Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: eFVQK6dzj0I5gM2lLpwr/377MTYgWlP90PII3TzDEcw=
Subject key identifier: FC:67:7C:EC:22:67:66:78:95:4F:34:DD:25:EA:67:27:AF:F8:44:44
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019A552E01157A25FC2D64B6902AB51D33FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 18:01:09 +0000
Manifest this update: Wed 05 Nov 2025 18:01:09 +0000
Manifest next update: Thu 06 Nov 2025 18:01:09 +0000
Files and hashes: 1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=)
2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: i+z10jCVMivKK8cv7mEQwXpfGkmSo94sPwlub6gCgII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2e:01:15:7a:25:fc:2d:64:b6:90:2a:b5:1d:33:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Nov 5 18:01:09 2025 GMT
Not After : Nov 6 18:01:09 2025 GMT
Subject: CN=fc677cec22676678954f34dd25ea6727aff84444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:9b:1b:14:e1:e9:6f:fe:72:a4:ec:33:f5:
b7:fa:2a:0b:3b:4c:17:20:a8:87:46:96:3a:63:06:
66:47:21:36:f1:38:b5:1f:82:1b:3d:4d:ae:59:77:
96:f7:03:81:b1:f2:c4:7f:6b:9f:b2:4b:81:ac:9b:
ef:49:c4:5a:6f:6e:2d:61:ba:bc:28:87:38:43:49:
9a:98:bd:e3:66:6a:56:03:39:b1:7c:e1:71:a9:79:
06:55:19:04:bc:21:16:dc:e3:0d:b1:5c:d3:26:c2:
d6:c0:14:fd:de:cd:2e:6b:38:16:83:2f:75:41:ef:
59:62:22:30:13:56:e8:b7:27:0e:39:fd:b9:1f:4d:
dd:f6:72:92:bc:ab:af:50:4c:84:b5:35:73:cc:22:
d0:e1:eb:41:8e:96:fc:f4:79:7d:20:50:79:23:28:
b1:94:4e:1f:e9:3a:cc:be:b0:7a:fd:92:e7:82:98:
0b:42:ae:f7:f7:6e:c6:75:8e:1c:0b:c3:6d:5a:73:
c1:39:ab:53:80:90:f4:a3:c1:dc:64:55:11:f5:d8:
8d:3c:a9:65:4b:2a:59:80:9b:6d:d6:30:e0:62:b1:
04:e2:fe:fe:7c:6b:ca:65:a8:0a:7a:46:64:53:fe:
47:51:52:8c:5f:93:ed:bd:b2:d1:1f:ac:31:48:8f:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:67:7C:EC:22:67:66:78:95:4F:34:DD:25:EA:67:27:AF:F8:44:44
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7d:bb:55:d4:28:cb:6d:a5:7a:b2:fb:78:d1:d4:34:2b:48:
77:96:cd:5c:9a:6b:37:d2:d0:63:c6:68:8d:af:32:38:2b:5a:
85:f3:d0:8a:c6:b1:35:39:82:37:08:9b:8e:14:83:34:ce:a6:
1d:da:75:81:2a:da:90:13:f0:8e:81:57:5d:e6:fc:db:f0:e0:
2d:0f:06:6f:cf:fa:67:63:fe:7e:a5:48:ab:d6:a2:5b:09:e4:
c4:8d:92:7e:41:f0:6b:a0:3f:39:de:47:e2:8f:65:d9:b5:2c:
a3:75:4e:aa:98:c6:02:8e:58:9f:33:84:5c:b6:5c:c9:0b:a9:
d4:b3:a7:d3:c0:30:63:94:d8:8a:4f:d8:12:79:ce:93:f8:e1:
f9:f3:6d:a9:5c:b2:c0:f2:94:65:b8:bf:9e:5b:67:c0:23:a4:
f6:52:ae:30:10:b1:34:b7:e5:cf:a5:67:47:4e:7d:c0:95:b9:
dc:06:cc:98:42:47:3e:0f:96:14:1e:13:d0:ab:e4:44:9e:4a:
66:c3:aa:b2:70:bc:0f:4f:cf:f0:78:a0:6b:0c:d7:81:31:0b:
04:eb:5c:69:d5:8f:46:c0:e9:03:c8:38:eb:84:a6:43:4c:d6:
85:de:e5:6c:30:be:05:6c:73:21:ef:9a:10:1a:cf:b9:91:52:
d3:8e:da:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVLgEVeiX8LWS2kCq1HTP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDkzMmY3MDY0YjFmZGU5YTEyMjVmMzMyNzc5ZmMyMmU2
NzMyMzkwHhcNMjUxMTA1MTgwMTA5WhcNMjUxMTA2MTgwMTA5WjAzMTEwLwYDVQQD
EyhmYzY3N2NlYzIyNjc2Njc4OTU0ZjM0ZGQyNWVhNjcyN2FmZjg0NDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXibGxTh6W/+cqTsM/W3+ioLO0wX
IKiHRpY6YwZmRyE28Ti1H4IbPU2uWXeW9wOBsfLEf2ufskuBrJvvScRab24tYbq8
KIc4Q0mamL3jZmpWAzmxfOFxqXkGVRkEvCEW3OMNsVzTJsLWwBT93s0uazgWgy91
Qe9ZYiIwE1botycOOf25H03d9nKSvKuvUEyEtTVzzCLQ4etBjpb89Hl9IFB5Iyix
lE4f6TrMvrB6/ZLngpgLQq73927GdY4cC8NtWnPBOatTgJD0o8HcZFUR9diNPKll
SypZgJtt1jDgYrEE4v7+fGvKZagKekZkU/5HUVKMX5PtvbLRH6wxSI+mBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxnfOwiZ2Z4lU803SXqZyev+EREMB8GA1UdIwQY
MBaAFLvZMvcGSx/emhIl8zJ3n8IuZzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWIt
ZDE3OTg4MWQwNjE4LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWItZDE3OTg4MWQwNjE4
LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMn27VdQo
y22lerL7eNHUNCtId5bNXJprN9LQY8Zoja8yOCtahfPQisaxNTmCNwibjhSDNM6m
Hdp1gSrakBPwjoFXXeb82/DgLQ8Gb8/6Z2P+fqVIq9aiWwnkxI2SfkHwa6A/Od5H
4o9l2bUso3VOqpjGAo5YnzOEXLZcyQup1LOn08AwY5TYik/YEnnOk/jh+fNtqVyy
wPKUZbi/nltnwCOk9lKuMBCxNLflz6VnR059wJW53AbMmEJHPg+WFB4T0KvkRJ5K
ZsOqsnC8D0/P8HigawzXgTELBOtcadWPRsDpA8g464SmQ0zWhd7lbDC+BWxzIe+a
EBrPuZFS047a6Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:55:10 2025 by rpki-client