Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
File: u0CY4P3tthLyOdpSSgS14N6kxT8.mft (raw, json)
Hash identifier: HqBTVBOUeh4NevKYamwd0G8DTfQGTbIpIukPcqMYHN8=
Subject key identifier: B9:57:55:2E:CB:00:67:12:BE:50:12:55:36:54:FA:C5:68:59:40:89
Authority key identifier: BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
Certificate issuer: /CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Certificate serial: 0199FCC6AAFE682BAC0F4059BBB4DA66013F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
Manifest number: 11D3
Signing time: Sun 19 Oct 2025 14:01:42 +0000
Manifest this update: Sun 19 Oct 2025 14:01:42 +0000
Manifest next update: Mon 20 Oct 2025 14:01:42 +0000
Files and hashes: 1: pDFtrRqSytqofU52Bi4GLIxTxPM.roa (hash: FhQVFWsHZFXcD5DtHy8k60bsokhKGFTiQLeglKl8pII=)
2: u0CY4P3tthLyOdpSSgS14N6kxT8.crl (hash: tUaxU81LtMjtzgSdh+U8oEmfxKhtltebZvZHf2myVz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:aa:fe:68:2b:ac:0f:40:59:bb:b4:da:66:01:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Validity
Not Before: Oct 19 14:01:42 2025 GMT
Not After : Oct 20 14:01:42 2025 GMT
Subject: CN=b957552ecb006712be5012553654fac568594089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:20:87:ea:ed:7f:12:d7:0a:de:53:c8:ca:
3d:63:d4:e6:26:ff:7d:90:72:9b:b9:bc:24:0b:5c:
f4:95:a4:8d:92:34:b6:da:e3:93:f4:23:b5:86:26:
bb:d1:4b:88:0a:bc:71:95:98:2a:32:4f:21:7a:8a:
cb:e1:97:23:ef:9f:76:84:81:5f:13:35:85:14:b2:
ed:d4:1b:7d:cf:55:7b:fc:e2:bd:11:55:a3:41:e0:
2e:a0:8c:35:79:20:17:eb:fd:fa:f1:c8:40:da:79:
24:84:f3:7b:a9:e8:01:cb:6f:1c:7b:5e:77:1c:02:
d3:b3:66:42:6c:03:79:b1:34:c2:5f:2e:e3:d7:93:
87:90:8f:42:39:95:c3:db:48:fc:3e:7a:f7:99:b6:
a8:f9:b3:ff:13:24:62:29:a4:90:28:e2:f6:45:42:
a1:b4:5b:8d:2d:dd:86:a4:b8:db:14:e6:90:e9:1d:
5b:f8:6c:e0:34:e5:6d:59:98:eb:dd:a6:b2:dd:84:
c6:f7:3d:f7:40:f0:68:76:8e:96:30:8f:a7:d0:1b:
32:1e:1e:d4:85:cf:23:e3:2d:76:d9:fa:a8:21:1e:
d0:e0:9d:34:4d:70:54:c5:c2:68:36:8a:f4:31:8e:
28:dc:c3:44:f8:f3:ee:be:d1:ef:50:8f:1b:a2:a6:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:57:55:2E:CB:00:67:12:BE:50:12:55:36:54:FA:C5:68:59:40:89
X509v3 Authority Key Identifier:
keyid:BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cb:8b:49:ad:45:ad:ba:6c:3e:c4:47:b9:0e:ee:04:b0:47:
4f:57:2a:c8:d3:35:40:cc:a3:a3:cc:fe:13:b6:89:b2:89:ba:
a4:11:2b:49:36:b9:89:a4:3b:ee:7a:28:57:4b:cd:e1:42:9a:
ab:4f:2b:26:53:35:a9:bc:41:87:c1:89:5d:e0:03:e6:6e:30:
c7:d2:7e:85:50:b7:c7:0c:fc:06:f2:cc:83:f7:0c:75:b0:96:
bf:b5:af:5e:a8:64:c8:be:ae:d8:a9:fc:69:18:6e:18:28:07:
5f:91:03:de:64:11:0d:a0:d7:6a:6a:bd:f5:09:8e:1c:cc:71:
5b:10:c0:2b:b0:ac:7e:89:27:3d:4c:03:1b:59:e1:7b:f9:7d:
f7:09:f7:cc:7d:60:2c:75:a4:e1:df:58:58:3c:93:8a:dc:ff:
b5:37:68:51:75:6c:6e:49:af:f2:e7:97:39:f7:95:b8:cc:25:
08:8c:c8:02:63:b5:bb:a0:b5:b7:34:95:7e:75:84:8e:22:9a:
64:92:9f:55:90:7b:bc:91:43:ed:02:43:f2:c6:0e:77:7c:ac:
ea:8b:77:00:0a:40:1e:0a:08:2b:38:a7:27:17:bb:3e:a8:46:
66:d8:26:94:18:b1:8d:3f:1b:76:b1:72:88:b2:c6:fe:56:fb:
c8:ca:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:54 2025 by rpki-client