Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier: XihOz2qSfigaUPiyC64U439C/XKZIwtHsqsnCd2Op7g=
Subject key identifier: E2:76:FA:6B:EE:F2:E5:58:AA:30:58:36:71:B4:E3:01:86:D4:CE:1C
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 019A4EF414B1A0606692CA5CC4FA31E1EE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: 9HwID8gSEglbEGPiptwF9w+jj8nSS+gLFdooIEn+qDU=)
2: zqm8sqmxX0F8ohqYYWfQXp8iRJ4.roa (hash: dDiUuU6g/ottfUPpI3HwKpho2gKA2x4esWjcJownMww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:14:b1:a0:60:66:92:ca:5c:c4:fa:31:e1:ee:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=e276fa6beef2e558aa30583671b4e30186d4ce1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:ec:d6:8d:fa:a2:02:9b:e8:67:02:bc:25:
73:59:42:89:43:1f:6e:d0:76:0b:fc:9a:a1:8f:89:
33:9e:7f:c5:d3:f6:91:15:34:6b:74:92:81:1a:41:
dc:61:4a:4e:26:f9:b6:04:64:27:e9:56:9e:d7:45:
2d:e3:d0:0a:64:16:98:8e:13:ac:74:5a:1d:8e:e4:
da:79:44:6b:cf:da:f0:4a:1c:e5:7c:a2:73:48:62:
b3:df:35:89:27:e2:cc:1a:14:eb:90:0f:0d:75:45:
82:2a:9a:bf:f0:33:a1:f4:76:50:40:5d:6b:6e:f8:
b7:79:89:22:63:40:eb:41:fe:f1:f3:ca:6f:28:a2:
22:6e:f7:cf:d2:d4:91:8c:e9:08:49:8e:3a:ff:21:
9e:55:68:44:18:d3:59:1a:53:7e:0a:17:2e:bc:68:
25:b1:86:d6:9b:c8:9e:bc:58:bc:c7:f9:dd:0a:a3:
43:9b:50:1b:73:19:ef:e6:92:a0:f9:db:e8:c3:1a:
25:8c:63:b0:a3:ca:f8:20:7b:00:51:e2:ff:d0:a9:
1a:b4:27:22:76:e2:72:28:18:72:94:74:27:20:78:
93:fd:f9:89:07:be:30:48:33:f3:90:1c:f4:f3:98:
58:23:4e:fe:c2:43:30:2e:f9:42:ed:80:9f:3e:ef:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:76:FA:6B:EE:F2:E5:58:AA:30:58:36:71:B4:E3:01:86:D4:CE:1C
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:22:d7:e6:0e:1b:da:dd:aa:5f:4b:fd:51:33:a4:45:99:94:
20:be:bb:2b:75:7b:3a:a0:b8:2e:55:9f:fd:02:6f:10:0a:a5:
5c:f8:d2:52:51:43:a9:9d:5f:0b:5a:74:99:dd:2e:c9:0c:73:
28:39:6c:38:ea:1d:85:b1:c2:1b:7d:a1:0f:8c:21:27:73:c5:
24:34:e9:c9:af:98:6b:de:b1:25:7c:a5:3e:31:86:1a:c1:6b:
7d:88:88:f4:6c:69:c4:00:4a:ef:4a:61:69:fd:5a:e3:b9:56:
b9:15:93:5b:1b:f5:00:d8:8e:cd:d3:60:76:99:ca:96:cf:a6:
8e:b7:f9:95:2f:16:39:c3:a9:3a:43:7b:32:27:90:5a:c2:e5:
df:60:49:07:83:ae:b4:1d:4f:24:0c:c0:3a:f0:ad:53:21:21:
d0:37:47:49:8d:20:d5:d4:56:0d:f4:ce:3a:92:88:6e:6d:2c:
71:60:08:df:e8:77:85:9e:ef:4c:fe:d3:68:54:7b:3a:0c:a1:
c5:fe:c0:ee:1d:a5:00:47:b5:e3:b6:4d:fe:57:66:37:7f:0b:
0e:2e:7b:90:58:12:de:d6:eb:ce:e7:6f:54:ab:2b:86:d3:0f:
ba:fa:d1:cf:99:58:53:a0:2a:90:5e:08:0e:ec:66:9c:07:75:
cd:73:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:38 2025 by rpki-client