Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: 9YyOfvXe48+N+4uR2C5kjLrPedz8Iwx4VgHaSW6w0Uk=
Subject key identifier: B3:5D:27:F1:EF:69:17:84:16:BC:A5:FE:B6:A5:C9:CD:CE:AE:CD:BF
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 019A4E8633EB511A16F56C5DA12B410BB9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 128E
Signing time: Tue 04 Nov 2025 11:00:09 +0000
Manifest this update: Tue 04 Nov 2025 11:00:09 +0000
Manifest next update: Wed 05 Nov 2025 11:00:09 +0000
Files and hashes: 1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: lN4wXhV2dwm1+mowG/wjBAcAWqDC+IG3Er6Sl1w0GvI=)
3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:33:eb:51:1a:16:f5:6c:5d:a1:2b:41:0b:b9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Nov 4 11:00:09 2025 GMT
Not After : Nov 5 11:00:09 2025 GMT
Subject: CN=b35d27f1ef69178416bca5feb6a5c9cdceaecdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:1e:00:65:32:70:13:40:de:f7:c8:74:a6:
c7:f7:7a:bb:c2:6c:6d:47:5a:1d:b1:8e:00:b1:0a:
30:c4:92:0b:2c:e5:b0:82:a4:06:fa:13:b3:8c:bb:
72:50:5d:c2:15:fc:4e:20:7b:80:8d:b1:ca:0f:8d:
26:f1:c6:da:f6:65:b5:3e:e3:6a:22:46:87:05:3a:
ad:f2:9d:58:17:9b:91:b5:a1:20:5b:e8:3f:f1:93:
07:a4:3f:14:29:66:21:2e:78:a4:7f:22:a1:ea:40:
99:63:e4:78:71:68:80:d4:11:35:3c:87:0a:9e:2d:
63:83:fd:9c:fb:ed:d2:e8:c6:e8:86:c7:f4:7d:2e:
a8:87:80:23:53:2b:15:81:b9:a9:36:fb:b0:5f:6b:
ed:86:ea:6b:6e:0a:c3:7d:4f:df:a9:95:c2:de:da:
6e:55:00:90:ed:c1:7f:a7:76:35:cd:8d:2e:9e:56:
c0:b4:71:ab:93:e4:86:fa:39:f5:5e:4a:5e:5d:74:
aa:1a:2c:0b:9d:65:7e:81:d5:17:6d:66:c9:b0:27:
1b:21:0e:66:22:74:04:5d:94:9a:3d:cd:64:a3:a4:
b4:b9:42:57:65:39:38:b4:b8:ea:72:2d:c5:e9:03:
bf:7e:46:b2:c3:20:f3:af:c0:49:f3:0d:a5:0d:f3:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5D:27:F1:EF:69:17:84:16:BC:A5:FE:B6:A5:C9:CD:CE:AE:CD:BF
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cf:13:cb:6b:1d:d6:c2:2e:b1:05:d7:27:ef:05:30:ab:d1:
3e:2a:c0:9c:93:d1:e5:7c:ad:b5:88:f6:bb:76:f9:fc:98:12:
f8:12:0d:d5:bc:9c:22:6b:a7:b4:80:53:f3:a4:a5:83:9c:5c:
cd:7f:b4:77:6d:fe:45:ce:1d:6b:2a:99:18:29:a4:d5:79:4e:
d9:6f:ef:98:26:62:cf:e4:61:28:5b:6e:c6:a4:cb:36:39:56:
7c:7d:d7:22:71:78:a8:8b:ac:1f:15:ed:3f:39:67:b5:48:fa:
61:8d:7c:9e:f1:cc:12:cd:a3:3d:6f:59:2f:51:7a:8d:76:8f:
0b:d0:8d:77:4d:14:50:4b:d7:8b:b8:fd:f5:58:d4:4f:19:6f:
a5:00:42:64:f6:76:fb:6c:42:c9:3b:78:f3:84:bc:f2:7e:f7:
62:1a:04:7d:a6:cf:bd:dc:74:9e:8a:16:c5:28:34:5d:8c:33:
c5:e8:b9:7e:e1:d0:9b:ed:ac:7a:c6:e5:71:e7:e0:69:c7:ab:
d4:73:cf:33:69:ee:af:34:61:a4:8f:9d:82:ed:22:61:54:bd:
af:bf:48:e2:22:33:df:42:dd:f5:f5:52:bd:43:c4:07:f2:93:
45:9c:11:19:d8:d8:61:e6:51:2e:b5:74:52:e5:09:46:08:ae:
d5:bb:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:11 2025 by rpki-client