Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
File: u_e8bHyTo8-x4lu778TyB64lvaU.mft (raw, json)
Hash identifier: 8vLG7Yf+5uqtPt3g5ozadgO8kdO1IwYSgswzYOMDjA0=
Subject key identifier: 3B:EF:A4:15:46:D9:2D:4B:46:CF:44:A6:8B:DD:70:4A:05:26:59:48
Authority key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
Certificate issuer: /CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Certificate serial: 019A4F620777C6CDCAE6227FF003DAFD6BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
Manifest number: 0A3F
Signing time: Tue 04 Nov 2025 15:00:15 +0000
Manifest this update: Tue 04 Nov 2025 15:00:15 +0000
Manifest next update: Wed 05 Nov 2025 15:00:15 +0000
Files and hashes: 1: BbjjnTO6x8pCO-c9XIXawU4Q-Wg.roa (hash: O0QT5VY+thGDoU+G5JqnH6rDs/DiZAhj1p6YD6BBCu4=)
2: u_e8bHyTo8-x4lu778TyB64lvaU.crl (hash: mgb7EbDpU+FnDzmxI+cm4Li/rrtmQp6rbjkxUvC2mvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:07:77:c6:cd:ca:e6:22:7f:f0:03:da:fd:6b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Validity
Not Before: Nov 4 15:00:15 2025 GMT
Not After : Nov 5 15:00:15 2025 GMT
Subject: CN=3befa41546d92d4b46cf44a68bdd704a05265948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:3b:4e:71:ed:71:03:b0:47:db:e5:02:54:
6d:25:39:36:e4:55:83:f6:f1:20:1f:ec:e2:f1:ac:
28:84:0b:48:20:ee:0d:92:a7:4f:ed:86:d3:a0:23:
1b:d4:c0:10:3a:38:b7:14:49:80:c4:c9:01:64:b8:
a4:70:31:0e:2b:c2:c6:e5:de:80:6f:11:9a:61:26:
23:1b:92:10:f9:f6:e2:ea:6b:68:9b:21:ac:09:6c:
78:83:c6:18:38:69:d7:63:9d:ab:da:25:8e:fe:db:
67:1e:c9:0a:bb:d9:02:7b:3b:e8:e2:db:b4:20:fb:
7f:70:bc:bf:e9:d8:ea:25:95:df:7c:c5:8d:0a:75:
c2:fc:6a:da:e6:2e:e9:f1:ab:81:e9:d8:14:d5:99:
79:c0:27:ee:72:12:45:7e:be:29:ff:09:55:70:3d:
8a:04:b9:7f:ac:26:f5:9b:a8:4a:57:62:bd:45:82:
6d:05:72:17:d5:f8:10:97:ff:bd:ad:4d:08:03:43:
60:06:00:d6:e6:44:52:4f:7c:6d:4b:36:16:63:0b:
be:37:39:98:f3:68:c5:55:bb:96:f2:31:b3:61:a7:
84:ab:7f:33:b8:99:e2:e8:9f:83:49:fc:37:a5:fc:
27:28:21:96:e0:53:f3:98:08:82:98:af:77:19:b2:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EF:A4:15:46:D9:2D:4B:46:CF:44:A6:8B:DD:70:4A:05:26:59:48
X509v3 Authority Key Identifier:
keyid:BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f3:98:c6:62:05:3f:d7:0d:51:97:b4:3d:f0:db:db:bd:de:
53:21:7d:a4:31:a3:36:20:89:0b:5f:cd:fb:62:1c:30:b6:3e:
3d:df:93:a3:e2:80:c0:6c:e9:4f:e7:1f:d1:65:cf:97:cb:fe:
65:5f:56:f5:2c:c3:07:07:12:7a:84:7a:2b:02:f0:e8:63:09:
ec:41:65:5a:b4:d6:e1:04:f0:6a:d3:f5:34:e7:ed:52:3b:04:
d1:40:c4:e6:ac:d2:43:15:f4:e8:20:6b:ca:fe:93:b0:59:90:
d6:76:ab:9e:3d:11:3b:17:16:54:31:37:7a:93:08:c9:2e:60:
c0:41:79:8c:9a:67:91:26:9d:80:ff:e8:76:04:b1:47:af:67:
2d:87:97:cb:8b:14:00:69:91:0d:4d:cc:70:08:34:a3:ce:a0:
34:5a:07:c5:23:e8:e1:df:e3:1a:8e:f7:bb:de:b3:6e:3d:00:
c5:a4:f6:6b:72:bd:8b:06:4e:b6:e9:e2:e1:eb:94:0d:fc:69:
63:a7:0b:e9:fb:9b:e2:59:e5:3c:e0:14:fb:37:4f:c8:69:d2:
dd:bd:89:81:15:a2:49:98:9b:01:e6:ef:7c:e4:00:4f:0a:0a:
8d:7f:10:c1:7d:e0:2d:2c:e3:24:ab:a7:f3:6d:44:7e:93:c7:
23:14:ae:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYgd3xs3K5iJ/8APa/WumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjdiYzZjN2M5M2EzY2ZiMWUyNWJiYmVmYzRmMjA3YWUy
NWJkYTUwHhcNMjUxMTA0MTUwMDE1WhcNMjUxMTA1MTUwMDE1WjAzMTEwLwYDVQQD
EygzYmVmYTQxNTQ2ZDkyZDRiNDZjZjQ0YTY4YmRkNzA0YTA1MjY1OTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiM7TnHtcQOwR9vlAlRtJTk25FWD
9vEgH+zi8awohAtIIO4NkqdP7YbToCMb1MAQOji3FEmAxMkBZLikcDEOK8LG5d6A
bxGaYSYjG5IQ+fbi6mtomyGsCWx4g8YYOGnXY52r2iWO/ttnHskKu9kCezvo4tu0
IPt/cLy/6djqJZXffMWNCnXC/Gra5i7p8auB6dgU1Zl5wCfuchJFfr4p/wlVcD2K
BLl/rCb1m6hKV2K9RYJtBXIX1fgQl/+9rU0IA0NgBgDW5kRST3xtSzYWYwu+NzmY
82jFVbuW8jGzYaeEq38zuJni6J+DSfw3pfwnKCGW4FPzmAiCmK93GbJnHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvvpBVG2S1LRs9EpovdcEoFJllIMB8GA1UdIwQY
MBaAFLv3vGx8k6PPseJbu+/E8geuJb2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xMWM0MTEtYTc3NS00ODY4LTlkMjct
NTkwZjU0MGM0NTZkLzEvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xMWM0MTEtYTc3NS00ODY4LTlkMjctNTkwZjU0MGM0NTZk
LzEvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfOYxmIF
P9cNUZe0PfDb273eUyF9pDGjNiCJC1/N+2IcMLY+Pd+To+KAwGzpT+cf0WXPl8v+
ZV9W9SzDBwcSeoR6KwLw6GMJ7EFlWrTW4QTwatP1NOftUjsE0UDE5qzSQxX06CBr
yv6TsFmQ1narnj0ROxcWVDE3epMIyS5gwEF5jJpnkSadgP/odgSxR69nLYeXy4sU
AGmRDU3McAg0o86gNFoHxSPo4d/jGo73u96zbj0AxaT2a3K9iwZOtuni4euUDfxp
Y6cL6fub4lnlPOAU+zdPyGnS3b2JgRWiSZibAebvfOQATwoKjX8QwX3gLSzjJKun
821EfpPHIxSuaw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:47 2025 by rpki-client