Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: NYG5CLXliGTqmZk6MQf63tkOhjilr5+8ESfmtm7DXMo=
Subject key identifier: FE:45:CA:28:CA:E2:31:CC:48:AA:10:8A:C0:19:0C:2C:34:14:83:AE
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 019A4D3D41182DC1C7D81B1E58AF006E4440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:51 +0000
Manifest this update: Tue 04 Nov 2025 05:00:51 +0000
Manifest next update: Wed 05 Nov 2025 05:00:51 +0000
Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=)
2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: gP0I5roqv8q4eS43pItrf8UHfXtRBBIxh+AkKQplcT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:41:18:2d:c1:c7:d8:1b:1e:58:af:00:6e:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Nov 4 05:00:51 2025 GMT
Not After : Nov 5 05:00:51 2025 GMT
Subject: CN=fe45ca28cae231cc48aa108ac0190c2c341483ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:08:8e:23:16:5b:b3:78:7b:dd:7c:30:a7:
ce:24:3e:af:50:f8:14:e5:e5:d5:02:08:a5:b2:9d:
a5:fe:e6:49:ae:2d:a9:71:a4:ac:1c:c4:8e:f8:e8:
e7:13:16:0a:0d:65:d1:76:ca:9a:21:b9:00:69:30:
bb:be:25:0b:2b:7d:05:a6:62:31:ea:45:66:11:d3:
f9:a2:40:5b:ed:37:96:51:6d:a0:55:99:86:9f:5a:
8c:f8:9f:73:4e:64:8f:78:6d:76:d3:fa:6d:cf:19:
6f:c8:a0:e0:30:39:9d:9d:68:40:5c:c6:56:d9:a8:
c2:ad:5b:9f:6a:8f:66:10:2e:10:cc:12:93:3a:14:
ef:6d:b6:87:f4:27:eb:49:0a:a6:34:86:a0:77:53:
0c:f7:01:41:bf:de:40:43:e6:5b:d2:40:99:d8:8a:
3b:48:87:9a:22:c0:d7:39:d3:fc:cb:40:ed:84:ff:
19:7d:50:15:ac:7e:da:92:e6:2a:a0:3c:d0:31:94:
79:03:de:15:cd:26:55:19:14:52:44:ab:64:00:86:
3f:20:9f:7a:43:42:a9:1b:a5:b2:d3:42:f9:d7:c9:
3a:7c:ec:b2:48:52:02:15:bc:2c:99:f5:c0:c0:d4:
6e:c6:7d:9c:a7:54:4d:f9:21:71:eb:9e:48:30:7c:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:45:CA:28:CA:E2:31:CC:48:AA:10:8A:C0:19:0C:2C:34:14:83:AE
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:82:8b:33:37:18:eb:fd:71:05:99:66:7a:c9:36:8f:e0:c8:
ec:37:1d:64:0e:7f:c3:b7:e4:0c:d2:1d:0a:60:82:ac:06:cd:
26:1e:dd:a5:7d:c7:f6:f7:4e:57:f7:47:9c:b6:2d:98:a4:03:
3a:e8:2a:d6:7c:51:ee:48:ba:37:a5:6b:02:b9:db:35:7f:e6:
00:08:0b:d4:80:53:cb:79:22:08:b2:45:f5:0d:a9:cd:3a:d6:
cb:95:66:bb:aa:db:cb:af:03:2e:f0:c1:90:df:d0:a2:9e:bf:
5a:42:ec:91:10:39:1a:b0:ff:f6:1b:f3:0e:0f:e3:06:1c:79:
c2:a4:fa:b6:ab:d0:af:f1:ba:a9:c6:ac:72:c2:50:e8:fe:46:
22:f0:e1:7f:94:b4:6d:9a:7c:74:d6:f7:20:ca:7f:21:f3:4e:
81:75:e6:7a:9b:09:46:ca:65:e2:b1:77:6b:32:ea:5d:d1:59:
d4:f2:df:54:55:36:8e:cd:8b:24:22:2a:00:53:a8:44:b1:61:
40:b7:6d:c7:95:9d:01:f6:d8:1d:43:60:6a:45:f8:c2:97:a3:
9b:50:62:d9:9d:90:a8:d7:60:91:9c:1c:46:cc:71:90:a8:8d:
01:c2:5c:f8:b2:8e:0a:1e:53:aa:4a:63:cd:d3:fd:19:eb:75:
9a:4c:47:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPUEYLcHH2BseWK8AbkRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmIyYTQzMDIwOTRmNGMzZjViYWRhNTQ3ZWY0ZjdlZGUx
OGU5MDMwHhcNMjUxMTA0MDUwMDUxWhcNMjUxMTA1MDUwMDUxWjAzMTEwLwYDVQQD
EyhmZTQ1Y2EyOGNhZTIzMWNjNDhhYTEwOGFjMDE5MGMyYzM0MTQ4M2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgAIjiMWW7N4e918MKfOJD6vUPgU
5eXVAgilsp2l/uZJri2pcaSsHMSO+OjnExYKDWXRdsqaIbkAaTC7viULK30FpmIx
6kVmEdP5okBb7TeWUW2gVZmGn1qM+J9zTmSPeG120/ptzxlvyKDgMDmdnWhAXMZW
2ajCrVufao9mEC4QzBKTOhTvbbaH9CfrSQqmNIagd1MM9wFBv95AQ+Zb0kCZ2Io7
SIeaIsDXOdP8y0DthP8ZfVAVrH7akuYqoDzQMZR5A94VzSZVGRRSRKtkAIY/IJ96
Q0KpG6Wy00L518k6fOyySFICFbwsmfXAwNRuxn2cp1RN+SFx655IMHyYBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5FyijK4jHMSKoQisAZDCw0FIOuMB8GA1UdIwQY
MBaAFLu7KkMCCU9MP1utpUfvT37eGOkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAt
MzJiZjE2NDFmYjNiLzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAtMzJiZjE2NDFmYjNi
LzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYKLMzcY
6/1xBZlmesk2j+DI7DcdZA5/w7fkDNIdCmCCrAbNJh7dpX3H9vdOV/dHnLYtmKQD
Ougq1nxR7ki6N6VrArnbNX/mAAgL1IBTy3kiCLJF9Q2pzTrWy5Vmu6rby68DLvDB
kN/Qop6/WkLskRA5GrD/9hvzDg/jBhx5wqT6tqvQr/G6qcascsJQ6P5GIvDhf5S0
bZp8dNb3IMp/IfNOgXXmepsJRspl4rF3azLqXdFZ1PLfVFU2js2LJCIqAFOoRLFh
QLdtx5WdAfbYHUNgakX4wpejm1Bi2Z2QqNdgkZwcRsxxkKiNAcJc+LKOCh5Tqkpj
zdP9Get1mkxHXg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:21 2025 by rpki-client