Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: xI+QQ4HsE3GHBFBB9ODKg8cDhUjqUZntTh44+gwtYm8=
Subject key identifier: 86:B3:FB:4E:3E:CC:63:E3:8B:C2:AB:AB:AA:07:1F:9A:67:C2:D6:97
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 019A507526F274C796B07213D49763CF49AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 13EA
Signing time: Tue 04 Nov 2025 20:00:46 +0000
Manifest this update: Tue 04 Nov 2025 20:00:46 +0000
Manifest next update: Wed 05 Nov 2025 20:00:46 +0000
Files and hashes: 1: JsF7FSwQaPNv5Ht3PNC4VICZzd4.roa (hash: fSvD3kvN3V7LC//WVhYwoHgh3jtQgyM95Ezj/Ar5cRU=)
2: mt-PyfiXYcQcKgR1e8Hsx5c4PoM.roa (hash: LeF0Pn1F55UIMk8YIasYk9VsWh941JF4CLigZGdvfv8=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: ofxmOVLP4VrTU8qF95u/BBK6y9lTDVBHi0YRcG3ZIhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:26:f2:74:c7:96:b0:72:13:d4:97:63:cf:49:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Nov 4 20:00:46 2025 GMT
Not After : Nov 5 20:00:46 2025 GMT
Subject: CN=86b3fb4e3ecc63e38bc2ababaa071f9a67c2d697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:9a:20:b5:0d:4c:ec:6e:0c:56:f6:11:a1:
13:e5:6b:6f:55:c8:fa:bb:4b:75:45:8b:d3:db:78:
da:36:99:0a:a3:26:cd:f2:04:c2:2e:17:4b:81:fc:
aa:7b:dc:69:38:68:8c:3d:e2:5c:52:2c:86:bb:b7:
10:7d:9f:ef:a6:5b:52:49:a8:24:9f:f1:38:31:17:
1f:e2:c1:4f:2c:2f:09:06:16:01:39:2f:d9:c5:62:
7a:cf:28:75:a4:4c:f9:bf:84:5f:6e:1f:22:2b:89:
30:c4:c0:9f:c8:cf:67:55:bd:8e:0c:77:45:11:82:
ee:d0:1c:e0:b3:c5:f4:f2:19:70:36:f7:04:b0:2d:
56:4a:48:86:78:aa:b0:bd:8d:f2:28:ac:1a:fc:68:
98:c1:c4:05:ae:bb:c8:e9:bf:a9:dd:62:24:9a:54:
ab:0f:d6:84:0e:d9:11:53:56:9e:8d:7f:3b:2e:cb:
bc:50:36:e3:61:a8:d1:d6:4f:8c:32:e3:f5:59:bd:
5e:04:d6:33:9c:9d:e0:45:de:b3:9d:0f:06:14:83:
7b:bd:e2:22:97:61:d3:a4:85:d9:59:06:59:02:b8:
fe:a2:e2:94:e0:92:09:65:5c:3f:6a:61:fc:05:db:
d0:cd:1f:23:7c:e1:78:a1:a1:12:e6:cb:3d:b9:54:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B3:FB:4E:3E:CC:63:E3:8B:C2:AB:AB:AA:07:1F:9A:67:C2:D6:97
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d1:10:8f:23:55:a0:5a:5a:52:0e:f7:05:d3:62:2e:93:30:
03:33:c3:ab:e4:e9:3e:5a:68:f5:b0:61:bc:40:02:16:0d:81:
c1:20:3c:28:11:c1:50:a4:a3:b6:5b:82:04:46:15:40:87:34:
f6:f6:3d:92:f8:91:5f:c9:75:06:e0:a2:86:6d:ba:95:79:4b:
3c:32:83:17:05:74:bc:4b:82:aa:c6:35:28:8c:53:27:f0:9f:
e7:d4:39:23:a0:64:22:bd:40:3e:de:ae:f9:77:df:a7:6f:e3:
51:63:a8:c0:1b:15:4c:41:b4:22:a7:b3:7d:5b:e0:27:4d:b9:
b0:01:bb:ea:be:49:70:06:61:40:f4:0b:8c:4c:6b:c5:c5:b7:
b6:84:45:d8:cc:38:07:3f:e7:6c:a1:cc:f7:da:f6:f9:40:23:
31:71:43:a7:7e:e2:50:fb:dc:cc:d0:53:23:dc:c4:e4:93:e9:
25:4b:a9:ef:e8:67:a6:4c:66:3e:6a:4c:2d:b7:fa:a2:10:79:
05:03:4a:9d:e5:ec:f9:5c:51:29:7d:12:a6:13:a9:df:11:af:
5c:7a:5b:f6:20:6c:c1:c0:11:c3:3d:20:8c:9e:41:7a:ec:1d:
ff:ef:aa:d9:9a:a3:44:8f:da:4f:76:03:0b:78:bc:c5:1b:c4:
00:b2:1e:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdSbydMeWsHIT1Jdjz0muMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYzU1ZmIyNGFkNTU2ZTA0MjAyNjUxZjZkNWE4YjI3ZDVi
ZWRmOTcwHhcNMjUxMTA0MjAwMDQ2WhcNMjUxMTA1MjAwMDQ2WjAzMTEwLwYDVQQD
Eyg4NmIzZmI0ZTNlY2M2M2UzOGJjMmFiYWJhYTA3MWY5YTY3YzJkNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzaaILUNTOxuDFb2EaET5WtvVcj6
u0t1RYvT23jaNpkKoybN8gTCLhdLgfyqe9xpOGiMPeJcUiyGu7cQfZ/vpltSSagk
n/E4MRcf4sFPLC8JBhYBOS/ZxWJ6zyh1pEz5v4Rfbh8iK4kwxMCfyM9nVb2ODHdF
EYLu0Bzgs8X08hlwNvcEsC1WSkiGeKqwvY3yKKwa/GiYwcQFrrvI6b+p3WIkmlSr
D9aEDtkRU1aejX87Lsu8UDbjYajR1k+MMuP1Wb1eBNYznJ3gRd6znQ8GFIN7veIi
l2HTpIXZWQZZArj+ouKU4JIJZVw/amH8BdvQzR8jfOF4oaES5ss9uVQCNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaz+04+zGPji8Krq6oHH5pnwtaXMB8GA1UdIwQY
MBaAFLvFX7JK1VbgQgJlH21aiyfVvt+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMt
OTNiZDVlNDA4ZjkxLzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMtOTNiZDVlNDA4Zjkx
LzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNEQjyNV
oFpaUg73BdNiLpMwAzPDq+TpPlpo9bBhvEACFg2BwSA8KBHBUKSjtluCBEYVQIc0
9vY9kviRX8l1BuCihm26lXlLPDKDFwV0vEuCqsY1KIxTJ/Cf59Q5I6BkIr1APt6u
+Xffp2/jUWOowBsVTEG0IqezfVvgJ025sAG76r5JcAZhQPQLjExrxcW3toRF2Mw4
Bz/nbKHM99r2+UAjMXFDp37iUPvczNBTI9zE5JPpJUup7+hnpkxmPmpMLbf6ohB5
BQNKneXs+VxRKX0SphOp3xGvXHpb9iBswcARwz0gjJ5Beuwd/++q2ZqjRI/aT3YD
C3i8xRvEALIeow==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:51:01 2025 by rpki-client