Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: v8CulcYwWKX2zghMeAQw+2CnASd4i3iVFElMVAmZrjc=
Subject key identifier: E6:8E:ED:20:B9:29:0E:D2:D4:79:77:33:DF:13:DB:3C:CB:68:AC:46
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 019A73384E2D40F3560EC93A17581F9F05E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 12A1
Signing time: Tue 11 Nov 2025 14:01:01 +0000
Manifest this update: Tue 11 Nov 2025 14:01:01 +0000
Manifest next update: Wed 12 Nov 2025 14:01:01 +0000
Files and hashes: 1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: moRBdM1War6BTuSePTzxZYw8Z61oboRa8SlqO/q/VYk=)
3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:4e:2d:40:f3:56:0e:c9:3a:17:58:1f:9f:05:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Nov 11 14:01:01 2025 GMT
Not After : Nov 12 14:01:01 2025 GMT
Subject: CN=e68eed20b9290ed2d4797733df13db3ccb68ac46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:36:d9:8f:85:26:ff:f7:be:9d:6c:d5:c6:
6d:c2:6a:e1:7d:2f:ea:f4:b0:dc:35:75:3e:e8:1d:
c5:b3:19:a0:a9:08:d1:26:4d:70:9e:fc:b4:9f:99:
b6:3f:45:30:e7:1d:ec:ea:4f:87:0e:1b:38:24:e8:
de:f7:9f:70:d3:76:61:ea:e0:79:28:10:c8:6c:16:
6f:4a:08:82:64:be:b8:8e:d7:f7:5b:00:c5:72:bd:
31:23:39:61:da:af:c6:8a:5c:1c:25:86:2b:28:8d:
10:f5:92:89:62:53:68:6f:67:77:28:7c:c9:f6:ad:
28:95:04:8d:ec:d6:15:02:12:06:4f:d0:4f:6a:b2:
27:ea:de:72:78:c6:ac:13:bc:37:a0:bf:52:80:fb:
d0:a4:54:fc:f3:7c:34:f6:54:ac:e7:d5:27:11:b4:
1f:bd:e1:17:de:f6:73:e7:11:35:d1:2b:ec:85:34:
9e:bb:e2:7e:3d:8a:62:b0:0e:09:f0:75:b3:ca:c8:
45:2a:b1:b6:cf:d0:47:a2:c9:9f:b7:d9:22:e4:50:
6e:e7:06:2b:dd:ee:a4:7f:6c:84:a1:f4:b4:78:36:
66:b6:ba:99:20:7d:ff:8f:29:32:ed:99:a5:fb:0d:
1c:85:a0:be:e1:a3:55:9a:bb:44:f6:b6:77:72:3e:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8E:ED:20:B9:29:0E:D2:D4:79:77:33:DF:13:DB:3C:CB:68:AC:46
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6a:69:78:b3:06:1f:60:0a:2b:88:06:ad:e4:ff:d3:45:5a:
89:33:57:0e:82:4a:b9:c2:5e:b7:e9:23:d2:6f:a5:25:0f:17:
ff:13:34:9f:61:5f:00:e5:79:36:09:d6:dd:57:5a:3b:e2:ba:
df:98:08:25:a4:81:03:48:5e:2f:17:56:2f:8c:f4:e5:51:c8:
fb:ff:15:ab:9a:3b:09:6f:0c:f4:a4:20:7e:a4:f2:00:92:30:
b5:61:a3:53:51:66:fc:ee:6b:9c:c4:71:e5:5a:32:a0:10:36:
7a:c7:6d:dd:27:7a:02:7f:b3:aa:87:de:89:75:e0:af:32:02:
ce:0f:a3:8b:a6:9b:f3:94:da:d8:00:e4:e6:4b:ce:fd:82:12:
ff:ba:dc:88:21:47:c6:92:ea:4a:c2:17:43:a4:58:f5:cd:c0:
df:57:f4:2a:57:9e:72:39:38:b6:50:7a:7f:0e:64:4c:30:25:
dc:37:21:c3:63:8d:02:ca:ea:4d:fc:b8:43:42:37:81:f5:01:
e1:21:cf:1c:71:81:35:9e:b9:19:e7:3f:06:52:c8:da:fe:e1:
33:81:61:e5:14:ea:9a:42:a7:37:24:d2:05:a4:5e:87:dc:d6:
97:08:55:92:47:21:50:87:a3:86:a5:2c:03:97:f3:d1:d2:9a:
21:49:f5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:50 2025 by rpki-client