Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json)
Hash identifier: LRWFdgp9VmHBzcTZ4DrU8tEKnbtF50KnjlYKTkA78Hg=
Subject key identifier: 51:5F:A3:2D:E2:57:E8:A2:C5:2A:35:13:E8:A8:04:55:D9:00:4C:76
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial: 019A52D1911FEF0925919DDAACA3ECC7C16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 07:00:57 +0000
Manifest this update: Wed 05 Nov 2025 07:00:57 +0000
Manifest next update: Thu 06 Nov 2025 07:00:57 +0000
Files and hashes: 1: t4qANnEhvVWnrRLkZS7CKoTPpCQ.roa (hash: dm6ZxXeDx09W/sn7TAuJSwJg3JzyL+0jwWDxaTnORrU=)
2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: +4HfKk4MF8CKwaOZ+lCW7dZgznW14ELnIxi8+nb0WQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:91:1f:ef:09:25:91:9d:da:ac:a3:ec:c7:c1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Validity
Not Before: Nov 5 07:00:57 2025 GMT
Not After : Nov 6 07:00:57 2025 GMT
Subject: CN=515fa32de257e8a2c52a3513e8a80455d9004c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:7c:55:e3:7a:7b:20:51:42:8c:1e:b3:00:
76:51:1d:64:2b:20:30:8a:13:54:46:e3:f6:e7:bc:
21:59:a5:9b:8e:0d:9e:df:ed:58:37:c5:f2:ea:f6:
1a:0d:0b:66:0e:5b:b8:6d:a4:2c:44:47:11:a9:94:
60:fa:a3:2e:2a:d8:59:33:94:64:b9:a2:4f:62:a2:
52:c2:02:dd:54:d1:62:e5:76:93:54:c8:7f:f3:6b:
77:17:59:d3:5b:14:8b:cf:ee:f8:b5:03:aa:c8:db:
d7:17:b7:5a:b4:a3:25:9d:bc:de:f7:e8:b9:ce:52:
65:9a:36:3a:93:01:22:cd:76:fa:f1:79:86:d3:da:
95:69:33:9a:dc:d7:26:1a:f0:9c:54:4a:12:a5:d4:
a2:8a:e6:8a:37:3a:df:e1:bd:56:84:d5:a8:57:ec:
a3:b7:d3:d4:91:b9:3c:1c:74:01:8a:fa:91:31:a9:
b3:50:44:c5:e8:4f:4f:d4:bc:8c:7e:12:5a:1d:4b:
7c:f7:44:15:91:ca:00:cb:2b:86:92:cd:86:d1:b4:
64:c3:bc:dc:ee:62:16:80:71:fe:47:95:6b:83:89:
09:62:66:cc:ae:fe:78:16:55:24:00:21:d9:53:db:
73:20:45:1e:c8:0b:94:aa:29:c3:78:ca:09:7c:ef:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5F:A3:2D:E2:57:E8:A2:C5:2A:35:13:E8:A8:04:55:D9:00:4C:76
X509v3 Authority Key Identifier:
keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:96:65:a5:94:62:64:35:4d:bb:17:91:20:72:ab:fd:6e:ce:
cc:9d:3a:cb:12:00:e0:a1:2a:bc:7e:ae:bd:cd:de:8c:d0:b7:
83:97:4d:72:d4:40:2a:02:11:a9:73:ba:a2:c7:ba:03:0a:5a:
0a:5d:a2:69:f1:ef:68:b2:4f:97:a2:76:6b:d9:82:eb:68:f3:
a2:9e:8f:0a:67:0c:8c:31:7f:2a:2e:a0:91:44:07:b1:63:ea:
63:85:98:82:29:09:06:b7:c1:7f:26:6d:96:56:92:78:14:af:
56:8f:51:c3:8b:05:50:77:72:57:32:e9:24:63:40:65:1d:b3:
81:b7:93:14:d0:3f:02:56:9f:eb:a0:9b:1a:62:e5:c6:df:df:
be:d5:4e:a6:67:28:b0:26:7d:7f:ba:ae:ab:ec:a5:15:9e:66:
3d:60:e6:e5:59:19:7c:b1:76:c4:98:c3:1e:c4:bb:33:09:bf:
b8:74:7b:6b:e8:2d:e4:d3:24:44:22:e0:25:ae:8f:e1:c9:ea:
f9:74:3d:b4:13:be:d5:34:09:dc:53:f8:31:3c:68:c3:ea:df:
49:c4:d7:08:d8:29:50:e8:a6:93:75:c0:b9:32:64:1f:d2:cd:
e9:8b:a5:e4:46:6a:7a:17:92:ab:c7:bf:4a:b4:67:ff:e4:c6:
04:62:ce:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0ZEf7wklkZ3arKPsx8FtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYzI2NGI1YTY0OTRmODkwZmEzMTRmNjFmZDdkMjc1ODdl
MzU4MzAwHhcNMjUxMTA1MDcwMDU3WhcNMjUxMTA2MDcwMDU3WjAzMTEwLwYDVQQD
Eyg1MTVmYTMyZGUyNTdlOGEyYzUyYTM1MTNlOGE4MDQ1NWQ5MDA0Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiF8VeN6eyBRQoweswB2UR1kKyAw
ihNURuP257whWaWbjg2e3+1YN8Xy6vYaDQtmDlu4baQsREcRqZRg+qMuKthZM5Rk
uaJPYqJSwgLdVNFi5XaTVMh/82t3F1nTWxSLz+74tQOqyNvXF7datKMlnbze9+i5
zlJlmjY6kwEizXb68XmG09qVaTOa3NcmGvCcVEoSpdSiiuaKNzrf4b1WhNWoV+yj
t9PUkbk8HHQBivqRMamzUETF6E9P1LyMfhJaHUt890QVkcoAyyuGks2G0bRkw7zc
7mIWgHH+R5Vrg4kJYmbMrv54FlUkACHZU9tzIEUeyAuUqinDeMoJfO+lCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFfoy3iV+iixSo1E+ioBFXZAEx2MB8GA1UdIwQY
MBaAFLvCZLWmSU+JD6MU9h/X0nWH41gwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYTRlNjQtNmQ3MC00YmZkLTkwOWQt
ZjA1NDZjZmFiMDYxLzEvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lYTRlNjQtNmQ3MC00YmZkLTkwOWQtZjA1NDZjZmFiMDYx
LzEvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJZlpZRi
ZDVNuxeRIHKr/W7OzJ06yxIA4KEqvH6uvc3ejNC3g5dNctRAKgIRqXO6ose6Awpa
Cl2iafHvaLJPl6J2a9mC62jzop6PCmcMjDF/Ki6gkUQHsWPqY4WYgikJBrfBfyZt
llaSeBSvVo9Rw4sFUHdyVzLpJGNAZR2zgbeTFNA/Alaf66CbGmLlxt/fvtVOpmco
sCZ9f7quq+ylFZ5mPWDm5VkZfLF2xJjDHsS7Mwm/uHR7a+gt5NMkRCLgJa6P4cnq
+XQ9tBO+1TQJ3FP4MTxow+rfScTXCNgpUOimk3XAuTJkH9LN6Yul5EZqeheSq8e/
SrRn/+TGBGLONg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:56 2025 by rpki-client