Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: nxcpB4mpxvpfNa82hphNFC4+yC/jjB0q0nxYDXSSUhM=
Subject key identifier: 38:D3:68:EA:E5:4E:75:A4:F3:B2:84:A8:D4:99:6E:C0:15:86:77:F6
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 019A4EBD46ED6280875DFD038069A54FD241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0D28
Signing time: Tue 04 Nov 2025 12:00:18 +0000
Manifest this update: Tue 04 Nov 2025 12:00:18 +0000
Manifest next update: Wed 05 Nov 2025 12:00:18 +0000
Files and hashes: 1: 6PCU3cO78vRfN1wZw3JPqFUpklQ.roa (hash: eff/v1rdC28VDXM+608QCV+xjPWxDUMbjhPzXgxHkuc=)
2: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: N4N97OSDARc3397dWKasKbmkhtBDi3HMZFb96/m8cpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:46:ed:62:80:87:5d:fd:03:80:69:a5:4f:d2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Nov 4 12:00:18 2025 GMT
Not After : Nov 5 12:00:18 2025 GMT
Subject: CN=38d368eae54e75a4f3b284a8d4996ec0158677f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:2c:48:fc:bd:38:05:55:aa:a6:1e:73:0e:
15:75:75:29:fd:af:ad:9b:c1:38:c5:38:1a:18:8b:
16:e0:68:29:6d:ad:3d:c0:75:93:52:e1:a8:60:dd:
b5:41:37:48:bd:55:0a:30:eb:4a:4e:40:48:a1:ba:
da:c7:ca:92:22:b4:d4:39:a6:62:5d:11:2c:05:b6:
cc:bc:bd:32:c6:e6:c8:f3:e7:1e:bf:5d:14:aa:da:
a2:9c:0c:12:4a:28:69:b6:0f:1a:99:85:6c:75:eb:
fa:e9:33:67:69:34:c0:17:7e:7b:25:29:1b:da:b7:
a7:4e:6e:3b:5e:28:79:f3:15:23:12:6c:e0:9c:c1:
1d:b5:5a:2e:31:23:b4:43:20:54:a4:6a:61:49:d6:
a1:79:5e:3e:0b:9d:e6:72:26:a5:4d:96:70:47:ca:
5e:12:95:1a:a1:dc:e4:7d:de:d7:da:04:58:00:f5:
49:5b:43:6c:dd:33:54:12:5b:37:10:3a:13:b8:57:
3b:7d:f7:dd:86:64:43:4b:09:f3:8d:ce:ae:f6:76:
20:28:7b:4b:a2:7b:02:1c:00:c9:07:9e:61:16:48:
52:eb:bd:60:f1:4d:c2:b2:72:dd:71:8e:fe:74:e2:
ec:90:f2:b6:4a:ea:41:46:84:72:2b:3c:e3:78:7a:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D3:68:EA:E5:4E:75:A4:F3:B2:84:A8:D4:99:6E:C0:15:86:77:F6
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3f:41:9d:eb:6b:51:50:8e:1d:7f:93:11:af:06:10:2e:17:
ca:46:ea:4c:ac:bb:0e:79:33:14:60:8f:c2:f6:76:82:52:c9:
81:5f:68:a5:2d:c9:1c:fc:00:60:7f:93:c6:47:cc:0f:ab:25:
0b:d6:82:88:17:21:c7:90:75:87:da:e7:2f:e2:1d:6c:52:34:
3c:16:d1:99:3f:8c:4f:b8:14:bc:42:ae:cc:89:d8:64:ca:ed:
0c:2f:78:ae:7f:2d:53:6b:c1:2c:86:f9:d8:c8:74:5e:93:17:
06:30:c3:4c:c0:df:f4:70:59:b2:7f:88:fa:ea:98:fc:0f:a9:
cc:c4:01:5d:4c:a0:f1:06:2c:96:49:de:4f:ac:1b:bb:87:e5:
0a:5b:0b:df:c1:78:b6:42:83:df:07:9d:8d:f8:6d:02:2a:7a:
ad:45:a3:8a:ed:3a:20:9b:9f:58:62:7a:71:07:a0:cc:95:9e:
c5:8d:03:de:d1:d3:93:5c:db:f7:af:07:5a:01:56:2a:ce:a1:
45:1f:48:b0:ec:b6:d9:ba:5e:13:1a:cb:65:72:8b:7b:82:a6:
2d:cc:46:3c:d3:3d:b9:c4:e9:39:a4:ad:0a:a7:1d:95:c7:aa:
25:c9:30:87:be:5d:c0:0d:89:a2:5d:df:2a:a3:8c:33:ea:58:
6c:31:41:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvUbtYoCHXf0DgGmlT9JBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNzk4NDdhM2ZlOGU1Yzc4ODQ0MDI3Y2NhZjBiZDZlOWRh
NDYyNGEwHhcNMjUxMTA0MTIwMDE4WhcNMjUxMTA1MTIwMDE4WjAzMTEwLwYDVQQD
EygzOGQzNjhlYWU1NGU3NWE0ZjNiMjg0YThkNDk5NmVjMDE1ODY3N2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0AsSPy9OAVVqqYecw4VdXUp/a+t
m8E4xTgaGIsW4Ggpba09wHWTUuGoYN21QTdIvVUKMOtKTkBIobrax8qSIrTUOaZi
XREsBbbMvL0yxubI8+cev10UqtqinAwSSihptg8amYVsdev66TNnaTTAF357JSkb
2renTm47Xih58xUjEmzgnMEdtVouMSO0QyBUpGphSdaheV4+C53mcialTZZwR8pe
EpUaodzkfd7X2gRYAPVJW0Ns3TNUEls3EDoTuFc7fffdhmRDSwnzjc6u9nYgKHtL
onsCHADJB55hFkhS671g8U3CsnLdcY7+dOLskPK2SupBRoRyKzzjeHpMQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjTaOrlTnWk87KEqNSZbsAVhnf2MB8GA1UdIwQY
MBaAFLt5hHo/6OXHiEQCfMrwvW6dpGJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQt
MTBlNDBjNTg2NDk4LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQtMTBlNDBjNTg2NDk4
LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADz9Bnetr
UVCOHX+TEa8GEC4XykbqTKy7DnkzFGCPwvZ2glLJgV9opS3JHPwAYH+TxkfMD6sl
C9aCiBchx5B1h9rnL+IdbFI0PBbRmT+MT7gUvEKuzInYZMrtDC94rn8tU2vBLIb5
2Mh0XpMXBjDDTMDf9HBZsn+I+uqY/A+pzMQBXUyg8QYslkneT6wbu4flClsL38F4
tkKD3wedjfhtAip6rUWjiu06IJufWGJ6cQegzJWexY0D3tHTk1zb968HWgFWKs6h
RR9IsOy22bpeExrLZXKLe4KmLcxGPNM9ucTpOaStCqcdlceqJckwh75dwA2Jol3f
KqOMM+pYbDFBaQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:41:25 2025 by rpki-client