Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: lTfp7gmf6BBm0q2VSt1Orz/Lq2sHFKMPaa6kcgxz0MQ=
Subject key identifier: 43:1D:1A:DC:52:7D:53:AF:22:5F:25:A3:0E:3E:57:67:C1:08:62:20
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 0199FC218703B73F16AE10C231A1EF93EA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 1401
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=)
2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=)
3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: LQaC4nFQChWHiMYsJOJE2bUpfIvkd5lYzSbAUyyGTUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:87:03:b7:3f:16:ae:10:c2:31:a1:ef:93:ea:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=431d1adc527d53af225f25a30e3e5767c1086220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:a2:d8:ab:ec:67:c7:3a:b9:7a:19:fb:04:
ca:d5:fe:2e:c8:d5:f3:28:e8:a5:62:24:2d:75:8e:
26:0c:a6:37:f6:80:b1:04:06:60:23:60:e6:37:de:
9d:49:67:f5:ad:fc:fe:02:d6:16:17:38:d6:ea:77:
14:23:5c:1d:7c:6b:cb:d6:99:c5:df:7b:72:91:3a:
72:eb:f4:4b:2b:a1:06:e5:cd:3c:e8:b6:e2:fb:10:
31:44:2b:c7:4c:e5:91:a5:b7:25:b9:6c:a3:26:b0:
d8:87:c0:b9:46:42:c3:61:d1:16:5b:c3:e7:c5:8e:
04:2a:be:ea:67:06:ee:60:1b:4a:3e:09:73:f5:dd:
b8:a5:d5:06:17:cc:53:5b:87:6c:37:1d:38:21:fb:
5b:d6:0a:79:4d:b6:47:e0:89:b3:1f:2f:62:59:e6:
8d:21:38:c4:e2:45:a8:42:30:6f:2b:66:25:de:c1:
71:11:85:fc:ae:08:dd:b7:8d:c0:bf:4a:da:06:b7:
8d:df:02:11:2c:73:0e:18:e2:82:74:08:f6:29:2a:
81:02:62:d8:ec:81:98:60:7a:5f:85:ae:e4:80:d4:
0e:21:d8:26:a7:14:3b:d6:77:2a:55:a2:dc:88:db:
65:15:dd:1f:88:c7:db:e6:73:13:aa:b3:d9:a8:6c:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1D:1A:DC:52:7D:53:AF:22:5F:25:A3:0E:3E:57:67:C1:08:62:20
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c6:3c:fc:85:01:2c:16:bc:7d:5f:9d:e6:6d:8f:27:c4:4d:
51:d9:c3:86:0c:56:89:9c:c9:4b:6a:59:01:30:8e:e3:14:0f:
da:33:78:33:30:ce:05:d5:87:bd:58:1f:d1:1c:8e:a8:fc:e9:
10:f5:39:7f:fc:a3:12:b6:df:89:11:fc:eb:9d:58:46:74:eb:
56:49:78:be:1e:18:68:ae:0c:99:b7:60:1e:a9:3f:8e:db:bc:
32:82:04:e2:ad:54:87:27:a2:62:94:4f:1a:a8:a9:0d:cb:69:
d7:3e:9d:81:3b:51:84:78:26:bb:06:df:c6:4f:4c:46:ad:ae:
f9:b6:15:98:7d:1f:98:4b:da:41:7a:b1:03:aa:68:7a:8b:6b:
a1:40:e4:9d:4b:ab:5f:58:35:ee:24:8a:39:b1:22:40:a8:48:
0a:64:dc:49:f7:99:57:82:5d:13:32:3b:7e:84:46:e4:b7:e8:
c7:7c:7b:01:86:9d:83:3c:b3:a2:8b:29:7c:5a:24:f7:1b:5e:
a9:16:37:d5:d5:c4:d7:06:eb:b9:c2:55:b3:2e:7a:cc:c0:d0:
8f:64:26:66:3d:1a:4f:62:27:11:e0:f3:db:1c:c0:19:4c:f7:
05:95:fb:8b:c0:03:ec:dd:bf:a8:dc:8c:a3:cf:6f:f7:28:4a:
6e:6d:cf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:43 2025 by rpki-client