Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: d7Ead3rJZ8V6Ilxl6PgCzqBIXU0xRvd/9TtuQxkC4xg=
Subject key identifier: FC:97:71:B1:70:58:4E:C4:D9:25:45:6A:CC:BD:7E:77:27:28:85:08
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 0199FEB4BF791A762D3A897DF203FDC5677D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 11BA
Signing time: Sun 19 Oct 2025 23:01:22 +0000
Manifest this update: Sun 19 Oct 2025 23:01:22 +0000
Manifest next update: Mon 20 Oct 2025 23:01:22 +0000
Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: yj2ChXtA8Gjfgm+cQC+bnZ38Znr94Bo5oNwr3Jbi+m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:bf:79:1a:76:2d:3a:89:7d:f2:03:fd:c5:67:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Oct 19 23:01:22 2025 GMT
Not After : Oct 20 23:01:22 2025 GMT
Subject: CN=fc9771b170584ec4d925456accbd7e7727288508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:60:9b:0b:82:24:24:ef:a6:a6:40:83:b1:
ed:48:49:96:f4:61:4f:92:0e:4f:85:69:d7:25:3f:
47:c8:03:30:c4:f5:39:f0:d3:85:47:1c:fa:24:f7:
03:eb:70:71:56:5a:9d:80:3e:3c:f6:70:64:bb:dc:
4f:ba:46:67:49:51:b0:ba:5c:76:40:10:a0:a4:d5:
f3:cc:e5:eb:9b:7b:a9:a5:37:4c:03:61:50:89:30:
6f:e6:56:a1:74:e4:b1:3f:03:e2:f7:2b:68:63:05:
12:03:cf:00:71:84:d0:78:63:f8:3f:5a:51:6b:0c:
c6:0e:6e:a2:a8:07:c7:b9:3e:ec:45:fd:5b:c9:88:
ea:62:81:96:4d:46:f0:d5:1e:9b:fb:ab:89:a8:d8:
26:9f:01:1e:63:ea:c9:02:37:95:a8:bf:23:e3:b6:
cb:1c:ad:3d:ac:30:59:59:db:33:99:55:62:87:e3:
9c:32:5b:d4:9a:b8:28:93:5b:96:06:f8:60:dd:03:
5c:56:7c:17:90:5b:b6:54:4f:50:21:ce:7a:0e:c8:
46:70:84:58:19:cc:52:6b:80:8e:a6:4c:9b:79:31:
d2:43:64:b0:ec:ff:ff:44:8a:b1:27:5d:d8:3b:4c:
20:85:f3:a3:8a:7b:67:19:bc:10:91:0b:22:05:50:
30:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:97:71:B1:70:58:4E:C4:D9:25:45:6A:CC:BD:7E:77:27:28:85:08
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ac:7e:52:1d:ef:4c:35:6f:37:c0:ef:ab:3d:90:82:53:67:
ea:5c:99:8d:37:4e:f3:bf:96:5c:91:60:50:0d:ed:36:6a:de:
53:18:5c:92:73:db:a5:a0:33:ff:90:00:4e:b8:a4:37:a2:27:
3d:6a:30:e7:c7:2b:d5:bc:d6:52:dd:15:42:2d:1f:f5:dc:c0:
9d:5f:4b:78:d9:fc:a8:22:24:cc:21:20:ce:8c:cc:45:70:51:
7c:00:ea:c5:ce:7b:95:19:57:c9:7f:ef:c7:43:78:dd:df:0e:
a6:b4:2a:d9:c3:f9:be:aa:30:58:13:c4:5d:8f:a5:60:a8:03:
e5:79:0c:2c:69:30:56:15:6b:eb:f9:92:5a:be:26:a1:9d:20:
80:84:8c:f6:f8:0c:55:37:be:29:5a:8d:ec:48:f9:84:b4:46:
d6:f2:02:95:06:2b:4b:99:16:dc:20:3c:8d:67:15:b0:f8:af:
6b:cf:5d:d9:b8:9c:41:02:12:57:63:1c:ad:4d:15:6d:06:17:
ae:db:d4:c5:4a:13:f2:78:7a:eb:98:d7:79:52:4e:ac:b8:9e:
3a:d0:a6:3f:35:7f:6c:b2:3c:df:f6:2b:52:0e:ab:1f:f0:7f:
1c:56:30:de:55:c5:b6:1f:47:a7:f4:8e:5b:ca:34:2c:1c:08:
3f:ee:2a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tL95GnYtOol98gP9xWd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmIzNjcxYzlmYzc0NmExY2E2MzQ0OTU0NjU1N2NhOWU5
YTdkNmQwHhcNMjUxMDE5MjMwMTIyWhcNMjUxMDIwMjMwMTIyWjAzMTEwLwYDVQQD
EyhmYzk3NzFiMTcwNTg0ZWM0ZDkyNTQ1NmFjY2JkN2U3NzI3Mjg4NTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFxgmwuCJCTvpqZAg7HtSEmW9GFP
kg5PhWnXJT9HyAMwxPU58NOFRxz6JPcD63BxVlqdgD489nBku9xPukZnSVGwulx2
QBCgpNXzzOXrm3uppTdMA2FQiTBv5lahdOSxPwPi9ytoYwUSA88AcYTQeGP4P1pR
awzGDm6iqAfHuT7sRf1byYjqYoGWTUbw1R6b+6uJqNgmnwEeY+rJAjeVqL8j47bL
HK09rDBZWdszmVVih+OcMlvUmrgok1uWBvhg3QNcVnwXkFu2VE9QIc56DshGcIRY
GcxSa4COpkybeTHSQ2Sw7P//RIqxJ13YO0wghfOjintnGbwQkQsiBVAwvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyXcbFwWE7E2SVFasy9fncnKIUIMB8GA1UdIwQY
MBaAFLv7NnHJ/HRqHKY0SVRlV8qemn1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzkt
OTVjNTA1MzFkNGQ4LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzktOTVjNTA1MzFkNGQ4
LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6x+Uh3v
TDVvN8Dvqz2QglNn6lyZjTdO87+WXJFgUA3tNmreUxhcknPbpaAz/5AATrikN6In
PWow58cr1bzWUt0VQi0f9dzAnV9LeNn8qCIkzCEgzozMRXBRfADqxc57lRlXyX/v
x0N43d8OprQq2cP5vqowWBPEXY+lYKgD5XkMLGkwVhVr6/mSWr4moZ0ggISM9vgM
VTe+KVqN7Ej5hLRG1vIClQYrS5kW3CA8jWcVsPiva89d2bicQQISV2McrU0VbQYX
rtvUxUoT8nh665jXeVJOrLieOtCmPzV/bLI83/YrUg6rH/B/HFYw3lXFth9Hp/SO
W8o0LBwIP+4q5A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:03 2025 by rpki-client