Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
File: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft (raw, json)
Hash identifier: rVNJKGDAItutf0C3iQ/PA1v6+kUbsEHFLOKbRQxG1lc=
Subject key identifier: 1D:58:1D:46:69:D9:0D:9D:9A:88:B3:21:8D:3C:A1:71:2A:2F:20:84
Authority key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
Certificate issuer: /CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Certificate serial: 019A4D3CB9E086389A39A735EABCECBA7071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 05:00:16 +0000
Manifest this update: Tue 04 Nov 2025 05:00:16 +0000
Manifest next update: Wed 05 Nov 2025 05:00:16 +0000
Files and hashes: 1: 4vXWSYV7BuBv-Uy6gwhnGjba6l4.roa (hash: T/rxg5SROv77xR3vA3yXKL1TTkjTzRNlaWirdpsIt6c=)
2: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl (hash: w5VMEEa2xaVDkplmaxmJJXj6XhEGVCC7LNe5IefHzTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b9:e0:86:38:9a:39:a7:35:ea:bc:ec:ba:70:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Validity
Not Before: Nov 4 05:00:16 2025 GMT
Not After : Nov 5 05:00:16 2025 GMT
Subject: CN=1d581d4669d90d9d9a88b3218d3ca1712a2f2084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:36:82:17:2c:fa:cb:66:aa:f1:f0:79:64:f8:
3a:84:b6:2e:05:9f:8d:82:65:78:3e:38:94:a9:fa:
4e:33:9e:1e:b0:a2:02:80:99:6f:d3:11:f5:80:18:
5e:1f:dd:fb:65:5d:a1:60:84:73:42:33:eb:81:7f:
d7:77:df:1a:f0:6c:cc:47:68:10:94:a2:0f:a5:19:
a5:32:65:08:a8:c5:53:c4:10:6c:1d:9c:5d:c5:8a:
14:a3:d7:fa:b2:e8:3d:6b:1b:70:bc:16:d6:25:64:
8f:32:3f:d3:3d:f0:8b:5c:c9:d1:81:43:21:20:fa:
fa:7b:aa:89:ae:0f:39:ac:7f:13:ab:a0:49:96:24:
c4:b4:70:12:d2:79:af:2d:d7:79:ef:f0:9f:fb:ba:
0c:7d:76:83:f7:3a:0f:40:cb:76:05:ee:29:60:d9:
73:c3:3d:71:35:8a:78:bb:99:ff:0d:32:0b:7c:2f:
78:b1:a9:29:9f:58:03:7f:ad:19:46:e4:81:6a:54:
9b:70:b8:25:d7:2b:46:80:92:1d:55:bc:c7:e2:13:
05:de:90:6c:14:0c:1a:2c:86:d7:5a:68:8b:80:12:
cc:4b:54:4b:43:97:76:47:e3:9a:c6:38:3c:37:9f:
b3:78:a3:ad:ae:cc:fb:74:8e:6a:ce:2f:19:41:c0:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:58:1D:46:69:D9:0D:9D:9A:88:B3:21:8D:3C:A1:71:2A:2F:20:84
X509v3 Authority Key Identifier:
keyid:BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8a:76:de:c2:1b:1f:ad:a4:00:33:28:db:11:b3:f2:2a:98:
ce:b7:4b:fb:a8:06:b2:67:56:ff:87:aa:33:36:71:12:ed:bf:
5a:83:b5:41:b3:b0:c3:54:b4:6f:05:13:2e:7d:36:5a:5b:cd:
6a:88:78:41:9b:75:29:42:5c:b4:37:f2:16:b2:53:1c:68:d9:
1b:c0:9b:be:6f:c8:22:1c:f4:81:42:4e:5c:3b:90:97:a7:b1:
42:1c:d4:c4:63:1e:86:91:d1:37:96:e6:93:6e:97:00:da:c0:
87:0e:f7:fc:a9:c6:f6:a6:13:28:c7:c8:ee:0a:d7:da:e1:5a:
2c:bf:8e:1c:48:1a:35:a0:54:2c:93:68:18:be:3a:67:f7:f5:
c0:26:46:7b:9e:66:75:15:43:62:4d:8e:aa:22:11:92:67:82:
04:91:8b:d0:a2:2d:28:7a:62:ec:32:be:ec:a5:2e:86:86:96:
d4:c3:06:18:6e:40:c5:96:b7:42:bc:91:0a:5b:08:2e:a4:64:
4d:4b:2b:a7:8e:14:70:27:1c:96:5a:9e:5c:7e:46:42:6b:f8:
57:c1:2e:73:f7:7d:ca:06:6b:54:26:e7:05:5c:ae:20:cb:75:
78:68:9d:79:82:3c:8c:ad:d3:53:17:9d:8d:02:14:3e:50:d7:
58:f2:5d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:05 2025 by rpki-client