Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
File: u3zLGm47yrYxnTF_YsdL8eH0FHM.mft (raw, json)
Hash identifier: 7T67lFvdngMA03+KdQWck/0n82+YKiGEVg2QCHmHFHc=
Subject key identifier: 97:8C:23:04:9B:75:62:ED:F9:3B:B6:B8:46:12:7C:C6:C9:5D:08:15
Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Certificate serial: 0199FE472AF1B9F7B3FE8EF4B5D2C9E90F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
Manifest number: 06B1
Signing time: Sun 19 Oct 2025 21:01:40 +0000
Manifest this update: Sun 19 Oct 2025 21:01:40 +0000
Manifest next update: Mon 20 Oct 2025 21:01:40 +0000
Files and hashes: 1: WziYZQTgG6uYWNEdvqwQxarVou4.roa (hash: K1TtQwXEcoMLvYVaawZdU+KIeSsRtPv5nA+Jxlzh0sU=)
2: u3zLGm47yrYxnTF_YsdL8eH0FHM.crl (hash: GRFS9iiRW4Ddiv6m1rIKL5i0xbEufNvuGonoGyzktGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:2a:f1:b9:f7:b3:fe:8e:f4:b5:d2:c9:e9:0f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Validity
Not Before: Oct 19 21:01:40 2025 GMT
Not After : Oct 20 21:01:40 2025 GMT
Subject: CN=978c23049b7562edf93bb6b846127cc6c95d0815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:7e:1c:4e:b2:dc:c9:27:fe:56:1f:e6:ea:
74:a3:90:0d:ff:e9:4f:eb:4d:04:bd:c5:5e:33:65:
7b:ab:bc:3d:ea:18:56:f8:18:d1:0e:9b:99:02:7c:
e1:ad:d1:cc:91:c7:61:ff:55:e4:53:11:80:d9:65:
1d:9b:cf:95:51:75:f4:9c:c3:7f:36:3b:48:35:53:
2c:34:d9:e8:b5:5a:a1:54:01:9a:11:a8:5d:9f:8e:
a1:ee:58:a8:ef:eb:1f:b5:84:d4:9b:f9:17:b5:55:
e2:6d:b4:1d:53:af:a4:ce:0f:55:e5:bf:4c:b2:ec:
50:b6:5c:9c:c1:38:56:25:32:ed:db:a6:c3:4b:6e:
23:4b:b8:92:8c:ad:67:fd:14:7b:d2:6f:51:37:5f:
b3:1e:dd:0d:b9:0c:6e:8d:03:58:a9:54:40:41:be:
a7:d6:2c:86:c5:d9:cf:dd:0e:66:0c:b7:88:24:03:
3e:92:04:83:18:4d:11:f7:48:94:b4:d7:8f:74:56:
9a:83:91:f9:d8:03:eb:aa:97:c0:9d:33:e9:57:46:
f9:82:36:c8:5d:ad:d2:c6:83:01:0e:34:71:ae:5f:
e2:74:a4:ee:25:fa:fc:b3:f9:29:fb:8f:6e:1d:40:
80:a0:f0:a7:7a:e9:1f:bd:f0:a0:a6:80:d4:9d:ba:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:23:04:9B:75:62:ED:F9:3B:B6:B8:46:12:7C:C6:C9:5D:08:15
X509v3 Authority Key Identifier:
keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0d:c7:47:d3:f4:a1:3e:f4:87:bd:27:54:7c:2b:7d:e3:fe:
44:e7:c2:76:25:cf:0e:a8:e3:ce:80:32:9d:6b:53:44:f9:f5:
ce:21:db:7d:c8:75:05:f4:d1:b9:18:db:bb:ed:ac:7e:26:d3:
47:8a:43:f8:fd:39:95:29:c6:c3:9c:e1:d5:ac:32:02:53:7c:
ab:39:29:cf:93:3f:d2:02:f8:bf:10:80:7a:c2:76:e7:c1:b9:
a8:e4:84:21:b3:ae:fe:ef:00:34:25:2d:87:4e:8a:bd:d5:77:
99:a9:7a:e2:b9:47:af:e8:ac:6a:d9:06:ff:71:c4:cf:4d:ca:
8b:2d:dd:9c:42:e1:15:e4:39:58:ac:27:2a:43:98:7b:c5:9d:
d6:46:e1:26:aa:df:ab:f5:08:55:a9:7c:96:cc:21:20:04:95:
01:f7:a7:5a:6c:91:c3:ef:3f:9e:95:44:43:32:5b:58:89:68:
ae:51:cf:fd:32:40:00:ad:7b:ba:78:0a:2f:df:43:49:1c:86:
0d:4f:2d:57:06:51:85:b6:5f:98:d7:20:7d:c0:83:f2:51:e6:
ea:b2:3a:aa:cc:b6:7f:ef:39:5f:49:f4:8d:f6:34:61:d8:ad:
ef:b8:46:0c:00:4c:e2:cd:4a:4b:ad:65:d3:d0:76:c6:81:e3:
ff:c6:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:19 2025 by rpki-client