Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: OUy/9mGkLqv/Zdaj44xbU++WMfsIJkFOmQAn21za0U0=
Subject key identifier: 51:4A:2E:1D:67:60:28:B4:DA:66:43:B0:18:C1:3A:DF:13:C2:88:28
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 019A729336A10138B2F6D9DFEB9E2FB767D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 08E7
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (hash: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=)
2: ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa (hash: vYYSfaPpbNWHfZROyqOxGskbcYsJiw4rOn2tsPINhLk=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: JnOC/nCf6ItbR3aGw8wnIQOF0slWpGzHClj4m/Izjic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:36:a1:01:38:b2:f6:d9:df:eb:9e:2f:b7:67:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=514a2e1d676028b4da6643b018c13adf13c28828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:5b:f1:79:5b:56:04:8c:76:da:bc:3d:8c:
a0:33:43:d1:ac:20:67:21:c2:4e:66:f5:38:0c:fb:
88:52:ff:22:23:2c:89:2b:48:bd:a1:f4:8d:75:cc:
d0:6c:b3:26:ad:fe:16:29:aa:27:a4:ee:e4:d6:39:
17:0e:0a:da:f3:4d:7e:d2:d5:5a:b6:73:4c:69:dc:
cb:5f:3d:5f:2d:56:e2:dc:d0:df:29:7b:4d:7d:88:
c3:81:9b:85:14:fd:47:a6:f9:dc:10:bc:45:98:6b:
3c:c5:52:ec:4b:e3:39:df:a5:56:bf:cf:be:0b:7f:
b5:ec:37:a3:c9:8f:c5:65:2e:5e:ab:91:2d:cd:dc:
fe:4c:9c:89:b2:21:a9:28:12:d9:32:7d:de:b5:98:
2d:eb:f1:68:5b:83:ca:e8:db:77:99:73:a8:a7:e3:
2e:ea:6e:3c:e9:05:08:e4:66:b8:b2:29:65:c8:1e:
17:05:4c:60:16:ce:a3:a2:8f:75:bc:9c:22:ea:99:
de:f6:3c:75:6a:40:7a:ee:f6:ff:c1:0f:34:e8:19:
70:12:13:bd:44:1f:75:cf:95:5d:15:ab:fe:8f:0f:
a0:02:e3:4c:68:6d:07:73:03:da:0b:f8:2a:29:37:
65:e7:48:46:1a:24:cd:8f:10:71:cd:ae:eb:40:58:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:2E:1D:67:60:28:B4:DA:66:43:B0:18:C1:3A:DF:13:C2:88:28
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:19:05:e2:8c:0f:d5:cc:d6:e8:03:7e:2d:30:cd:e6:6c:dd:
65:29:05:e6:d9:3e:f5:88:14:5c:61:06:01:19:f3:0b:ee:b7:
eb:c2:96:92:37:62:33:b3:13:3c:92:72:66:9d:35:52:12:b1:
54:a3:ef:f2:c7:23:31:63:c6:7d:12:71:61:de:bb:d2:74:ea:
30:38:49:4a:00:85:a0:8c:39:93:c4:5d:ee:be:ac:3e:4f:9f:
9d:19:0d:73:b0:d5:69:fb:9e:f0:de:a6:a0:0c:4d:43:2d:b7:
3d:9a:6f:3a:34:8a:83:c3:c8:3d:2d:d3:1f:8b:e1:0b:0b:51:
e6:45:65:66:b2:96:99:5d:8c:a3:78:7a:1e:75:3d:fa:43:8b:
0e:5d:83:7b:82:b9:7f:b2:75:d2:e6:89:c0:ed:e6:a1:5b:9a:
6f:ea:79:39:aa:87:60:4b:cf:db:9a:79:db:f3:77:c8:b4:07:
9b:eb:26:8a:0d:f6:8b:04:b0:54:19:4b:d8:30:fa:a5:07:33:
86:51:c7:8a:76:22:1c:3f:2c:68:9f:c7:49:a5:3b:00:de:60:
e7:fc:be:4d:a5:0a:b3:f7:fb:e9:bd:c6:c7:23:7b:a8:fe:da:
53:f6:91:07:d0:d3:f2:d9:09:74:cd:63:62:c7:97:3d:e3:14:
a3:8e:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:17 2025 by rpki-client