Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json)
Hash identifier: XXbMIVSh/9NaNqd6O94P0uO82iSQ5F3U1nefcDZ3O9A=
Subject key identifier: C0:FC:28:3B:DE:93:89:0A:59:DB:40:2E:78:7B:0B:2E:57:F1:1B:20
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial: 0199FDD8AF12C9D519A57B9EBC4996F02627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 19:01:00 +0000
Manifest this update: Sun 19 Oct 2025 19:01:00 +0000
Manifest next update: Mon 20 Oct 2025 19:01:00 +0000
Files and hashes: 1: t4qANnEhvVWnrRLkZS7CKoTPpCQ.roa (hash: dm6ZxXeDx09W/sn7TAuJSwJg3JzyL+0jwWDxaTnORrU=)
2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: 79lZNpH4VO7IbcgyHj7J5cqXGystL0kGE0WV09p9HX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:af:12:c9:d5:19:a5:7b:9e:bc:49:96:f0:26:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Validity
Not Before: Oct 19 19:01:00 2025 GMT
Not After : Oct 20 19:01:00 2025 GMT
Subject: CN=c0fc283bde93890a59db402e787b0b2e57f11b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:4b:c5:b5:2b:3c:30:d0:00:b6:fb:e7:2c:
6c:a8:40:70:fc:2b:55:cb:b3:9c:26:dd:c7:63:38:
69:ce:03:d2:cf:a0:e5:50:a1:ac:03:69:23:7d:1a:
f1:29:3b:6f:07:ac:88:dc:65:ea:5e:8a:67:56:08:
94:f3:cd:d7:9d:7e:1f:3e:aa:fb:d2:45:8b:5b:bb:
d0:ab:71:b2:76:1f:d4:75:57:7b:90:4f:c7:b0:8e:
d1:6c:5b:5d:e6:1d:98:ac:77:0b:c9:cf:dc:3a:6f:
60:c6:2d:0c:1b:c0:01:1b:83:f2:1e:77:1b:f7:13:
08:8f:cb:4f:a1:8d:4e:42:89:fa:c7:6b:bc:f0:99:
c8:f4:2c:36:e2:43:d7:10:5d:61:3e:f8:6d:2b:19:
27:29:ea:da:aa:69:1d:81:b9:d6:6c:3e:2e:bd:a4:
21:c5:f9:dd:9e:c0:5b:ca:56:3a:46:29:ae:89:68:
e1:19:a9:8a:29:e8:dc:ed:83:80:8e:29:a3:8a:ed:
48:c2:e2:13:7b:75:e9:14:ca:20:0f:36:f7:a5:38:
1f:4d:1a:49:62:92:42:96:62:8a:94:53:cf:b2:0a:
a1:9a:2e:3e:54:37:a3:c6:f5:38:90:90:9e:88:52:
37:b7:9d:04:b6:bc:5c:27:f4:45:69:15:43:59:89:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FC:28:3B:DE:93:89:0A:59:DB:40:2E:78:7B:0B:2E:57:F1:1B:20
X509v3 Authority Key Identifier:
keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9c:ab:fe:49:00:ff:28:e1:07:1e:ab:e6:86:95:96:50:c1:
56:d9:97:48:01:49:40:7f:13:24:87:57:fd:46:77:38:ac:4b:
3f:6a:dc:23:ea:f7:42:c0:5b:0a:d6:51:34:b8:d8:01:ac:e2:
9d:3c:ec:8b:18:47:c7:b0:a6:87:bb:bc:bc:a1:84:bb:f8:42:
4f:4e:b0:ae:d5:a9:33:43:57:a4:7e:58:07:e3:93:bc:9b:7d:
25:39:1e:39:bf:ce:c2:ba:41:5f:05:6b:5f:94:c7:9d:56:59:
58:95:f9:44:54:2b:d7:c3:ca:76:06:95:e7:dc:5e:ec:36:74:
27:8e:99:85:c7:65:8c:68:da:0d:34:01:fe:f0:da:4a:b2:99:
2f:f6:bc:5e:39:af:17:74:bc:7c:22:65:27:ad:03:13:08:c6:
c3:5d:38:55:5c:36:b0:b1:f0:8d:72:d7:75:c1:0e:f8:15:f7:
7e:51:18:d7:c7:87:62:ef:e8:b9:b6:50:c8:23:a0:1f:04:87:
35:12:09:19:0f:47:d6:e4:63:9f:a7:a2:be:10:12:e0:18:63:
d2:22:e1:da:a8:77:fc:e9:f1:cb:e1:e0:fd:2f:57:af:60:8b:
0c:9c:29:82:6f:3e:44:16:a5:a0:54:7a:c8:db:0b:04:18:e5:
e6:e8:40:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:18 2025 by rpki-client