Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: xgvfUKVfMz+THr45FWnKuH0aNc86AGd7imthCaD/YFE=
Subject key identifier: 66:72:8C:84:C0:A0:E3:C8:3C:75:8E:16:F0:DB:19:FA:28:B7:AB:39
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 0199FD6B6DE020FA26A0A8C3029123FCCD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 13BF
Signing time: Sun 19 Oct 2025 17:01:40 +0000
Manifest this update: Sun 19 Oct 2025 17:01:40 +0000
Manifest next update: Mon 20 Oct 2025 17:01:40 +0000
Files and hashes: 1: JsF7FSwQaPNv5Ht3PNC4VICZzd4.roa (hash: fSvD3kvN3V7LC//WVhYwoHgh3jtQgyM95Ezj/Ar5cRU=)
2: mt-PyfiXYcQcKgR1e8Hsx5c4PoM.roa (hash: LeF0Pn1F55UIMk8YIasYk9VsWh941JF4CLigZGdvfv8=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: Hi8NEfrX2XembtWDYjtLo/c/UWH+iKjX4G3+5Zjuz9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:6d:e0:20:fa:26:a0:a8:c3:02:91:23:fc:cd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Oct 19 17:01:40 2025 GMT
Not After : Oct 20 17:01:40 2025 GMT
Subject: CN=66728c84c0a0e3c83c758e16f0db19fa28b7ab39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:fb:16:8c:36:cd:f3:b9:b6:58:82:48:d5:
27:bb:e0:df:b1:95:ae:a6:66:d7:d8:ed:22:ba:24:
cd:c2:f3:a5:52:78:a2:18:4e:49:a8:17:e4:d8:a8:
e1:c1:99:c9:df:d9:1a:9f:d7:d0:c7:ed:21:6c:c0:
93:df:d1:f3:0c:21:12:6a:15:7f:86:bd:19:e8:91:
43:09:60:f2:40:64:85:3b:aa:8b:cc:c9:bd:8d:cc:
53:6c:df:ec:7b:b9:95:0f:b9:9e:5a:b0:f7:01:1f:
e2:6e:8c:8c:6e:86:e9:a3:02:91:83:02:be:f3:57:
ac:d4:14:14:16:96:00:d2:38:ab:36:a4:0a:25:b8:
fb:6e:ec:f0:cc:b4:b9:e1:9c:70:0f:88:4d:02:e3:
61:b3:93:73:29:7a:0b:c3:e1:60:a4:08:e7:99:4b:
57:5f:45:19:82:62:03:8f:cc:72:39:02:eb:3f:50:
98:e3:a0:51:1a:3a:87:40:46:9d:ff:99:f0:f4:23:
cc:a4:6e:1b:b3:85:a9:cc:89:84:7b:1f:1f:27:fa:
28:30:91:e3:ef:57:d9:32:77:63:14:7a:f7:b4:17:
c5:6d:72:65:1c:ae:3e:7d:12:98:0e:78:36:06:1d:
66:fd:0e:62:7d:3b:2f:61:a7:f1:f9:4d:2c:ea:49:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:72:8C:84:C0:A0:E3:C8:3C:75:8E:16:F0:DB:19:FA:28:B7:AB:39
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f3:dc:5b:25:80:2e:ae:72:32:31:d8:f8:c3:81:9f:da:93:
49:a3:c7:c3:80:d2:e1:99:9c:df:31:dc:a1:b5:76:31:04:6a:
63:5e:3a:16:4a:11:d2:ab:dc:32:97:9e:07:8a:47:fd:a3:c6:
3a:be:5e:bc:38:51:73:30:69:32:9c:97:ff:c9:95:a2:2e:91:
07:94:c0:3b:28:0e:f8:b5:91:2a:27:7f:c9:2e:16:ed:fd:6c:
73:dd:d2:c7:57:89:60:70:e2:19:80:1c:22:e1:e1:b5:42:84:
35:02:d9:8e:01:66:2a:9c:63:b2:a2:8a:74:4f:e4:86:aa:45:
f9:34:35:5c:46:4b:3a:b1:3a:97:c6:f8:e3:b6:cf:8f:25:8e:
b9:d5:53:4b:68:3c:c2:c4:d2:5d:7b:98:ca:c7:76:ba:3c:d3:
be:10:e8:b2:b9:81:fc:1f:b3:6d:1c:c4:fc:6c:73:2c:8f:14:
de:8a:fd:4c:d9:e9:91:24:70:b7:bb:eb:4f:33:11:46:91:8e:
bf:81:e4:7a:a7:ad:63:99:a7:8e:ed:e3:a0:aa:62:ef:f4:c0:
ce:8c:97:95:8b:0c:b9:b1:78:6b:fa:de:50:63:87:79:95:38:
a6:a0:12:51:7d:63:00:e9:92:c9:18:00:91:d5:dd:6f:55:e0:
26:9c:df:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:35 2025 by rpki-client