Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: Hoj0EYOoZ+bBfPvEmcNzKpId/t8xwKQq23jyoqI1Q2Q=
Subject key identifier: 8D:5F:EC:42:D6:5C:33:AE:78:19:76:F0:E0:14:E7:8C:AD:8D:D0:1F
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 019A4D73F298746A747D076CA1750D12E07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:35 +0000
Manifest this update: Tue 04 Nov 2025 06:00:35 +0000
Manifest next update: Wed 05 Nov 2025 06:00:35 +0000
Files and hashes: 1: tUE8baZVU1NdKeMuH6kAeF6d40U.roa (hash: oR4YGvS/x8NPWIpEMxxjQSUvcEGgnnG9XZinqPPpzBA=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: lJcyTTH5azN4RabwCTVBG17p3LkuTCcrEql6crhduhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f2:98:74:6a:74:7d:07:6c:a1:75:0d:12:e0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Nov 4 06:00:35 2025 GMT
Not After : Nov 5 06:00:35 2025 GMT
Subject: CN=8d5fec42d65c33ae781976f0e014e78cad8dd01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:e7:37:49:0c:c5:a4:11:f8:3f:28:c5:55:
53:09:cd:6c:8f:70:ab:64:95:a8:60:a9:a9:62:ba:
71:1b:22:89:2b:47:ba:d4:ce:ec:2e:52:6a:da:7c:
14:84:69:c9:1d:05:53:ef:36:56:7c:6b:51:93:1e:
95:48:df:f0:20:93:67:8d:5b:46:81:70:63:6e:a8:
54:7f:17:99:c9:85:cf:c6:ab:bb:58:ee:59:47:15:
b1:3f:c1:5c:a1:95:0f:91:98:68:a5:88:f0:ab:e7:
a0:7d:5a:32:db:9b:62:02:df:77:c1:e8:61:bc:32:
6b:b8:7e:c2:2a:94:f3:24:07:54:f8:5a:2a:e6:b0:
a5:0d:9f:0e:2a:7b:2c:cd:98:bf:76:c9:17:c1:53:
cc:0f:f5:da:c5:48:77:57:50:7c:31:50:73:35:7f:
b8:c0:25:a8:b8:1d:a2:8c:af:42:45:05:cc:ee:e7:
b2:57:96:3c:a9:c4:1c:24:e9:9b:d2:b1:cb:55:41:
0e:90:c4:f2:14:82:80:7d:cc:3b:ac:9f:69:4b:d5:
f5:15:15:bd:10:82:f9:58:45:66:8b:ea:63:0d:e1:
9a:cb:05:08:b4:49:e3:13:60:3e:88:b9:5d:d3:3d:
00:7a:22:86:53:3d:e0:37:7c:9e:d8:61:56:f8:33:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5F:EC:42:D6:5C:33:AE:78:19:76:F0:E0:14:E7:8C:AD:8D:D0:1F
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1c:b1:6c:cd:72:48:42:96:e0:6d:87:8d:66:11:7e:60:a4:
59:91:b7:67:07:96:7a:54:4b:09:67:e5:9d:a1:ad:a5:45:6a:
36:fb:d7:98:77:7a:e4:ba:48:d6:21:85:ec:fd:fc:5b:1c:85:
a4:3c:b8:52:f0:ab:14:3a:dd:dd:ad:de:71:59:f3:7e:4a:c5:
4e:74:a2:2b:76:1c:72:c8:45:a8:12:5e:9c:fa:2e:17:54:9c:
68:3b:53:5d:af:5e:1f:f0:bd:0c:69:67:2a:68:fe:3e:e3:67:
4f:54:21:cc:27:94:96:7f:0e:cd:ca:42:1f:48:63:76:c8:e9:
b0:48:4e:8b:6e:d3:0c:8b:2a:11:1c:22:fa:84:93:6b:81:17:
b5:06:f5:1e:55:f9:a0:58:de:3d:18:76:3a:c0:a7:74:77:97:
b9:75:ea:e6:20:85:33:61:98:e7:20:a3:23:fe:21:77:60:10:
db:8b:40:aa:d9:29:eb:ca:d4:e3:d4:a5:e9:8b:56:51:30:38:
6f:ee:32:c2:bf:91:ec:d8:5c:db:b8:02:5a:54:ec:3e:56:71:
df:e2:ce:d4:20:e5:85:f4:7f:3a:01:8e:6b:20:59:5b:0b:db:
e3:ae:d9:e9:f8:40:6f:32:fc:f8:4b:ce:f1:e2:62:aa:5e:8e:
69:88:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:32 2025 by rpki-client