Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: 0Zp3h++KX3HnVDFtWUjLqVGgOBXNCbvFuNZfgcUsYrE=
Subject key identifier: 85:EA:42:F4:0C:15:B9:5E:2F:39:3C:B1:E8:52:48:76:84:27:3A:A1
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 019A4DE162B7301B37748C233745BCF3FFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 08D4
Signing time: Tue 04 Nov 2025 08:00:07 +0000
Manifest this update: Tue 04 Nov 2025 08:00:07 +0000
Manifest next update: Wed 05 Nov 2025 08:00:07 +0000
Files and hashes: 1: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (hash: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=)
2: ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa (hash: vYYSfaPpbNWHfZROyqOxGskbcYsJiw4rOn2tsPINhLk=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: NoT9YBhvimycfHP7TjpJtTtG2R+Mkpq1E5W+jjY4reM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:62:b7:30:1b:37:74:8c:23:37:45:bc:f3:ff:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Nov 4 08:00:07 2025 GMT
Not After : Nov 5 08:00:07 2025 GMT
Subject: CN=85ea42f40c15b95e2f393cb1e852487684273aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:be:55:bc:4a:b2:a1:67:f2:d4:84:ca:ff:94:
4e:fc:3c:57:18:65:78:06:d8:84:6f:99:96:c2:47:
ec:96:fa:99:1b:70:5c:8d:06:81:e6:bd:0c:11:a6:
35:d3:8b:12:bc:50:11:ff:85:24:a3:61:c9:7b:66:
62:ec:30:de:4c:13:e6:68:cc:d9:43:05:96:59:5c:
10:bf:3d:12:37:67:9c:e2:64:1d:eb:e3:13:b7:3c:
e4:99:6b:06:29:cb:68:c0:fe:d9:7a:82:84:f4:c1:
18:7c:f8:63:b2:87:fc:00:c6:5d:2f:59:16:e4:ce:
71:09:ea:db:2c:0f:df:45:27:51:95:b6:4e:6c:88:
36:dd:f5:86:d7:b6:da:e2:26:bf:03:3b:66:8e:6f:
e4:9f:da:5f:05:2b:65:00:7b:e9:03:f5:83:b4:7a:
cc:7f:cb:3c:8d:72:f3:94:f3:5f:95:b8:ad:78:39:
b5:68:04:fc:99:ad:a4:46:4b:35:25:02:c7:11:07:
c4:11:dc:20:31:37:63:af:0e:7b:2b:76:53:bd:22:
2b:d5:cc:b8:27:b6:09:3c:f8:ae:42:b1:ad:0e:c9:
30:86:e1:9f:a3:40:27:5e:49:b6:eb:77:76:6a:15:
b8:76:86:cb:45:08:2d:21:fb:6e:b7:c1:53:e9:f4:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EA:42:F4:0C:15:B9:5E:2F:39:3C:B1:E8:52:48:76:84:27:3A:A1
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4c:60:69:7f:8c:4d:2f:b0:af:99:35:94:08:aa:de:19:0f:
a2:0e:18:c4:12:e6:26:27:2a:a7:09:70:4b:4a:16:e4:a8:00:
80:e1:79:3d:b8:3b:71:ef:a6:8a:1f:13:af:0f:74:27:d2:25:
22:b5:60:ea:8f:12:9c:63:65:20:cb:f7:58:8c:83:60:6e:f5:
1b:ad:27:5e:81:c9:20:e2:26:86:a7:1b:6b:5a:83:ce:c8:3b:
f0:47:ad:4c:8a:6b:49:f7:06:a0:3e:9f:08:94:ed:fd:07:1b:
99:59:79:24:6b:b8:30:12:c5:70:e6:a4:c2:25:00:72:c5:dc:
ec:e9:ae:09:dd:e9:91:b4:9e:88:09:f0:dc:ab:88:6a:1f:df:
e7:99:74:7d:57:44:26:f9:a1:99:2c:b0:3a:f1:e2:ee:c9:6e:
2d:01:3b:a2:db:2f:f3:bf:94:fd:31:b0:53:df:1c:c3:e1:d4:
62:68:1c:82:e5:8f:6e:bc:b2:f5:c0:c3:3d:40:0c:44:94:c0:
7e:9e:2e:6d:c6:cf:ae:af:9e:8e:40:b6:aa:a1:24:40:36:0f:
b8:09:9f:a1:21:2f:e2:d5:92:7d:76:55:71:22:c2:8c:82:a8:
f0:d5:ad:39:01:2c:3d:d7:91:ca:00:ca:a7:0d:0e:67:8c:00:
d9:7f:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:54 2025 by rpki-client