Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier: u7v+y3LTAumIal5Llra16dYRbUTPF1iEA/xcQfRo4HE=
Subject key identifier: C9:C1:80:50:B9:55:9D:7F:0B:2B:E1:EB:BB:48:3F:B8:C8:2D:5D:D4
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 0199FD6B0CCFA24DD2DC4920EB0BACF6A493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:15 +0000
Manifest this update: Sun 19 Oct 2025 17:01:15 +0000
Manifest next update: Mon 20 Oct 2025 17:01:15 +0000
Files and hashes: 1: 83yHnqR55YpNJ6sDNSfeUwQPJSU.roa (hash: e+9U+VRAv+pY6TcOM+TtKl2lfx0rhjB5FDO+9Jovf1k=)
2: 9VNSF5UtFgYDcn-DHdVIflEkK2g.roa (hash: Bd8gptXnsyCaZSIm/0DdWBDRk8HDyH1Zijph4Kg4wIw=)
3: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: Y9ExFmDYC8mT3GK+KTBf70om3j7QXn1gcrAhL0rJJu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:0c:cf:a2:4d:d2:dc:49:20:eb:0b:ac:f6:a4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: Oct 19 17:01:15 2025 GMT
Not After : Oct 20 17:01:15 2025 GMT
Subject: CN=c9c18050b9559d7f0b2be1ebbb483fb8c82d5dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:3a:53:08:c2:1d:d1:6b:8d:8e:13:a8:0b:
12:ae:cd:d5:7d:da:ff:65:11:08:a7:86:49:6b:b6:
eb:1e:44:fc:b6:cf:b8:52:35:0c:d5:aa:d9:fb:97:
18:ee:e5:46:db:87:2e:69:28:6a:2a:94:68:d7:dc:
71:5e:c3:a1:72:eb:f6:6c:d3:2d:3b:a7:7f:0d:9f:
39:38:32:36:b9:4e:50:d0:7b:b3:fc:9f:a1:28:db:
53:f0:cb:61:03:65:b8:47:e5:7c:30:26:f3:57:eb:
d3:7a:79:16:2a:6d:13:39:05:dc:82:95:b0:0f:af:
4a:b5:50:6e:5b:1b:5b:a2:c4:1b:5e:f3:04:6b:e3:
f2:73:21:dc:52:d1:73:f4:1f:27:a2:24:b7:a7:8b:
6f:ff:01:1b:f9:36:e6:16:3c:4f:3b:7b:2f:3e:d5:
03:17:d0:cb:7b:00:23:d0:81:5a:5b:91:74:09:af:
6c:6b:86:05:e6:6c:e8:5c:b0:2d:d3:52:9a:a0:6d:
ec:4c:ea:ec:76:65:e9:a9:dd:d3:3e:66:36:fd:26:
a9:43:64:b3:a6:7d:10:5d:f2:e6:bd:21:f1:80:5f:
ca:39:95:c3:15:83:ec:ff:98:4b:4f:a1:91:af:2a:
c9:da:ca:24:9c:1f:62:ca:71:b6:6b:38:8b:0e:be:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C1:80:50:B9:55:9D:7F:0B:2B:E1:EB:BB:48:3F:B8:C8:2D:5D:D4
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:87:be:7c:f3:cf:6e:83:d4:f7:a0:be:aa:de:c2:fb:66:3c:
84:9a:de:e5:6a:3a:f9:ff:66:d2:0c:21:14:46:c0:98:2e:ce:
b7:7b:82:d7:58:de:77:4b:cd:02:ea:ab:c7:59:76:f8:88:63:
3b:e4:ef:94:42:b5:11:d8:d8:0a:41:fb:26:9e:eb:19:56:a1:
c8:8b:fa:42:eb:c4:3d:e3:a5:db:5f:4c:ce:fa:bb:78:43:28:
a2:c0:a2:2c:e5:64:5b:3b:e2:7c:fb:8a:1b:0b:de:f7:ce:c7:
1e:c5:ac:97:58:ba:d1:ae:9f:f9:d9:aa:d9:74:00:63:e6:17:
95:27:0a:79:89:0e:67:93:f4:fe:f5:5a:ac:93:5d:b6:85:c5:
ea:6e:f0:d9:f4:05:df:78:37:60:26:b6:7c:71:e8:26:ee:5e:
97:4b:6c:3e:29:e2:3e:73:d1:64:b8:15:e9:a0:96:f3:dd:7e:
ce:fe:de:b7:7c:be:5e:03:94:8f:52:89:c7:28:5d:7b:60:d5:
02:34:3d:e0:22:ae:51:b8:09:cd:e3:f1:7d:b6:70:9a:95:4e:
e3:ca:f9:d8:3a:f4:7b:0f:39:be:39:8a:be:47:c6:b2:93:51:
d0:50:55:12:59:ba:4e:6c:b8:61:1b:4a:29:80:21:d7:1f:27:
e3:1a:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:25 2025 by rpki-client