8LeMnzw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:21 2025 by rpki-client