Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
File: u4N41EQt9p9H3A6lgqErKrUUvg8.mft (raw, json)
Hash identifier: fQ/YIrTbN6rVKClBlRBlJS0I4Vl5XfYhg1Or3HiiH2w=
Subject key identifier: D0:C1:E7:0B:34:C2:FF:89:8C:24:C0:84:5B:39:DC:3A:4D:0A:2A:21
Authority key identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
Certificate issuer: /CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Certificate serial: 0199FC8F5FE2AF492B514FF0537548FB7A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
Manifest number: 01E0
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: u4N41EQt9p9H3A6lgqErKrUUvg8.crl (hash: B4A/JmxcavpFTLvIayvlKM73+cTuAXLdfuuq5ppiNyI=)
2: wtPW8rjnB4NENZEIpc5mDSX_MnA.roa (hash: 2y63dYWO6V1/po4xW8CvZ0E3YT0MzqdNzzTlTFQ0Gb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5f:e2:af:49:2b:51:4f:f0:53:75:48:fb:7a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=d0c1e70b34c2ff898c24c0845b39dc3a4d0a2a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:ac:fe:8c:37:8c:44:98:89:f9:9c:1b:2c:
44:22:98:1c:74:57:12:82:b7:18:ac:f1:d4:bd:7f:
aa:ef:9c:8f:80:a0:d0:33:8f:9d:c6:d7:33:d2:5a:
bc:3e:2f:60:ce:1a:db:5c:c4:eb:ba:94:0a:6d:b0:
1d:ae:f8:fe:ff:11:9f:e9:42:c5:23:69:3b:91:40:
b8:8f:42:6c:57:b4:60:f1:dd:95:8f:1c:05:a9:0c:
ed:3b:a8:d5:52:a7:66:20:5d:9e:82:c9:25:a5:54:
2a:62:31:a3:11:e1:fe:8c:9a:b1:05:79:46:f3:eb:
31:4e:94:50:a7:ed:8e:00:65:16:9f:4e:8f:41:85:
1d:86:7a:31:8b:5a:7b:7b:aa:5d:d8:fe:f2:8c:08:
2c:54:6a:f8:fc:77:f2:d9:14:af:64:9f:95:25:68:
3e:dc:65:73:4a:3e:81:91:99:5e:24:bf:21:29:c9:
65:0c:df:2d:e6:35:75:a9:dd:52:b7:3f:1b:7c:fb:
cd:e4:47:70:2d:82:ee:8a:a0:36:86:2f:2d:c9:a0:
54:78:c8:4c:37:84:44:71:58:d5:81:c5:2c:08:bf:
49:67:12:b9:fd:0f:93:5b:c1:df:33:44:b9:da:79:
34:0e:9e:7d:3c:29:5f:c4:dc:40:cd:27:1d:12:5c:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C1:E7:0B:34:C2:FF:89:8C:24:C0:84:5B:39:DC:3A:4D:0A:2A:21
X509v3 Authority Key Identifier:
keyid:BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3f:34:3b:fb:c4:95:a5:99:46:d9:a2:b6:93:3a:f4:50:7d:
eb:2b:94:08:f4:33:be:9d:eb:68:9a:ea:85:4d:3c:59:52:94:
2c:2e:13:99:75:9d:98:d8:64:fc:53:22:3b:63:c2:3d:9f:f1:
c9:c3:c7:5c:27:60:43:d1:29:8e:66:f2:f1:6b:56:44:9b:65:
2b:ed:75:99:26:22:64:9f:ae:f9:3a:f0:88:70:88:f8:0b:08:
1e:19:4e:11:01:d6:38:2c:98:ab:c1:0e:09:28:02:99:e2:37:
e8:5c:dc:5c:58:1c:a9:64:61:15:42:3c:e4:bc:c0:9d:52:ca:
52:c0:0d:0f:32:04:10:ce:c3:31:ab:b7:86:59:bc:ce:62:65:
af:81:2c:81:86:a5:44:17:bb:f1:43:f3:44:cd:aa:a8:af:7f:
15:5d:12:03:1b:4a:1e:f5:9a:d2:3b:57:50:26:be:4d:e7:43:
40:1a:f3:2b:e5:c4:44:3b:8b:cf:5a:9a:e5:79:41:b0:2f:18:
1b:21:ed:22:7e:f4:eb:d0:20:b0:fc:02:23:f3:02:e4:e8:49:
6c:35:d2:ea:d2:db:c3:86:f7:79:01:92:28:60:12:f1:6d:35:
92:34:9f:0c:5f:58:41:c5:0e:cd:4d:53:e5:1f:59:68:79:f2:
ac:51:c4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:29 2025 by rpki-client