Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier: wCGybO7PYlcxMrptvFdqpY+RiEj30vacuB3pbRqi/VU=
Subject key identifier: 36:AE:3D:AF:91:96:36:21:C3:0C:22:EF:6C:A9:23:78:4A:77:12:5B
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial: 019A2B55FA41AB2C9D4D997989463ADFAD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number: 04D5
Signing time: Tue 28 Oct 2025 15:00:46 +0000
Manifest this update: Tue 28 Oct 2025 15:00:46 +0000
Manifest next update: Wed 29 Oct 2025 15:00:46 +0000
Files and hashes: 1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=)
2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: kI42IqgtUe/xM4DDD6nJn4ZS4wdxnmNVZXcvh3VTk60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:55:fa:41:ab:2c:9d:4d:99:79:89:46:3a:df:ad:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Validity
Not Before: Oct 28 15:00:46 2025 GMT
Not After : Oct 29 15:00:46 2025 GMT
Subject: CN=36ae3daf91963621c30c22ef6ca923784a77125b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:20:d2:25:3a:1a:66:82:d6:38:8b:eb:c9:
1a:4d:45:a3:ad:55:c1:92:89:dc:b8:86:9b:1f:62:
81:9d:cb:e0:8a:12:98:89:8f:73:a4:e3:9b:f9:b3:
04:7e:1b:b7:1d:25:b8:d5:82:c5:42:38:b4:26:d2:
c6:04:89:8f:85:9e:fa:f9:3e:bd:91:95:c3:92:f1:
18:f7:5f:bb:8c:ac:b6:42:22:ca:1f:a0:7e:5a:bf:
72:21:d3:24:41:48:38:0a:54:ce:19:4e:c5:6f:93:
3a:05:97:10:11:07:17:b4:00:f8:91:64:a9:a9:f6:
3a:a4:d1:9b:f7:b2:2b:74:e8:41:df:1f:e1:ee:1f:
8e:f1:be:49:8a:ad:f6:4e:0e:fe:5c:83:00:f8:3c:
e2:0c:97:67:73:f8:d8:e6:fa:e6:9e:78:02:d0:a9:
04:0b:41:46:f3:3a:59:09:6f:62:51:ad:3b:cb:b1:
e2:5c:5e:7e:24:7d:91:0e:2e:22:79:a9:13:fc:1e:
ea:e6:17:8b:2e:ac:63:b2:07:d0:67:40:f1:42:5f:
4a:a1:f3:39:1b:df:6f:6f:99:9e:54:bc:18:58:73:
09:79:02:1b:78:21:d7:31:f1:53:07:74:2e:f2:5f:
02:1e:19:37:a0:32:55:3b:39:af:d8:42:8e:7c:60:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AE:3D:AF:91:96:36:21:C3:0C:22:EF:6C:A9:23:78:4A:77:12:5B
X509v3 Authority Key Identifier:
keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:20:bd:b2:8a:d2:72:64:01:56:c1:13:7b:15:4d:f5:39:8b:
4a:eb:ad:82:2c:08:c9:39:7e:9d:6e:49:57:ab:d7:12:b7:2f:
9b:db:b9:fe:c3:2a:db:21:0d:fa:01:15:98:44:fc:56:9f:70:
b4:fb:91:29:cd:e9:7e:84:5a:32:f3:cb:d6:e0:dc:f2:fb:f0:
82:d5:d9:43:04:28:55:ff:99:e4:48:7a:82:a3:a7:07:cf:7b:
5e:51:7e:cb:cf:c5:5d:1c:7d:27:e1:86:96:4b:eb:f0:72:b3:
a7:1a:cd:42:1d:7d:aa:1f:07:bd:ed:fe:df:c7:2e:a4:8e:94:
1f:09:f9:9d:92:88:fa:3c:c0:8c:57:b7:87:e1:2e:d0:c4:55:
48:bf:7b:6c:61:ef:20:e3:c6:29:91:2f:60:88:fe:95:91:50:
9f:f0:16:63:d4:17:76:38:0f:23:7a:58:c3:c5:19:fb:90:a3:
ba:1e:c4:33:ef:eb:b1:e1:e4:e9:5f:a7:0d:d4:a6:4d:43:1d:
87:d5:79:5e:ed:97:25:44:f9:80:f1:8c:16:5f:49:31:44:12:
77:48:c0:92:c9:2c:12:12:de:ec:fa:79:2f:93:6b:7a:21:4e:
fb:6d:70:9e:bf:74:51:7e:90:cf:73:33:6b:44:ed:f6:f1:6b:
74:dd:c2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 23:28:31 2025 by rpki-client