Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: X5E3Y+SwoJTeE9M0HFtVeMfDO9ZIwtGnhfn8p4vU4WQ=
Subject key identifier: 45:9E:7D:59:2A:F5:70:A6:1F:2E:72:69:90:C7:AF:1D:21:CA:80:03
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019A1FF685ED840B4CF188ABD12236E3BF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 16FE
Signing time: Sun 26 Oct 2025 10:00:41 +0000
Manifest this update: Sun 26 Oct 2025 10:00:41 +0000
Manifest next update: Mon 27 Oct 2025 10:00:41 +0000
Files and hashes: 1: C_0ORiP6GTff8xYOZ4mMicSAww8.roa (hash: HUAyzCwf6jl6lX3eg8riTN4+Y+lTTc8+dOFl1EBg7WI=)
2: YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa (hash: QZs858olOtlmGTBOleulDcnrJGCjiCkhUKDy6SCkdvE=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: QQUYJLEbCcA8W/J/gaRtRHnbIFvNqtNcq3tn/9qda0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:85:ed:84:0b:4c:f1:88:ab:d1:22:36:e3:bf:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Oct 26 10:00:41 2025 GMT
Not After : Oct 27 10:00:41 2025 GMT
Subject: CN=459e7d592af570a61f2e726990c7af1d21ca8003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:e0:6f:21:1f:cb:f1:9e:29:56:d8:aa:6a:
0d:9b:cb:0c:43:42:34:1f:b0:22:e7:78:de:15:21:
fd:00:25:47:b4:99:8c:70:11:b9:37:5f:c8:4d:b7:
63:d5:24:a6:47:ae:06:b6:9e:0d:8e:36:60:2c:0a:
7e:3f:f5:84:90:7f:cb:4d:b4:87:68:1d:be:1b:29:
41:92:47:7e:64:b4:b3:8e:73:12:c8:c4:5c:24:69:
cb:ca:6d:f3:41:72:38:f5:32:e0:da:85:a1:89:4e:
44:08:74:db:fd:81:dd:40:f5:2a:3b:ab:dc:28:3b:
3a:15:db:e1:c2:c2:eb:ab:fa:69:f0:c4:ca:28:28:
3f:85:40:08:5e:83:c4:d8:d7:35:5e:82:f2:46:fc:
3a:49:1b:74:71:62:79:bc:72:38:7e:54:3b:a0:fc:
50:6d:c1:7e:0c:0f:63:4a:d7:2f:96:37:3b:e8:6a:
eb:6a:62:75:46:2b:32:9d:37:48:4c:a7:dc:2b:ce:
03:f3:4a:e2:5d:98:42:3d:be:f9:0f:e1:f4:3b:d8:
99:c9:58:ab:e6:54:4d:25:7e:ef:20:e5:8a:41:0c:
3a:dd:4c:0f:ea:20:2e:21:29:ee:88:cf:1c:8f:9b:
94:ef:80:44:44:20:4b:8d:5a:9a:08:9d:96:af:67:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9E:7D:59:2A:F5:70:A6:1F:2E:72:69:90:C7:AF:1D:21:CA:80:03
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fc:eb:3a:87:a4:bf:69:00:2b:73:9f:13:c8:70:77:7f:d0:
1d:9f:e1:27:be:9a:db:df:24:26:c3:ba:95:4d:51:da:12:b4:
73:c8:ec:dd:b6:f9:96:a0:b3:df:b7:a7:41:48:b5:1c:92:45:
27:13:d2:42:67:3e:f0:ce:70:d3:78:06:6c:7b:b2:c2:70:3e:
5e:e6:6e:19:01:e0:e6:a8:4e:46:65:61:eb:8b:c8:ef:c3:28:
84:dd:5b:71:e4:cf:af:49:6b:80:6e:26:3d:c1:1f:87:3f:98:
78:9e:75:09:3b:bb:86:9a:8e:1a:31:ee:64:e3:16:6b:2f:76:
31:59:2b:42:18:9d:b7:32:ea:fa:6e:4f:aa:e0:2e:9c:86:fa:
0a:44:07:6e:34:6a:67:41:ad:d9:9b:0b:a8:13:2b:66:a6:3b:
42:83:3a:ec:be:8e:ee:f2:3d:6f:73:08:8a:86:3e:d4:5d:58:
01:c5:ce:45:0f:1d:c2:72:51:fd:61:ec:c8:73:52:e0:34:0b:
e8:ce:cd:1d:0d:5a:cd:40:be:f9:62:3d:5b:4e:9e:34:d7:1c:
63:8b:a7:49:5e:d6:8a:97:22:a6:5d:a8:b1:d4:77:78:f1:61:
a9:2e:76:20:70:97:14:b4:b8:0b:f5:7a:cc:05:88:70:69:fc:
4e:7e:cc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:30:21 2025 by rpki-client