Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File: u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier: U1fTDW5KtlVtOho5c3jCaNzmlTvuwyLW/coerh8wZvA=
Subject key identifier: 87:CF:05:AB:22:5B:AC:A2:F2:30:31:84:47:4D:D4:08:78:F6:4E:BA
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer: /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial: 0199FBEBEEC9B406888E4BA0C95FCC4577D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:47 +0000
Manifest this update: Sun 19 Oct 2025 10:02:47 +0000
Manifest next update: Mon 20 Oct 2025 10:02:47 +0000
Files and hashes: 1: SQLnF00Areuw5taMbfkFtdu1wjU.roa (hash: 5CPinLFNfDrIVGYwg0jIgmWM06cJ2LCZHAkJ/JRfIwc=)
2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: LSrJpNDnNjenU3qp6rMW/u0y3u5CMWrDcuxYzrhYUok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ee:c9:b4:06:88:8e:4b:a0:c9:5f:cc:45:77:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Validity
Not Before: Oct 19 10:02:47 2025 GMT
Not After : Oct 20 10:02:47 2025 GMT
Subject: CN=87cf05ab225baca2f2303184474dd40878f64eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:13:8e:24:d3:e9:e4:bf:75:bd:bd:78:99:
1c:d0:1c:9f:50:5a:bf:03:d1:be:32:b1:7d:2e:7e:
71:26:11:2a:88:d1:48:b6:f0:37:a2:6a:72:92:72:
dd:ba:a0:b0:0f:b7:ad:77:b0:6c:5b:08:32:e7:b9:
ff:81:96:a8:f1:0b:40:76:b2:7d:05:93:71:44:78:
93:ea:54:c2:83:48:a1:59:3e:50:2c:0d:6a:5a:28:
4a:18:be:a7:a2:27:97:59:9a:7f:31:53:69:5c:7f:
22:d2:ac:2d:69:c3:97:08:66:e9:ef:25:51:32:25:
f8:05:93:04:f6:f0:af:58:0a:d0:ad:03:f6:ca:3d:
8a:78:34:1d:4d:45:5f:bb:7e:50:7f:b3:ef:25:27:
cc:80:0d:6d:8e:cc:18:f5:8f:fd:12:08:61:31:72:
a3:96:eb:c8:04:52:be:f7:4e:06:8b:80:9d:ce:86:
1c:52:7b:34:f4:57:54:5f:c3:f4:84:13:e0:92:a3:
8c:41:de:09:31:e7:15:be:10:96:b9:85:1a:9a:9e:
d9:fd:16:1a:57:9b:6d:2a:ca:c1:aa:e3:77:1c:2d:
10:e5:28:f2:4b:ae:cd:b5:3f:40:95:41:8d:20:95:
e2:1d:0b:4a:80:e1:aa:48:07:d6:be:ae:c1:2e:ea:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CF:05:AB:22:5B:AC:A2:F2:30:31:84:47:4D:D4:08:78:F6:4E:BA
X509v3 Authority Key Identifier:
keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bc:20:b8:77:b3:67:f8:ef:6a:9e:bf:fc:2b:8c:00:a8:3e:
0b:e5:8a:9d:5f:d3:fa:67:f9:78:a8:c8:37:30:9c:2c:97:51:
ab:11:fa:f9:e0:a8:93:db:06:36:9b:07:6c:73:a4:bd:67:de:
9b:08:94:e7:c9:70:42:77:a3:5d:71:c3:00:fa:7e:d7:b7:d4:
a1:32:e5:c3:91:f1:9a:d3:1c:99:05:8a:46:04:47:3c:91:3e:
26:50:7b:f5:08:78:c9:83:4d:31:23:26:b5:22:55:e3:f4:85:
72:de:84:48:d8:d9:f1:9b:1c:80:8a:f1:d5:c8:69:1e:06:f7:
bb:72:37:80:ee:60:c0:a3:fb:ef:e0:41:f3:14:2c:23:9d:55:
f4:72:dc:79:ba:8b:e1:6f:f4:ab:a8:28:95:58:11:19:1c:dc:
db:00:42:0e:c0:89:ee:be:db:b4:07:69:ac:de:21:ed:49:e0:
88:30:db:2e:ea:21:3a:16:c4:93:3b:8f:1e:f8:87:9f:5e:4e:
23:89:2d:3c:53:ff:ba:cf:2b:ae:59:9e:81:19:80:c7:cf:47:
a7:e4:6c:97:67:e0:7a:8f:4f:c0:83:ae:f5:78:28:4c:12:71:
0d:79:66:8f:f3:29:2a:ab:b6:88:9c:c4:11:b7:1e:5f:46:ef:
3e:6a:6d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:49 2025 by rpki-client