Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
File: u_iwZ3moMGXb3FgI4ef_r5x9jag.mft (raw, json)
Hash identifier: Hg+o+JltpUKNRXaixBk9t+JzPIK/NsvGWrVm9GVOdDg=
Subject key identifier: F0:BB:77:C6:14:88:41:C4:8E:13:55:06:8F:25:F9:9C:6D:77:41:20
Authority key identifier: BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
Certificate issuer: /CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Certificate serial: 019A7293929B7290F9BE4B3B7B3467627BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
Manifest number: 01C2
Signing time: Tue 11 Nov 2025 11:01:05 +0000
Manifest this update: Tue 11 Nov 2025 11:01:05 +0000
Manifest next update: Wed 12 Nov 2025 11:01:05 +0000
Files and hashes: 1: p50yN57F3LkXuY7-mhCsw823E8k.roa (hash: dyK2Pi+JnZP3NZuI9yP93De2BsaZ3Ntgr/tFvxnQ/R0=)
2: u_iwZ3moMGXb3FgI4ef_r5x9jag.crl (hash: CwH8yS8rvzCZiBEXGn5RF4wvlcr8ql2NWpo+ALStP8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:92:9b:72:90:f9:be:4b:3b:7b:34:67:62:7b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Validity
Not Before: Nov 11 11:01:05 2025 GMT
Not After : Nov 12 11:01:05 2025 GMT
Subject: CN=f0bb77c6148841c48e1355068f25f99c6d774120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:25:eb:68:96:47:1b:6e:83:05:f4:ac:07:55:
1d:1f:db:0b:8a:e7:16:01:48:a7:7e:77:a1:a7:c9:
a9:8a:b5:b5:5f:9d:ac:de:fd:0e:99:15:ae:c8:1b:
62:d3:8a:06:ec:cd:ef:b0:02:30:a9:c8:35:27:40:
3e:79:f6:95:c5:92:af:be:41:50:78:a4:89:a3:dd:
8b:8f:0e:de:20:6f:48:b7:99:10:86:3a:15:b7:f0:
15:c8:53:ec:71:2b:d0:56:a8:2a:65:36:32:a1:7b:
78:87:22:54:05:d8:ce:85:78:e0:4e:b7:c1:99:23:
7d:81:7d:1d:7c:11:6e:fe:4b:32:ff:d3:46:94:b9:
ac:25:3a:ef:f8:ac:7b:dd:2f:23:95:dc:2f:b3:c8:
a8:ac:c7:84:b5:e4:88:29:2c:e4:6c:6e:cf:d7:86:
e7:a9:ce:2f:ae:e6:b6:77:15:d9:0c:0a:e5:ce:3a:
a5:7f:b8:2a:a1:f3:a8:bf:b4:de:41:5a:48:68:b3:
4d:f5:f7:e9:d5:ca:6f:05:57:c5:2e:4a:a6:07:3c:
6f:39:48:83:eb:1f:13:0d:b0:d9:83:b3:af:75:1f:
a7:db:c9:f4:0e:18:76:63:50:07:f8:30:f2:91:3d:
af:7e:e2:0f:6c:a9:61:e0:10:6b:5e:1b:ce:d2:4a:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BB:77:C6:14:88:41:C4:8E:13:55:06:8F:25:F9:9C:6D:77:41:20
X509v3 Authority Key Identifier:
keyid:BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b5:02:64:11:11:94:f2:49:08:94:ec:84:51:9c:84:ca:84:
bd:f2:48:bd:f1:3b:ce:fc:06:20:cf:51:60:d6:76:8d:a6:8b:
ed:43:db:ca:2a:2b:50:66:4a:e6:36:83:2f:63:2c:74:85:0c:
64:80:06:e5:8b:16:e4:a9:8d:a8:d0:6a:02:33:e1:83:56:8d:
4d:fa:7d:d0:07:af:d8:d5:e1:0d:e2:b7:3a:7f:b8:3d:c3:40:
11:e9:e6:15:78:bb:b9:2f:af:a5:3d:b7:d2:ea:17:17:2e:42:
01:b1:e7:e8:05:7e:c2:28:87:47:07:b3:95:b9:54:c4:57:24:
15:34:6b:a2:5f:cd:61:18:1b:56:24:94:18:03:1d:30:c3:d5:
77:9d:a7:ed:b8:7b:5d:0b:a6:e8:cb:a1:bd:7a:12:aa:54:20:
7b:c5:d8:77:0f:d6:b9:af:67:7b:8c:33:0d:1c:db:5f:0e:ac:
b4:19:7c:e8:cc:35:87:eb:7d:dc:0b:52:82:b8:0e:76:35:c8:
46:24:4b:6b:f6:cb:c1:47:d9:b3:ab:58:24:dc:9c:1a:c9:e0:
44:6c:26:4b:0a:ec:37:c7:94:0f:4e:a4:ed:2c:57:ed:73:de:
0b:db:da:07:27:c7:63:d0:26:ee:fc:6f:72:df:2f:65:18:a9:
98:59:c1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:42 2025 by rpki-client