Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
File: u_pCfUICOv2oiOhBX07c97ffGwU.mft (raw, json)
Hash identifier: WwbOvO3tlrBqLTtVe+K0uOFt8aMof41XzeqOtr3PYS0=
Subject key identifier: D4:71:18:86:B7:60:75:6A:92:DC:A6:AF:CC:D5:C5:0F:68:C2:24:E2
Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
Certificate issuer: /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Certificate serial: 0199FD6B01AC0E5C9E2D97F7E55B3943724B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
Manifest number: 0935
Signing time: Sun 19 Oct 2025 17:01:12 +0000
Manifest this update: Sun 19 Oct 2025 17:01:12 +0000
Manifest next update: Mon 20 Oct 2025 17:01:12 +0000
Files and hashes: 1: K2GMWCCFEI_TRfahmMRjDe9YKEI.roa (hash: vdZSYQjeBwZE35DhIdNU+zQ/gO9XDbHhs5nRKTUQzYc=)
2: u_pCfUICOv2oiOhBX07c97ffGwU.crl (hash: xecqMUfNvUMgxhnKnYo/Gp28HFm6xblLowBxnRisXGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:01:ac:0e:5c:9e:2d:97:f7:e5:5b:39:43:72:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Validity
Not Before: Oct 19 17:01:12 2025 GMT
Not After : Oct 20 17:01:12 2025 GMT
Subject: CN=d4711886b760756a92dca6afccd5c50f68c224e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:18:21:32:e1:ec:5a:e5:8e:1e:7a:bc:c4:
71:25:99:4d:94:4f:5c:ec:5d:ee:5c:a3:b9:91:96:
29:4c:ee:8d:4e:05:f8:ef:bc:f1:91:fb:50:7f:a3:
bc:98:99:64:16:9b:90:a0:ab:4c:46:39:1d:51:f1:
8f:29:2e:87:43:93:38:c1:c7:20:38:7c:99:0a:cd:
13:1e:eb:c8:28:65:57:3a:c3:98:c5:28:53:00:45:
c0:e7:c4:a5:f5:71:1b:f3:80:c2:b5:65:27:93:96:
a1:e8:b5:4b:f8:cc:54:09:0f:94:d6:db:07:b0:8b:
4f:51:de:00:11:bf:17:94:49:60:f2:4d:20:4b:b1:
37:24:e3:64:b5:3c:b5:28:62:6f:01:87:53:ad:ee:
44:f0:91:98:a9:a0:13:b8:d6:30:87:bd:22:80:23:
a6:b8:22:b1:3e:0c:e1:04:f4:58:1d:65:1b:6b:a3:
1e:0f:71:59:1e:52:f4:83:69:b5:de:bc:f0:de:b5:
3a:73:45:d3:94:da:59:59:61:7c:ac:cf:48:b6:2a:
d6:ff:a6:d0:c0:01:24:b6:9f:53:2f:65:6b:3c:f9:
ba:a5:3a:e3:86:1d:58:dc:56:47:39:b5:3b:26:50:
10:7f:d0:35:b8:f2:18:96:a7:13:56:04:45:7f:96:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:71:18:86:B7:60:75:6A:92:DC:A6:AF:CC:D5:C5:0F:68:C2:24:E2
X509v3 Authority Key Identifier:
keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:33:46:9b:d5:ed:bd:9d:3a:17:6f:c6:10:13:71:de:19:27:
e9:6d:c5:a8:bc:cf:90:02:e1:e3:c4:a6:01:3d:f2:52:a1:cd:
cd:11:9b:54:26:78:fd:dc:d3:f9:9d:8a:86:3d:2f:b2:c1:f1:
33:f7:81:4a:d7:d6:7c:cb:c9:26:1d:56:06:2e:86:d0:af:05:
6e:44:e5:f4:89:4a:0f:e2:0f:a2:58:ff:7f:3e:6e:c1:3b:d5:
5a:0b:61:90:ac:d3:eb:e7:43:e8:17:2f:1e:d7:b3:6e:7e:aa:
72:67:d6:08:a9:70:bc:53:6a:da:fe:33:28:bc:74:e3:66:f4:
10:4d:3e:2e:4b:38:8d:8d:e5:35:66:85:2d:40:56:19:52:cf:
f8:32:8b:e4:8a:f0:df:73:67:1e:14:1c:d8:53:a9:0b:c1:ae:
82:d5:5f:8d:85:19:7c:f0:c9:3b:42:80:64:2a:fc:ea:3d:c3:
73:95:36:29:f4:f9:c6:3b:a6:fe:05:31:8e:23:5b:3e:bf:f6:
e4:fa:53:44:3b:eb:23:26:e6:74:79:b2:ef:01:49:61:4b:be:
c9:b6:6f:2e:a9:ca:38:c9:30:94:84:93:e1:34:56:ed:42:85:
49:5a:80:71:a0:1e:4d:2c:17:c0:cb:73:ad:df:5e:1d:28:26:
f6:b5:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:39:24 2025 by rpki-client