Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier: sFjWZENeX2b/RF4JmDRB7ur2F3+yT1ZICtLLsvqZRC0=
Subject key identifier: FF:6E:E7:5D:36:1B:1C:8C:D3:92:54:E9:09:59:39:35:96:0E:10:27
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 019A2D7AC374D3B4833DCBF513F27B2BEDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number: 16FB
Signing time: Wed 29 Oct 2025 01:00:11 +0000
Manifest this update: Wed 29 Oct 2025 01:00:11 +0000
Manifest next update: Thu 30 Oct 2025 01:00:11 +0000
Files and hashes: 1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=)
2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: xtQEkcWBXCx+Ko658qt4DpXfEhMgitskHXhHTnhvEy0=)
3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:7a:c3:74:d3:b4:83:3d:cb:f5:13:f2:7b:2b:ed:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: Oct 29 01:00:11 2025 GMT
Not After : Oct 30 01:00:11 2025 GMT
Subject: CN=ff6ee75d361b1c8cd39254e909593935960e1027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:77:2b:d9:cb:80:8f:62:94:f0:4c:98:d4:7d:
03:67:91:45:ac:28:0d:57:83:0f:05:1e:5c:35:1d:
91:4c:35:5b:43:69:bb:15:b1:04:46:6e:9a:e2:59:
12:35:1d:d3:cb:b6:9d:6f:cb:b0:d3:ea:ef:85:a8:
32:4d:b4:3c:0e:b2:a6:1c:fb:77:fc:de:50:bc:51:
9e:c2:43:95:96:06:1c:ed:4d:c9:7d:4d:b9:85:54:
3b:81:aa:23:9d:99:bc:18:ca:69:84:f5:cc:93:80:
cd:94:ac:76:34:e9:b6:fd:d5:31:93:ed:cf:9a:34:
ae:9f:3b:66:58:02:ea:97:ea:51:30:e5:30:ef:aa:
65:df:a1:3d:bc:4d:d2:4d:a9:11:8f:71:5e:1e:ed:
b0:10:4b:1f:28:b8:b4:9e:2f:69:bb:4d:7b:50:39:
81:42:b1:db:e5:d3:2a:54:7a:e9:65:52:e6:68:d3:
12:fd:b5:ea:06:89:b1:d3:ca:e6:99:d9:36:ba:46:
2f:f8:87:55:5a:39:53:15:c7:56:c6:e9:ce:a4:eb:
46:03:2b:63:1f:16:df:b0:29:73:90:d3:60:4d:ba:
f7:67:b4:c5:7d:8c:9c:c3:82:09:eb:ed:e2:af:f0:
31:54:6f:74:06:d9:db:87:03:e2:15:0f:50:68:bb:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6E:E7:5D:36:1B:1C:8C:D3:92:54:E9:09:59:39:35:96:0E:10:27
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3b:18:1a:0f:32:e5:12:e1:13:aa:66:2f:d6:aa:39:19:70:
81:f1:2e:e3:3b:73:fc:01:4f:1b:55:31:57:96:21:af:7d:f5:
15:72:43:bd:53:f4:bd:09:38:67:57:55:c7:cd:12:5b:11:c2:
14:62:a8:89:9d:1d:e8:41:f3:46:df:de:58:09:64:8a:7d:7a:
76:5e:79:59:92:a8:53:1b:1c:10:cf:e0:c3:97:c3:02:47:4c:
72:c4:91:30:2b:6a:17:53:26:29:68:be:83:a9:0b:82:e2:c4:
ae:d7:96:29:67:e1:ff:c8:b8:c5:c0:f4:01:1a:11:af:fc:d3:
e4:0d:a4:37:96:f5:2a:77:6f:f0:95:12:d2:f4:b6:63:57:15:
5c:d3:a6:f3:f3:cc:9c:45:d4:89:bb:98:ff:0d:90:04:57:d4:
a1:93:6b:c3:49:2e:a3:0d:d5:8f:41:57:36:a1:3a:9e:dd:3e:
d0:89:2b:0b:29:ab:77:b1:2e:bc:bd:34:d5:26:98:0f:32:5e:
66:fb:5c:e1:e3:b3:06:a0:09:18:02:ea:bf:a5:ad:80:46:99:
4f:9e:4d:04:d4:28:91:27:5f:ac:4e:f0:54:ef:ae:1b:e2:4b:
ba:45:12:f9:68:31:dc:68:45:95:e1:a2:86:54:c3:5d:f4:a6:
35:19:e4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 08:14:35 2025 by rpki-client