Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: x9hd3mcXgpcknWXMq07k0AN6XmgyH635G5SHmUM7t0M=
Subject key identifier: 81:2C:6E:1D:54:49:93:99:67:83:E4:85:08:DD:3D:F1:9C:1A:E0:FD
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 019A4EF48926AB71FBD4C55CD61DF166E7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0B19
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: Zn+SLotAdmRKIKdjp9nU8OJrsuI819C7vE8bHue/X6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:89:26:ab:71:fb:d4:c5:5c:d6:1d:f1:66:e7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=812c6e1d544993996783e48508dd3df19c1ae0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:2e:99:2b:6b:4d:f2:5d:53:04:b5:94:26:
70:c2:49:56:73:59:f9:dc:49:9c:b9:b5:ad:21:67:
c6:63:84:b9:21:a8:84:d8:80:63:d8:30:bf:2d:d1:
71:47:87:22:7b:41:30:dc:27:40:3f:13:0b:8a:f2:
3b:a7:66:25:eb:fb:2a:5b:ef:6b:fc:36:a7:09:f0:
50:70:c1:24:b5:fd:db:41:1e:c0:69:ac:67:a9:ac:
44:02:11:4c:82:77:d2:05:73:45:23:be:04:41:f0:
f9:6a:ed:16:96:bf:92:77:fc:e7:16:81:1e:2a:7d:
d3:d1:d6:8f:46:11:58:98:88:22:cb:3f:34:73:5d:
1b:8f:b9:4d:80:03:ab:22:e0:72:9d:91:8b:82:d9:
51:3b:7c:a7:5c:44:be:b9:df:1b:96:46:7f:24:c6:
30:74:19:50:5d:b7:27:c5:f7:b1:73:e5:52:74:72:
73:b6:46:ea:e0:cf:e2:9e:3a:4e:2d:52:86:05:f7:
9d:42:ea:5b:37:00:5c:de:ba:a4:de:49:1a:c2:5a:
52:a9:1b:42:11:66:bd:3f:2a:ca:70:ea:7c:04:48:
13:7f:d7:1a:1f:2f:bd:f5:97:eb:6d:38:63:19:e5:
3d:88:03:ac:a6:e1:3c:99:d8:7e:00:4a:be:e3:d3:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2C:6E:1D:54:49:93:99:67:83:E4:85:08:DD:3D:F1:9C:1A:E0:FD
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fa:f3:40:32:73:cd:f3:59:1d:6e:05:30:b1:0f:57:55:8f:
4d:eb:c0:e0:25:b0:5d:3a:33:62:eb:28:4f:2b:d2:fd:e5:f1:
65:14:51:fc:92:60:50:f4:2d:f9:30:e4:97:41:a2:1f:3a:0d:
c0:c6:73:39:50:da:48:9f:fd:00:16:7a:88:ed:69:f8:f7:39:
35:b3:e9:ac:4f:76:28:4d:bc:28:15:d6:c0:76:5a:9b:02:df:
29:67:03:eb:5e:b0:54:0a:cb:de:22:63:63:d8:42:56:4d:1a:
e7:53:76:5c:5c:e7:9b:4b:e0:b3:f5:49:8d:98:08:a2:36:16:
3c:bc:77:02:a8:57:27:20:94:c2:3f:37:4f:4b:27:77:8f:2b:
aa:cb:d4:a5:ae:71:89:0b:a3:fc:39:41:8a:2b:f1:50:da:eb:
29:f7:4d:3c:0f:b0:6a:7d:ba:d9:bb:dd:9a:11:ae:11:97:e6:
b7:af:34:72:3d:85:9c:ff:65:a5:c5:63:68:9b:d6:c2:a4:94:
a1:bc:0a:0e:a2:72:92:13:58:2e:49:d9:6a:9c:fa:72:32:b1:
03:e7:f5:b3:b1:44:e1:e2:6c:3f:84:79:80:2c:f3:24:5b:ed:
fc:1b:95:a9:5d:5e:0d:1e:1a:61:70:e2:7d:3c:d2:2a:a2:ae:
df:bc:e7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:09 2025 by rpki-client