Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: Xwc6cFfZVBWa35SK56CC+LLav1NGhac96HaGhHSZgAA=
Subject key identifier: 6B:EA:6B:BA:D8:6B:A3:A9:1B:C5:A8:4D:55:0F:A5:48:47:82:C2:6B
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019A4E4FA95923158D89F2420077AF10A37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 10:00:34 +0000
Manifest this update: Tue 04 Nov 2025 10:00:34 +0000
Manifest next update: Wed 05 Nov 2025 10:00:34 +0000
Files and hashes: 1: 6XCQPd-gBaWI9uUfOl9Oxd_9HlY.roa (hash: rYTYbZJWQOZnH0RagwK8UwoxwTXRP+nIxOLYvS6LJxg=)
2: Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa (hash: XD1k9LSsxBfImI/ORmlcMWAQZfP4H0hZi+Dr1QtMaAI=)
3: bvhxhmAqyDusWG8L2BubxFp6Byg.roa (hash: SHS3jK9UFMV78c0xUf6ZLaaMiJ9/VJhwk1oZbalxq7g=)
4: q0ZcAaJC0NdgaZbJABmMG3a-wuc.roa (hash: SUYYeTh6yzkAt8ag+Tk4xijbvUF82bkEC5ALi/AihH0=)
5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: h6UMBmoxeAK3xqR/Z+9k6yP+ryDZUvmdA5JOGaUg8ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a9:59:23:15:8d:89:f2:42:00:77:af:10:a3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Nov 4 10:00:34 2025 GMT
Not After : Nov 5 10:00:34 2025 GMT
Subject: CN=6bea6bbad86ba3a91bc5a84d550fa5484782c26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:68:4b:5f:e9:68:ae:87:83:98:26:ff:50:
7b:58:eb:ed:7e:d9:4d:9a:15:ea:30:c7:b9:a0:06:
e3:a0:99:4c:23:e1:3c:58:aa:f7:fd:50:89:8b:6e:
bf:90:31:97:a6:49:85:02:61:94:ec:2a:c4:d5:d0:
6b:31:62:47:0f:fc:52:9b:85:2e:a3:a2:18:2d:08:
77:41:19:ff:ae:d3:15:71:ef:02:a7:06:93:00:c2:
7c:ad:78:d5:f1:92:88:83:d7:ac:96:ba:21:02:7c:
7a:0e:b9:ce:c3:cb:63:d8:ed:df:ff:f4:cc:4c:2a:
35:4c:ed:0f:32:17:bf:fa:ca:9f:5d:7c:0b:07:df:
12:97:8f:4f:7e:38:69:1f:00:d2:15:95:70:a2:16:
82:02:57:9f:24:f0:5e:87:3b:49:9b:fb:8b:72:7b:
e1:e5:ef:3f:e9:32:61:a6:1e:60:fe:cd:f9:6a:46:
92:d9:83:92:e5:9c:b4:12:6e:a2:e3:31:79:05:ef:
62:ae:56:00:35:ba:36:b5:af:04:ec:a7:31:88:93:
dc:5e:79:24:5d:16:be:28:ae:47:0b:57:d5:77:91:
e3:29:80:a5:21:17:b1:7e:15:d3:ec:0e:20:3f:ee:
61:65:cc:80:89:75:b6:55:e9:4b:65:9a:54:b1:60:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EA:6B:BA:D8:6B:A3:A9:1B:C5:A8:4D:55:0F:A5:48:47:82:C2:6B
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d3:58:70:af:a4:5c:f8:44:d0:21:3c:c7:d8:85:ac:bc:3d:
b9:e7:e2:87:7d:e6:26:8b:b6:4c:b4:61:b0:c1:e9:de:71:24:
48:c1:3b:4f:eb:53:af:10:ee:5e:da:35:07:4a:61:8b:c8:6d:
1c:b1:c0:f2:b1:ab:0a:64:52:8e:93:dc:ae:ae:cb:e3:da:d1:
5c:87:53:0c:e9:a1:4e:88:6e:fe:b7:59:2f:cd:b9:4f:e7:28:
a8:27:fc:f1:30:09:6e:46:1c:cd:f4:96:41:09:fc:26:f7:d4:
f8:6f:61:41:8a:c2:95:ba:e8:fa:0c:fd:19:5d:20:47:c8:7a:
b5:14:fc:56:07:72:c6:6d:9c:85:c2:a3:a3:51:04:75:b2:d4:
19:7f:9c:51:47:d7:e4:2a:a2:c2:dd:0d:0d:2e:a6:77:ff:47:
35:66:bf:7a:cf:28:7c:98:fa:59:a7:7d:5a:49:64:0f:12:3c:
4b:3d:40:cf:77:86:cb:6d:9f:41:f6:4a:ae:7e:92:08:7c:73:
4f:06:76:63:07:37:c7:fb:8a:f9:9a:bc:b9:44:f6:28:4a:ae:
37:44:26:0a:a3:63:d3:d2:07:79:32:3a:68:3d:94:b2:e2:8d:
84:1a:11:96:32:4d:bd:01:57:a1:9f:ff:37:f9:5c:8a:97:70:
89:4c:89:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:09 2025 by rpki-client