Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: ACu+5l8Fsw9Emcw5ZRC2yzwzUPS4/ZXReT+IYxhqlrI=
Subject key identifier: EF:70:A0:9D:5D:87:A9:89:BE:C0:97:36:90:17:73:09:3F:2D:61:D6
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 019A537617CC553BF2E3B0C003670A44A7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 10:00:39 +0000
Manifest this update: Wed 05 Nov 2025 10:00:39 +0000
Manifest next update: Thu 06 Nov 2025 10:00:39 +0000
Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: CPxa9pIMAz1U7QPcfcQj+23M0Hduddj5s//Gh/jWtAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:17:cc:55:3b:f2:e3:b0:c0:03:67:0a:44:a7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Nov 5 10:00:39 2025 GMT
Not After : Nov 6 10:00:39 2025 GMT
Subject: CN=ef70a09d5d87a989bec09736901773093f2d61d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:68:e1:94:7c:df:c9:0d:70:05:9b:17:05:
25:0a:1e:0d:4c:f6:91:4e:8e:2f:2a:7d:da:9f:52:
52:fa:86:cd:bb:8c:26:e9:0a:75:a9:1d:f8:1b:fc:
c7:7e:c4:a6:6e:3d:71:91:cc:dd:e5:36:19:3d:6c:
64:29:bf:8d:a7:16:4f:b6:ec:e6:71:83:a2:82:d0:
0b:b1:ad:63:35:54:07:bf:10:94:24:02:70:35:1b:
b1:ca:bb:ee:d0:e3:0f:02:bc:1d:75:07:73:d2:89:
ec:8b:68:6f:2b:26:19:73:14:90:f1:7a:03:e5:38:
6e:31:c1:96:fb:26:c3:50:b9:c0:57:59:3f:a1:4b:
b7:df:bb:9e:17:d0:b8:76:ea:24:48:b1:05:42:d9:
0c:25:55:c0:04:fd:1a:9a:0c:9c:43:8b:4e:43:4e:
4e:e4:00:11:01:4b:8f:20:83:f2:4e:60:05:75:8b:
d3:9a:47:f8:0d:ee:23:02:ef:62:ba:05:e3:dd:d4:
8a:70:55:23:1e:c3:fb:15:14:dc:80:9f:65:45:da:
e7:10:08:b5:66:23:8d:68:a0:a9:1d:81:e6:d0:5b:
ce:85:49:fd:32:50:10:ed:da:3b:19:af:78:21:b9:
9b:32:a4:88:ea:5b:93:20:98:49:f8:5b:7e:30:27:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:70:A0:9D:5D:87:A9:89:BE:C0:97:36:90:17:73:09:3F:2D:61:D6
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:30:99:66:52:b0:b7:ed:41:c0:cb:fd:d2:b3:08:ae:51:b7:
3b:c2:39:fd:25:3e:ba:3d:15:f2:0b:48:4b:20:8a:20:c0:2c:
f5:67:3c:9e:88:bc:d7:9a:4a:67:da:54:e6:b0:1a:05:86:5f:
6a:db:ef:ed:a6:83:fd:bf:ae:27:84:1f:e4:f3:17:30:80:ec:
84:23:0a:19:33:6a:f6:ef:93:1b:78:25:0b:bd:23:1a:7f:5c:
f1:68:63:ab:ff:bc:01:59:76:ea:76:1e:d2:ff:9b:de:f3:9d:
be:13:e4:db:42:18:76:b9:ac:9b:de:6c:a8:e3:6d:ef:9f:89:
31:9c:db:b8:a7:9d:45:5a:87:ee:af:31:8e:c6:12:eb:32:7a:
b7:59:ba:19:40:97:36:14:75:6b:81:b8:a6:58:52:1f:16:c5:
d9:1f:0d:c4:0c:e8:37:bb:79:d0:d2:30:89:dd:64:3e:04:5b:
ce:43:61:5f:19:45:f8:4d:73:32:81:5f:91:17:b3:08:2e:0b:
71:79:80:33:47:68:f3:ca:1a:fa:40:9e:bc:e2:25:db:12:c1:
59:66:22:7f:17:82:e1:72:65:05:cc:e0:3b:62:f3:48:64:69:
07:a3:75:34:f5:af:06:65:94:96:be:98:33:18:51:f2:ce:c4:
4c:a8:64:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdhfMVTvy47DAA2cKRKfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOGUyZjVhYzdjYmU2MjExN2RhNDc4YWMwYzAyN2FkNmQ4
NDNjNTYwHhcNMjUxMTA1MTAwMDM5WhcNMjUxMTA2MTAwMDM5WjAzMTEwLwYDVQQD
EyhlZjcwYTA5ZDVkODdhOTg5YmVjMDk3MzY5MDE3NzMwOTNmMmQ2MWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWFo4ZR838kNcAWbFwUlCh4NTPaR
To4vKn3an1JS+obNu4wm6Qp1qR34G/zHfsSmbj1xkczd5TYZPWxkKb+NpxZPtuzm
cYOigtALsa1jNVQHvxCUJAJwNRuxyrvu0OMPArwddQdz0onsi2hvKyYZcxSQ8XoD
5ThuMcGW+ybDULnAV1k/oUu337ueF9C4duokSLEFQtkMJVXABP0amgycQ4tOQ05O
5AARAUuPIIPyTmAFdYvTmkf4De4jAu9iugXj3dSKcFUjHsP7FRTcgJ9lRdrnEAi1
ZiONaKCpHYHm0FvOhUn9MlAQ7do7Ga94IbmbMqSI6luTIJhJ+Ft+MCfDSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9woJ1dh6mJvsCXNpAXcwk/LWHWMB8GA1UdIwQY
MBaAFLuOL1rHy+YhF9pHisDAJ61thDxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjIt
M2I5ZGIwNWQyMzg0LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjItM2I5ZGIwNWQyMzg0
LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTCZZlKw
t+1BwMv90rMIrlG3O8I5/SU+uj0V8gtISyCKIMAs9Wc8noi815pKZ9pU5rAaBYZf
atvv7aaD/b+uJ4Qf5PMXMIDshCMKGTNq9u+TG3glC70jGn9c8Whjq/+8AVl26nYe
0v+b3vOdvhPk20IYdrmsm95sqONt75+JMZzbuKedRVqH7q8xjsYS6zJ6t1m6GUCX
NhR1a4G4plhSHxbF2R8NxAzoN7t50NIwid1kPgRbzkNhXxlF+E1zMoFfkRezCC4L
cXmAM0do88oa+kCevOIl2xLBWWYifxeC4XJlBczgO2LzSGRpB6N1NPWvBmWUlr6Y
MxhR8s7ETKhkWA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:29 2025 by rpki-client