Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier: /qKgUJmbe27auXzWxsFwtFKLPEQyfdZuhZdw8XFfEWk=
Subject key identifier: CA:A3:54:99:ED:0B:BA:32:40:B2:EC:27:DD:D6:38:8F:3C:98:71:7C
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer: /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial: 0199FDA1C7DD8F720C3733EA92EEA8C3EE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number: 0473
Signing time: Sun 19 Oct 2025 18:01:01 +0000
Manifest this update: Sun 19 Oct 2025 18:01:01 +0000
Manifest next update: Mon 20 Oct 2025 18:01:01 +0000
Files and hashes: 1: C14DRI-snEsOkMIiNc-U5aBQhaY.roa (hash: 5Ry3pWdioDfi9ncgeY0rIB8W8oudaHMSAsLacYeKQos=)
2: Ug4nXcExKYw0HQJvuRnQRFIifi4.roa (hash: IsLyJr6VvvPjlgsDoJhXlSp7Ms5JrJ3DUw9MD905qA8=)
3: jeMcQRYZ_oYZiw07CtOXr5jFtyU.roa (hash: aHtdDlixj/M+4CUwjHPA7Rj7IL2V/Zp5w9edz80DuFQ=)
4: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: RGJzka1WyNdEvxncBNWgmmZ/LG8Y9WTKF7Um6x++tpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:c7:dd:8f:72:0c:37:33:ea:92:ee:a8:c3:ee:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Validity
Not Before: Oct 19 18:01:01 2025 GMT
Not After : Oct 20 18:01:01 2025 GMT
Subject: CN=caa35499ed0bba3240b2ec27ddd6388f3c98717c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:a2:da:cb:be:65:21:94:51:66:74:fd:85:
eb:e7:a4:45:bc:b1:97:0b:d9:6f:90:ec:07:9a:e3:
44:28:ce:ca:1c:e4:cc:ff:d1:0b:6e:ff:97:c7:bd:
37:e4:e6:10:59:2e:52:fb:37:e4:2c:4c:f2:3e:91:
84:35:d3:b3:91:91:b3:b6:3b:fb:95:45:ef:f1:a9:
28:69:9b:ea:c9:cd:52:1d:07:8c:7a:38:80:19:9e:
2f:62:0a:97:6e:80:69:1c:44:55:78:7c:9c:a0:7c:
d6:fe:d9:84:16:8d:5c:d8:a6:5f:d4:ed:be:76:34:
fd:cb:d7:16:6b:d4:ad:e0:cf:2b:d2:5b:3d:16:90:
30:54:e4:6f:13:37:1a:46:52:f0:5a:93:dd:ec:c4:
7a:c7:b9:b2:8e:b8:90:ff:91:e4:0b:7e:5a:37:65:
6d:55:20:6f:7b:b9:e7:d3:7a:47:ee:90:8e:70:ec:
17:2f:7f:0a:47:2a:3a:3d:6e:a8:de:f0:f3:e3:1a:
b2:f1:63:03:e1:ea:c0:08:cc:7c:84:06:f8:ff:2e:
dd:1a:54:c3:b5:75:35:ab:9a:6f:55:9c:e9:b3:fe:
9f:7b:7b:6d:90:92:db:67:54:a4:fd:06:43:95:5a:
7e:9a:a3:31:1b:1b:07:01:57:89:6f:a6:e8:20:a1:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A3:54:99:ED:0B:BA:32:40:B2:EC:27:DD:D6:38:8F:3C:98:71:7C
X509v3 Authority Key Identifier:
keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:64:d1:e1:25:25:cb:cf:be:4c:58:af:07:95:b0:1a:ee:d1:
08:bd:b7:e4:77:57:e8:e6:74:0a:09:e0:22:0e:81:e9:eb:8a:
b5:24:f1:7a:53:db:02:96:40:84:cc:1b:4a:f2:23:ae:95:7b:
16:54:e2:9e:d5:98:42:f4:93:be:c1:ee:9d:b8:7a:ef:d3:e8:
03:f5:00:17:5c:46:ce:a6:bb:30:38:ea:6c:16:d3:96:d4:33:
90:f5:8d:9f:fd:11:93:0a:22:fb:2e:0e:f8:ed:82:7c:b2:24:
37:c0:17:de:a8:ab:0d:27:8a:29:38:56:eb:43:b0:d2:2d:a2:
bd:68:9e:7e:f9:4f:11:28:35:fc:3d:fb:84:7c:d0:e5:ad:3c:
61:3c:91:9a:7f:b0:c0:7c:cc:c4:03:78:62:13:c4:90:0d:5e:
23:dd:91:7b:70:1e:0f:3a:d0:bf:5e:a9:26:98:55:95:2c:21:
34:d4:f4:1d:41:ab:d1:76:e3:b8:0c:d9:69:e1:c2:ac:56:71:
96:99:ef:9d:d0:6f:d9:52:5f:01:53:fb:84:ec:13:54:81:0e:
53:54:de:8e:89:08:4d:5a:bd:3c:52:64:cb:ba:3e:94:48:24:
dd:f0:1c:1f:57:7d:9c:32:bc:36:59:f9:be:97:7b:f8:95:91:
fc:f5:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:01 2025 by rpki-client