Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: ZA6E24O/MGN/AvC6VBLaGa4hS7n9WouaputanoQ2bjA=
Subject key identifier: 08:C4:8D:C9:DB:7B:98:57:89:78:BD:07:DC:C4:9E:2C:DE:2F:2A:4A
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 0199FB7C760CC20B2FD2707868E592152AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 15BC
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: KOY956O0ZjGYECFFFDbPr__HT1k.roa (hash: PSHRUyvb1HDzLSIQ11VKvNrKXl5fv+dVEb1Xq/ei9D8=)
2: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (hash: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: U5bmo83SLKoaNWLno0IEqbATb3mHxl7Xu5CEz/AxJmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:76:0c:c2:0b:2f:d2:70:78:68:e5:92:15:2a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=08c48dc9db7b98578978bd07dcc49e2cde2f2a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:87:c3:0a:ae:ec:02:f0:c3:cc:5c:e5:75:
6f:26:0a:51:21:63:ba:81:f0:e6:64:73:df:f4:d8:
5c:ca:f1:c2:92:a8:d8:44:61:88:9b:17:ed:de:8c:
01:8c:d1:01:4b:d6:fe:d7:81:dc:84:95:47:37:3a:
e0:c5:5a:8f:95:6c:7d:77:9d:b4:9a:6b:22:be:52:
56:1f:61:95:12:50:bf:b9:3d:77:2a:80:63:6a:c2:
21:c7:2d:74:2c:0a:65:11:78:3c:b5:83:a0:f3:9b:
15:6d:61:df:75:13:79:31:9c:d4:b1:a0:09:30:44:
5f:c8:43:5b:6f:73:97:b7:b4:6b:59:e1:24:ba:6a:
34:1d:8f:f6:bb:c9:c6:4e:f9:60:75:06:08:34:7f:
1e:70:bf:c4:bf:16:31:f3:c4:68:21:d9:84:28:b3:
a6:60:3d:89:9b:5f:b7:5c:3c:c5:96:de:23:e9:a4:
d2:2e:64:00:c6:b3:5e:55:52:3c:8d:88:3b:7a:35:
eb:e0:f5:5d:f2:e2:99:86:c8:c2:86:9a:0b:f7:7b:
0d:3d:07:e2:0a:a9:c1:56:e8:5f:02:93:2e:d3:e6:
2e:95:f1:88:d4:0b:cf:57:68:dd:e5:d2:e2:00:47:
aa:91:59:fe:b8:16:b3:6c:1f:a1:a2:7c:54:30:5a:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C4:8D:C9:DB:7B:98:57:89:78:BD:07:DC:C4:9E:2C:DE:2F:2A:4A
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a9:82:52:71:92:4e:6e:bb:aa:1a:8c:d7:99:24:29:d0:11:
41:2f:93:72:35:58:fc:10:b1:47:38:78:9c:18:8c:ab:8f:01:
67:f9:9e:58:3c:02:1e:19:01:1f:ee:33:b8:1a:0b:6a:53:ad:
28:bd:37:4c:ca:69:32:34:a6:67:56:ef:2e:66:a9:aa:ac:81:
8d:16:99:3c:23:7d:e3:9c:67:ed:e1:11:73:bf:a5:0f:81:7f:
3a:b3:9c:f2:c8:cb:82:a4:1d:11:2c:63:4e:43:e7:52:f3:77:
dc:6d:2a:5d:d0:ec:0d:2b:b0:c7:75:da:33:ec:f5:4b:af:6d:
9a:04:01:2d:bd:04:07:0b:62:f2:47:1e:f1:0f:f9:74:17:e1:
26:ce:f5:14:fc:9d:1a:9a:9f:c4:d7:6d:9d:db:ff:be:e0:9f:
18:68:4f:e1:52:f3:75:1c:55:b8:c8:bc:ee:b5:9a:4e:a6:8e:
4d:94:77:e8:b4:67:00:9b:b8:98:b2:96:6e:f7:31:f0:64:da:
d8:98:3f:28:b8:05:c7:52:31:dd:ce:39:81:6b:d2:2a:b1:15:
39:18:7d:38:37:bc:61:7d:ae:0a:3b:0d:81:1e:2c:19:ba:9a:
c0:93:1c:ae:ed:4d:ba:92:e7:e2:a0:c6:99:20:94:53:d9:f2:
b4:0a:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:13 2025 by rpki-client