Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: qAx4DqcB9hJeMzso0jXmp5dBy/tTxumEyOr66BhWIIM=
Subject key identifier: E4:C1:47:35:46:22:43:1E:41:59:2E:FA:E8:C7:91:D6:FD:9A:FC:82
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 01995FB3C77135115DA9EDA93DB3D1FD11EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 13B0
Signing time: Fri 19 Sep 2025 02:00:41 +0000
Manifest this update: Fri 19 Sep 2025 02:00:41 +0000
Manifest next update: Sat 20 Sep 2025 02:00:41 +0000
Files and hashes: 1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=)
2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=)
3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: UKr4ofmtufvQ2AWzpzLu9p18dBauXT38bNyrL+oqdXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:b3:c7:71:35:11:5d:a9:ed:a9:3d:b3:d1:fd:11:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Sep 19 02:00:41 2025 GMT
Not After : Sep 20 02:00:41 2025 GMT
Subject: CN=e4c147354622431e41592efae8c791d6fd9afc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:a7:f9:6d:c5:45:5b:b1:50:13:49:f8:62:
61:19:8d:d1:23:36:cf:11:77:9d:c0:5a:b7:41:3e:
7e:59:ff:5c:41:1c:05:9c:e1:0b:e4:33:4c:78:f2:
e4:92:ac:0a:c8:3b:ee:0d:6a:2c:0f:81:a8:a8:95:
dc:57:8f:75:5c:60:c6:63:21:93:d1:7c:5f:0a:21:
e7:3e:d8:2d:69:cc:15:44:ae:87:d9:7f:17:43:ca:
25:97:a6:cd:57:f8:44:05:f9:e9:c1:32:4e:e5:de:
73:bb:f9:a4:74:53:c1:a1:fd:61:bc:60:60:46:09:
89:5c:dd:41:87:a0:5a:7e:24:d1:fa:15:ca:88:dc:
66:c0:76:e0:80:ec:61:88:28:c5:2a:12:cc:ff:97:
c0:c8:8b:1f:6f:33:e6:45:53:fb:6d:62:bb:68:f3:
69:f5:da:82:ec:db:97:37:b2:87:02:5b:06:22:1c:
37:af:77:ff:c3:38:5d:6f:4a:c9:0b:d0:9d:90:82:
d0:15:1d:5d:fd:49:58:27:1e:54:4b:01:23:e5:ad:
12:32:34:ab:02:b2:2b:6d:a5:8c:3b:0a:ff:ed:dd:
50:f8:94:9e:13:13:1f:20:f9:9e:d3:5c:87:e8:71:
06:ee:18:ad:ba:42:96:1b:c6:fb:0e:3f:1b:87:f7:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C1:47:35:46:22:43:1E:41:59:2E:FA:E8:C7:91:D6:FD:9A:FC:82
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ef:65:f8:0b:f0:de:c7:d0:34:35:f5:b2:22:50:c7:2a:f4:
a0:10:b0:a0:71:0d:b9:89:30:86:12:e9:04:5d:a8:3a:d5:36:
59:54:ae:5f:73:ff:07:fa:08:e2:01:a6:71:f6:2b:0f:e5:96:
c6:08:b3:a0:71:0f:39:06:44:82:81:2d:b3:86:92:43:30:c0:
e0:91:55:63:ec:43:66:2d:f2:f8:a4:8e:59:a6:b9:b9:86:3d:
83:94:f7:b3:06:7b:28:ad:33:6c:f3:f7:01:7b:45:c9:fb:e9:
a6:7e:e1:3c:fa:25:15:e3:32:44:0d:04:75:07:c9:00:e5:be:
8a:fe:43:f6:4d:d2:9c:8f:ea:7d:3f:a6:71:f5:3b:50:69:73:
08:8e:73:21:99:6f:15:04:57:cc:e8:14:e4:04:ff:19:f5:c4:
7f:e8:5f:23:f4:b7:b8:77:83:4d:44:8b:54:3b:c3:f5:11:73:
c4:bb:74:7c:93:c5:94:73:b3:34:f3:79:9d:72:31:5f:b6:07:
5b:a3:ed:4a:73:e3:6c:57:c8:b6:cf:24:f2:e6:b7:fa:33:c7:
3d:af:dd:30:69:ce:47:a5:bd:a2:9b:ed:1c:5d:ae:c4:4e:77:
1b:f7:f0:da:4b:41:e7:be:7b:3f:34:05:89:58:80:1f:ec:fc:
cc:4e:64:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlfs8dxNRFdqe2pPbPR/RHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGEwYWYxNTYzMzJkM2M3ZWNiNTg1ZmFlZTNhOTBkOWJm
MmEwOTYwHhcNMjUwOTE5MDIwMDQxWhcNMjUwOTIwMDIwMDQxWjAzMTEwLwYDVQQD
EyhlNGMxNDczNTQ2MjI0MzFlNDE1OTJlZmFlOGM3OTFkNmZkOWFmYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FWn+W3FRVuxUBNJ+GJhGY3RIzbP
EXedwFq3QT5+Wf9cQRwFnOEL5DNMePLkkqwKyDvuDWosD4GoqJXcV491XGDGYyGT
0XxfCiHnPtgtacwVRK6H2X8XQ8oll6bNV/hEBfnpwTJO5d5zu/mkdFPBof1hvGBg
RgmJXN1Bh6BafiTR+hXKiNxmwHbggOxhiCjFKhLM/5fAyIsfbzPmRVP7bWK7aPNp
9dqC7NuXN7KHAlsGIhw3r3f/wzhdb0rJC9CdkILQFR1d/UlYJx5USwEj5a0SMjSr
ArIrbaWMOwr/7d1Q+JSeExMfIPme01yH6HEG7hitukKWG8b7Dj8bh/eXvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTBRzVGIkMeQVku+ujHkdb9mvyCMB8GA1UdIwQY
MBaAFLtKCvFWMy08fstYX67jqQ2b8qCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYt
ZjIxMjY2NjcyNWI0LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYtZjIxMjY2NjcyNWI0
LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASe9l+Avw
3sfQNDX1siJQxyr0oBCwoHENuYkwhhLpBF2oOtU2WVSuX3P/B/oI4gGmcfYrD+WW
xgizoHEPOQZEgoEts4aSQzDA4JFVY+xDZi3y+KSOWaa5uYY9g5T3swZ7KK0zbPP3
AXtFyfvppn7hPPolFeMyRA0EdQfJAOW+iv5D9k3SnI/qfT+mcfU7UGlzCI5zIZlv
FQRXzOgU5AT/GfXEf+hfI/S3uHeDTUSLVDvD9RFzxLt0fJPFlHOzNPN5nXIxX7YH
W6PtSnPjbFfIts8k8ua3+jPHPa/dMGnOR6W9opvtHF2uxE53G/fw2ktB5757PzQF
iViAH+z8zE5kMQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:44:53 2025 by rpki-client