Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier: RZmex7PKbCNM6TxJ8w/YAl1/tLhuvNhZsu20r0W7XEI=
Subject key identifier: 2C:39:E0:64:49:58:8B:79:CF:2C:CA:FF:40:FF:36:15:F1:EF:6B:63
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 019A5CB0523BB304737CA1EAA671E8AD9A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number: 1715
Signing time: Fri 07 Nov 2025 05:00:50 +0000
Manifest this update: Fri 07 Nov 2025 05:00:50 +0000
Manifest next update: Sat 08 Nov 2025 05:00:50 +0000
Files and hashes: 1: 5g1tjgsfll7LK-waAj9bTQ2h-3c.roa (hash: 8D1n33aMnmCgAozOd2zA5z3xSs5pmebBm8HLBHCuK3k=)
2: LH7w3vOlTcRmJHq2EtyJwGzFlEE.roa (hash: BdRuTFIKBfgw0BiPV5lECgqiOEd6ZtJOGCfbNoIAYBE=)
3: Q6nJt5OyB3yAAOcFFRG5qOehAok.roa (hash: KO9C76YDm/Okx701iaZdKEGFLB0y+hfe45N6CADpuPc=)
4: mSE5jFaDyQq229roQ5L8OUwLYf8.roa (hash: 9syYjhG++XjU5LLyMYmj6GtRt7K4tV+VTMTyeR8mVrI=)
5: mrSrlKE7xCslqlPTXvwVWDdiqIY.roa (hash: p/QlzvPV8hfJGKn1J+54dIx9OQB/pBF0YHBs+kQo1HM=)
6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: xuDHNgGnypggX5zb+wqHkBRkhGIWj8uw0A6NYkHMsLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:b0:52:3b:b3:04:73:7c:a1:ea:a6:71:e8:ad:9a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Nov 7 05:00:50 2025 GMT
Not After : Nov 8 05:00:50 2025 GMT
Subject: CN=2c39e06449588b79cf2ccaff40ff3615f1ef6b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7c:18:3f:97:8e:9b:97:13:35:d9:38:94:2f:
08:85:7a:62:0e:84:80:3d:81:59:e3:4b:81:3d:21:
7c:f6:e9:f1:10:d4:e9:6d:06:91:db:46:ae:54:1f:
0d:b1:f7:bd:cf:c9:38:b5:98:97:b2:e3:cc:f2:1f:
42:f5:e4:c0:ee:67:d9:8b:13:2e:f1:57:f6:83:47:
b1:25:1b:d3:63:f3:44:d3:67:c3:fd:82:d5:62:28:
11:ad:eb:b0:67:a1:8f:2c:8d:6d:89:42:3b:16:2e:
54:db:ca:f9:e8:17:9c:7c:06:80:22:1a:2e:e2:dd:
96:0f:5f:b9:04:9b:ce:ae:95:14:de:ba:ec:fc:a5:
11:2b:1e:74:11:9a:e7:4b:e1:31:73:db:4d:86:16:
bb:7d:a5:01:a5:a0:40:ee:cb:06:85:7f:08:44:cf:
12:05:0d:3d:e8:c0:e6:9d:a0:2d:27:22:54:04:95:
e8:e4:0c:14:17:9b:fc:fc:cd:2e:9e:e6:47:6c:67:
01:a8:fa:9d:4e:1e:f3:9f:35:95:eb:ac:30:ed:81:
f8:96:04:22:c0:58:c8:5b:21:b5:a5:7c:b6:d4:6b:
0e:fd:4f:2b:1e:e4:9d:02:52:d1:9b:32:97:4c:c1:
0d:3b:fd:7b:3b:58:b3:84:99:b0:3f:75:ec:d2:7e:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:39:E0:64:49:58:8B:79:CF:2C:CA:FF:40:FF:36:15:F1:EF:6B:63
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:11:41:d7:d3:3e:59:05:a7:7e:ca:21:31:4a:c8:8b:86:24:
40:c8:b4:97:2c:6c:23:4c:01:fa:7b:08:1a:ba:fe:46:a8:b0:
c2:3b:b9:80:8a:c8:b7:87:3d:d0:6a:d0:fc:34:d5:5c:ac:f5:
21:f0:a1:cc:f6:27:8d:7b:4b:d8:b1:24:a1:f0:1d:3c:6a:d5:
fa:58:ba:49:15:15:b4:3a:ae:63:29:7a:49:78:e2:58:3c:67:
06:dc:a5:5e:ce:82:06:01:46:1b:97:78:6d:23:94:03:b4:fa:
b0:8f:f7:d1:fe:e3:f6:20:a7:92:a1:e4:f7:11:80:84:ba:94:
24:8a:f0:89:a6:3f:f5:08:a4:72:d4:58:ac:6c:04:e9:3b:33:
6c:5a:89:f3:18:5b:77:c6:1b:a6:e4:ba:9e:07:aa:95:07:43:
e6:99:78:0b:4d:99:02:fc:d8:05:b3:81:a4:42:1e:7e:51:e0:
74:7b:f1:e3:42:ce:41:b2:5b:de:d9:f4:1d:90:94:86:0d:1b:
77:6f:56:cb:1b:80:0c:7b:fe:81:d8:af:f9:d2:d0:c7:7a:bb:
3a:c7:25:85:be:6a:85:89:b3:0c:73:e5:d3:84:a3:d8:d1:5c:
b3:68:81:41:ab:16:47:a3:16:6d:fc:96:8b:34:01:ea:7d:c7:
bc:d5:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:57:46 2025 by rpki-client