Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File: u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier: KpJNC2SBMk6g7WGlj3n0KdRNsYsmVx5udo6vQkcXIMQ=
Subject key identifier: E5:AD:10:71:64:53:B2:D6:F4:63:06:33:F1:DC:58:98:51:60:50:AF
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer: /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial: 019A71B8EEE07DEE12D704F36AA9D2C27DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:16 +0000
Manifest this update: Tue 11 Nov 2025 07:02:16 +0000
Manifest next update: Wed 12 Nov 2025 07:02:16 +0000
Files and hashes: 1: SQLnF00Areuw5taMbfkFtdu1wjU.roa (hash: 5CPinLFNfDrIVGYwg0jIgmWM06cJ2LCZHAkJ/JRfIwc=)
2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: fanfXomFByT1W5ShmkJk82ZTzW5SxBwvfD5og7dalh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ee:e0:7d:ee:12:d7:04:f3:6a:a9:d2:c2:7d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Validity
Not Before: Nov 11 07:02:16 2025 GMT
Not After : Nov 12 07:02:16 2025 GMT
Subject: CN=e5ad10716453b2d6f4630633f1dc5898516050af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:3d:d1:18:47:ac:e6:a4:b8:0f:f2:67:7c:
90:95:ef:03:6a:af:6c:4d:e0:55:be:7e:86:ab:ea:
c9:51:6d:ed:2f:e4:e6:90:e5:44:89:2d:85:14:80:
5e:d9:4a:17:35:e2:b4:2e:6b:1a:c0:95:10:88:04:
34:f9:25:26:6d:b6:b2:06:d6:fe:3a:ee:0e:2d:9f:
92:44:4c:eb:2c:fa:8e:c8:d2:3b:18:bd:5a:b7:a8:
2d:ed:28:ce:24:15:b7:e4:af:61:2d:18:5e:f3:78:
9b:b5:4f:16:81:c9:1f:ca:ea:7b:3d:dd:cf:07:1b:
5f:c9:bf:2e:80:89:f2:8a:ff:4c:21:f7:9c:55:3e:
77:49:96:27:4a:1b:1f:ef:93:39:c9:43:a5:26:c8:
61:01:b6:13:82:c0:58:67:ad:7b:70:08:bd:5b:9e:
c8:a3:db:02:66:4f:51:85:5a:a1:6b:1f:f9:f9:96:
d6:fa:fb:30:fb:87:31:28:3b:7a:bf:ec:3f:e3:27:
25:20:d9:9d:04:4c:5f:08:dc:2e:ae:b8:e7:24:b1:
84:b0:79:51:5f:f7:84:9a:79:82:f9:89:b6:65:be:
e9:e2:6c:74:91:94:1c:e2:99:b5:16:56:e7:50:ff:
10:07:d1:ed:6e:e6:d7:76:51:61:ea:f9:bf:7e:f3:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AD:10:71:64:53:B2:D6:F4:63:06:33:F1:DC:58:98:51:60:50:AF
X509v3 Authority Key Identifier:
keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5d:d0:24:4f:94:45:53:b9:d3:ac:be:ae:d3:49:8b:29:8f:
f5:50:52:d9:ea:10:54:22:14:51:64:9e:6f:0d:81:89:71:b8:
1f:ba:a7:c7:cd:3c:a6:f5:88:64:f6:88:72:7e:fe:68:94:13:
98:82:75:b7:af:a7:f1:44:78:e8:d8:74:d1:34:34:94:a3:d8:
77:3c:f1:f3:9e:12:60:87:94:2c:00:57:de:9d:e3:fd:64:0a:
ea:cb:79:c6:7e:59:6a:69:23:19:b9:82:3b:6f:01:dd:eb:23:
50:96:96:d6:ec:1a:05:53:b9:77:18:14:6b:ac:76:f8:9c:a3:
d2:ba:b8:d7:29:d9:72:1b:e8:ee:b1:c7:81:4b:ed:0c:b6:ad:
ca:32:5d:28:df:54:03:d9:10:62:11:95:bc:d6:19:41:9b:7c:
e2:d3:ae:99:7d:cf:37:d7:96:79:78:e6:b9:d7:3b:ac:ec:ef:
ce:13:8c:3a:d4:ba:c0:1b:c5:14:ed:5a:14:14:3e:67:23:79:
01:da:bc:4b:44:f4:ff:ef:76:df:c5:29:84:bf:59:7b:0f:44:
83:87:a5:c0:eb:fc:90:2f:99:85:a6:29:eb:bf:3b:b9:42:f2:
14:69:87:8c:22:ef:b1:1e:d8:fc:96:86:88:37:46:f5:fb:f4:
7d:e8:f0:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuO7gfe4S1wTzaqnSwn3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiN2QzNzljMDRmODE3NWIzNWVmNjczZDc2YzY4ZTQ0Yzcw
ZTgzM2YwHhcNMjUxMTExMDcwMjE2WhcNMjUxMTEyMDcwMjE2WjAzMTEwLwYDVQQD
EyhlNWFkMTA3MTY0NTNiMmQ2ZjQ2MzA2MzNmMWRjNTg5ODUxNjA1MGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugI90RhHrOakuA/yZ3yQle8Daq9s
TeBVvn6Gq+rJUW3tL+TmkOVEiS2FFIBe2UoXNeK0LmsawJUQiAQ0+SUmbbayBtb+
Ou4OLZ+SREzrLPqOyNI7GL1at6gt7SjOJBW35K9hLRhe83ibtU8Wgckfyup7Pd3P
Bxtfyb8ugInyiv9MIfecVT53SZYnShsf75M5yUOlJshhAbYTgsBYZ617cAi9W57I
o9sCZk9RhVqhax/5+ZbW+vsw+4cxKDt6v+w/4yclINmdBExfCNwurrjnJLGEsHlR
X/eEmnmC+Ym2Zb7p4mx0kZQc4pm1FlbnUP8QB9HtbubXdlFh6vm/fvNNLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWtEHFkU7LW9GMGM/HcWJhRYFCvMB8GA1UdIwQY
MBaAFLt9N5wE+BdbNe9nPXbGjkTHDoM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTMwM25BVDRGMXMxNzJjOWRzYU9STWNPZ3o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85ZTBmNWUtODE0MS00M2M5LThmNDQt
MzNlYmFiMjRiYmIzLzEvdTMwM25BVDRGMXMxNzJjOWRzYU9STWNPZ3o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85ZTBmNWUtODE0MS00M2M5LThmNDQtMzNlYmFiMjRiYmIz
LzEvdTMwM25BVDRGMXMxNzJjOWRzYU9STWNPZ3o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfF3QJE+U
RVO506y+rtNJiymP9VBS2eoQVCIUUWSebw2BiXG4H7qnx808pvWIZPaIcn7+aJQT
mIJ1t6+n8UR46Nh00TQ0lKPYdzzx854SYIeULABX3p3j/WQK6st5xn5ZamkjGbmC
O28B3esjUJaW1uwaBVO5dxgUa6x2+Jyj0rq41ynZchvo7rHHgUvtDLatyjJdKN9U
A9kQYhGVvNYZQZt84tOumX3PN9eWeXjmudc7rOzvzhOMOtS6wBvFFO1aFBQ+ZyN5
Adq8S0T0/+9238UphL9Zew9Eg4elwOv8kC+ZhaYp6787uULyFGmHjCLvsR7Y/JaG
iDdG9fv0fejwAg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:56 2025 by rpki-client