Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: 1q6lBjMzsQcNwWzo/2ovv/e+oCWm0JpjO2+O9Gq0YUQ=
Subject key identifier: DA:B0:33:A0:79:A6:E4:11:A5:FA:E9:0F:46:A2:A8:6D:A1:59:9C:6C
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 019950747DA0CD6F229280843A1D7AAD5574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 14D9
Signing time: Tue 16 Sep 2025 02:57:15 +0000
Manifest this update: Tue 16 Sep 2025 02:57:15 +0000
Manifest next update: Wed 17 Sep 2025 02:57:15 +0000
Files and hashes: 1: PEQB78SQJG5fRZOhNfaI6ZbWtYs.roa (hash: ROZpZ5cNRdODeWoTTGkETDNu6pcowRi1OmaPPXiIRiU=)
2: oMfkJdM1AJ50uhjGB1W1nnJScB0.roa (hash: H4m9gh/HUrFKIN3OBkRa6uvBDmvc6JbZ7SJg5G/lfuQ=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: 2woagiLkzBNb7kjw+zN2CMnMLHZAZSN7j/clWinF9K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:74:7d:a0:cd:6f:22:92:80:84:3a:1d:7a:ad:55:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Sep 16 02:57:15 2025 GMT
Not After : Sep 17 02:57:15 2025 GMT
Subject: CN=dab033a079a6e411a5fae90f46a2a86da1599c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:70:29:18:7a:6c:d6:b2:68:d8:45:4d:22:
a4:86:c1:e2:df:63:c9:ac:f2:87:ad:08:b7:51:ee:
3b:fd:59:cf:06:ce:f3:38:04:fc:59:5a:34:fd:d6:
b1:56:64:3a:51:f6:91:04:ce:0d:69:23:4d:a8:30:
d6:41:4b:bb:da:a2:32:a2:25:43:b4:10:9c:5e:a4:
c8:42:00:9b:cd:2d:d7:55:ae:1a:e2:b2:79:5d:60:
2b:8a:72:53:57:13:e1:2f:6b:94:6d:54:78:82:7e:
a1:d5:5f:55:9f:95:ee:69:2a:7b:5b:15:04:15:28:
f0:83:63:93:5f:0c:ef:63:d6:46:f0:25:5a:42:6f:
1d:3b:da:70:e9:72:5b:47:21:5a:2d:62:5e:c8:8e:
66:d5:a8:62:0c:da:f5:b8:d6:1c:b4:dc:64:f3:ba:
2a:6b:7c:20:81:86:1b:99:ea:98:20:89:54:eb:9a:
8f:fc:3b:7c:18:14:01:66:7c:14:dd:18:de:e7:7c:
d3:0d:1c:ca:14:19:51:37:d5:f5:b1:9e:f3:ea:34:
5c:23:98:48:8f:8b:90:d2:32:9b:1a:0d:f1:82:9c:
89:10:14:85:64:33:50:2d:18:6d:b6:71:90:64:f0:
48:dc:37:c2:96:06:4a:c2:57:c6:9b:63:bf:c5:99:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B0:33:A0:79:A6:E4:11:A5:FA:E9:0F:46:A2:A8:6D:A1:59:9C:6C
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0f:23:3e:57:cd:38:db:f5:36:bb:15:fe:e1:7b:d5:b4:7e:
a9:d3:4f:6f:ba:c8:75:c0:0c:9b:85:eb:f1:91:c1:3d:52:32:
1d:af:c5:a2:63:9b:bf:d9:cf:74:7c:f4:d0:a5:44:08:7a:75:
4f:b8:60:12:32:ab:27:6e:f8:1c:ac:64:f4:a5:f9:ca:f7:65:
d0:39:b8:71:cf:44:f8:e1:a0:27:f8:19:26:e3:b3:7d:73:33:
4f:1d:44:20:3c:21:b1:76:32:0c:31:fe:98:b0:80:9b:83:4c:
b3:ec:78:04:b8:a9:d3:58:5c:f1:57:e3:41:e3:76:f1:28:8a:
dc:a7:70:c2:50:d3:a1:9f:7e:5e:58:8c:d4:fe:1c:90:6d:28:
70:b4:fb:62:cc:b4:58:81:c3:12:86:7c:45:6f:20:14:c7:1c:
13:84:c4:dd:e0:a7:4f:c6:a0:04:21:c2:59:eb:f4:7b:a4:06:
ce:3c:78:85:8e:1f:a0:c0:f6:4b:51:11:6a:d3:24:e1:04:99:
c2:d3:b6:1b:3b:88:12:5a:05:d2:5b:2e:6b:de:ea:f3:1f:4d:
56:55:b0:e3:32:af:b6:9a:a3:29:13:4f:a9:f2:2c:4d:66:06:
38:e6:80:2c:c8:72:ba:f8:60:b0:ef:76:46:9d:ba:d7:e7:b9:
02:fa:7d:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlQdH2gzW8ikoCEOh16rVV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmZkMTIzY2I5M2UyNGUwMjVmOTUyODQyMTA4NDAyOTU4
ZDRhNGMwHhcNMjUwOTE2MDI1NzE1WhcNMjUwOTE3MDI1NzE1WjAzMTEwLwYDVQQD
EyhkYWIwMzNhMDc5YTZlNDExYTVmYWU5MGY0NmEyYTg2ZGExNTk5YzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1pwKRh6bNayaNhFTSKkhsHi32PJ
rPKHrQi3Ue47/VnPBs7zOAT8WVo0/daxVmQ6UfaRBM4NaSNNqDDWQUu72qIyoiVD
tBCcXqTIQgCbzS3XVa4a4rJ5XWArinJTVxPhL2uUbVR4gn6h1V9Vn5XuaSp7WxUE
FSjwg2OTXwzvY9ZG8CVaQm8dO9pw6XJbRyFaLWJeyI5m1ahiDNr1uNYctNxk87oq
a3wggYYbmeqYIIlU65qP/Dt8GBQBZnwU3Rje53zTDRzKFBlRN9X1sZ7z6jRcI5hI
j4uQ0jKbGg3xgpyJEBSFZDNQLRhttnGQZPBI3DfClgZKwlfGm2O/xZm3vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqwM6B5puQRpfrpD0aiqG2hWZxsMB8GA1UdIwQY
MBaAFLv/0SPLk+JOAl+VKEIQhAKVjUpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjIt
YWM0YTQwNjE3NDZkLzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjItYWM0YTQwNjE3NDZk
LzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYA8jPlfN
ONv1NrsV/uF71bR+qdNPb7rIdcAMm4Xr8ZHBPVIyHa/FomObv9nPdHz00KVECHp1
T7hgEjKrJ274HKxk9KX5yvdl0Dm4cc9E+OGgJ/gZJuOzfXMzTx1EIDwhsXYyDDH+
mLCAm4NMs+x4BLip01hc8VfjQeN28SiK3KdwwlDToZ9+XliM1P4ckG0ocLT7Ysy0
WIHDEoZ8RW8gFMccE4TE3eCnT8agBCHCWev0e6QGzjx4hY4foMD2S1ERatMk4QSZ
wtO2GzuIEloF0lsua97q8x9NVlWw4zKvtpqjKRNPqfIsTWYGOOaALMhyuvhgsO92
Rp261+e5Avp9Hw==
-----END CERTIFICATE-----
Generated at Tue Sep 16 05:47:44 2025 by rpki-client