Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
File: u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json)
Hash identifier: PlHSerI5Y0CD7ohNY2Io1ETAKt+IGHg2aYF/AwH9ymU=
Subject key identifier: 68:1A:D6:33:60:EF:41:B6:8A:AF:0D:AC:41:F6:59:72:9F:04:78:AB
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Certificate issuer: /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial: 019A53E3A4853A062804BA3A3EABB6DCA067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
Manifest number: AD
Signing time: Wed 05 Nov 2025 12:00:18 +0000
Manifest this update: Wed 05 Nov 2025 12:00:18 +0000
Manifest next update: Thu 06 Nov 2025 12:00:18 +0000
Files and hashes: 1: 3OCyfd9-b0yR0abVJP1F9gKnVqM.roa (hash: /G4JQWC4tt8/O3EYdqfvI2PzBBGKVWMhd1Rq8kOs3ds=)
2: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: IJBkg/vqRH1F40YeYumtXR3Ozspqf0xjeDcfTqnlYDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:a4:85:3a:06:28:04:ba:3a:3e:ab:b6:dc:a0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Validity
Not Before: Nov 5 12:00:18 2025 GMT
Not After : Nov 6 12:00:18 2025 GMT
Subject: CN=681ad63360ef41b68aaf0dac41f659729f0478ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:39:82:6b:cb:a7:8c:33:a2:89:70:30:b7:
db:8c:35:fa:a3:05:f7:b8:9a:1f:22:50:ce:fd:e3:
54:7f:69:d7:e0:fe:d5:41:54:22:50:b0:ff:b6:d7:
51:aa:77:df:54:13:ba:f7:56:1e:6e:30:1c:8a:8a:
00:38:d5:7d:25:99:d1:53:c2:3a:8a:5a:42:54:87:
23:77:e8:9f:fa:8f:a9:ce:6e:7e:73:b8:e2:21:e1:
d4:62:79:7a:fb:c4:31:e3:91:db:62:af:f0:aa:99:
7c:1b:ef:36:16:79:83:3c:57:f8:6c:94:6e:d2:54:
e4:18:33:42:b4:12:5b:86:87:1c:69:91:34:b0:ce:
da:17:c4:6a:58:f7:20:92:09:12:a9:8c:75:13:8c:
0f:8b:a6:a0:b8:35:b7:a5:ac:d3:a2:f4:dc:e6:1a:
7d:72:9c:ae:b3:3a:34:60:4a:9c:fb:54:9f:4c:85:
19:dd:bf:ca:41:5a:22:60:b6:f8:d5:2f:4f:60:cf:
0c:06:f0:0e:78:49:cd:58:eb:62:c3:c2:6b:27:35:
60:2f:81:ee:cf:2f:aa:c7:3b:65:23:08:e5:35:44:
8d:7f:3b:44:56:3b:62:47:3d:03:2c:f3:d4:45:b9:
b3:fe:3c:42:a5:8b:86:a8:41:54:6f:1d:35:6e:9f:
69:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1A:D6:33:60:EF:41:B6:8A:AF:0D:AC:41:F6:59:72:9F:04:78:AB
X509v3 Authority Key Identifier:
keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c0:c7:c9:d0:10:f5:cf:2a:4a:2a:58:a6:72:c2:2c:ec:82:
35:5f:ee:f3:36:0a:a2:fd:29:41:36:81:84:a9:07:4c:f0:fe:
ea:45:02:d5:de:14:47:d9:d9:5f:02:02:50:d7:ea:ff:01:0b:
66:a1:7b:b7:bd:65:0a:78:59:2c:fe:28:9b:bc:d2:09:bd:72:
43:dc:bb:af:b1:fb:23:d4:50:63:fc:6f:6c:e7:18:27:1f:81:
ea:f3:90:de:07:44:99:00:14:91:cc:06:7a:b7:d8:b0:f5:e0:
3c:1c:f2:86:e9:4a:dd:3e:54:d8:97:24:4d:f2:c8:f4:75:77:
cb:23:05:ee:c2:a4:0a:52:8f:cb:4a:3c:c3:0d:23:8a:d8:f4:
85:3b:1f:f2:3a:a2:ad:1e:00:70:e0:a5:0a:f5:48:6a:10:e1:
4f:33:96:5b:7b:20:0d:1f:ae:77:d6:d6:20:ea:d3:ce:24:9e:
24:cc:dd:ce:9c:0a:4a:14:64:9f:8a:83:b3:47:70:07:58:f8:
b9:bd:a8:86:2b:e6:5c:14:80:81:40:7e:ef:04:54:2a:7a:50:
d9:1d:8e:00:f8:f1:9d:31:9a:45:73:cf:1b:e8:fe:8b:36:66:
c4:e0:d3:92:7f:67:6c:25:97:db:e3:2e:2e:df:8a:6a:00:73:
76:f3:93:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:54:56 2025 by rpki-client