Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: 4udeGv/cyyXJxdOwmEJKDh0p6LJaNuPrPNaNktu7s2w=
Subject key identifier: CA:1E:B4:24:56:95:2A:1E:54:15:2B:09:9A:E0:97:40:E2:86:4B:55
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019A09DC9172C8EBA0D177450AD89DBB0255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 16E9
Signing time: Wed 22 Oct 2025 03:00:41 +0000
Manifest this update: Wed 22 Oct 2025 03:00:41 +0000
Manifest next update: Thu 23 Oct 2025 03:00:41 +0000
Files and hashes: 1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=)
2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: Y0HVpoIWteWeuWn32GGVes/9w5M90KtA+ADTB2qTacY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:91:72:c8:eb:a0:d1:77:45:0a:d8:9d:bb:02:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Oct 22 03:00:41 2025 GMT
Not After : Oct 23 03:00:41 2025 GMT
Subject: CN=ca1eb42456952a1e54152b099ae09740e2864b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:78:8c:e3:6f:ef:8b:23:60:79:27:96:ad:
5b:05:8e:fb:23:3e:60:e4:d0:92:f9:e1:97:20:af:
97:c6:25:18:df:ca:5b:fc:3f:e2:c8:ef:08:4f:79:
ef:ad:e4:54:7d:d7:44:97:d8:5a:89:e0:70:26:95:
ce:a8:7d:7c:2f:5f:33:80:7f:6f:cd:2a:04:2f:f6:
d0:c6:5a:d7:aa:e0:92:b1:90:5a:4f:bf:ad:2f:bb:
0d:79:32:b4:0a:79:fa:4c:58:bd:88:4b:72:f3:d9:
6d:85:9a:c0:7a:e8:08:5f:b5:41:f2:82:f0:f2:3f:
a0:20:33:e0:6c:82:e5:58:a5:29:72:84:4e:fd:5c:
2a:43:43:17:c8:db:75:a4:ba:21:05:10:15:57:67:
17:a8:18:34:a5:8e:62:55:22:2f:fa:a1:1f:0e:69:
39:04:56:15:b4:de:a7:1c:93:76:69:3b:4d:1c:70:
b1:96:43:6e:ef:f8:65:68:7c:69:38:a6:7a:fe:09:
17:3e:fd:64:f5:31:3f:f4:88:c8:41:b6:f5:69:e3:
2e:94:20:96:9f:ea:be:06:c5:44:c7:05:22:d1:70:
20:10:21:4c:ee:e9:50:f7:30:23:dd:9b:be:fd:61:
3a:c3:cc:dc:51:f9:68:cd:e3:dc:5b:fb:ce:3c:c3:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1E:B4:24:56:95:2A:1E:54:15:2B:09:9A:E0:97:40:E2:86:4B:55
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:29:e1:a4:0b:6e:81:b9:b1:4d:06:5d:b9:4b:f5:cd:ea:e1:
94:06:ed:c5:3f:dd:0a:6b:e3:00:d1:39:fa:bd:a6:58:fd:81:
98:84:9a:57:43:51:3c:4e:d2:42:ff:5b:0a:a9:b8:a6:47:d1:
f6:3a:f2:c9:f4:c2:68:59:97:b3:70:1d:26:ca:04:c7:f2:0b:
3f:70:2c:c6:31:bb:c2:5a:94:71:95:ae:50:c5:22:80:11:61:
d0:bb:b1:b0:e2:e4:fe:16:10:8e:ca:f5:2b:7e:6e:17:a7:ec:
cb:bc:c3:07:36:ff:19:b3:44:7c:19:3a:5c:01:ee:14:0a:2c:
63:38:f3:9a:ef:4c:9c:bc:d2:b3:d8:44:54:23:9c:80:87:56:
01:14:44:db:a6:22:37:65:18:ad:8e:54:ca:7f:f9:3a:d1:09:
17:7e:0d:23:f3:e1:86:fa:1b:82:db:fe:6d:7e:2a:0a:c7:3d:
c0:af:73:55:06:28:0b:0a:c4:0c:28:1d:e9:bc:30:95:32:bb:
e0:7a:7d:37:6b:68:7d:75:39:24:c4:64:53:be:ba:0b:d0:f3:
79:34:64:35:fb:58:ca:00:5e:a5:43:85:1d:f7:fa:54:a7:39:
7a:2a:c9:49:a8:3c:e4:fa:19:e5:3a:34:86:79:14:9d:97:01:
ed:5b:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:12:47 2025 by rpki-client