Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: YslsOq0xkXRgHPBus2pdK6AFytmvKLV6Y6HOQn904aE=
Subject key identifier: 0D:3F:72:F8:02:4A:A8:5F:56:EC:61:8D:65:1B:F7:17:FD:5D:DA:BE
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019A1FF62C4BC562FA7FF26DE5566F617D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 10:00:18 +0000
Manifest this update: Sun 26 Oct 2025 10:00:18 +0000
Manifest next update: Mon 27 Oct 2025 10:00:18 +0000
Files and hashes: 1: 6XCQPd-gBaWI9uUfOl9Oxd_9HlY.roa (hash: rYTYbZJWQOZnH0RagwK8UwoxwTXRP+nIxOLYvS6LJxg=)
2: Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa (hash: XD1k9LSsxBfImI/ORmlcMWAQZfP4H0hZi+Dr1QtMaAI=)
3: bvhxhmAqyDusWG8L2BubxFp6Byg.roa (hash: SHS3jK9UFMV78c0xUf6ZLaaMiJ9/VJhwk1oZbalxq7g=)
4: q0ZcAaJC0NdgaZbJABmMG3a-wuc.roa (hash: SUYYeTh6yzkAt8ag+Tk4xijbvUF82bkEC5ALi/AihH0=)
5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: 9Wf589XYjPUhIOzu+rHU8syQVAVXXYQ53LMHy4R4SCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:2c:4b:c5:62:fa:7f:f2:6d:e5:56:6f:61:7d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Oct 26 10:00:18 2025 GMT
Not After : Oct 27 10:00:18 2025 GMT
Subject: CN=0d3f72f8024aa85f56ec618d651bf717fd5ddabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:7d:0b:0b:d8:02:bf:a9:74:08:98:e5:c0:
83:ce:ef:97:e8:45:9a:4c:09:34:a3:8f:6f:29:58:
1d:64:fc:79:da:6e:b2:c0:0e:7d:52:38:79:03:59:
30:6a:a0:13:79:6f:99:db:c6:77:8b:41:64:a1:c7:
1f:36:a7:a3:18:d8:ac:77:4d:c5:07:53:fc:bc:4d:
dc:f4:cd:cb:9c:46:43:7f:61:ac:34:a2:9d:84:11:
3e:b0:e5:80:08:2e:bb:54:a9:ac:17:8f:3f:ee:7e:
92:dc:fa:76:e1:45:82:1e:c5:fb:b3:64:18:5c:c4:
a8:27:9f:f8:d2:e1:87:ba:57:7f:57:95:5e:d8:9a:
dd:74:a4:33:e9:b3:26:59:99:f1:12:f4:b7:2e:73:
e1:35:00:86:02:3c:eb:35:0a:d3:ce:68:0b:bb:b3:
c9:7e:93:df:11:26:45:97:c4:55:3b:af:8a:e4:57:
da:3c:a2:66:dc:7a:44:12:61:84:2c:de:04:6c:0f:
37:cb:a6:ae:48:15:47:8a:95:3f:fe:fd:27:ad:12:
18:c6:c3:a9:ef:51:cb:99:a1:2e:ba:b8:62:3b:41:
56:fb:bc:88:1d:e1:34:31:99:98:fc:3c:68:c2:b2:
cf:e8:3c:62:7e:4b:d2:d0:75:be:2d:00:3a:6b:38:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3F:72:F8:02:4A:A8:5F:56:EC:61:8D:65:1B:F7:17:FD:5D:DA:BE
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c2:4c:31:2b:46:0d:88:b6:b5:73:93:b2:0c:ea:d2:5c:73:
c8:5f:49:f6:8f:d8:cc:0d:17:86:d9:46:62:fa:58:8f:77:76:
41:d7:64:93:af:a9:cc:c1:fb:2e:d4:bc:29:48:33:82:2e:f7:
52:09:3f:9d:45:02:02:fe:be:12:42:05:18:80:d8:0b:3f:c6:
17:ab:4e:3b:54:e3:79:ad:9b:5b:92:07:8a:4b:7a:a7:b2:1b:
5a:e1:44:c8:ef:16:2c:1c:47:8e:93:2c:83:5a:c7:0b:f1:37:
d3:c8:e8:63:04:55:cc:a5:49:bb:09:a0:0f:62:57:4b:76:96:
9e:9e:7d:72:bd:c9:d2:fb:50:b0:06:31:44:6a:fb:aa:9c:53:
09:b4:9c:19:4c:01:46:08:74:cc:5f:9c:0c:04:bf:a0:cf:39:
b6:02:35:72:8d:e3:82:16:ee:31:b2:e3:1b:25:af:27:97:cd:
c3:a6:3a:df:5e:5a:52:57:1f:5d:57:97:1a:a9:08:fd:7a:c7:
2d:bf:b9:b5:85:71:d4:41:5e:b3:64:5c:17:dd:81:c2:ab:8a:
a7:05:e9:f6:01:87:3a:eb:23:df:af:e0:11:d3:a1:94:c5:ec:
d1:21:61:8f:36:ea:f3:b0:86:07:fc:22:b6:73:bf:d2:41:3f:
57:df:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:10:33 2025 by rpki-client