Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
File: u_iwZ3moMGXb3FgI4ef_r5x9jag.mft (raw, json)
Hash identifier: /Zmzz4zObXNT/AexnC9zAZqD7Slyal4L4d4dk1fllrU=
Subject key identifier: B5:F6:03:76:90:4A:82:8A:54:6B:87:80:A1:FD:6C:02:22:7D:6F:91
Authority key identifier: BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
Certificate issuer: /CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Certificate serial: 0199FCC6CEFFF42DAD617A07C4EA6AF38983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
Manifest number: 0185
Signing time: Sun 19 Oct 2025 14:01:51 +0000
Manifest this update: Sun 19 Oct 2025 14:01:51 +0000
Manifest next update: Mon 20 Oct 2025 14:01:51 +0000
Files and hashes: 1: p50yN57F3LkXuY7-mhCsw823E8k.roa (hash: dyK2Pi+JnZP3NZuI9yP93De2BsaZ3Ntgr/tFvxnQ/R0=)
2: u_iwZ3moMGXb3FgI4ef_r5x9jag.crl (hash: fk3OLxNl01PPWPr8Am2zycyYJRD3v3t67+79Qfccdbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ce:ff:f4:2d:ad:61:7a:07:c4:ea:6a:f3:89:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Validity
Not Before: Oct 19 14:01:51 2025 GMT
Not After : Oct 20 14:01:51 2025 GMT
Subject: CN=b5f60376904a828a546b8780a1fd6c02227d6f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:e1:35:73:c2:f6:3f:ec:67:01:b6:6a:e9:
9c:a4:96:5a:a0:2f:14:c6:be:84:ac:cc:20:25:7d:
3e:2b:49:5e:9a:a9:72:13:41:77:84:43:83:81:0f:
40:81:e6:1d:11:2d:07:d6:d7:98:53:28:9e:f2:a4:
11:07:0d:c5:fa:59:a9:bb:09:f7:bb:8f:05:81:94:
cc:d1:29:6a:9d:61:e8:ae:b0:bd:d8:c7:73:cb:44:
08:0a:13:51:24:9d:51:39:8f:ff:dd:48:54:f7:f1:
8e:fe:c9:89:7e:7e:8d:24:2b:c3:0a:57:5f:1b:fe:
e0:6a:5b:a7:23:18:e3:53:ae:3e:26:10:28:ba:4e:
9e:e7:ac:a2:5b:29:03:f7:99:12:26:53:cf:03:b3:
89:f7:aa:ed:c2:af:a2:80:40:5e:56:27:08:54:a4:
92:d7:6a:4f:a4:52:21:04:25:4a:66:bf:0a:47:ee:
2d:12:1b:ed:d5:2c:38:e4:bb:6d:8c:7e:06:a3:6b:
c2:1a:3b:7f:fd:a3:ac:0f:35:1d:8e:46:e0:2c:9d:
0f:e2:5c:cb:0c:48:de:bf:76:6c:e7:75:f6:eb:ea:
ae:81:24:6c:34:4d:c7:da:74:fa:71:55:f0:52:e6:
b0:32:9f:61:bc:f9:85:6d:58:b1:2d:7a:65:5c:41:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F6:03:76:90:4A:82:8A:54:6B:87:80:A1:FD:6C:02:22:7D:6F:91
X509v3 Authority Key Identifier:
keyid:BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:24:29:83:b2:23:7b:27:bf:bb:0e:af:d2:01:28:c0:15:5b:
9a:ac:58:f5:61:06:67:f2:12:11:32:d8:00:23:66:ff:1e:62:
05:d3:6b:f8:53:8a:80:9d:50:0d:3f:43:24:a6:8f:89:e5:5c:
ef:37:1c:ea:0b:4b:77:60:3d:1c:2a:3e:56:44:24:0b:26:44:
0c:1b:3f:db:1a:66:20:40:79:bd:5f:b2:0b:d0:f0:51:0a:20:
40:bf:8b:16:b3:30:7c:1f:00:37:19:9b:10:6e:3f:44:bc:9f:
5f:c1:52:ae:73:1f:23:c6:ff:68:bd:6b:ce:7f:4b:f5:77:09:
6a:f3:a6:8f:d1:d0:2d:bf:c3:f8:a1:4d:89:ba:d1:ec:18:79:
2f:e2:3a:64:21:6a:2c:52:d6:1d:9e:2c:8a:ef:a9:1f:5c:92:
bc:8f:bb:32:3d:e9:37:a4:25:76:6f:7a:61:83:a4:6b:2c:e2:
ca:e0:6a:fc:3d:69:1c:7e:2d:06:1c:25:48:9b:5d:18:b8:7e:
aa:fe:f6:d6:53:53:47:7a:d3:73:a4:c6:8d:a7:37:c0:06:6b:
76:25:de:d2:b1:b8:c2:e0:73:b1:69:32:43:70:79:30:e2:d3:
32:52:01:8c:0e:5a:31:ad:7a:6d:70:7b:fe:45:cf:82:e5:3d:
d5:4f:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:14 2025 by rpki-client