Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json)
Hash identifier: HzaGAZ2zgCyGL1qrOVFcAVAjh0R4HhZmh1dPp+xCioY=
Subject key identifier: A3:C4:43:71:01:7C:6B:10:A0:BC:48:D2:46:3A:9E:93:3F:06:FD:40
Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Certificate serial: 019A50E420C6068133476C503AEED70BE24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
Manifest number: 07B8
Signing time: Tue 04 Nov 2025 22:01:59 +0000
Manifest this update: Tue 04 Nov 2025 22:01:59 +0000
Manifest next update: Wed 05 Nov 2025 22:01:59 +0000
Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: XW+lkWTQnaPYyGzFbmWbAmPoQAiFqdlqFDsS+iHEc8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:20:c6:06:81:33:47:6c:50:3a:ee:d7:0b:e2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Validity
Not Before: Nov 4 22:01:59 2025 GMT
Not After : Nov 5 22:01:59 2025 GMT
Subject: CN=a3c44371017c6b10a0bc48d2463a9e933f06fd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:e4:91:9f:c3:d6:ae:f6:0e:57:b2:f3:48:
cc:68:57:92:81:9d:c7:da:e7:a6:ef:92:65:ec:9e:
a0:03:f7:b4:69:7d:b5:fe:93:34:53:78:22:c4:36:
52:db:70:db:ef:63:b2:10:e9:4d:56:a7:28:43:17:
f1:ad:42:27:90:dd:b9:89:63:0e:ff:d6:bc:da:43:
6d:34:71:c7:f3:99:1a:30:ce:cb:cd:b1:ca:f0:ce:
ab:1f:1f:a4:e1:f9:14:d8:ee:b8:87:b8:45:01:a9:
ea:70:27:f9:4c:de:cd:a3:96:45:4a:04:b3:f3:59:
6e:47:7e:86:c6:5f:57:2c:2b:35:d9:09:b5:69:07:
9a:35:eb:b0:b2:fe:9e:3b:3f:39:fd:9a:1d:3f:c8:
5a:00:27:0f:0f:9f:cd:07:bf:7b:87:19:f0:4a:3f:
78:cd:2f:8f:c0:98:65:33:7f:f0:bb:3a:8e:6d:45:
73:46:9d:c4:2b:5b:64:d0:21:d7:66:27:e0:31:ff:
d9:37:95:a3:c1:76:f0:9a:03:2b:ad:36:6d:08:f0:
1a:9c:ea:6d:22:78:8f:31:1f:d5:5f:53:0f:c3:ea:
20:e9:75:4d:9f:58:d1:1c:e8:0b:ef:78:0f:b8:c9:
ac:0d:7e:8c:15:7e:ec:ba:0b:71:56:b8:95:7a:73:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C4:43:71:01:7C:6B:10:A0:BC:48:D2:46:3A:9E:93:3F:06:FD:40
X509v3 Authority Key Identifier:
keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8b:87:fa:76:0f:4a:17:df:b5:c3:7f:85:b7:a2:6d:40:89:
94:96:50:73:40:d9:bf:47:60:a8:2f:14:fb:44:25:19:25:99:
3e:b2:84:2a:5c:56:81:37:7b:8b:e2:84:d6:b5:e1:31:41:4c:
63:e3:4d:02:1c:9c:47:1a:4a:9c:4e:07:c9:91:47:02:75:86:
b6:e7:02:59:b1:39:87:69:53:ac:9e:41:d1:00:11:ff:62:a1:
d0:fc:82:c6:19:42:72:97:cc:58:98:0e:ff:89:76:43:60:98:
b2:db:aa:e4:e4:ce:be:d9:c5:69:16:76:d3:dc:b8:8e:73:18:
3c:99:8a:6e:66:27:d9:7e:8a:cb:f7:23:fa:10:c3:df:7b:3b:
eb:a5:60:49:50:c4:f9:31:18:6b:55:ee:1f:03:e7:de:e0:dc:
85:1a:fe:8c:49:7c:18:52:2e:c6:f3:59:9d:25:41:85:97:0b:
db:6f:b6:9d:a8:57:ed:07:56:88:4a:d6:08:3b:12:1a:e9:f9:
a0:f0:22:15:2c:17:1f:5e:82:2b:2d:bf:35:20:d5:3a:3e:14:
c8:7d:c1:ea:e8:50:67:90:30:f0:e9:37:0e:d3:bb:39:c4:fb:
f9:85:af:d8:fa:ae:8e:a2:c5:c0:c9:67:61:c6:75:d8:1c:6f:
54:64:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:11 2025 by rpki-client