Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: dHR7BJcdo9oy2nDphFnbr32/0LLLjn7/nGXaZW2M3nQ=
Subject key identifier: FA:7D:9D:0E:D5:B7:A3:0A:69:29:15:9F:65:0F:AE:74:C9:96:1C:FE
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 019A1F88F30D34CDBDC22627A02CF9C50A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 11CB
Signing time: Sun 26 Oct 2025 08:01:00 +0000
Manifest this update: Sun 26 Oct 2025 08:01:00 +0000
Manifest next update: Mon 27 Oct 2025 08:01:00 +0000
Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: 3vcf4j8ef/vUBSp2zIrV4jsP18BwRBSwO8cfO6CfXn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:f3:0d:34:cd:bd:c2:26:27:a0:2c:f9:c5:0a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Oct 26 08:01:00 2025 GMT
Not After : Oct 27 08:01:00 2025 GMT
Subject: CN=fa7d9d0ed5b7a30a6929159f650fae74c9961cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:9c:d2:c5:63:4c:42:00:b3:64:c9:db:6c:
78:77:e1:a0:08:33:35:cd:16:01:5d:46:bd:ab:a4:
e3:b7:2c:de:e7:5d:50:72:61:57:c0:b6:bb:9d:6c:
f2:cc:df:dd:e7:55:8a:19:f9:e5:16:a5:cd:24:1e:
18:31:37:10:85:38:1f:be:bc:a0:59:25:d3:34:69:
19:e9:80:b8:22:4b:58:91:54:fc:a7:cc:bd:97:9d:
d8:0b:ab:f6:4d:63:91:ae:53:1b:dd:1c:e2:24:49:
ff:c5:0e:d9:ae:30:25:49:b4:e1:b9:61:04:75:23:
5a:00:12:0a:c3:c2:97:7c:35:23:27:31:a1:92:76:
29:02:a9:53:00:6d:36:e8:6a:33:9c:ed:3a:fa:91:
0b:36:f5:44:c5:a1:75:dd:72:89:a5:d8:59:54:31:
af:a3:ad:01:28:d2:65:7c:15:09:b6:14:63:f7:c1:
9b:d4:1d:f5:df:97:6d:8c:76:3c:1c:f9:58:12:36:
58:7e:2f:b0:9d:8d:2c:70:4a:d6:dc:d2:38:f2:dc:
45:fa:ce:19:e5:6d:fd:98:8b:e4:56:8e:df:32:8a:
da:6b:5b:fa:44:48:fb:43:2f:1b:5a:69:0b:8d:ff:
a6:bc:fa:ac:d6:6d:be:33:d3:bc:63:23:c2:a6:a6:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:9D:0E:D5:B7:A3:0A:69:29:15:9F:65:0F:AE:74:C9:96:1C:FE
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3a:64:66:7d:3b:f4:b1:fe:bc:21:22:5f:89:eb:0f:fa:55:
c1:8c:b5:a4:4e:a6:4b:a7:f6:7f:fb:16:01:2e:7f:87:63:8f:
48:27:e3:2d:59:5d:5e:0c:4a:30:a5:3c:5b:bc:c7:b8:d6:31:
45:ab:5f:35:ac:aa:40:aa:f3:95:af:a3:13:02:a1:da:d9:66:
c1:68:8f:3c:b9:c9:ef:c3:76:c4:24:fc:33:68:aa:45:15:52:
d4:85:e8:ec:39:9e:51:9e:3e:c6:c6:d7:11:69:40:20:6a:2b:
15:31:90:50:35:ac:4c:b9:85:5c:bc:d8:9c:1f:f3:39:16:90:
e4:fb:25:f1:a0:5e:b0:48:1d:de:da:73:7e:be:d3:e3:71:d3:
b6:b6:91:e9:00:50:1d:49:14:45:10:2c:1d:06:a2:34:cf:0e:
cf:49:d1:1c:5e:b3:d0:06:2b:d2:21:c3:04:49:5d:ed:8c:52:
02:b4:51:f7:bc:d1:58:1e:e1:b9:78:f9:cb:a9:2b:38:1a:23:
79:5d:47:e1:71:b6:c9:79:2a:a4:69:81:ad:4b:64:32:7f:8c:
47:72:46:d1:34:c2:c5:f4:59:86:3b:3d:d2:b6:e4:ff:73:12:
e4:ed:e2:5e:aa:de:bb:a7:b6:28:5f:ba:e4:17:f1:3d:2d:b4:
fc:33:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:47:37 2025 by rpki-client