Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: vUqA2EBDtAPbf6KTKaZ3+s03gCbx75Dep6lj/NLY3jM=
Subject key identifier: F1:6A:61:10:2B:EB:03:40:3B:A9:33:A8:55:44:48:AB:64:3D:53:86
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 01988AA08DDDA137B8ED1526EAFAB7AD8FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 146D
Signing time: Fri 08 Aug 2025 17:00:34 +0000
Manifest this update: Fri 08 Aug 2025 17:00:34 +0000
Manifest next update: Sat 09 Aug 2025 17:00:34 +0000
Files and hashes: 1: JbxTavVyN4VB-2-yHRUzE-olFBw.roa (hash: ndHF6saCPra8ZdBchJ0UYhQb/9HrjIUbhfZeotuNPiU=)
2: oMfkJdM1AJ50uhjGB1W1nnJScB0.roa (hash: H4m9gh/HUrFKIN3OBkRa6uvBDmvc6JbZ7SJg5G/lfuQ=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: fYj6Iu4zn6T5lQxVjxPYLKOjQds2//GtfjkmR2vck7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:8d:dd:a1:37:b8:ed:15:26:ea:fa:b7:ad:8f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Aug 8 17:00:34 2025 GMT
Not After : Aug 9 17:00:34 2025 GMT
Subject: CN=f16a61102beb03403ba933a8554448ab643d5386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:0c:c1:ea:34:de:7c:9f:85:d1:43:8c:db:
f8:bb:af:1d:ee:74:4f:94:19:81:b6:96:70:46:c3:
c8:1c:2f:37:f5:4d:52:0a:58:4d:4b:54:b7:71:ee:
fe:81:17:eb:35:a6:05:66:ba:d4:97:fa:06:64:41:
f8:7f:ef:89:bd:9e:39:07:c2:99:6e:f7:25:69:72:
8b:43:53:eb:c8:f3:6f:88:89:05:46:19:08:04:47:
8b:2a:a0:fe:b8:5e:4f:ee:3e:e8:7e:44:cf:ac:5f:
12:d9:3e:14:69:a3:c8:02:fb:50:4d:3a:76:14:6c:
87:a4:66:88:aa:7f:d4:09:13:7a:64:e7:82:df:1d:
9a:28:42:85:04:dd:fc:39:58:1f:97:5a:e4:3f:b7:
d3:6e:ec:c7:86:c5:61:00:2d:6a:bb:e9:44:24:89:
46:dd:c0:92:7f:6d:12:5a:15:95:fc:68:c4:66:3f:
e5:4c:05:cb:ff:e3:04:79:7d:f0:10:42:45:2e:05:
fb:7f:02:80:4c:49:c8:cf:17:5a:9d:54:ae:9e:cf:
79:f5:ae:9d:5b:92:11:66:96:51:a3:fc:4e:43:0b:
90:98:2d:b5:c0:28:17:bf:66:40:1e:85:98:b8:fd:
e1:23:fc:d9:39:2e:a7:12:8f:e9:b7:23:29:cf:a0:
73:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6A:61:10:2B:EB:03:40:3B:A9:33:A8:55:44:48:AB:64:3D:53:86
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:40:d9:16:1a:92:9a:e2:ae:74:2c:61:60:e2:d2:88:e0:5d:
53:8f:08:2f:ed:b1:6d:87:c9:d6:ce:22:37:5b:e0:de:cc:2e:
11:29:ec:09:e5:24:fe:e8:bb:3a:76:f0:54:6c:78:ea:9d:e6:
ba:a9:10:81:48:01:7f:16:86:66:16:67:11:18:ac:09:d0:46:
51:3a:46:f6:6f:2c:54:85:cb:89:5c:30:a3:e6:ab:51:7a:79:
9c:7e:67:e1:73:6b:1b:7d:ed:f9:11:86:97:1b:0f:b1:a8:a7:
6a:f4:c9:ff:8f:1f:82:23:22:a6:24:1c:d9:b2:dc:56:cc:37:
bd:f1:87:7d:c2:2f:7d:cf:36:eb:71:f1:8e:fd:7b:be:c9:3a:
73:f4:1e:9c:6e:34:09:9b:32:98:8f:dc:ac:39:56:da:9a:17:
6d:93:04:8f:bf:1a:ae:45:52:8e:14:17:67:f4:f1:05:ec:f6:
aa:2b:08:11:d7:69:23:b2:26:a4:97:c3:3d:c8:7c:fd:e8:95:
09:04:b3:bd:f5:c3:f0:3d:f2:60:23:f2:32:93:6b:af:0d:4a:
ef:7b:4d:70:b0:3e:2c:f3:6b:a3:0c:22:cc:bc:49:17:ce:48:
9f:b1:27:29:39:3b:c5:65:08:32:a9:db:f5:d1:28:84:23:92:
16:90:ec:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKoI3doTe47RUm6vq3rY/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmZkMTIzY2I5M2UyNGUwMjVmOTUyODQyMTA4NDAyOTU4
ZDRhNGMwHhcNMjUwODA4MTcwMDM0WhcNMjUwODA5MTcwMDM0WjAzMTEwLwYDVQQD
EyhmMTZhNjExMDJiZWIwMzQwM2JhOTMzYTg1NTQ0NDhhYjY0M2Q1Mzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DUMweo03nyfhdFDjNv4u68d7nRP
lBmBtpZwRsPIHC839U1SClhNS1S3ce7+gRfrNaYFZrrUl/oGZEH4f++JvZ45B8KZ
bvclaXKLQ1PryPNviIkFRhkIBEeLKqD+uF5P7j7ofkTPrF8S2T4UaaPIAvtQTTp2
FGyHpGaIqn/UCRN6ZOeC3x2aKEKFBN38OVgfl1rkP7fTbuzHhsVhAC1qu+lEJIlG
3cCSf20SWhWV/GjEZj/lTAXL/+MEeX3wEEJFLgX7fwKATEnIzxdanVSuns959a6d
W5IRZpZRo/xOQwuQmC21wCgXv2ZAHoWYuP3hI/zZOS6nEo/ptyMpz6BzHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFqYRAr6wNAO6kzqFVESKtkPVOGMB8GA1UdIwQY
MBaAFLv/0SPLk+JOAl+VKEIQhAKVjUpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjIt
YWM0YTQwNjE3NDZkLzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjItYWM0YTQwNjE3NDZk
LzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUDZFhqS
muKudCxhYOLSiOBdU48IL+2xbYfJ1s4iN1vg3swuESnsCeUk/ui7OnbwVGx46p3m
uqkQgUgBfxaGZhZnERisCdBGUTpG9m8sVIXLiVwwo+arUXp5nH5n4XNrG33t+RGG
lxsPsainavTJ/48fgiMipiQc2bLcVsw3vfGHfcIvfc8263Hxjv17vsk6c/QenG40
CZsymI/crDlW2poXbZMEj78arkVSjhQXZ/TxBez2qisIEddpI7ImpJfDPch8/eiV
CQSzvfXD8D3yYCPyMpNrrw1K73tNcLA+LPNrowwizLxJF85In7EnKTk7xWUIMqnb
9dEohCOSFpDsZQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:53:10 2025 by rpki-client