Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: lN50H5rlguCSfm06i3xPBwr4gNNXf2Td+OHPRuopcUc=
Subject key identifier: 70:4D:D2:BD:5C:41:68:E5:81:55:8C:92:BE:08:38:72:20:3E:67:8C
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 019A714A1C97C2033CE7455DE1ADFA194567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0D3A
Signing time: Tue 11 Nov 2025 05:01:13 +0000
Manifest this update: Tue 11 Nov 2025 05:01:13 +0000
Manifest next update: Wed 12 Nov 2025 05:01:13 +0000
Files and hashes: 1: rndMlM-Kmotx4ZTMDFABZDqeWXo.roa (hash: FbnOY8Bh8pIyTC0Uqy9f/1TBfdxIcNvVYwe7iz7GTqs=)
2: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: zk34lq0xW5+NU9a8QmNUXavIYMP1PisLWdRM81cU4/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:1c:97:c2:03:3c:e7:45:5d:e1:ad:fa:19:45:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Nov 11 05:01:13 2025 GMT
Not After : Nov 12 05:01:13 2025 GMT
Subject: CN=704dd2bd5c4168e581558c92be083872203e678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:06:1b:92:8b:b0:71:36:f0:9f:6d:78:4e:
3d:a4:38:28:da:5d:e3:65:d0:65:1f:97:db:65:d4:
e4:31:21:f5:8b:b7:d3:ec:1c:27:df:82:35:b1:dd:
3f:d3:80:69:1c:6c:c0:63:40:01:d0:3a:b5:17:c6:
63:35:a9:6d:d2:f8:99:e4:69:0a:92:9e:fe:3e:0b:
0d:f3:f1:87:41:7c:fc:3d:b9:88:f5:ed:21:be:02:
ea:be:e1:73:2a:54:b2:d0:ea:d1:8f:4c:02:69:db:
f0:ca:ae:31:7e:cd:24:b5:30:b5:55:da:db:3c:a0:
30:b7:2e:56:08:f7:d3:e0:4d:6d:11:b6:8f:fb:5e:
05:97:1d:c2:23:7f:44:89:31:30:76:23:c9:11:ff:
42:54:de:da:0c:c7:3e:01:7d:c7:95:46:d5:5f:de:
ed:dd:4b:30:bf:3d:14:6e:3c:9e:b4:0e:0a:d6:43:
ef:f5:6d:6a:ed:e0:bd:c1:b3:ba:3f:34:a6:33:e1:
20:3b:4d:91:a2:c4:a0:a5:2c:d5:d2:55:7d:39:7a:
9c:92:87:7c:13:de:60:33:73:28:b1:9c:fd:31:4d:
ec:68:f1:df:89:83:d9:d9:e7:66:fc:06:dc:e1:1b:
ac:af:8f:8d:70:62:41:c6:14:99:46:e7:a9:e5:dd:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4D:D2:BD:5C:41:68:E5:81:55:8C:92:BE:08:38:72:20:3E:67:8C
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c3:35:c2:db:5e:2c:6c:92:f5:7d:ef:58:1e:11:06:37:af:
e5:10:0b:a2:79:5b:6e:21:bd:38:fd:0b:3d:47:87:f1:71:e0:
ca:5c:47:0c:13:52:8d:47:d7:e0:66:87:8e:d4:08:86:90:46:
7a:df:48:2f:8c:03:9b:8e:c6:71:30:7a:74:ea:dd:a7:48:6b:
fd:bc:5c:65:6b:b4:47:34:84:31:70:4e:e8:52:78:e6:95:72:
18:95:8a:59:7f:22:4b:50:a4:e9:47:01:06:20:ac:62:15:66:
fc:0e:20:26:14:29:3e:25:30:32:89:60:4d:c1:81:4d:55:a9:
44:2b:c7:9f:6e:be:5e:67:e5:b5:71:43:a2:1e:b6:52:f0:f1:
ed:f9:24:97:fa:6d:a9:ff:6e:d9:1a:c2:10:54:d4:63:df:8a:
b2:65:2c:76:be:40:cd:54:bd:97:d5:a9:cf:8f:d8:e0:95:4f:
59:88:af:ee:7c:db:90:1f:d4:03:9d:d4:c4:73:d1:86:7b:9a:
9b:e7:07:c0:d2:a3:b7:0f:67:a2:53:61:65:e4:b5:05:ce:54:
63:cc:f4:88:27:bd:58:8e:9b:ab:fd:d0:03:94:9f:96:d9:28:
d9:c6:d3:76:7c:a5:32:27:95:97:b9:0d:28:1e:79:76:e6:a0:
b4:2f:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:02 2025 by rpki-client