Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: 68HqW54pOmRDNwe+ybTBXxMpM0zO2tfXAHsMvnKJ+2M=
Subject key identifier: 05:59:53:2A:99:CB:33:B4:FC:B8:14:B1:73:9D:2A:E8:02:E3:DB:60
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019A09DCB37916A5357D081D565F677B1A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0E78
Signing time: Wed 22 Oct 2025 03:00:50 +0000
Manifest this update: Wed 22 Oct 2025 03:00:50 +0000
Manifest next update: Thu 23 Oct 2025 03:00:50 +0000
Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: wZQqumMIPkRm0YM20YRFlh8sd8ItKMQWfc4V/uJSO+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:b3:79:16:a5:35:7d:08:1d:56:5f:67:7b:1a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Oct 22 03:00:50 2025 GMT
Not After : Oct 23 03:00:50 2025 GMT
Subject: CN=0559532a99cb33b4fcb814b1739d2ae802e3db60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:2f:bf:d0:7c:c7:41:07:40:6f:f8:f0:c1:
2f:63:97:10:6f:d5:0d:d1:a2:ed:30:f7:8e:17:6f:
ed:00:7b:a4:5e:ad:8a:9d:80:8b:6e:16:cf:e7:d8:
cd:13:11:17:9c:5d:f0:77:10:fb:f2:8d:6c:c6:0a:
66:bf:c9:4e:b1:45:6d:b4:c1:ca:6a:3b:63:84:0a:
04:2d:4b:ec:ef:24:90:82:67:a9:d0:41:e4:34:d7:
e7:c6:6e:b3:d3:2d:d6:38:fe:9b:c2:ec:9b:dd:24:
fd:79:15:b2:0e:4f:bc:1c:21:be:12:5b:ae:81:4a:
7d:b0:41:bd:2e:0f:b4:7b:34:40:87:51:77:f4:4f:
d7:2b:14:8f:5a:d4:64:c6:95:4e:51:ec:95:b2:4b:
b6:71:82:65:dd:97:f1:91:20:4b:7e:ed:c7:f1:e0:
b5:fb:75:4a:ce:fb:da:c4:e8:54:4b:ed:c9:6b:41:
69:49:f8:04:b0:32:7d:56:e5:5f:28:bc:06:fa:25:
db:f9:42:6a:6d:90:2e:d9:8b:49:d0:66:c1:a0:34:
4c:1a:9d:e8:ab:30:5c:1d:06:9e:f0:b9:ff:af:72:
a3:75:5c:6a:fd:bf:2c:0f:01:22:9e:f8:b5:e9:dd:
c0:82:e9:bd:89:d7:51:2f:29:ab:fa:8b:9b:e2:fc:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:59:53:2A:99:CB:33:B4:FC:B8:14:B1:73:9D:2A:E8:02:E3:DB:60
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f6:2e:3d:6b:7c:22:93:ee:92:60:06:b5:16:8b:b4:af:4a:
cb:87:05:ac:a5:b0:30:2f:c4:97:ae:a7:36:60:8f:8c:c4:86:
77:93:a9:cb:98:5c:5c:aa:f9:03:e6:46:a6:1e:f0:5b:04:a6:
35:5c:b2:c7:e6:12:6a:55:38:64:e9:e5:85:87:72:f0:ef:f2:
fd:b3:d3:6a:5a:c6:c1:25:4b:e6:9c:07:18:1a:f4:6d:76:c8:
2d:f3:49:b4:3a:c7:b2:23:63:ae:96:5a:a1:d4:14:b5:ca:ba:
e0:f2:ea:df:6a:1d:7b:f5:fa:6f:a0:0e:18:fe:53:76:be:34:
af:88:c5:87:d9:47:da:03:78:f0:13:b9:19:08:34:f3:9d:b8:
ad:d9:f3:60:24:02:49:7c:e7:66:1c:c8:06:6b:65:6f:29:83:
ca:30:52:ad:c7:6e:4c:0f:d7:16:b3:5b:05:99:80:04:bd:37:
d0:80:86:3b:78:ab:c5:97:80:e3:04:26:41:06:44:76:0e:b6:
d8:5e:c1:9d:14:7a:b3:d4:72:9a:8c:c5:ce:90:73:7e:6f:b1:
64:2b:96:3c:53:01:1d:76:84:ff:58:62:e7:e0:2a:98:7e:e4:
54:ea:52:81:d7:7d:54:f3:17:70:81:5f:fd:29:b3:f7:5f:75:
d0:d7:7a:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoJ3LN5FqU1fQgdVl9nexovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDczMTg4NGJhMGY1NzNmYTYxOGI2ZTdhZDUwM2ExMmM5
NjVhZjMwHhcNMjUxMDIyMDMwMDUwWhcNMjUxMDIzMDMwMDUwWjAzMTEwLwYDVQQD
EygwNTU5NTMyYTk5Y2IzM2I0ZmNiODE0YjE3MzlkMmFlODAyZTNkYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S8vv9B8x0EHQG/48MEvY5cQb9UN
0aLtMPeOF2/tAHukXq2KnYCLbhbP59jNExEXnF3wdxD78o1sxgpmv8lOsUVttMHK
ajtjhAoELUvs7ySQgmep0EHkNNfnxm6z0y3WOP6bwuyb3ST9eRWyDk+8HCG+Eluu
gUp9sEG9Lg+0ezRAh1F39E/XKxSPWtRkxpVOUeyVsku2cYJl3ZfxkSBLfu3H8eC1
+3VKzvvaxOhUS+3Ja0FpSfgEsDJ9VuVfKLwG+iXb+UJqbZAu2YtJ0GbBoDRMGp3o
qzBcHQae8Ln/r3KjdVxq/b8sDwEinvi16d3Agum9iddRLymr+oub4vxueQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVZUyqZyzO0/LgUsXOdKugC49tgMB8GA1UdIwQY
MBaAFLtHMYhLoPVz+mGLbnrVA6EsllrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYt
ODM1YTU4NDJiOTRjLzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYtODM1YTU4NDJiOTRj
LzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/YuPWt8
IpPukmAGtRaLtK9Ky4cFrKWwMC/El66nNmCPjMSGd5Opy5hcXKr5A+ZGph7wWwSm
NVyyx+YSalU4ZOnlhYdy8O/y/bPTalrGwSVL5pwHGBr0bXbILfNJtDrHsiNjrpZa
odQUtcq64PLq32ode/X6b6AOGP5Tdr40r4jFh9lH2gN48BO5GQg08524rdnzYCQC
SXznZhzIBmtlbymDyjBSrcduTA/XFrNbBZmABL030ICGO3irxZeA4wQmQQZEdg62
2F7BnRR6s9RymozFzpBzfm+xZCuWPFMBHXaE/1hi5+AqmH7kVOpSgdd9VPMXcIFf
/Smz91910Nd6Sw==
-----END CERTIFICATE-----
Generated at Wed Oct 22 12:07:07 2025 by rpki-client