Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
File: u_pCfUICOv2oiOhBX07c97ffGwU.mft (raw, json)
Hash identifier: NCuMkVzDCegIElDDvWXZMrB/PhR4nOekmiiWgO/PiQc=
Subject key identifier: 35:BC:66:7F:09:25:6B:E4:2A:E0:74:72:6B:47:F5:74:6D:32:B8:8D
Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
Certificate issuer: /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Certificate serial: 019A4C98618ADB59BBC5430BBA921A32FEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
Manifest number: 095E
Signing time: Tue 04 Nov 2025 02:00:46 +0000
Manifest this update: Tue 04 Nov 2025 02:00:46 +0000
Manifest next update: Wed 05 Nov 2025 02:00:46 +0000
Files and hashes: 1: K2GMWCCFEI_TRfahmMRjDe9YKEI.roa (hash: vdZSYQjeBwZE35DhIdNU+zQ/gO9XDbHhs5nRKTUQzYc=)
2: u_pCfUICOv2oiOhBX07c97ffGwU.crl (hash: wBb/Gdm2br36zWKg6Hz7xqKY/uyq7hoifKXnbywtG0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:61:8a:db:59:bb:c5:43:0b:ba:92:1a:32:fe:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Validity
Not Before: Nov 4 02:00:46 2025 GMT
Not After : Nov 5 02:00:46 2025 GMT
Subject: CN=35bc667f09256be42ae074726b47f5746d32b88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:b7:03:cc:02:2c:b5:b3:0e:9f:44:7f:37:
8d:a1:08:08:bb:2e:dc:74:c0:df:8d:5d:73:eb:06:
ce:ba:66:2b:64:df:ef:6a:d8:22:5b:10:b7:9e:5d:
9f:67:db:5b:31:a4:b5:5d:14:db:ac:0b:b8:85:d0:
00:d0:1c:a0:e3:bf:c3:33:22:ea:d7:56:6d:23:52:
b7:8d:df:51:72:08:5c:34:10:de:28:5c:b6:12:5a:
a8:da:4b:8f:ca:47:f0:4a:06:85:af:40:9c:c1:90:
74:42:ad:d4:c5:d9:79:95:43:c1:4b:0e:0a:9e:ce:
2b:b8:05:f2:36:71:a3:88:f5:b0:94:b7:2b:d9:91:
cd:e4:5c:87:9c:1f:80:c0:4d:e6:99:1e:77:75:ec:
80:c7:b4:1f:49:96:72:2f:a9:d5:a1:f8:e8:e6:9d:
01:59:96:a9:33:36:f5:7b:1a:d8:0a:f8:6d:f9:12:
2a:44:37:4b:24:6f:d5:11:bd:92:93:05:38:95:38:
c9:b1:99:d8:1f:2f:d7:51:d1:b1:9a:18:2a:aa:59:
ef:99:0f:ff:ce:a2:8a:68:96:82:cd:50:31:bc:02:
cc:96:91:b3:ff:d4:fe:23:62:bb:43:60:ab:a1:b4:
88:80:75:64:cb:c8:a5:e1:02:32:86:d2:b5:01:0f:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BC:66:7F:09:25:6B:E4:2A:E0:74:72:6B:47:F5:74:6D:32:B8:8D
X509v3 Authority Key Identifier:
keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:da:4f:d0:e4:20:ef:65:e7:66:c3:cc:b3:43:d7:93:71:a3:
f1:cd:52:86:c6:b8:88:62:e7:ac:24:8b:28:55:74:e5:e0:0b:
93:2e:dd:ec:2d:42:07:25:e4:71:6d:da:3b:2b:09:87:ba:04:
9b:a6:67:3e:a0:a9:71:97:4e:c1:1f:66:09:27:98:ed:47:af:
f3:8c:a3:92:48:b6:35:77:fc:dd:73:24:08:6e:5c:38:e7:7c:
27:2c:3e:c9:da:4b:a8:46:98:95:49:9c:81:ea:32:5d:57:57:
cb:9d:3f:1a:56:30:ea:0d:34:f6:dd:96:0b:7e:f0:24:1d:38:
6a:ab:7b:f1:a7:1d:fd:a9:4e:a4:ab:e1:e6:74:61:25:66:4c:
34:68:f4:e2:e1:9b:ee:93:2b:1d:ad:cf:dc:77:32:20:a7:4b:
ac:80:ee:b2:60:94:6d:f2:f9:8b:2a:18:02:02:11:bc:64:fb:
c6:a0:a2:3f:2c:e2:12:90:a3:36:c8:99:20:74:56:d7:f2:b2:
eb:7b:17:4c:0c:25:90:f2:a8:e3:0d:ba:e2:ec:e8:6c:39:cd:
42:a1:2b:4c:ec:8d:38:4d:9c:32:ff:0d:f6:79:dd:e6:81:f0:
2a:7f:6c:39:02:c1:57:7c:45:38:34:92:21:80:eb:70:e0:83:
57:e4:dd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:15 2025 by rpki-client