Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: aIa3HKT57DS55rSo9LLwmsZgLj6h/Vy6bxiihgXkBQ4=
Subject key identifier: ED:C8:81:17:54:06:72:D1:B0:0D:7C:D9:63:5C:40:D7:EA:91:D7:9A
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019A4F620886FCC1F21A522DF8FBA4A560D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0E9C
Signing time: Tue 04 Nov 2025 15:00:15 +0000
Manifest this update: Tue 04 Nov 2025 15:00:15 +0000
Manifest next update: Wed 05 Nov 2025 15:00:15 +0000
Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: BZZtpi2FivZDCYU6InEa5olCysEbzbxi3vXDTGdzBA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:08:86:fc:c1:f2:1a:52:2d:f8:fb:a4:a5:60:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Nov 4 15:00:15 2025 GMT
Not After : Nov 5 15:00:15 2025 GMT
Subject: CN=edc88117540672d1b00d7cd9635c40d7ea91d79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:a4:49:9d:30:d1:11:b3:9b:d7:56:82:18:
4d:c4:30:22:73:b0:d9:ed:cf:25:22:2e:df:92:97:
02:00:f3:a9:5c:17:b8:4b:84:d3:9f:d7:e3:3f:dd:
33:fd:31:1f:b5:62:cd:8c:ff:ef:89:f0:b7:5c:56:
70:97:ba:4a:0b:33:7e:cb:60:16:fb:ce:de:45:6e:
52:7b:12:45:08:2a:cc:2a:41:44:3b:81:a9:6a:39:
a4:37:65:78:d0:a2:bc:12:33:08:b3:ca:e6:f9:76:
f8:96:0f:3a:5b:35:0c:c0:6a:0d:d6:d4:7d:fa:a5:
54:e0:29:90:4d:ca:a8:a8:96:2c:d4:96:4b:c4:14:
7e:16:42:f9:e6:59:07:ce:e5:25:3a:d6:4d:61:8a:
5f:95:61:26:58:24:d9:4b:c6:b3:11:0e:4a:a0:b4:
f4:13:af:1e:ed:b6:15:5c:14:13:aa:48:6c:f0:1c:
cf:9d:ba:9f:13:22:e3:48:d0:57:26:b6:26:9a:5f:
9d:85:bd:b1:3f:3c:40:bd:d5:36:5f:b3:69:f8:d8:
20:39:26:d0:3b:be:ff:29:f4:6a:7d:08:a5:92:55:
74:20:a4:83:c9:e1:13:fa:e3:0f:81:bc:15:88:62:
0c:06:ff:ee:18:b9:66:d4:db:9b:0a:84:61:4c:7a:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C8:81:17:54:06:72:D1:B0:0D:7C:D9:63:5C:40:D7:EA:91:D7:9A
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e6:4e:76:d9:b9:a1:56:f1:42:84:56:f0:a2:5d:bd:0a:85:
f8:a8:4b:5a:29:73:45:8a:6e:49:00:3e:cf:9e:a8:80:c1:9d:
84:e4:2f:7a:e8:51:82:fd:29:d7:dd:32:1f:68:8d:8d:e2:a4:
56:17:fe:ea:0e:23:26:30:89:d3:3a:a5:75:fb:62:9d:70:bf:
05:dd:0b:cb:b3:81:ae:78:17:26:7c:17:2e:18:6e:9c:b5:65:
60:ab:6a:b2:d9:55:0f:b7:63:6e:5c:99:16:0a:c0:cc:7a:b4:
4f:a4:c6:50:5f:c6:e5:c7:17:63:03:35:a4:81:56:9e:37:41:
c8:43:0c:be:a8:16:32:d6:5f:ca:30:e4:ec:e1:fd:75:8b:5c:
11:57:cb:9f:3d:d3:db:e7:9d:5a:7a:66:22:90:46:4e:c2:65:
25:a1:c0:b8:66:a3:0b:ca:4b:e7:15:ea:36:df:71:22:9a:78:
4c:80:f3:e3:ef:59:42:95:a8:6c:e3:9a:d9:92:37:5c:78:21:
c5:40:70:39:0c:e2:da:60:ba:8d:f0:5f:39:0b:61:e4:3c:14:
6c:9c:bd:29:17:21:6f:2e:2e:e1:02:4e:eb:f7:da:36:df:25:
e8:44:f4:c5:ef:51:19:59:c4:1f:99:a2:a7:c5:19:4d:a6:f0:
3a:53:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:23 2025 by rpki-client