Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
File: u_e8bHyTo8-x4lu778TyB64lvaU.mft (raw, json)
Hash identifier: FJ5gB1Q/64R5Z3BGHE9UaacAe/+oYjav92XigCum3Wo=
Subject key identifier: 9C:1C:C4:4E:31:6B:47:F0:23:D7:7F:63:03:96:09:15:0F:2B:4B:A9
Authority key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
Certificate issuer: /CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Certificate serial: 0199FE47801346879EF926BD22E9514EFA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
Manifest number: 0A15
Signing time: Sun 19 Oct 2025 21:02:02 +0000
Manifest this update: Sun 19 Oct 2025 21:02:02 +0000
Manifest next update: Mon 20 Oct 2025 21:02:02 +0000
Files and hashes: 1: BbjjnTO6x8pCO-c9XIXawU4Q-Wg.roa (hash: O0QT5VY+thGDoU+G5JqnH6rDs/DiZAhj1p6YD6BBCu4=)
2: u_e8bHyTo8-x4lu778TyB64lvaU.crl (hash: PQqsPjIweq3arelK/wnjh+z1ZOyQd6Jm2RoqSsqsrmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:80:13:46:87:9e:f9:26:bd:22:e9:51:4e:fa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Validity
Not Before: Oct 19 21:02:02 2025 GMT
Not After : Oct 20 21:02:02 2025 GMT
Subject: CN=9c1cc44e316b47f023d77f63039609150f2b4ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:9c:41:8e:01:20:90:31:16:bd:ec:45:be:
ea:2b:47:fb:58:3e:90:38:66:d8:3f:6b:43:dd:60:
3a:10:ee:a3:67:2b:a2:d4:a5:25:d5:bc:e9:ce:33:
99:52:2b:b4:2b:16:25:9d:fd:5f:75:1e:03:4f:aa:
4d:f6:1f:67:0b:82:db:61:b8:d9:1f:95:ea:d3:3a:
b5:a5:65:50:71:93:8a:ab:e7:64:d8:35:e6:a8:5b:
c3:eb:fa:02:13:f9:5a:0b:6b:86:0e:a0:0c:b6:74:
3f:bc:67:a3:85:79:63:32:31:eb:7b:2c:2e:9e:ef:
f2:82:a1:fa:bc:b1:5a:13:6f:1b:62:b5:2c:18:91:
ff:89:0f:0b:68:59:94:d5:f2:cb:dd:98:2b:17:92:
53:4b:a7:b5:c9:1c:a9:24:99:ef:9c:b7:22:d6:70:
82:8c:8a:66:29:e9:9f:30:47:1c:a8:db:5e:36:c6:
35:0f:89:e2:81:57:73:36:c0:79:bb:04:68:b5:31:
ab:29:36:fe:78:ca:e1:67:ff:67:28:6a:e2:27:fa:
04:88:32:7a:32:00:e2:91:04:2f:98:0c:1f:ee:e7:
25:71:f7:c4:ad:cc:72:72:6d:02:93:36:93:c3:dd:
01:0f:c6:35:7e:75:ec:1f:b9:9c:1b:fa:6a:be:2b:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1C:C4:4E:31:6B:47:F0:23:D7:7F:63:03:96:09:15:0F:2B:4B:A9
X509v3 Authority Key Identifier:
keyid:BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ca:e3:98:0d:7b:78:f6:47:fd:e9:da:dd:46:5e:83:6a:d3:
ba:bf:d1:74:02:0c:73:16:9f:fb:84:16:8e:bb:8c:c7:77:f6:
2d:89:92:bd:32:9a:7f:a5:af:ba:d9:fd:1c:b4:ae:ab:fe:cd:
26:76:44:75:14:24:7b:b6:f4:f0:c9:60:8f:91:74:53:72:df:
57:7f:f3:bc:55:20:57:ac:c8:58:4c:f7:ca:0b:fd:8c:6c:90:
b6:a0:b8:77:ea:62:4e:77:0a:25:8b:a9:b1:a2:bd:90:0a:49:
5c:c0:25:d5:e2:1f:bc:7d:b3:72:be:c6:9c:ac:4a:3e:43:d8:
df:96:aa:ca:23:b9:c8:84:43:22:69:7f:2b:ee:1a:0e:ad:5c:
f3:d6:66:7e:dc:9d:30:ff:14:bd:47:c7:a8:87:07:b0:e8:88:
ba:d3:33:9e:60:ce:90:23:4d:7c:3f:60:96:d9:bc:da:e1:d8:
04:10:e7:83:02:82:70:b9:f2:1f:70:d9:e5:46:05:9b:05:b3:
ab:a8:4d:99:46:83:27:11:d8:3f:ae:2a:c5:b4:7f:64:d7:30:
6f:a4:59:3c:3d:a7:1c:1d:ca:43:96:b0:cd:2a:2b:32:a9:19:
57:2a:30:f3:92:5d:2f:4f:0a:0c:a9:6c:c7:7a:91:fc:e3:a3:
25:be:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:11 2025 by rpki-client