Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: pySIsqh/1HU+aLrmneS/DBMc56G9I/fmMTjqICnIpuM=
Subject key identifier: 24:64:54:E0:CC:E0:A8:B6:E8:CC:65:26:60:1E:E0:E9:88:5F:35:00
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 019A54BFE40C217C225F0AED2387D6EE3EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0BB1
Signing time: Wed 05 Nov 2025 16:00:53 +0000
Manifest this update: Wed 05 Nov 2025 16:00:53 +0000
Manifest next update: Thu 06 Nov 2025 16:00:53 +0000
Files and hashes: 1: DIYIrtOVCh0oZUgoHnsBzDVYRgk.roa (hash: 9ygbw2KxTYEdLBVrIZpBTqLv2Fu0lBk+DuBHrlgf8dM=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: tr5Le8N828Z7p2dSZV91pl7BUjOlXThIRcdy3PTRtPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:e4:0c:21:7c:22:5f:0a:ed:23:87:d6:ee:3e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Nov 5 16:00:53 2025 GMT
Not After : Nov 6 16:00:53 2025 GMT
Subject: CN=246454e0cce0a8b6e8cc6526601ee0e9885f3500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:ec:bf:21:74:d2:43:7b:80:35:3f:b6:03:
90:9a:4d:0a:0d:0e:32:df:d9:1f:82:d9:d7:52:a3:
37:d3:4f:5d:7c:fc:6d:0c:d1:09:f2:d8:11:19:b8:
8d:a6:09:34:a7:9a:9b:86:27:f3:67:79:33:92:53:
d4:66:d7:d1:00:42:79:15:f4:21:7a:42:aa:f0:69:
11:77:3b:b7:6b:1e:20:97:ba:6a:40:ac:14:d4:22:
0a:38:e9:ef:ba:7b:2b:65:5f:7b:2c:2f:54:13:65:
99:05:c4:53:95:c1:06:a9:4e:5b:f0:0d:35:8e:31:
f0:69:ec:7a:0d:35:3e:10:57:eb:43:cb:5a:8d:32:
11:82:ca:3b:ba:ad:50:4d:13:72:ea:33:4f:44:79:
5e:94:3a:cd:e6:2e:55:a0:e8:b8:d5:b5:fa:d0:49:
48:b2:38:ee:7f:a9:f0:ae:ed:50:1f:01:48:12:c6:
2a:9a:18:08:aa:1f:fe:fa:78:30:4b:b1:ef:f8:af:
0b:98:45:b2:a9:14:36:2f:4f:a6:0c:97:e7:f0:8e:
a4:01:db:39:b1:a6:b0:b5:17:51:47:41:7c:56:59:
a6:4a:d9:fa:cb:11:c3:c2:d4:ef:b1:76:3c:9e:f5:
88:a7:4b:8d:de:3c:3a:dd:49:a3:be:24:d2:80:21:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:64:54:E0:CC:E0:A8:B6:E8:CC:65:26:60:1E:E0:E9:88:5F:35:00
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ac:47:46:23:41:21:15:51:56:06:e5:c4:0e:8f:60:66:95:
d4:02:24:9a:b9:d4:5e:03:35:a0:eb:11:1b:39:54:27:ee:1a:
45:fb:01:9e:43:25:ce:de:33:30:80:ab:00:3d:dc:cf:69:9a:
99:14:6f:87:7f:2d:53:70:6a:10:8e:8b:54:91:38:2e:8e:bc:
06:c2:1b:5b:50:27:64:7f:7a:e3:8e:95:c4:5b:b2:d0:14:17:
78:d8:38:bb:a7:82:2d:fc:9b:cc:06:6e:63:ae:0c:6c:73:01:
ba:1f:82:06:18:15:5c:00:e0:08:cb:37:63:77:d9:3e:39:ea:
60:21:73:c4:a2:4b:aa:11:9e:e2:08:52:e9:56:29:06:a3:14:
df:88:c1:03:bc:c8:c5:df:9f:18:7d:2c:81:a9:51:73:d1:7e:
20:f5:2c:27:9a:b0:55:f9:59:aa:e4:66:b1:41:ad:82:ae:34:
14:fc:68:5a:2a:03:a7:87:0d:14:aa:0d:54:04:1e:a4:3f:f6:
2f:9d:ad:d1:1e:b6:9b:f3:a9:54:bb:66:c2:9a:7f:3a:8e:d7:
6b:55:96:d2:18:3a:c1:fe:e5:a8:ba:44:dc:c6:3a:e8:e6:f6:
f8:b9:24:3b:50:70:3d:a2:d2:2b:c8:a8:a5:28:24:00:4c:ef:
5b:24:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:21:32 2025 by rpki-client