Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
File: u4N41EQt9p9H3A6lgqErKrUUvg8.mft (raw, json)
Hash identifier: 85extYml9DkCHjelw2cKwAXcTc3alzBHaa/Omlb984g=
Subject key identifier: 07:6B:A1:55:69:1F:2D:31:B8:2F:71:2A:91:3A:C9:FE:97:DE:4D:6A
Authority key identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
Certificate issuer: /CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Certificate serial: 019A725C915A69F045A0D04A2BDF0664369E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
Manifest number: 021D
Signing time: Tue 11 Nov 2025 10:01:00 +0000
Manifest this update: Tue 11 Nov 2025 10:01:00 +0000
Manifest next update: Wed 12 Nov 2025 10:01:00 +0000
Files and hashes: 1: u4N41EQt9p9H3A6lgqErKrUUvg8.crl (hash: Bkuur8NWownV6w2R9EnsFFK8x28Dj/NpLcIm2J8RgFQ=)
2: wtPW8rjnB4NENZEIpc5mDSX_MnA.roa (hash: 2y63dYWO6V1/po4xW8CvZ0E3YT0MzqdNzzTlTFQ0Gb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:91:5a:69:f0:45:a0:d0:4a:2b:df:06:64:36:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Validity
Not Before: Nov 11 10:01:00 2025 GMT
Not After : Nov 12 10:01:00 2025 GMT
Subject: CN=076ba155691f2d31b82f712a913ac9fe97de4d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:af:e6:35:71:70:d1:c8:cd:d5:e0:c0:23:
d2:83:36:4e:36:6d:7a:8a:df:0a:e0:bd:2b:c7:ae:
39:05:d6:65:26:99:0e:99:06:c7:91:a5:85:69:fd:
0a:65:65:1c:3d:fd:84:77:a7:73:26:26:48:76:9e:
83:85:45:1b:86:91:66:60:b0:8b:c3:bb:ce:2c:15:
31:18:57:90:53:94:03:26:47:6d:c7:36:35:38:a8:
ac:8a:b6:5e:90:32:f8:df:2d:39:80:b4:66:90:72:
6d:92:57:61:95:93:57:ea:51:40:71:5a:db:bc:a8:
d8:37:fa:d8:6a:47:e1:24:e1:8f:be:8a:68:b6:f1:
57:6a:73:a5:a1:7a:bb:28:23:b8:25:24:2f:3f:d8:
92:20:0f:d7:66:63:01:7b:d9:d0:0c:50:f4:6d:7b:
07:3d:ec:3e:df:e8:cd:d7:cd:8d:2c:94:47:88:31:
f9:98:f5:cf:8b:64:b2:e6:46:c1:89:9e:c2:5b:70:
41:ef:24:55:95:45:33:da:61:f0:3b:4d:13:76:d4:
89:50:f1:74:d2:5d:84:39:c9:b2:eb:b5:83:34:b4:
af:1e:0a:a0:cc:8c:ac:6a:2e:1c:8d:61:a8:b0:95:
c3:66:c6:3e:fa:b4:74:ed:96:71:cd:cc:30:ac:4c:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6B:A1:55:69:1F:2D:31:B8:2F:71:2A:91:3A:C9:FE:97:DE:4D:6A
X509v3 Authority Key Identifier:
keyid:BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:23:df:29:a0:fe:8a:10:66:ba:09:7a:6d:94:16:73:6a:0b:
01:e1:a8:98:d6:7e:b6:78:e8:df:b3:f0:46:2c:7e:1b:b1:ab:
11:72:8f:97:8c:03:71:ff:f2:b6:99:69:46:09:3b:c1:69:94:
67:7f:ae:96:7c:0e:81:59:1d:38:39:c7:7c:3a:c2:a5:c1:26:
e1:86:b1:3e:e4:f4:cd:27:30:06:61:84:51:b3:5e:41:e5:aa:
47:cb:fd:8e:16:ad:dd:6d:a3:5f:65:20:5d:ee:f0:d8:3c:c3:
32:25:6c:0f:62:2e:fb:97:cf:8b:2c:38:a7:70:0d:52:13:d1:
c1:38:ae:39:b5:7c:6e:0b:01:26:ca:77:9a:25:2b:3e:cb:6d:
4e:d2:23:a3:2b:68:b5:b9:f0:c9:d7:b3:5a:a5:7c:0d:ec:d4:
fe:13:38:5b:7b:8d:ea:b7:7d:e7:c5:17:4e:af:ed:bc:3a:ed:
d2:9e:da:75:60:d8:6b:e9:63:65:12:14:6a:41:93:65:c6:2c:
3e:3f:34:58:d1:b3:98:a9:fb:cd:d1:73:2d:c2:86:47:a5:47:
ad:26:f2:f1:5c:14:cb:78:0b:4e:6b:93:cd:8a:70:7c:95:a9:
d4:0a:ca:6a:f2:e0:59:bb:3e:58:77:cd:f5:69:45:e4:bf:5f:
68:de:6c:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXJFaafBFoNBKK98GZDaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODM3OGQ0NDQyZGY2OWY0N2RjMGVhNTgyYTEyYjJhYjUx
NGJlMGYwHhcNMjUxMTExMTAwMTAwWhcNMjUxMTEyMTAwMTAwWjAzMTEwLwYDVQQD
EygwNzZiYTE1NTY5MWYyZDMxYjgyZjcxMmE5MTNhYzlmZTk3ZGU0ZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNyv5jVxcNHIzdXgwCPSgzZONm16
it8K4L0rx645BdZlJpkOmQbHkaWFaf0KZWUcPf2Ed6dzJiZIdp6DhUUbhpFmYLCL
w7vOLBUxGFeQU5QDJkdtxzY1OKisirZekDL43y05gLRmkHJtkldhlZNX6lFAcVrb
vKjYN/rYakfhJOGPvopotvFXanOloXq7KCO4JSQvP9iSIA/XZmMBe9nQDFD0bXsH
Pew+3+jN182NLJRHiDH5mPXPi2Sy5kbBiZ7CW3BB7yRVlUUz2mHwO00TdtSJUPF0
0l2EOcmy67WDNLSvHgqgzIysai4cjWGosJXDZsY++rR07ZZxzcwwrEwEKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdroVVpHy0xuC9xKpE6yf6X3k1qMB8GA1UdIwQY
MBaAFLuDeNRELfafR9wOpYKhKyq1FL4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZGIwZDEtYWE5My00NWMwLTk4ODkt
ZDhhNTU1YzY0MjE0LzEvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xZGIwZDEtYWE5My00NWMwLTk4ODktZDhhNTU1YzY0MjE0
LzEvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyPfKaD+
ihBmugl6bZQWc2oLAeGomNZ+tnjo37PwRix+G7GrEXKPl4wDcf/ytplpRgk7wWmU
Z3+ulnwOgVkdODnHfDrCpcEm4YaxPuT0zScwBmGEUbNeQeWqR8v9jhat3W2jX2Ug
Xe7w2DzDMiVsD2Iu+5fPiyw4p3ANUhPRwTiuObV8bgsBJsp3miUrPsttTtIjoyto
tbnwydezWqV8DezU/hM4W3uN6rd958UXTq/tvDrt0p7adWDYa+ljZRIUakGTZcYs
Pj80WNGzmKn7zdFzLcKGR6VHrSby8VwUy3gLTmuTzYpwfJWp1ArKavLgWbs+WHfN
9WlF5L9faN5sqQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:08 2025 by rpki-client