Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: ORLl0kbuB5W59eMiCJef44mlBQHhIQMRs0S0AQgpcz0=
Subject key identifier: BF:A8:ED:22:C1:CB:12:81:46:FC:0B:D7:BC:69:A2:51:F5:79:0D:2F
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 019A4EBD41B957867EC4187A52CEF5A97BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 1560
Signing time: Tue 04 Nov 2025 12:00:17 +0000
Manifest this update: Tue 04 Nov 2025 12:00:17 +0000
Manifest next update: Wed 05 Nov 2025 12:00:17 +0000
Files and hashes: 1: oMfkJdM1AJ50uhjGB1W1nnJScB0.roa (hash: H4m9gh/HUrFKIN3OBkRa6uvBDmvc6JbZ7SJg5G/lfuQ=)
2: qHylQxqYspJSNTebtGztToCsU0M.roa (hash: xZhZoeaMSwBgtia5fndUlGK6FEl5SeLWX/IHfA27vUo=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: SP7tbFKDgptivjfBSwMiqmWnxOamCbDLlyKX2KcZUTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:41:b9:57:86:7e:c4:18:7a:52:ce:f5:a9:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Nov 4 12:00:17 2025 GMT
Not After : Nov 5 12:00:17 2025 GMT
Subject: CN=bfa8ed22c1cb128146fc0bd7bc69a251f5790d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:0c:ea:58:30:96:a4:72:e6:af:b5:45:67:
f5:30:5b:f9:70:6b:3e:a9:f7:89:d8:e0:6d:c5:58:
d6:83:9b:18:5a:b1:81:c8:6f:b6:68:7c:c0:f6:df:
0f:06:01:10:45:21:ea:70:49:42:81:e3:9d:0e:4a:
d3:2a:80:cc:b8:99:a9:d0:66:41:a6:ac:cc:ce:b7:
8a:a8:ee:4b:33:ff:dd:92:95:a5:88:6c:19:78:e3:
0e:6c:12:2a:61:99:b5:93:c3:7f:fc:ed:18:e9:dc:
da:8f:c4:ea:36:11:42:ed:e9:d0:31:89:c6:8a:fb:
19:9a:eb:fc:4d:4e:ee:92:65:f4:71:e1:a3:74:fa:
f6:95:22:ce:70:4e:33:01:8a:e1:05:73:5a:eb:89:
97:cc:92:79:29:df:b5:ac:0f:3c:c2:a7:1d:37:a4:
89:a4:08:91:7a:50:54:48:fa:30:75:f5:a8:bf:5e:
52:02:0f:15:3a:22:96:52:91:f7:3d:1d:2d:7d:bc:
c3:bb:c4:84:4d:e6:8a:e7:21:4c:6f:b1:a6:00:59:
9a:32:f9:5f:9e:1f:57:b4:35:69:e0:26:be:9b:f8:
e5:21:02:b6:bf:09:a8:56:00:09:0b:9a:76:07:12:
ee:e2:27:1d:c0:1c:e0:11:66:33:88:36:f9:a8:8c:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A8:ED:22:C1:CB:12:81:46:FC:0B:D7:BC:69:A2:51:F5:79:0D:2F
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6b:f2:eb:bd:71:a6:c2:8a:d7:9b:2c:54:be:ec:85:cd:f6:
64:a3:56:2e:89:01:c6:52:8d:de:a5:80:33:97:e9:20:e7:34:
c1:02:ec:55:c0:67:98:0b:a6:1a:ca:08:63:35:c1:88:37:f0:
07:c6:cb:f0:d8:1e:d6:73:0e:40:c8:f8:38:72:9c:8c:09:12:
ca:d1:92:97:1c:c9:13:8b:70:e6:4e:23:e9:dd:d6:2c:fb:a6:
fa:b8:48:74:f0:ec:73:03:bd:4b:b7:47:a2:e5:b9:56:55:c7:
e8:a7:0a:51:c4:cb:5e:cf:f2:2d:e3:37:dd:dc:68:5b:06:50:
c2:07:21:dd:fe:56:39:5f:4a:42:d4:53:c3:2b:08:cd:75:47:
9c:84:7a:4b:f5:76:53:ff:df:d1:9f:64:c0:bb:52:8b:1f:30:
97:2e:f8:66:89:bd:de:ea:89:54:a1:b2:11:74:92:ae:0b:a2:
b1:f2:9d:c3:f8:f5:9b:4e:46:18:49:1f:93:16:2a:ae:81:d2:
44:6a:da:f6:80:b7:82:9e:4e:38:f8:c7:d3:68:f5:b1:02:05:
d6:78:e0:78:53:d8:d7:56:2d:d1:c0:76:87:d5:57:f4:26:61:
f0:68:b7:9e:a4:29:ae:f7:9d:1a:19:94:da:15:db:8c:9a:6c:
a8:b8:36:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:21 2025 by rpki-client