Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
File: u-Eo3LaBD_3FArowR81BkTLaInQ.mft (raw, json)
Hash identifier: TRkU6T/Gyw1K026rWVDCdau++dN1ENLMys4w1Y2qNpw=
Subject key identifier: 3B:70:38:C5:06:AC:ED:E9:B1:12:01:00:BB:61:8F:F6:4D:2A:27:8D
Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Certificate issuer: /CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Certificate serial: 019A541B1BA7551E6EF1965F02241C579329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
Manifest number: 1662
Signing time: Wed 05 Nov 2025 13:00:53 +0000
Manifest this update: Wed 05 Nov 2025 13:00:53 +0000
Manifest next update: Thu 06 Nov 2025 13:00:53 +0000
Files and hashes: 1: KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa (hash: 7vZ+OrglKDbrLCd5IBuAg6rXUphyAUCG7HZaGMHHYfs=)
2: u-Eo3LaBD_3FArowR81BkTLaInQ.crl (hash: mxUsXrFyVRGjMthvaJgl7wzvHI2e7iQHbtwnD5kWAM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:1b:a7:55:1e:6e:f1:96:5f:02:24:1c:57:93:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Validity
Not Before: Nov 5 13:00:53 2025 GMT
Not After : Nov 6 13:00:53 2025 GMT
Subject: CN=3b7038c506acede9b1120100bb618ff64d2a278d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:de:9f:a4:35:d9:10:bf:dd:25:f0:82:79:
25:c2:4e:af:46:73:3e:b6:58:e1:59:f2:99:17:87:
84:9c:5b:e1:c3:99:a9:9a:2a:fa:73:90:67:49:97:
ec:97:7c:5e:10:b6:19:7e:ef:47:3e:13:28:8c:11:
57:8f:2e:bf:16:fe:b1:d3:af:bb:92:33:c5:9e:f0:
09:8f:30:95:8c:59:87:2f:5e:64:01:08:ba:07:0f:
79:e1:63:ac:32:30:2a:7f:80:2a:7a:f6:f1:d9:10:
af:87:6a:9a:62:fe:45:e2:9a:14:1c:6e:56:27:86:
f0:7b:19:8e:51:b9:95:7a:6c:be:68:62:be:e3:26:
9e:78:93:3d:0a:29:f2:bc:4c:a2:00:99:30:6c:9c:
5b:29:db:dc:e1:8f:49:5d:9a:1e:04:90:18:04:24:
74:f7:7f:9b:d4:d2:1c:b8:ad:b1:a5:1c:3a:d4:f0:
f5:b7:a6:a5:73:3d:99:b5:99:7e:21:6a:1c:b4:77:
c9:0b:df:0a:b9:a0:e9:f4:d6:aa:db:41:b9:c2:59:
59:4c:a6:b3:79:f8:3c:37:8f:0d:0e:47:64:a2:78:
fa:1a:0f:9f:63:85:b1:81:9f:61:51:37:47:ed:b8:
c4:9e:b6:5f:8c:d6:f0:18:f2:e6:9b:d7:30:f3:7a:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:70:38:C5:06:AC:ED:E9:B1:12:01:00:BB:61:8F:F6:4D:2A:27:8D
X509v3 Authority Key Identifier:
keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:7f:06:b7:d6:d3:ad:fb:81:f4:a2:51:a7:49:47:8c:7d:a4:
86:c1:ea:69:a2:52:91:e0:64:1b:65:48:ee:3a:2e:2d:10:8a:
e5:25:bf:cf:6a:93:2e:4c:5a:df:be:22:03:98:b1:30:25:3a:
99:39:74:ff:1e:10:5b:93:a9:15:3e:65:df:aa:02:a4:ec:17:
46:c9:8d:8e:47:f7:1a:50:28:fb:92:61:3d:16:c9:c8:42:0a:
73:8c:9b:1f:cc:ef:d7:86:52:90:be:2a:97:c0:1b:c4:9a:dd:
f7:b7:ad:ad:fc:ad:b2:1c:c4:2a:92:8b:22:20:71:1a:41:0f:
63:af:c6:20:c8:b0:ce:fc:19:76:7b:1e:86:2a:ac:11:f7:2b:
24:a7:28:af:89:2a:33:df:b8:58:a1:a4:1d:c2:5e:20:f0:c6:
68:6c:6e:1a:fe:92:09:13:bb:72:4d:03:8c:9b:ee:5b:2b:30:
bf:8f:72:b6:a8:23:00:16:bf:a4:9b:c1:50:cb:4c:06:30:8f:
18:9c:73:21:7c:cc:19:7c:8a:f9:0c:01:2b:c8:25:a5:09:e4:
39:2e:0b:2e:cb:58:cf:21:16:72:bd:a3:ff:67:8c:c2:c2:07:
58:28:03:46:31:f0:88:7f:a1:10:80:35:d5:cf:b0:90:02:da:
e9:12:be:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:21:50 2025 by rpki-client