Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: +3V5c2dwQg2fysxQ71swnZWFbOhj0BccdPMRDlUc98w=
Subject key identifier: 44:CE:75:89:73:12:AB:F9:E6:A0:D2:57:2F:AB:1C:DA:0B:F5:9A:65
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 019A736EF03D802B9D8E26215FF6D8A43D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 1573
Signing time: Tue 11 Nov 2025 15:00:41 +0000
Manifest this update: Tue 11 Nov 2025 15:00:41 +0000
Manifest next update: Wed 12 Nov 2025 15:00:41 +0000
Files and hashes: 1: oMfkJdM1AJ50uhjGB1W1nnJScB0.roa (hash: H4m9gh/HUrFKIN3OBkRa6uvBDmvc6JbZ7SJg5G/lfuQ=)
2: qHylQxqYspJSNTebtGztToCsU0M.roa (hash: xZhZoeaMSwBgtia5fndUlGK6FEl5SeLWX/IHfA27vUo=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: +l0QZJFkWX00JscrjvM+b8CtXCj9uWmgAtS7aQyetV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:6e:f0:3d:80:2b:9d:8e:26:21:5f:f6:d8:a4:3d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Nov 11 15:00:41 2025 GMT
Not After : Nov 12 15:00:41 2025 GMT
Subject: CN=44ce75897312abf9e6a0d2572fab1cda0bf59a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:94:ed:f6:24:47:dd:56:84:07:67:e2:de:
d7:bb:45:a3:72:2a:8f:01:42:3f:27:93:ea:7b:3f:
be:60:6c:96:0e:db:c7:ae:d8:87:17:b8:3d:94:ee:
a0:04:1e:f3:71:28:b0:01:6c:f2:5e:5b:70:18:0e:
39:b0:66:8a:16:cd:3d:67:c3:2c:c0:7c:51:dd:68:
36:1d:72:40:1b:28:8f:fc:73:b8:ac:10:84:e3:56:
03:f0:58:51:3a:dc:7b:fb:d7:e0:47:f7:7b:51:39:
ce:a5:a0:f3:04:b7:7b:c0:90:05:8e:3e:d4:dd:24:
a2:b4:d0:c1:b3:d6:e2:22:aa:f9:0d:17:d6:6f:36:
d6:0e:e2:6e:7a:7c:ac:4f:22:96:dd:c1:69:4b:d4:
58:40:d1:d9:67:cf:5b:14:ad:a8:2b:b1:d7:fe:8f:
e9:56:02:23:9c:f2:bb:8b:ce:23:80:15:80:63:56:
b4:24:64:a0:c2:bb:67:d6:3a:12:ef:4d:0c:68:7a:
f7:ed:19:95:17:16:02:bf:02:8e:36:74:85:cb:47:
9c:d5:34:1c:d7:f9:33:e7:0e:b3:35:9f:fb:42:49:
c5:b1:3f:94:1f:00:33:5d:be:2d:59:17:a2:56:96:
11:ba:a3:33:4f:55:03:8c:37:09:96:55:d3:f3:7c:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CE:75:89:73:12:AB:F9:E6:A0:D2:57:2F:AB:1C:DA:0B:F5:9A:65
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:83:38:b8:34:2c:e8:d4:83:15:67:5d:02:a8:88:96:97:32:
36:a3:3d:6f:e1:5b:09:a2:c3:fc:40:16:10:a7:7a:32:0c:67:
1b:f4:4e:ff:42:b1:1f:f0:86:e0:8d:e6:6b:51:e5:c5:05:7e:
65:2a:55:74:8f:f6:50:9b:c5:62:56:27:3f:f9:53:60:7d:6e:
09:25:08:df:bf:b9:66:38:b8:46:da:d9:75:6b:3e:d2:7c:0c:
6e:b0:c2:a5:a0:f7:50:21:a4:cc:33:00:d2:a6:02:43:b1:e4:
ec:d6:10:82:b6:19:e7:06:9f:71:af:99:ed:23:0e:e5:67:62:
c2:d1:fd:91:a9:75:d6:32:af:e2:07:aa:d8:74:d6:fa:48:2b:
4b:13:55:74:55:b0:25:fb:97:7f:fc:ae:f9:80:e0:03:29:2d:
14:1c:9d:cb:60:f2:f9:7b:1a:1b:c3:6d:d7:c7:fb:5b:ea:24:
43:50:bb:7f:69:91:0d:27:d4:4c:3f:8e:26:b7:1c:fc:d8:7e:
e8:78:b3:9d:7e:b5:ed:ce:94:11:e3:0b:84:cb:6d:59:38:21:
13:73:2b:b2:68:31:0f:03:64:49:53:66:82:6c:97:38:d1:31:
da:35:d4:aa:4a:5f:c1:b5:79:fa:86:48:9b:f5:e3:f5:60:9c:
5c:07:ed:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:21 2025 by rpki-client