Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
File: u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json)
Hash identifier: czXiC8H9pKSdhG0h3ZyfPKLhtPUIMMUbjnTIeU+gVS8=
Subject key identifier: 25:09:AE:DC:0E:39:66:E5:C7:44:E1:49:81:99:D8:F8:65:FB:05:62
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial: 0199FBEBF48547AC17F0167E5B222EF2C498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
Manifest number: 0779
Signing time: Sun 19 Oct 2025 10:02:48 +0000
Manifest this update: Sun 19 Oct 2025 10:02:48 +0000
Manifest next update: Mon 20 Oct 2025 10:02:48 +0000
Files and hashes: 1: T97PhxMy-s6iz7MiHiiatck56go.roa (hash: IEjvDcy1RVm7HLUPdOdFrc1JxBew7Tzwoxa/LhSLExY=)
2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: 4yaoNl6zab712GGJE82yNkMx6L5uRqaZeEZkhkBlwY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f4:85:47:ac:17:f0:16:7e:5b:22:2e:f2:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Validity
Not Before: Oct 19 10:02:48 2025 GMT
Not After : Oct 20 10:02:48 2025 GMT
Subject: CN=2509aedc0e3966e5c744e1498199d8f865fb0562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:6b:91:e4:e7:1a:bb:85:5f:a2:00:e0:e4:
f3:ec:7f:cd:28:56:8e:d9:cd:7a:80:f8:66:f2:5a:
de:98:df:3b:0d:e3:47:b6:a4:30:cb:c6:7e:4d:83:
ee:7f:68:a5:bd:ea:27:df:f4:3b:9f:d2:f7:35:22:
fa:1b:22:58:c9:8a:4a:72:1b:d4:55:e1:28:c0:55:
8d:f7:f8:1c:60:ee:3f:17:30:ed:39:e0:ad:02:56:
5b:4a:b6:7a:bf:23:3d:c8:7e:9d:24:6b:f5:10:70:
f5:03:52:15:05:8e:a7:10:e5:fe:39:e5:f5:d3:9d:
cd:d7:8b:81:c6:88:90:39:dc:ac:1e:ea:94:e7:7d:
67:7c:f2:c3:60:ef:ed:74:51:cf:3f:a3:17:34:c6:
40:73:1f:93:36:33:9e:a9:c2:77:19:47:23:66:0e:
3e:25:79:9d:d8:a3:d4:08:64:15:2a:53:40:d8:40:
c2:d9:a7:9f:fa:dd:e4:fa:76:d0:eb:36:55:c4:40:
af:f6:e2:3b:12:98:cc:f6:a4:ed:da:c4:e9:ee:16:
83:07:d8:e8:8d:5f:f2:f2:5c:bb:5b:04:08:0f:3f:
d0:70:33:4a:71:ec:17:58:8b:1a:cb:ba:b1:60:62:
f0:b4:5d:d6:88:92:7b:41:b7:4a:48:cb:f1:6b:39:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:09:AE:DC:0E:39:66:E5:C7:44:E1:49:81:99:D8:F8:65:FB:05:62
X509v3 Authority Key Identifier:
keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:31:fe:95:bf:a1:3a:f8:c9:d4:d9:c4:95:5b:8e:87:5a:54:
1a:35:ca:ad:8a:04:c1:a5:de:70:3d:64:20:9f:2f:c3:01:3f:
d9:d7:45:38:f5:ea:f2:47:1e:e2:1e:a0:de:7c:c4:2b:9f:88:
5d:87:12:63:63:05:ec:4b:cd:a8:81:a5:39:4e:c1:d6:1c:5a:
36:99:22:3f:9c:fb:ee:0e:4b:40:7a:4f:bb:10:3c:50:33:05:
bf:07:df:07:34:3a:6d:1a:2a:fe:fe:38:c5:81:a5:43:62:2f:
e8:7c:49:27:0f:2c:96:08:92:c8:5e:30:28:38:1f:18:a1:67:
f0:b7:f6:20:f2:66:64:47:70:bf:10:e2:03:1a:e4:3d:c3:80:
06:0e:02:e5:8b:c6:ad:74:20:23:4d:e7:81:97:f4:02:47:b9:
dd:fd:66:c4:b3:4c:20:59:dd:9e:c4:3e:a5:fc:a8:32:3a:10:
49:c5:34:70:df:ba:f8:19:b0:eb:56:13:b6:09:c1:27:af:b3:
89:7b:12:6f:6c:4e:a0:9e:06:e4:99:ab:8f:bc:ad:59:a0:aa:
92:cc:3f:2a:62:dd:ca:af:4e:6e:26:a4:33:1d:d2:95:88:ee:
4f:bd:de:1e:92:28:1d:b7:01:4a:14:f0:41:8e:71:ee:0b:ea:
b7:29:4b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:50 2025 by rpki-client