Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier: Am+Hbxt5xHubAhNIZMnZjHHVFTqTdliYjl8XpHtOKWA=
Subject key identifier: F7:9E:D4:5D:6F:34:7D:A8:68:69:06:06:23:53:A2:27:11:5D:FA:B3
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 019A72937A27D3F482B7386D29CCD0938EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number: 0342
Signing time: Tue 11 Nov 2025 11:00:58 +0000
Manifest this update: Tue 11 Nov 2025 11:00:58 +0000
Manifest next update: Wed 12 Nov 2025 11:00:58 +0000
Files and hashes: 1: AnOjAErapOHwpd7AwIATrv6oaPs.roa (hash: Z5NCDzdRe0c7oL58VbkecPbcKaio1C3c2yksvrR6h14=)
2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: tx0TdSZzCyIGHQQgqi1yTyYIhvJpz3/9xV2u5ONhJtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:7a:27:d3:f4:82:b7:38:6d:29:cc:d0:93:8e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: Nov 11 11:00:58 2025 GMT
Not After : Nov 12 11:00:58 2025 GMT
Subject: CN=f79ed45d6f347da8686906062353a227115dfab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e5:36:c6:02:7f:ba:9e:73:a4:a7:66:28:76:
aa:45:9a:61:50:46:bd:aa:cf:c7:d1:d7:95:7a:49:
39:a5:4d:5b:ff:a2:44:6a:cb:b8:b1:b0:32:fd:76:
08:49:6b:4e:4a:30:bb:50:81:56:87:bc:d9:f6:f8:
92:a0:d8:ba:88:f2:3e:78:33:14:51:7d:cb:c0:c2:
a1:66:f5:6c:89:f6:16:96:b0:48:44:e8:1c:6c:d1:
e5:54:99:b1:44:dc:da:4b:5c:0c:ff:52:01:e0:1b:
88:3c:e6:46:75:9a:bc:4f:ac:a3:0f:67:31:1b:86:
26:4d:f0:d8:a0:1d:c3:98:6c:d2:6c:21:93:aa:fd:
15:e0:10:49:d3:81:09:4c:ac:28:44:df:9e:d9:38:
8f:cc:bf:60:b5:4f:d1:00:42:63:4c:9c:db:ed:b7:
c0:70:d5:2a:04:17:af:d1:60:8d:bf:c3:ec:84:a7:
a2:6c:a9:8b:3d:dd:c2:32:c0:6f:07:8b:31:c1:f1:
55:08:e8:3f:38:2d:19:b8:4b:25:e6:8f:cb:87:e8:
84:f8:7e:ad:97:2b:8a:09:6b:a8:9c:15:0e:21:3d:
19:a4:5a:94:00:f9:20:16:73:c1:48:94:6b:44:f1:
04:26:b6:bb:3b:86:a7:4f:e4:f4:1a:8e:04:46:84:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9E:D4:5D:6F:34:7D:A8:68:69:06:06:23:53:A2:27:11:5D:FA:B3
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:af:77:cd:28:f2:de:67:cb:73:0d:aa:71:d0:f2:f8:2a:d1:
37:0c:87:c8:af:79:6b:61:e0:8a:62:6f:fc:60:4b:45:fa:05:
ad:b0:f6:3e:02:af:27:00:52:6c:1f:3c:d2:a5:f9:d2:ad:50:
6c:d5:5a:51:07:85:8d:36:e1:cb:d0:a7:88:c5:0f:fe:ed:98:
a1:45:b4:1f:46:49:86:69:b8:53:fe:49:1b:1e:32:dd:04:76:
ee:fb:39:03:c8:70:e7:91:84:c2:3d:ef:6d:08:f8:a4:b2:e7:
3c:ae:fa:90:5b:1c:96:d0:52:a9:7e:60:f3:fe:29:11:58:70:
26:57:10:48:39:14:4d:90:70:6b:a2:29:15:18:4b:ea:33:75:
ac:34:18:01:f7:f0:ff:f8:17:be:0c:07:07:be:fc:8a:a8:a8:
5d:70:4b:c1:f9:b4:8a:12:0f:73:76:b0:d0:0e:1f:2a:5a:89:
f6:ea:a3:a7:e5:9b:1e:ec:0b:d2:91:90:61:4e:6c:c9:88:34:
90:55:28:57:12:15:af:90:b2:5e:2d:f8:61:0d:e2:2c:4a:b1:
d4:af:6e:85:db:61:59:bc:5d:70:55:f3:4f:30:d1:29:b1:8d:
24:03:fb:f4:de:50:71:f6:6c:e2:45:8c:cd:32:7b:74:78:16:
10:9c:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:34 2025 by rpki-client