Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: 7aW+g4XfQBT+4JkrA4PF9P0xXqwne3ToRUwl5zpHc30=
Subject key identifier: 5E:AD:CC:6D:04:FF:A1:18:1E:3A:38:56:9C:5C:8A:0C:E3:98:87:E0
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 019A722657179CC567792838911E5F205306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: tUE8baZVU1NdKeMuH6kAeF6d40U.roa (hash: oR4YGvS/x8NPWIpEMxxjQSUvcEGgnnG9XZinqPPpzBA=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: 7MOzeFIkWISVx3DAfaCBF+shtFH6OwA2ILzgwCuv68g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:57:17:9c:c5:67:79:28:38:91:1e:5f:20:53:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=5eadcc6d04ffa1181e3a38569c5c8a0ce39887e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:58:f4:ac:0e:01:ef:82:d9:dc:5c:b2:bc:
90:7f:fc:f6:64:e2:6c:d2:94:ff:36:6d:97:59:8b:
ca:c7:84:6c:93:2d:8d:6e:b5:5d:46:46:48:5a:e6:
62:51:bc:d8:15:ae:39:3c:7c:37:ff:ca:1f:a0:83:
cb:ef:16:2a:d8:bd:3d:67:fe:31:e9:97:58:0e:bf:
c9:fe:df:aa:4d:a0:3e:46:39:4d:a7:72:2b:6a:68:
21:9d:7b:3c:74:70:fe:84:c0:1d:2e:e0:56:13:db:
12:d3:a5:f5:1d:4a:6e:14:be:5c:61:2c:62:6d:63:
c8:c2:c5:a8:7e:76:af:51:13:2e:bb:8d:54:77:c4:
2d:71:9e:49:d2:70:d9:5a:03:73:3b:5c:8a:f8:10:
25:c9:7d:23:5d:0f:27:cb:31:69:5d:97:31:f2:b3:
16:13:50:a2:dd:93:de:83:3f:18:04:de:1b:02:f5:
53:0c:3a:e2:73:f6:5a:dd:2b:26:55:a6:32:a2:ac:
62:0f:ff:16:4a:d6:93:57:7c:11:46:d2:9f:35:b9:
7b:c9:f6:79:b2:85:e6:08:72:9e:d1:fe:99:ef:59:
a7:6e:29:2a:5b:fe:ba:b6:ca:97:6c:f9:30:e6:be:
ca:b4:46:e4:7f:f9:3b:f5:6b:e5:7c:9c:1d:ff:a9:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AD:CC:6D:04:FF:A1:18:1E:3A:38:56:9C:5C:8A:0C:E3:98:87:E0
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7e:10:4a:80:eb:5c:7c:34:28:fb:74:2e:12:aa:fa:3a:2e:
9d:5f:fb:70:5a:12:9e:9e:fa:5b:32:1c:ed:a7:d0:9b:d2:ee:
33:72:21:d7:8e:6e:50:58:50:b0:78:66:6d:c0:e9:da:c0:b5:
b2:37:b5:9e:bf:f8:1c:2c:79:b2:ea:cd:57:a6:05:3b:b4:1e:
3e:b9:92:36:21:db:50:1d:f9:32:2a:7f:08:ed:cc:1c:1d:c1:
c5:71:8e:ac:30:42:b8:64:14:a6:4b:e5:ec:a9:33:45:5b:64:
8a:95:61:7d:18:fb:b5:58:34:04:96:7b:2d:a5:ea:c6:1d:ed:
56:61:41:57:e8:4c:bb:c8:6c:1b:be:05:2e:0b:b2:08:89:2c:
d0:f1:ba:f9:67:e7:e1:8c:02:60:8a:81:d0:76:66:e6:fa:05:
97:79:a3:85:0d:35:85:db:fd:98:30:4d:27:57:41:6a:18:5e:
60:f2:a1:03:1e:c4:23:7b:c2:19:42:2a:c9:23:be:10:43:11:
d7:b0:3e:49:01:2a:21:bc:08:af:42:27:43:ce:13:24:bc:28:
93:74:74:a2:45:12:de:7c:7b:f1:46:5a:dd:25:57:54:2f:c8:
97:42:bf:d5:5f:cd:6c:1f:d8:a2:ad:8c:a0:a2:bf:ff:fb:63:
02:3d:0e:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJlcXnMVneSg4kR5fIFMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZGNjOGMzNzcyMTc0ZTQ3YmFjOGI5MzJlNWJlYzdiNDdi
MWQ5MmIwHhcNMjUxMTExMDkwMTQ2WhcNMjUxMTEyMDkwMTQ2WjAzMTEwLwYDVQQD
Eyg1ZWFkY2M2ZDA0ZmZhMTE4MWUzYTM4NTY5YzVjOGEwY2UzOTg4N2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2dY9KwOAe+C2dxcsryQf/z2ZOJs
0pT/Nm2XWYvKx4Rsky2NbrVdRkZIWuZiUbzYFa45PHw3/8ofoIPL7xYq2L09Z/4x
6ZdYDr/J/t+qTaA+RjlNp3IramghnXs8dHD+hMAdLuBWE9sS06X1HUpuFL5cYSxi
bWPIwsWofnavURMuu41Ud8QtcZ5J0nDZWgNzO1yK+BAlyX0jXQ8nyzFpXZcx8rMW
E1Ci3ZPegz8YBN4bAvVTDDric/Za3SsmVaYyoqxiD/8WStaTV3wRRtKfNbl7yfZ5
soXmCHKe0f6Z71mnbikqW/66tsqXbPkw5r7KtEbkf/k79WvlfJwd/6mi4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6tzG0E/6EYHjo4VpxcigzjmIfgMB8GA1UdIwQY
MBaAFLvcyMN3IXTke6yLky5b7HtHsdkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjJjMzMtY2M5Yy00YmFmLWEwZWUt
ZWQxNDJlNDY0MzM1LzEvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNjJjMzMtY2M5Yy00YmFmLWEwZWUtZWQxNDJlNDY0MzM1
LzEvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXH4QSoDr
XHw0KPt0LhKq+jounV/7cFoSnp76WzIc7afQm9LuM3Ih145uUFhQsHhmbcDp2sC1
sje1nr/4HCx5surNV6YFO7QePrmSNiHbUB35Mip/CO3MHB3BxXGOrDBCuGQUpkvl
7KkzRVtkipVhfRj7tVg0BJZ7LaXqxh3tVmFBV+hMu8hsG74FLguyCIks0PG6+Wfn
4YwCYIqB0HZm5voFl3mjhQ01hdv9mDBNJ1dBahheYPKhAx7EI3vCGUIqySO+EEMR
17A+SQEqIbwIr0InQ84TJLwok3R0okUS3nx78UZa3SVXVC/Il0K/1V/NbB/Yoq2M
oKK///tjAj0OAg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:48 2025 by rpki-client