Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
File: u_mPikT9YO72t0nSFOVsgRiXZgw.mft (raw, json)
Hash identifier: sD7DgLJlKVpUJ8BBghzDbkvjXBaEl2udtdWucR0lhfg=
Subject key identifier: 78:31:05:48:B5:9D:36:27:CE:A4:9A:97:96:4E:F5:06:A1:AD:B5:CD
Authority key identifier: BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
Certificate issuer: /CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Certificate serial: 019A5375EA81673B3B04EE2784E0F507D109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
Manifest number: 01FB
Signing time: Wed 05 Nov 2025 10:00:27 +0000
Manifest this update: Wed 05 Nov 2025 10:00:27 +0000
Manifest next update: Thu 06 Nov 2025 10:00:27 +0000
Files and hashes: 1: u_mPikT9YO72t0nSFOVsgRiXZgw.crl (hash: 7RWfUxKLTHCWmuvGAmxmGu0ye+YvtJiodPikrMswukY=)
2: xkzazz831mQOXNGmSz3uWho6Ohk.roa (hash: kcYkLf+1B2AuNTj7vUuf68FA8ProRpgWzdWOYFENYJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:ea:81:67:3b:3b:04:ee:27:84:e0:f5:07:d1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Validity
Not Before: Nov 5 10:00:27 2025 GMT
Not After : Nov 6 10:00:27 2025 GMT
Subject: CN=78310548b59d3627cea49a97964ef506a1adb5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:7e:99:ac:f4:41:1a:45:e4:ec:f8:92:aa:
1d:3d:60:4d:8d:5f:fe:fa:c7:d4:06:59:03:16:b4:
41:7e:03:57:9a:77:e2:6a:1e:2d:45:44:c0:e2:6a:
c2:e2:48:e6:7b:ea:14:61:c9:7d:c7:ef:a6:65:07:
c5:e5:eb:bf:84:b9:49:09:1b:8d:be:c8:59:0a:b8:
31:20:90:a7:c9:01:77:2b:a1:f5:52:23:31:e6:02:
51:22:41:90:7e:1b:91:83:38:ba:ef:55:b9:c9:2b:
6b:aa:88:39:db:9a:62:b8:87:3d:56:1e:b2:ce:85:
4a:ce:48:3c:3f:41:7b:04:d9:fc:bf:1c:1f:cc:8e:
3b:b5:c6:2f:1e:c0:0b:22:9a:f0:f6:09:73:35:60:
38:9e:9d:42:a2:21:0b:3a:bf:e0:dc:0c:b9:4f:d4:
8b:4f:c0:7f:ee:e7:5d:58:65:68:95:8e:29:30:72:
ef:91:95:61:8f:35:b6:0d:46:59:47:e0:dd:3d:81:
82:db:74:7b:09:32:3a:56:b3:22:cc:1b:ab:ea:7c:
58:2c:c5:49:24:e5:64:8b:b5:57:51:f8:10:5d:9d:
50:01:cd:2c:53:8d:b4:ab:b0:79:36:4b:8f:c2:01:
bd:43:90:b0:ef:c0:bb:1f:f4:98:b5:4c:85:68:41:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:05:48:B5:9D:36:27:CE:A4:9A:97:96:4E:F5:06:A1:AD:B5:CD
X509v3 Authority Key Identifier:
keyid:BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f1:35:e9:3c:b3:88:62:e4:77:76:b1:c4:2f:8c:9e:e2:3a:
fa:3d:6e:4e:74:32:56:e3:44:ad:44:a0:4c:b4:13:1d:89:60:
24:de:51:06:eb:6d:95:c2:eb:7d:18:83:03:ba:2c:e4:39:c3:
05:64:94:91:13:f6:fb:b5:d3:01:fa:f7:ea:c1:e2:6e:4b:02:
f8:dc:9f:a9:a1:0f:ad:da:e8:ee:af:0d:4e:3b:f0:53:28:f3:
ed:67:7c:97:92:2d:39:20:10:46:41:93:db:76:6b:5a:d8:ca:
9d:66:e3:1c:19:d2:4d:0c:8d:63:4d:f9:f5:6b:f8:d2:10:f0:
fc:aa:4e:cf:22:e6:0f:6e:ef:aa:40:15:9e:8b:75:f5:4a:fe:
a1:43:39:65:99:18:d7:4f:dc:e2:d1:80:83:17:f0:28:83:d9:
10:bb:d4:88:29:08:88:7b:28:99:f7:88:bf:76:bd:a3:28:1d:
69:28:e9:cb:49:c7:1a:fd:1b:20:60:89:10:d9:85:68:5f:ab:
86:60:fd:60:6d:95:3c:4e:77:f0:96:a3:ac:02:48:5d:6d:77:
73:32:a6:4d:95:08:1c:01:9e:9c:ae:24:26:2f:18:21:03:69:
39:37:c3:b8:31:26:1d:b1:6b:ce:06:b0:4d:50:7a:86:6e:cd:
4d:35:19:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:44 2025 by rpki-client