Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json)
Hash identifier: gCYBnkpxpVuQIKnMT4zPs+w15QL1cAnBMYY/4vhk1Js=
Subject key identifier: 64:5F:07:CF:67:13:5C:D1:76:69:C5:22:BC:3A:60:D5:E7:16:71:91
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial: 019A73A6910057737675B2055561A7F5AF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 16:01:27 +0000
Manifest this update: Tue 11 Nov 2025 16:01:27 +0000
Manifest next update: Wed 12 Nov 2025 16:01:27 +0000
Files and hashes: 1: t4qANnEhvVWnrRLkZS7CKoTPpCQ.roa (hash: dm6ZxXeDx09W/sn7TAuJSwJg3JzyL+0jwWDxaTnORrU=)
2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: JdUKRzAXVc6WzYj6LbvEefhVD0yKWaW6H7LwTHwuE1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:91:00:57:73:76:75:b2:05:55:61:a7:f5:af:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Validity
Not Before: Nov 11 16:01:27 2025 GMT
Not After : Nov 12 16:01:27 2025 GMT
Subject: CN=645f07cf67135cd17669c522bc3a60d5e7167191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:59:2b:8e:50:a7:03:07:0a:6e:f6:63:64:
81:b2:d3:e0:72:e0:de:d0:ce:37:13:33:92:6f:7e:
a4:02:83:c9:e6:86:94:12:82:ce:a6:14:23:ab:33:
b5:ca:1e:71:93:1b:7d:df:13:04:8a:2e:e4:ba:78:
3f:df:41:48:a7:0c:a6:87:83:1c:78:a7:61:89:ab:
b3:39:d3:ba:5f:56:15:78:68:b1:7b:3b:cd:4e:3b:
5c:d4:6a:17:84:3c:b1:21:23:f0:51:a0:6c:5c:fb:
a7:e4:e8:28:b6:de:13:4a:8b:cf:6f:2a:bb:90:b1:
3f:27:45:c6:b1:6e:29:dc:28:47:57:65:bd:13:d6:
a2:16:5d:bd:2b:01:89:a6:b8:89:fa:41:80:54:e7:
bb:6f:55:c5:00:5e:d1:d7:b1:e7:18:35:2c:57:fe:
b6:42:1f:98:09:16:ec:cc:22:69:85:13:3a:7f:83:
b4:8f:7c:57:85:04:41:9f:c7:2d:dd:7a:99:c9:05:
ed:c7:f2:9d:e8:b3:da:60:41:bf:16:18:ad:72:e1:
1c:33:af:6e:48:4a:70:c5:18:96:33:6f:a1:93:e9:
47:1d:23:62:5e:d6:20:bb:ee:b4:0b:55:e8:10:0b:
75:ba:e7:1b:9f:c0:56:80:a3:63:d1:5c:f6:51:5a:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5F:07:CF:67:13:5C:D1:76:69:C5:22:BC:3A:60:D5:E7:16:71:91
X509v3 Authority Key Identifier:
keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b0:48:dc:bb:07:7a:b5:d7:b1:4b:1d:b4:89:d3:bb:84:7b:
fd:a2:6f:e1:75:3b:11:88:dc:47:d3:b0:30:12:39:23:0b:fa:
bf:74:a7:07:5c:6c:53:96:55:29:cf:53:5a:b1:f1:34:01:d9:
6b:31:95:db:c5:3b:5c:2a:c4:cb:3f:c9:80:ae:43:f8:01:ff:
43:8a:23:4f:3e:b6:e8:15:97:d2:e5:88:b3:9a:83:7e:08:79:
d4:c0:10:63:39:df:ed:af:34:cf:ad:4d:10:84:96:fe:c1:54:
d1:b4:49:6c:6c:16:0c:c7:fb:f8:3b:dd:79:bf:5f:13:8a:a3:
82:43:3f:68:62:56:e4:4a:c3:2d:a9:0a:1c:fb:45:de:37:79:
5d:5b:44:41:68:71:6c:ea:18:97:4f:b0:b0:1c:0c:35:6a:3d:
94:55:06:05:20:b0:f2:44:d2:00:c3:e1:ec:e6:dc:9e:4d:a9:
e7:49:07:33:b8:0c:b7:f7:b9:1e:5d:e9:d5:e8:06:68:b3:b2:
0d:53:16:5c:96:2d:36:dd:e3:ae:72:69:b5:0d:cc:66:8f:1d:
1c:de:3f:7e:b7:b7:68:b4:2b:c6:b0:0c:c1:59:94:52:6e:7a:
22:7e:5f:d4:6a:70:2f:62:d4:86:87:ff:e8:c8:b8:1f:24:09:
ec:ff:42:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzppEAV3N2dbIFVWGn9a8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYzI2NGI1YTY0OTRmODkwZmEzMTRmNjFmZDdkMjc1ODdl
MzU4MzAwHhcNMjUxMTExMTYwMTI3WhcNMjUxMTEyMTYwMTI3WjAzMTEwLwYDVQQD
Eyg2NDVmMDdjZjY3MTM1Y2QxNzY2OWM1MjJiYzNhNjBkNWU3MTY3MTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27lZK45QpwMHCm72Y2SBstPgcuDe
0M43EzOSb36kAoPJ5oaUEoLOphQjqzO1yh5xkxt93xMEii7kung/30FIpwymh4Mc
eKdhiauzOdO6X1YVeGixezvNTjtc1GoXhDyxISPwUaBsXPun5Ogott4TSovPbyq7
kLE/J0XGsW4p3ChHV2W9E9aiFl29KwGJpriJ+kGAVOe7b1XFAF7R17HnGDUsV/62
Qh+YCRbszCJphRM6f4O0j3xXhQRBn8ct3XqZyQXtx/Kd6LPaYEG/FhitcuEcM69u
SEpwxRiWM2+hk+lHHSNiXtYgu+60C1XoEAt1uucbn8BWgKNj0Vz2UVoW9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRfB89nE1zRdmnFIrw6YNXnFnGRMB8GA1UdIwQY
MBaAFLvCZLWmSU+JD6MU9h/X0nWH41gwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYTRlNjQtNmQ3MC00YmZkLTkwOWQt
ZjA1NDZjZmFiMDYxLzEvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lYTRlNjQtNmQ3MC00YmZkLTkwOWQtZjA1NDZjZmFiMDYx
LzEvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbBI3LsH
erXXsUsdtInTu4R7/aJv4XU7EYjcR9OwMBI5Iwv6v3SnB1xsU5ZVKc9TWrHxNAHZ
azGV28U7XCrEyz/JgK5D+AH/Q4ojTz626BWX0uWIs5qDfgh51MAQYznf7a80z61N
EISW/sFU0bRJbGwWDMf7+Dvdeb9fE4qjgkM/aGJW5ErDLakKHPtF3jd5XVtEQWhx
bOoYl0+wsBwMNWo9lFUGBSCw8kTSAMPh7Obcnk2p50kHM7gMt/e5Hl3p1egGaLOy
DVMWXJYtNt3jrnJptQ3MZo8dHN4/fre3aLQrxrAMwVmUUm56In5f1GpwL2LUhof/
6Mi4HyQJ7P9C0Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:25 2025 by rpki-client