Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: 8NfPL24XEKWSt+veBM7cUir7pXExVXeDcSR0ymp+/AQ=
Subject key identifier: 92:CB:4C:CC:9E:FE:32:42:5E:0B:AD:D6:B5:18:39:44:EA:62:20:BE
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019A503DF0A8328C282AC6A2110DBFC21337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 19:00:27 +0000
Manifest this update: Tue 04 Nov 2025 19:00:27 +0000
Manifest next update: Wed 05 Nov 2025 19:00:27 +0000
Files and hashes: 1: C_0ORiP6GTff8xYOZ4mMicSAww8.roa (hash: HUAyzCwf6jl6lX3eg8riTN4+Y+lTTc8+dOFl1EBg7WI=)
2: YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa (hash: QZs858olOtlmGTBOleulDcnrJGCjiCkhUKDy6SCkdvE=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: 26mZ6FRoxQ6x47kNjdMTG7nbf3gpOywbBAtdt1ZOuSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f0:a8:32:8c:28:2a:c6:a2:11:0d:bf:c2:13:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Nov 4 19:00:27 2025 GMT
Not After : Nov 5 19:00:27 2025 GMT
Subject: CN=92cb4ccc9efe32425e0badd6b5183944ea6220be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:87:fb:53:d3:56:81:5b:89:d8:ba:87:de:
b8:d3:4a:08:a3:d5:b7:6e:4d:01:d1:a3:33:c3:2c:
ee:7c:4f:74:e4:14:ab:83:1c:1a:4d:0b:bf:b5:e7:
22:1e:b1:91:d3:67:dd:93:e0:28:c6:bc:ff:55:3d:
50:b5:ad:3e:ad:a8:db:1a:b3:f4:48:b3:49:d7:31:
0c:0c:ca:be:3c:59:8f:23:0f:06:75:db:23:17:0f:
b6:43:00:2c:df:7c:80:c3:21:bb:0c:cd:69:1e:ee:
fd:7e:b6:d5:09:b0:60:c3:bb:99:c8:cd:58:57:eb:
9f:97:cc:47:55:7e:2c:5a:30:27:0c:4b:16:1a:61:
30:fb:a7:e5:d0:0a:cf:6e:ff:00:da:8b:19:e9:7a:
5a:8a:4b:f3:73:69:5c:e4:70:29:09:83:d8:62:16:
73:4a:cd:99:8d:f6:84:26:16:e5:fa:b8:9a:9c:ff:
a0:1d:f9:df:b2:35:a3:d0:d3:77:da:1e:62:f4:5e:
fd:e8:3d:23:18:1f:46:14:1f:d3:66:89:9b:1c:8a:
65:e7:d8:59:b6:a0:0d:86:9f:02:99:fb:2b:04:61:
f9:e7:1e:e8:6c:29:37:01:fd:c8:ae:70:7b:1b:53:
80:1f:71:0b:3d:97:60:59:2b:1d:99:f9:aa:8f:c6:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CB:4C:CC:9E:FE:32:42:5E:0B:AD:D6:B5:18:39:44:EA:62:20:BE
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:67:32:35:fb:e7:61:ff:da:04:33:57:f7:5c:4f:ef:28:d3:
37:ab:a8:dd:32:b7:3e:7d:67:5b:15:34:8a:14:7c:df:fb:94:
07:85:84:3c:41:ec:8c:4e:5f:39:e4:b8:64:c3:e9:1a:f4:a7:
f0:bd:ec:23:5e:1a:3f:28:87:2a:56:57:36:e2:7d:5e:96:13:
36:43:c6:f7:fb:a7:ee:1d:b2:4f:9f:4f:cd:6a:28:57:c3:dc:
e1:fa:e8:68:e8:f0:23:ab:91:28:d0:0d:14:5e:40:40:b4:75:
8b:0a:db:bc:51:a0:18:33:a4:3b:2f:7f:ab:9d:50:93:8a:1a:
f3:dc:75:8e:11:d5:1b:57:18:45:d8:7b:d2:40:f5:2c:74:3e:
ea:08:c9:a8:68:38:e8:aa:9c:12:cd:51:f4:cd:a9:59:85:50:
0a:9a:34:61:25:17:a5:f3:99:f7:2b:6b:44:a9:f3:fd:a0:ac:
a6:f4:1b:0b:ef:91:3c:9d:a7:4e:73:11:8b:01:5e:4d:41:1d:
0f:fc:08:d1:98:03:da:ba:1c:26:d5:58:52:e5:7f:7c:d2:23:
8d:7a:22:1f:4e:b6:6c:c7:4b:21:1f:7d:82:38:e7:23:a8:40:
7a:62:e7:b3:5a:d1:eb:99:23:2a:7c:a0:f4:92:4e:80:fc:ab:
3f:f6:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:27 2025 by rpki-client