Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
File: u0CY4P3tthLyOdpSSgS14N6kxT8.mft (raw, json)
Hash identifier: Q/JBbeuMav4Sofipw5tTZZDVxMqzEBktLXPnuhM+zVk=
Subject key identifier: 85:3B:2D:95:A0:03:8E:24:18:BD:3E:D8:EC:07:3C:BD:D4:2C:E9:A7
Authority key identifier: BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
Certificate issuer: /CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Certificate serial: 019A7293744861967CC9B795D98350BF3A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
Manifest number: 1210
Signing time: Tue 11 Nov 2025 11:00:57 +0000
Manifest this update: Tue 11 Nov 2025 11:00:57 +0000
Manifest next update: Wed 12 Nov 2025 11:00:57 +0000
Files and hashes: 1: pDFtrRqSytqofU52Bi4GLIxTxPM.roa (hash: FhQVFWsHZFXcD5DtHy8k60bsokhKGFTiQLeglKl8pII=)
2: u0CY4P3tthLyOdpSSgS14N6kxT8.crl (hash: c7h5NaTBC3Je8dg3VgAEyxMuRlq9IEmsL78D1Eb4HwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:74:48:61:96:7c:c9:b7:95:d9:83:50:bf:3a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Validity
Not Before: Nov 11 11:00:57 2025 GMT
Not After : Nov 12 11:00:57 2025 GMT
Subject: CN=853b2d95a0038e2418bd3ed8ec073cbdd42ce9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:8f:08:d3:9f:58:2a:e4:12:72:56:73:a1:
90:81:51:90:b4:e8:32:86:3d:bd:83:e4:22:21:6e:
45:29:6c:7e:fe:b7:c7:10:d6:0e:b0:32:81:37:a6:
bf:21:70:0c:2a:f6:d6:a0:77:4f:4d:59:10:9d:d8:
db:72:de:2a:e4:b2:fd:6f:d9:89:19:1f:18:2c:cb:
e6:1a:7b:f8:67:68:8e:ef:6a:17:81:86:e4:02:33:
16:b7:41:b4:96:2e:7b:47:1b:57:d4:b9:dd:3f:0b:
d0:d7:ef:9b:1c:6f:8d:cd:4e:85:71:6c:e3:36:57:
31:b5:f3:05:c2:1a:6f:cc:c3:3b:a2:06:7d:b3:26:
4d:5d:66:80:f5:98:07:5e:81:87:5d:c3:7f:4d:62:
a2:59:ce:4a:7e:91:3a:0d:56:76:a5:7d:8d:a7:1b:
d3:44:77:51:1a:58:98:08:d0:ce:a6:ab:20:c1:9b:
1d:72:69:f4:19:c5:f0:ad:5b:88:09:45:54:f8:ed:
97:25:2b:60:2f:1b:f6:86:0d:d1:66:d1:d6:2e:cb:
76:40:80:3a:d0:6f:36:39:6d:ba:82:31:21:2f:f9:
2d:da:f6:3b:c2:91:91:5e:60:3a:7e:bc:ad:a8:06:
91:93:52:51:51:08:f1:73:4c:97:57:0f:46:90:d1:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3B:2D:95:A0:03:8E:24:18:BD:3E:D8:EC:07:3C:BD:D4:2C:E9:A7
X509v3 Authority Key Identifier:
keyid:BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1f:58:06:1f:34:e3:80:45:97:7f:d3:69:99:e4:e7:dc:70:
5d:a0:cb:40:2c:7d:97:f4:f2:7a:85:d2:77:46:81:6f:14:44:
93:fc:2c:c0:96:62:0c:77:8d:14:a1:4c:dc:bc:f5:a6:f6:28:
4f:02:06:20:0c:c9:88:db:17:74:00:05:b7:2b:94:f6:65:5d:
79:aa:d5:ee:03:e2:e6:ea:d2:d6:e5:6a:ee:af:c6:29:f1:ad:
a6:ac:bb:21:e2:dc:2e:54:fd:74:21:c6:b0:64:80:cd:64:3c:
6d:38:5b:c0:51:f8:6b:47:bd:c8:c7:86:eb:b3:9a:19:cc:70:
03:0b:53:90:72:da:3e:91:f2:49:2c:bc:6f:20:6d:1e:7c:cf:
60:04:9c:41:a0:49:35:4a:82:59:f4:62:ad:72:30:44:3c:89:
fd:76:0c:d8:92:0b:fa:91:55:c4:64:20:8f:89:d9:dd:1c:2a:
c7:a0:73:7c:82:d7:e1:f5:39:a2:73:ce:d9:79:c0:27:0b:e3:
f4:ae:fb:1c:c9:1d:40:85:6c:1e:d6:79:f9:5b:9b:02:be:2c:
64:7d:61:e3:b6:ea:19:da:1a:7a:de:f0:20:d1:af:65:b3:de:
c6:7e:5d:fe:f8:5a:f7:26:ec:1e:9c:f3:4d:89:bf:4f:2d:dd:
f2:31:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:49 2025 by rpki-client