Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft
File: u0OX5un46iWRVggDysuzI5Ytn64.mft (raw, json)
Hash identifier: 6lT0BgIB5uVsenZYBFEiJ4Hbo7q2wxpBtg00TynQ0qA=
Subject key identifier: 0A:F8:F7:B7:E7:43:B7:02:4D:14:BF:16:F0:D1:DE:75:33:3B:FE:2A
Authority key identifier: BB:43:97:E6:E9:F8:EA:25:91:56:08:03:CA:CB:B3:23:96:2D:9F:AE
Certificate issuer: /CN=bb4397e6e9f8ea2591560803cacbb323962d9fae
Certificate serial: 019A4EF54C1CCDE3277358AB7BAEAFBAE3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0OX5un46iWRVggDysuzI5Ytn64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft
Manifest number: 114D
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: u0OX5un46iWRVggDysuzI5Ytn64.crl (hash: dBhbTYMaaLN4DfiWTbZJd0VoSdhIm28dGlsLCdp5pa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0OX5un46iWRVggDysuzI5Ytn64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:4c:1c:cd:e3:27:73:58:ab:7b:ae:af:ba:e3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4397e6e9f8ea2591560803cacbb323962d9fae
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=0af8f7b7e743b7024d14bf16f0d1de75333bfe2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:66:f6:4f:0a:d3:b6:6b:6c:e5:8c:4b:aa:
d7:fa:61:b0:e0:d6:0f:62:da:54:8a:42:1f:c5:f6:
00:11:85:c0:6f:dd:93:a1:f5:80:ac:1e:89:f1:78:
70:63:66:b2:99:6f:32:76:68:e3:9f:00:c1:2e:0d:
04:bb:45:c0:9e:f9:0c:fd:17:97:4e:05:cc:93:02:
c2:25:dd:07:18:71:26:78:ed:ab:22:70:76:8b:3d:
d8:3c:62:55:ee:20:bb:08:2b:94:40:de:b1:51:b4:
eb:a3:7b:e2:68:91:74:59:76:2c:d3:f7:ef:c9:05:
3f:69:00:5f:a6:c5:29:3f:de:f0:fb:46:2e:18:bb:
52:cd:6a:39:95:a0:46:6a:0e:90:0a:d2:41:15:04:
f3:37:fa:8b:a0:4c:b7:2f:37:83:14:ca:41:d3:38:
61:88:cf:ae:ef:0d:79:95:f7:f5:e5:87:d9:ac:22:
1f:07:48:5e:d1:7b:8b:67:2a:b3:54:ec:d6:13:be:
ea:5e:86:66:6b:39:0e:1d:80:b2:bd:94:24:e5:96:
57:65:90:2f:cb:b8:35:8a:8a:7d:e4:2c:eb:17:97:
5e:4b:11:d5:10:50:da:64:f0:e3:5a:ce:e3:fc:e0:
bc:a1:b8:75:7b:0a:70:f1:f9:dd:bf:15:82:68:ea:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F8:F7:B7:E7:43:B7:02:4D:14:BF:16:F0:D1:DE:75:33:3B:FE:2A
X509v3 Authority Key Identifier:
keyid:BB:43:97:E6:E9:F8:EA:25:91:56:08:03:CA:CB:B3:23:96:2D:9F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0OX5un46iWRVggDysuzI5Ytn64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:18:de:1a:a8:3a:1a:88:13:ba:8d:b6:f5:f5:cf:2c:47:44:
1a:53:42:6d:01:d9:7c:cf:e6:d4:67:8b:48:3c:cc:4a:7d:b8:
82:4c:12:d2:d0:f9:89:e3:53:d0:80:99:8e:01:94:23:4f:8e:
af:14:02:87:eb:1d:49:7c:82:fd:ed:d5:b5:c0:fd:12:b4:e1:
85:87:09:9b:d5:21:b4:f8:68:59:73:30:c1:2b:e0:5f:bb:35:
4b:cc:ff:03:a6:85:b5:7a:7b:3a:41:77:a7:26:42:65:21:fb:
4e:f2:66:27:ef:86:96:a9:70:b4:a0:e8:78:05:80:fd:f1:52:
86:f6:99:1b:a4:7a:09:41:12:e7:98:29:d0:41:44:5a:f1:ff:
03:74:b4:03:39:81:50:f6:1d:81:20:6d:88:b5:e7:11:36:3e:
fe:16:15:a3:af:ed:8c:f7:c5:92:bb:59:e6:8a:c4:06:d5:d5:
4f:12:d1:ca:1d:07:6e:ea:12:0e:b8:5f:34:14:16:95:bb:30:
57:e6:58:04:37:9b:18:8e:d6:ba:6b:c1:bd:29:77:8a:5d:5f:
71:0e:df:85:cd:17:d4:3f:5e:a4:63:d7:15:dd:9f:5c:0a:f1:
fa:c1:a2:71:c1:0e:e6:1d:d6:4e:d7:9b:c4:54:bb:a3:2e:f0:
69:3e:96:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:26 2025 by rpki-client