Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: csTK3/Ag/34AnfAnU46jcoZI/4UBdUXXaHL9/3BVT2Y=
Subject key identifier: B2:67:03:11:19:A3:CE:45:39:35:B2:88:3C:A2:60:75:D9:64:71:18
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 019A2B1E6D01A1A7943CAA464305B416C35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 0A2C
Signing time: Tue 28 Oct 2025 14:00:05 +0000
Manifest this update: Tue 28 Oct 2025 14:00:05 +0000
Manifest next update: Wed 29 Oct 2025 14:00:05 +0000
Files and hashes: 1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: DzjveQNV7LfeWwUdd3um3Wb5SPdfI15juZPRvjOvR10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:6d:01:a1:a7:94:3c:aa:46:43:05:b4:16:c3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Oct 28 14:00:05 2025 GMT
Not After : Oct 29 14:00:05 2025 GMT
Subject: CN=b267031119a3ce453935b2883ca26075d9647118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:84:70:37:6d:17:fa:99:e2:58:d9:b7:af:70:
50:22:d9:e1:e6:ff:00:a7:ab:81:e8:15:b7:e5:30:
08:f0:66:20:62:15:f0:83:a1:1f:c0:44:1a:fb:f0:
c6:74:72:ba:8e:b1:57:e6:f4:2d:1d:11:b3:8d:e4:
e6:91:77:7a:7c:92:3e:ab:cd:ca:af:28:53:17:c8:
ae:48:84:05:0c:af:a7:28:c4:a9:56:24:a6:ab:82:
64:92:b6:06:64:78:7c:b1:dd:a4:00:5b:c4:41:67:
c2:7e:db:6d:f9:ab:77:f7:bf:9c:ed:19:4e:0a:35:
39:41:10:58:bb:de:fb:6f:9f:50:d7:50:3c:16:b7:
62:54:ab:9b:fb:aa:0c:2c:84:4e:63:d2:3c:a3:ba:
e2:70:c5:a6:89:cf:9a:b3:4c:d7:51:e4:96:6b:d3:
c9:e6:5c:0a:29:e6:1f:38:fe:c2:b2:52:7c:59:89:
26:09:c5:70:b0:c4:11:ae:a7:9b:84:12:2a:9c:cc:
95:2e:23:1f:4e:3f:56:31:21:a1:58:d6:ff:35:ca:
ea:3a:6e:5c:45:9f:e2:cc:89:a2:4f:70:97:7c:ef:
6a:91:01:8f:9e:28:77:50:92:c4:ca:f5:11:15:11:
04:84:47:04:bf:73:e3:1c:cc:fa:1a:d5:5d:59:d2:
d1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:67:03:11:19:A3:CE:45:39:35:B2:88:3C:A2:60:75:D9:64:71:18
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:11:85:4d:70:b6:e5:05:a9:01:fb:24:c8:d8:79:f8:7a:8b:
f2:0d:2e:7b:78:cf:ae:e6:e8:2c:6f:cb:db:10:5e:62:5a:17:
69:b0:7d:d4:74:e6:c2:12:cc:ac:78:98:99:7e:3f:66:b9:92:
19:5c:f2:5c:d1:75:d6:75:0e:6b:e3:d3:8b:e0:73:92:b9:9c:
1b:ca:33:d4:cf:05:25:ab:15:c8:41:8d:a4:03:c9:3c:17:09:
8c:04:24:50:6d:da:bb:d3:1e:43:be:8f:38:3b:45:69:24:b7:
62:05:50:6f:03:c6:0e:48:75:b6:43:01:86:6d:b5:b9:db:de:
7f:1d:7c:6d:6e:4e:18:e4:9c:38:a4:51:60:bf:60:21:1d:f4:
ba:83:43:c3:53:b8:c5:89:29:8c:eb:fc:c6:0f:b7:0e:32:10:
1d:93:3d:ee:33:26:c3:f8:ba:77:5d:c1:b6:01:5f:45:d6:13:
56:80:49:c4:8e:dd:58:48:80:e6:8f:9c:92:da:86:59:70:96:
3a:a4:4f:ca:24:d8:45:43:01:b0:57:c2:a8:43:3e:55:41:ba:
2d:d4:96:e3:eb:0f:22:60:22:fa:0b:0d:3c:97:c1:0e:ad:e0:
c9:75:28:ab:66:6e:b8:97:57:4d:83:46:59:b1:2b:24:72:08:
ff:1f:b3:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorHm0BoaeUPKpGQwW0FsNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNzBiODkyODFjZGI3NjFhMDRhZGNiYzBhYzQxNzA1NDEz
MTUwZTkwHhcNMjUxMDI4MTQwMDA1WhcNMjUxMDI5MTQwMDA1WjAzMTEwLwYDVQQD
EyhiMjY3MDMxMTE5YTNjZTQ1MzkzNWIyODgzY2EyNjA3NWQ5NjQ3MTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IRwN20X+pniWNm3r3BQItnh5v8A
p6uB6BW35TAI8GYgYhXwg6EfwEQa+/DGdHK6jrFX5vQtHRGzjeTmkXd6fJI+q83K
ryhTF8iuSIQFDK+nKMSpViSmq4JkkrYGZHh8sd2kAFvEQWfCfttt+at397+c7RlO
CjU5QRBYu977b59Q11A8FrdiVKub+6oMLIROY9I8o7ricMWmic+as0zXUeSWa9PJ
5lwKKeYfOP7CslJ8WYkmCcVwsMQRrqebhBIqnMyVLiMfTj9WMSGhWNb/NcrqOm5c
RZ/izImiT3CXfO9qkQGPnih3UJLEyvURFREEhEcEv3PjHMz6GtVdWdLRgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJnAxEZo85FOTWyiDyiYHXZZHEYMB8GA1UdIwQY
MBaAFLtwuJKBzbdhoErcvArEFwVBMVDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2Yjgt
NDE3MzIwY2JhZTU1LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2YjgtNDE3MzIwY2JhZTU1
LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBGFTXC2
5QWpAfskyNh5+HqL8g0ue3jPruboLG/L2xBeYloXabB91HTmwhLMrHiYmX4/ZrmS
GVzyXNF11nUOa+PTi+BzkrmcG8oz1M8FJasVyEGNpAPJPBcJjAQkUG3au9MeQ76P
ODtFaSS3YgVQbwPGDkh1tkMBhm21udvefx18bW5OGOScOKRRYL9gIR30uoNDw1O4
xYkpjOv8xg+3DjIQHZM97jMmw/i6d13BtgFfRdYTVoBJxI7dWEiA5o+cktqGWXCW
OqRPyiTYRUMBsFfCqEM+VUG6LdSW4+sPImAi+gsNPJfBDq3gyXUoq2ZuuJdXTYNG
WbErJHII/x+zMg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 16:43:56 2025 by rpki-client