Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier: He/rYyEBdDIGlzxHjKB6M+4EQU81VFdxHPSX2fQqNF0=
Subject key identifier: F7:6E:4E:65:89:CC:76:B2:01:C1:A6:5B:50:F9:F1:99:1C:5D:0A:BE
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial: 0199FCFD938C545BA7246B9FB2E13CAF42D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number: 04BD
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=)
2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: V3G5RZGdsHk5DNSfDzubdO4BwhW8EOCfr2SxxsfGwB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:93:8c:54:5b:a7:24:6b:9f:b2:e1:3c:af:42:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=f76e4e6589cc76b201c1a65b50f9f1991c5d0abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:db:19:65:8f:3b:82:72:f2:23:06:94:6a:
ec:e2:38:79:c1:e4:19:a7:9b:5b:9d:a5:d1:a7:df:
e1:0f:f9:f1:ad:08:18:96:dd:c5:3e:d3:b5:ed:e1:
4e:ed:57:84:ad:76:9f:f8:88:68:dc:d5:6f:14:77:
fc:b3:d1:3f:b7:cc:59:b5:8b:69:00:6e:89:be:ad:
08:05:3e:99:c7:af:27:fd:c7:c1:03:33:fd:b3:27:
27:8c:85:94:77:cb:eb:c4:1a:27:57:8b:dc:a9:f0:
f8:21:06:d4:a4:c9:48:29:8d:2b:d0:a5:85:20:e8:
19:f5:ac:f2:0c:6b:43:bd:4e:d9:f1:ec:e1:ff:c9:
a4:e7:68:5b:02:bb:e0:c2:cd:b0:60:df:df:e7:2c:
55:92:bc:1d:d1:ae:74:a9:26:bf:31:c3:f8:b6:db:
9a:31:d7:b7:0e:59:b9:66:d4:38:a7:57:e0:6f:40:
b5:6d:85:94:08:e4:3d:57:3e:d6:fb:b9:f7:23:11:
d1:4c:78:61:a7:cb:10:b2:6f:68:40:9e:7b:cd:77:
de:64:6c:c7:1a:25:ba:bc:02:5d:26:12:7b:a1:e0:
49:36:6c:48:84:b4:90:35:ae:99:44:db:f6:24:f3:
98:25:c4:2d:10:8c:2b:ce:47:a2:d8:ed:e0:d3:2e:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6E:4E:65:89:CC:76:B2:01:C1:A6:5B:50:F9:F1:99:1C:5D:0A:BE
X509v3 Authority Key Identifier:
keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:73:f7:6b:bd:a9:9b:a7:ed:42:9d:70:50:ae:7c:97:ea:5c:
20:d6:f3:4c:09:92:b2:bf:e3:13:5d:e6:63:ea:c1:c5:1a:b7:
81:be:8e:71:ce:0d:f0:f2:97:37:2c:04:a7:c5:fe:8f:a6:49:
0c:2a:e5:38:81:df:b2:f9:73:55:bb:77:09:ca:29:85:ed:25:
e7:08:57:81:fe:d8:de:2a:a5:f3:af:97:42:9c:55:5b:98:80:
1b:3c:c6:dc:07:b4:c5:d1:f2:17:fc:6d:45:21:4c:c8:a8:41:
fe:6d:e8:b4:cc:fd:9b:fa:d1:fb:2e:e9:f6:87:72:b9:d2:6f:
44:2e:12:50:56:d8:d5:71:1a:96:c9:d2:99:ff:e3:03:77:f2:
db:da:f4:fd:42:18:a0:e8:fc:aa:0f:57:e4:72:c9:2b:74:5a:
99:27:b4:eb:c2:5b:cd:b9:0b:de:a8:9c:d9:4b:92:34:16:67:
ba:86:15:09:28:91:3a:01:63:4e:cf:61:72:74:7f:e2:37:27:
60:03:47:02:06:34:c6:cf:7e:d1:7c:5a:be:df:a7:b5:8d:39:
ad:f0:57:22:fc:59:39:49:54:07:8b:1f:82:67:aa:a7:3d:f6:
dc:d0:bb:2d:a1:a5:ca:e4:61:2b:1d:3f:d4:b6:10:bb:22:74:
e1:84:3f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:08 2025 by rpki-client