Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
File: u-Eo3LaBD_3FArowR81BkTLaInQ.mft (raw, json)
Hash identifier: PaZxSj98AeiIJawDWXsGhiT3g8UTccipcbcDT8aT7Y4=
Subject key identifier: 1E:92:16:35:78:0A:EA:EF:C5:B6:05:63:43:82:5F:98:5B:E0:4D:F9
Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Certificate issuer: /CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Certificate serial: 019A730150ECFF01B6C507E8B6B9471C26C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
Manifest number: 1672
Signing time: Tue 11 Nov 2025 13:00:57 +0000
Manifest this update: Tue 11 Nov 2025 13:00:57 +0000
Manifest next update: Wed 12 Nov 2025 13:00:57 +0000
Files and hashes: 1: KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa (hash: 7vZ+OrglKDbrLCd5IBuAg6rXUphyAUCG7HZaGMHHYfs=)
2: u-Eo3LaBD_3FArowR81BkTLaInQ.crl (hash: 0ljnCr49mDcCdMOf6eewYsOg5kxU7anFdHUWZTZGG7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:50:ec:ff:01:b6:c5:07:e8:b6:b9:47:1c:26:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Validity
Not Before: Nov 11 13:00:57 2025 GMT
Not After : Nov 12 13:00:57 2025 GMT
Subject: CN=1e921635780aeaefc5b6056343825f985be04df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:e7:39:84:6d:c2:0f:ad:06:bc:bb:b7:15:
df:a1:a6:c9:ca:f3:f8:38:34:67:6c:c1:58:40:b5:
6b:65:67:57:d6:e4:6b:6d:2d:e9:9c:6c:18:e6:af:
9f:95:3c:be:73:8c:5d:3b:90:35:a3:20:95:d6:0f:
a1:40:22:5f:ad:99:db:a3:64:65:62:6b:cb:62:cd:
81:7e:d0:c2:a6:02:e1:c7:b6:00:2a:82:65:7c:74:
12:fc:1e:13:8d:44:03:ca:ec:43:4c:df:f0:44:de:
0d:bb:7d:47:44:cd:be:35:e5:79:d4:f1:1a:6d:f4:
a7:8c:47:d2:80:b9:46:f7:5c:bb:5f:f1:84:53:df:
1f:55:eb:6f:68:ef:65:bf:22:8e:66:f1:b2:a5:f7:
1a:9e:64:7d:6e:d4:a7:2b:39:a0:b0:b8:44:92:ae:
30:a4:a2:58:9d:1d:88:4d:b0:c0:49:53:b9:7c:6c:
f7:a2:72:95:18:7f:24:05:d2:0a:6c:0a:f6:0a:35:
69:3d:25:d9:d0:d5:56:f7:03:89:5b:60:17:9e:46:
2f:81:4d:1d:89:7a:91:c4:cf:3c:62:1f:44:81:18:
8e:db:b9:47:96:c0:fc:d0:55:d5:6d:10:60:d4:31:
9f:66:fb:11:0a:f4:98:10:97:97:c2:46:34:98:f0:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:92:16:35:78:0A:EA:EF:C5:B6:05:63:43:82:5F:98:5B:E0:4D:F9
X509v3 Authority Key Identifier:
keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:77:fc:40:1d:eb:58:f5:59:d0:66:76:ad:7f:f6:cd:08:42:
b6:4b:2b:21:5a:30:b0:a7:71:91:52:ab:cd:85:59:1f:7c:f4:
49:89:17:25:9c:c8:7e:a6:70:3a:1a:e2:c7:ec:3b:cc:3e:7b:
62:bb:a6:bb:05:4c:d7:db:fe:2a:89:7e:80:3e:a5:1a:16:8f:
82:ff:cf:30:b8:e3:2f:f0:e8:2b:2e:30:1b:47:f2:be:5d:09:
32:c0:78:45:1a:f1:b9:ff:d6:6d:39:07:58:79:fc:22:ba:14:
89:73:cd:e7:d2:f1:94:c3:99:15:c2:87:aa:a3:7c:15:2d:79:
dc:84:c4:ad:a9:52:00:99:5a:a3:9c:52:f1:ac:4c:02:90:6f:
de:00:e1:bc:d5:de:87:40:26:00:9a:d8:79:0e:07:20:d6:dc:
3f:21:9f:5c:a9:81:e1:04:50:50:f7:f9:b3:69:df:7b:36:46:
37:d9:82:dd:e7:7a:68:b4:37:e1:4d:06:e0:f5:8f:af:38:2c:
c8:bd:a0:9c:00:c7:85:40:e3:11:10:7a:73:da:24:cf:67:ec:
7f:62:10:71:38:b5:4a:2f:01:66:a6:b9:1e:15:1f:c6:0a:66:
b1:b0:45:93:7c:5f:df:d4:ad:29:78:11:ca:61:02:1b:a3:90:
20:c5:10:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAVDs/wG2xQfotrlHHCbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTEyOGRjYjY4MTBmZmRjNTAyYmEzMDQ3Y2Q0MTkxMzJk
YTIyNzQwHhcNMjUxMTExMTMwMDU3WhcNMjUxMTEyMTMwMDU3WjAzMTEwLwYDVQQD
EygxZTkyMTYzNTc4MGFlYWVmYzViNjA1NjM0MzgyNWY5ODViZTA0ZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FvnOYRtwg+tBry7txXfoabJyvP4
ODRnbMFYQLVrZWdX1uRrbS3pnGwY5q+flTy+c4xdO5A1oyCV1g+hQCJfrZnbo2Rl
YmvLYs2BftDCpgLhx7YAKoJlfHQS/B4TjUQDyuxDTN/wRN4Nu31HRM2+NeV51PEa
bfSnjEfSgLlG91y7X/GEU98fVetvaO9lvyKOZvGypfcanmR9btSnKzmgsLhEkq4w
pKJYnR2ITbDASVO5fGz3onKVGH8kBdIKbAr2CjVpPSXZ0NVW9wOJW2AXnkYvgU0d
iXqRxM88Yh9EgRiO27lHlsD80FXVbRBg1DGfZvsRCvSYEJeXwkY0mPATqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6SFjV4CurvxbYFY0OCX5hb4E35MB8GA1UdIwQY
MBaAFLvhKNy2gQ/9xQK6MEfNQZEy2iJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjct
ZWRmN2JiNjUzZjEzLzEvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjctZWRmN2JiNjUzZjEz
LzEvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinf8QB3r
WPVZ0GZ2rX/2zQhCtksrIVowsKdxkVKrzYVZH3z0SYkXJZzIfqZwOhrix+w7zD57
YrumuwVM19v+Kol+gD6lGhaPgv/PMLjjL/DoKy4wG0fyvl0JMsB4RRrxuf/WbTkH
WHn8IroUiXPN59LxlMOZFcKHqqN8FS153ITEralSAJlao5xS8axMApBv3gDhvNXe
h0AmAJrYeQ4HINbcPyGfXKmB4QRQUPf5s2nfezZGN9mC3ed6aLQ34U0G4PWPrzgs
yL2gnADHhUDjERB6c9okz2fsf2IQcTi1Si8BZqa5HhUfxgpmsbBFk3xf39StKXgR
ymECG6OQIMUQlg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:09 2025 by rpki-client