Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: c2LNJMm/wRut/+FWioQ0BjBAt+3vopcKGVSG1nu+wso=
Subject key identifier: 1D:C4:11:27:BD:20:29:DA:6D:2C:CD:5D:49:92:C1:43:A6:76:AE:4B
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 0199FB7C861E37D148AFDCA9585B6405859E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 1263
Signing time: Sun 19 Oct 2025 08:01:05 +0000
Manifest this update: Sun 19 Oct 2025 08:01:05 +0000
Manifest next update: Mon 20 Oct 2025 08:01:05 +0000
Files and hashes: 1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: GQJalzURX6msZVxj9EgNQbbDTYcpDnj487oKcR9ZO48=)
3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:86:1e:37:d1:48:af:dc:a9:58:5b:64:05:85:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Oct 19 08:01:05 2025 GMT
Not After : Oct 20 08:01:05 2025 GMT
Subject: CN=1dc41127bd2029da6d2ccd5d4992c143a676ae4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:68:85:05:ae:b4:87:7b:40:63:a3:f1:24:
05:3f:41:53:c1:77:63:e5:a0:10:b4:f3:08:8c:48:
1c:84:b9:0d:17:da:b1:70:2a:6c:a0:9f:b7:44:39:
5d:a8:24:8f:b4:2c:dd:f8:b6:ef:49:ec:25:24:b6:
2e:b1:b9:ea:62:78:ed:88:c9:0f:72:3e:a7:17:0b:
67:59:a8:83:a5:e5:0c:dd:f2:9d:5e:11:52:53:df:
97:64:7f:24:65:f7:3a:18:59:d0:d4:6e:08:bb:76:
c2:21:d7:7e:c8:b8:98:c1:6b:01:1e:75:49:42:9b:
5b:bc:1e:f9:38:40:76:a4:2f:41:72:ed:0e:10:72:
ca:21:c1:79:41:7b:87:38:5b:f1:42:a4:58:e7:6e:
ad:c8:fe:07:5e:ce:b1:fc:c2:62:ac:a0:18:28:a9:
6c:26:48:92:77:8b:b6:87:0b:ce:4b:dc:d0:a7:19:
6d:91:3f:47:e6:ee:4a:21:77:27:60:a2:6d:3b:18:
fe:38:2d:be:6b:04:72:bd:79:11:82:8d:c2:14:9c:
fc:43:cf:85:cb:57:cf:46:df:a2:54:65:ac:74:07:
d2:d2:71:b7:70:cf:67:76:7d:38:2b:a8:68:7f:99:
28:c1:db:17:88:1d:3d:d2:3d:e0:0d:66:5b:bc:45:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C4:11:27:BD:20:29:DA:6D:2C:CD:5D:49:92:C1:43:A6:76:AE:4B
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:91:49:03:d1:45:f1:b7:10:fc:cc:3d:45:85:6b:ca:94:41:
84:3f:58:81:a4:ad:ad:de:d1:41:7c:86:24:bd:a6:c3:3b:3f:
a0:e6:b0:35:5f:02:f4:66:75:71:2a:dd:57:6b:d3:2b:58:2d:
b9:9c:50:e8:3f:52:3d:89:19:f6:81:05:f9:4e:a1:ef:26:39:
94:8d:4e:fb:59:a5:3b:3c:ea:1c:83:9d:5d:89:a2:93:f3:42:
42:b9:ad:6e:04:20:dd:29:cd:4c:1e:35:b4:4b:77:0b:e8:d6:
59:2b:00:db:55:2b:c5:ba:6d:27:2a:20:38:44:72:ed:31:94:
e0:c3:38:b4:e5:51:e5:60:6d:1a:f7:ad:29:33:fb:78:ad:40:
ca:3f:44:7f:f1:1c:2f:d2:7e:17:06:db:32:e3:c3:a9:a6:66:
88:47:f9:81:cd:01:8c:f0:8e:ff:e1:b8:ad:31:ce:96:d6:d6:
c2:18:ff:53:4a:c0:83:6b:87:b6:e5:44:b6:ce:6f:27:60:a6:
48:64:39:92:3d:02:b9:73:6f:a1:00:85:a8:1b:f2:25:c6:5a:
88:3a:f2:0a:fb:d6:ce:a0:84:cf:f4:33:fe:98:32:52:07:0e:
04:b0:21:07:ec:f0:ce:50:a6:b1:83:3f:00:83:85:ed:f2:e2:
47:d5:1a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:32 2025 by rpki-client