Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: sOeUafWQTogIasuB6HM1iLe57V+3el7kBavnajqsU9g=
Subject key identifier: 42:71:47:DB:08:90:DE:48:C2:0D:1D:96:BE:C5:93:E0:26:97:87:F8
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 019A251CDC4CEE948B4B33F05E87466DC92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 10:00:39 +0000
Manifest this update: Mon 27 Oct 2025 10:00:39 +0000
Manifest next update: Tue 28 Oct 2025 10:00:39 +0000
Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: NPJ2PyoCcKBlrI3QHflLj6o1/ekQ4kXOLr9BsK1i33o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:dc:4c:ee:94:8b:4b:33:f0:5e:87:46:6d:c9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Oct 27 10:00:39 2025 GMT
Not After : Oct 28 10:00:39 2025 GMT
Subject: CN=427147db0890de48c20d1d96bec593e0269787f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:87:4f:b9:88:a8:7e:e9:10:68:f1:08:04:
95:f9:9c:bc:cc:19:60:91:99:2c:05:2f:4b:64:be:
2a:f7:90:4a:b1:b2:05:85:32:ea:3c:ff:2c:6b:48:
f3:8f:ce:e1:a2:8b:36:4b:db:c6:d3:7f:56:70:48:
4e:a0:45:36:67:85:2d:46:b9:03:85:77:71:13:44:
4a:b5:2a:94:e8:06:a8:61:ae:05:c9:3e:bc:87:0f:
50:bf:f2:74:eb:bb:40:44:c5:cd:41:2f:5b:5c:3f:
8e:cf:21:52:d3:99:22:cc:8c:f9:ab:6d:9a:1a:69:
8b:13:30:8f:76:a3:df:f2:57:30:37:f7:f9:ca:12:
36:ad:d0:6f:f1:91:9c:da:12:e6:e2:46:b1:ca:c4:
dc:d8:a4:62:7b:f3:96:69:e4:16:2b:d9:b8:8d:9e:
a2:da:20:6b:b4:2b:f9:96:f3:33:49:b2:1f:9f:42:
53:01:bc:62:3f:72:74:e4:8c:d8:8a:1a:2c:5f:91:
29:3d:8b:f7:1f:ec:48:78:16:6d:2e:43:fc:68:45:
85:df:1f:99:9f:c2:d6:7d:c6:b0:75:28:86:e8:52:
4c:31:c9:4d:b6:22:f0:9b:f3:5e:5c:63:d2:5b:df:
44:35:08:4f:69:cc:93:d8:24:14:eb:e6:e8:a5:92:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:71:47:DB:08:90:DE:48:C2:0D:1D:96:BE:C5:93:E0:26:97:87:F8
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e2:a2:31:6c:8e:43:f5:cf:fe:0c:45:c5:dc:5c:48:96:69:
df:b5:df:69:64:53:3c:68:a6:c0:9f:0c:5b:f0:0d:14:2f:0d:
7f:bf:3a:77:da:c5:07:5d:5b:5d:10:3d:43:99:f8:5e:97:f6:
fd:09:c3:85:81:ee:81:49:5e:7c:e1:46:72:94:dd:a8:54:3f:
4e:84:35:d7:32:74:71:69:41:e5:a1:c1:6c:56:34:5e:59:56:
0b:ed:15:38:dc:a7:94:6f:f3:97:db:8a:b6:05:ca:25:01:82:
86:3c:df:7b:3b:ca:9a:d8:7e:e7:32:db:b5:f6:ef:17:00:88:
4e:aa:f1:23:cd:b7:71:3d:84:f4:33:35:b7:d0:3e:6d:34:6c:
3e:f6:a7:b0:70:e4:d6:8c:06:94:d2:f7:be:65:80:c1:5f:a3:
60:0c:96:cb:18:82:4b:c9:78:0f:09:30:47:76:5e:e8:a8:b3:
12:70:9a:f8:28:17:52:e9:b1:c8:99:6c:ac:24:c7:d5:34:e1:
a0:b7:e4:09:df:6d:95:d5:98:93:05:29:a2:94:58:2b:ff:c8:
1c:6a:20:28:ec:85:2b:2a:2b:89:13:1e:39:e1:5d:56:ec:15:
ba:cb:48:be:aa:b8:fa:ec:71:27:83:18:8b:da:a3:c7:45:a9:
d7:97:10:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolHNxM7pSLSzPwXodGbcktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOGUyZjVhYzdjYmU2MjExN2RhNDc4YWMwYzAyN2FkNmQ4
NDNjNTYwHhcNMjUxMDI3MTAwMDM5WhcNMjUxMDI4MTAwMDM5WjAzMTEwLwYDVQQD
Eyg0MjcxNDdkYjA4OTBkZTQ4YzIwZDFkOTZiZWM1OTNlMDI2OTc4N2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTSHT7mIqH7pEGjxCASV+Zy8zBlg
kZksBS9LZL4q95BKsbIFhTLqPP8sa0jzj87hoos2S9vG039WcEhOoEU2Z4UtRrkD
hXdxE0RKtSqU6AaoYa4FyT68hw9Qv/J067tARMXNQS9bXD+OzyFS05kizIz5q22a
GmmLEzCPdqPf8lcwN/f5yhI2rdBv8ZGc2hLm4kaxysTc2KRie/OWaeQWK9m4jZ6i
2iBrtCv5lvMzSbIfn0JTAbxiP3J05IzYihosX5EpPYv3H+xIeBZtLkP8aEWF3x+Z
n8LWfcawdSiG6FJMMclNtiLwm/NeXGPSW99ENQhPacyT2CQU6+bopZJA0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJxR9sIkN5Iwg0dlr7Fk+Aml4f4MB8GA1UdIwQY
MBaAFLuOL1rHy+YhF9pHisDAJ61thDxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjIt
M2I5ZGIwNWQyMzg0LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjItM2I5ZGIwNWQyMzg0
LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOKiMWyO
Q/XP/gxFxdxcSJZp37XfaWRTPGimwJ8MW/ANFC8Nf786d9rFB11bXRA9Q5n4Xpf2
/QnDhYHugUlefOFGcpTdqFQ/ToQ11zJ0cWlB5aHBbFY0XllWC+0VONynlG/zl9uK
tgXKJQGChjzfezvKmth+5zLbtfbvFwCITqrxI823cT2E9DM1t9A+bTRsPvansHDk
1owGlNL3vmWAwV+jYAyWyxiCS8l4DwkwR3Ze6KizEnCa+CgXUumxyJlsrCTH1TTh
oLfkCd9tldWYkwUpopRYK//IHGogKOyFKyoriRMeOeFdVuwVustIvqq4+uxxJ4MY
i9qjx0Wp15cQhg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:20 2025 by rpki-client