Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
File: u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json)
Hash identifier: ckQUDCagcLYykxNB410lcNpBF32680slP4TYN9geTQ8=
Subject key identifier: 82:AD:A4:80:BA:06:0B:F2:0D:3A:10:EB:3D:5B:07:CA:01:3F:B8:61
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 019A240A37BF30025D8B8BFA6D52F235DD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
Manifest number: CC
Signing time: Mon 27 Oct 2025 05:00:40 +0000
Manifest this update: Mon 27 Oct 2025 05:00:40 +0000
Manifest next update: Tue 28 Oct 2025 05:00:40 +0000
Files and hashes: 1: 1-pr3Ei1SAi03zriZ2YxxK2My5xc.roa (hash: zQiqPG2qSn25xqgBTrMUyr+bMNmg0bry5+ur5lPK/ps=)
2: 87Xl48cBUq5jam9l_wPBnTmXlGI.roa (hash: boX79z65S+x/Pf7MD9UZvJ6gdGMUevgNlx+jhV9Efz4=)
3: KMWQvkvZexGmjDkok2xFAK-VG28.roa (hash: k7JhCKGfs3xftRzHduHTKDM6EpxC14ywrQN15pLBPWI=)
4: ORUKVv-_YEE36efG4PfU64aXADU.roa (hash: P7K9L7N2y9KzP1ISJt3hhdr+c/QQc0uQ0hv2NGWf2tY=)
5: owAhL1NHTs3a_KA4LBgI9S2g7Cs.roa (hash: JEBK6rkYLONJ+2U7DSIWRzvXuZ8BeffH/0aQKugUgXU=)
6: t2lK80Ovc4cUKro9z3LuGitzfPs.roa (hash: TffTYN5YIYdBEFYI6Iw2h3no/jNeYny+5NiYBLuTLjk=)
7: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: x+zgcqrCTRHEkzg5mhh4RfvJEctxsrcsS6ugcLo/4/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:37:bf:30:02:5d:8b:8b:fa:6d:52:f2:35:dd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Oct 27 05:00:40 2025 GMT
Not After : Oct 28 05:00:40 2025 GMT
Subject: CN=82ada480ba060bf20d3a10eb3d5b07ca013fb861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:a3:44:4b:7a:68:f0:9a:5c:84:13:42:0e:
5e:fb:b0:63:52:95:6b:8d:0d:64:f8:53:ba:b3:6a:
ea:14:33:32:e8:fd:26:ec:ca:c9:5b:7b:2e:87:dd:
30:e7:a8:04:78:5d:84:46:01:02:83:e8:e1:43:24:
38:60:9c:b5:ea:81:76:12:c5:65:36:1c:bc:c9:2b:
15:79:87:87:8d:17:da:62:c9:79:ca:63:ed:b7:02:
dd:35:b0:c5:f4:4a:be:9a:36:a7:cf:db:c8:8f:1d:
90:90:52:65:cb:22:24:ee:eb:8e:2e:1e:bb:64:40:
70:b2:8d:8e:6a:0e:18:22:b1:96:d1:c5:8d:8d:ee:
ce:8e:74:da:b1:c3:0e:28:57:cb:d2:02:e8:81:08:
e2:39:a1:02:cb:eb:13:08:ab:d7:d0:2b:9f:e8:a9:
ac:fb:f4:dd:09:6c:fa:66:b0:c3:bf:c4:b9:e2:ed:
70:84:5e:d6:4a:9a:cf:49:6d:f6:a7:49:1d:71:77:
67:4e:d4:e6:c4:66:4d:fc:c1:8b:11:ae:6d:a7:09:
4e:ab:27:10:ab:5e:e3:5b:6d:14:85:44:74:4d:08:
8f:46:c2:2a:92:31:75:cc:4f:a8:62:c9:11:87:a5:
99:c7:6c:53:07:2b:fd:bd:51:19:da:cf:59:7c:6e:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AD:A4:80:BA:06:0B:F2:0D:3A:10:EB:3D:5B:07:CA:01:3F:B8:61
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4c:d6:e1:d9:2c:bc:0a:f1:ac:61:56:f5:d3:57:a9:c9:35:
65:8e:32:16:ce:02:6d:10:5e:1e:bc:43:16:d2:c4:0e:20:22:
e9:1d:f7:83:b5:89:94:89:2b:a1:84:90:de:af:17:64:83:52:
a8:7d:37:a3:b1:cf:7e:19:70:d2:5b:26:99:47:b9:46:54:53:
48:94:d9:3a:2d:29:7e:f1:aa:76:96:f3:1e:55:82:aa:a6:48:
68:bf:2f:d0:df:17:e7:e0:e3:4b:94:05:8b:80:67:ac:3c:3e:
78:d9:64:2a:18:fb:73:4b:1e:32:99:f2:84:bf:87:52:b5:46:
63:3b:45:6f:3f:97:7c:30:d1:8f:69:06:3a:d1:7c:77:2b:84:
6b:cb:92:32:52:7f:02:6d:ea:36:d2:bf:26:41:4e:f1:91:ad:
3d:0a:3f:a1:d2:1e:cc:5b:a1:27:6c:59:ab:e7:b6:93:f8:90:
04:a9:cf:8a:1b:89:7f:0b:55:d6:21:86:6f:df:78:2d:19:a5:
f0:f7:5a:e2:c0:45:bb:0e:43:d9:83:43:a1:fe:7b:d2:1f:04:
51:a2:13:d0:6f:c4:70:af:cf:2b:f9:b6:43:cb:9c:d1:20:c8:
75:d8:f0:32:91:07:0f:5e:5c:3a:d3:e0:ce:a3:81:53:fe:b3:
37:dc:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 08:19:25 2025 by rpki-client