Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
File: u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft (raw, json)
Hash identifier: CUTsbxhVbaRlmls8OKC+q+aMQJzVE3TOvMxFx0q5x2k=
Subject key identifier: BB:C6:18:E5:09:8F:0D:F7:F8:42:47:B8:8E:A9:CE:44:63:76:6D:85
Authority key identifier: BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20
Certificate issuer: /CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820
Certificate serial: 0199FBB35AA1B5D5EBE30BE35D7744637963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
Manifest number: D2
Signing time: Sun 19 Oct 2025 09:00:59 +0000
Manifest this update: Sun 19 Oct 2025 09:00:59 +0000
Manifest next update: Mon 20 Oct 2025 09:00:59 +0000
Files and hashes: 1: j8bQQ_2ixu-vog4cLNKhBgofx1M.roa (hash: v4k62I4wJVyjDK80IFPhBu/XJr/LGdFEyW7xkPuyAOU=)
2: u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl (hash: 332QmLUrdoL9eEFeiPWKBNw0nsLSoP4n06Dj5tf6AtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5a:a1:b5:d5:eb:e3:0b:e3:5d:77:44:63:79:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820
Validity
Not Before: Oct 19 09:00:59 2025 GMT
Not After : Oct 20 09:00:59 2025 GMT
Subject: CN=bbc618e5098f0df7f84247b88ea9ce4463766d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:97:c8:b2:d1:83:ab:a5:e6:30:f4:4f:f8:
22:1c:3e:52:06:8d:c8:a1:01:61:36:4b:64:90:27:
5d:c1:c6:9f:84:74:24:62:2c:ca:83:7c:3c:1d:25:
d1:be:39:ff:41:c0:bb:e9:00:db:15:1a:05:8d:94:
8c:77:78:1e:d4:74:19:f8:af:f1:62:9c:f7:21:3e:
ec:db:47:57:f1:42:3c:9f:0a:b9:5d:57:cc:f2:58:
af:c5:38:c8:ce:3d:cd:3b:2a:71:20:41:34:a6:db:
95:aa:f9:99:b2:eb:7d:48:a4:cf:9c:db:47:48:73:
d3:0a:a2:f9:10:7c:d1:f4:d1:dd:29:3d:b3:74:56:
63:01:b4:f7:f7:fd:d6:2e:d6:fb:bb:c2:82:e4:fe:
04:29:1f:b2:76:7b:f8:68:e3:ee:86:29:f9:92:88:
a2:b7:6f:45:2f:9a:98:d6:bf:6d:0a:28:80:3d:0e:
dd:5b:85:be:1d:78:75:0d:47:86:0e:8b:52:72:89:
84:62:15:f7:07:7c:1f:1e:db:a8:b3:72:4b:f7:5e:
37:e0:50:da:f4:a0:16:94:5c:ec:40:14:c9:ce:5f:
64:0d:f2:ea:3c:95:96:95:2c:3b:3e:2f:36:eb:aa:
e6:a3:ca:68:85:49:64:a5:85:f4:fa:26:95:f1:be:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C6:18:E5:09:8F:0D:F7:F8:42:47:B8:8E:A9:CE:44:63:76:6D:85
X509v3 Authority Key Identifier:
keyid:BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:83:29:88:5b:ac:ad:9e:9c:d6:a6:6d:cf:94:93:e6:b9:12:
7e:63:e8:8c:f2:25:0a:cc:88:76:64:65:48:32:35:a7:d8:fd:
9f:02:29:94:36:33:6f:32:9e:0a:12:0b:cb:49:df:87:e8:fc:
f5:98:9d:55:21:f2:d0:c4:26:4d:80:cb:fa:ec:ed:0b:03:23:
86:57:e9:55:de:63:29:fa:ab:99:ae:09:38:9d:bf:08:f2:05:
9a:df:7d:57:2d:f1:0d:9d:13:49:98:0f:28:fd:60:e3:fe:a5:
4b:09:85:b4:95:ac:6e:60:7b:b5:81:c1:19:c2:3d:ca:77:6e:
f9:5f:7b:95:91:54:63:7f:7b:5e:d4:84:ab:2a:7c:d4:06:c3:
fb:fd:11:30:8c:ca:0d:01:b9:53:cf:84:fe:9b:48:3c:cd:10:
27:8b:0b:17:4f:d8:bd:53:f2:9a:ae:02:78:bf:3f:28:05:8d:
a2:22:33:c2:e8:6d:a8:b3:18:c0:c2:a6:20:88:db:ae:93:1d:
3d:ef:ef:e2:e6:7a:a2:9b:a8:7e:be:a2:49:4e:f3:55:c5:cc:
c1:43:de:fd:1a:6a:8d:0b:a9:ce:79:fb:05:d8:c9:a1:c5:81:
91:a4:0b:d6:44:c3:d1:9f:e0:74:a5:3b:b0:80:d8:0d:25:14:
bc:67:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:50 2025 by rpki-client