Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
File: u2MubMSrZyETUbUpP4Fdfl8JOr0.mft (raw, json)
Hash identifier: lWdlhiJjPkl2Jd3QhqrCcGexMw5CFJD6i7XIoi08ycw=
Subject key identifier: 8C:B3:22:CC:5F:D1:28:70:C8:F1:FF:59:9D:57:77:85:62:97:54:FF
Authority key identifier: BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
Certificate issuer: /CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Certificate serial: 019A526373F0F5BF4E06D5EBB0E9EF6EBE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
Manifest number: 03FD
Signing time: Wed 05 Nov 2025 05:00:40 +0000
Manifest this update: Wed 05 Nov 2025 05:00:40 +0000
Manifest next update: Thu 06 Nov 2025 05:00:40 +0000
Files and hashes: 1: u2MubMSrZyETUbUpP4Fdfl8JOr0.crl (hash: 1Ynyru5TbnFzUxrMNkt5GIjLL6fLOmgGlReppfc8bDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:73:f0:f5:bf:4e:06:d5:eb:b0:e9:ef:6e:be:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Validity
Not Before: Nov 5 05:00:40 2025 GMT
Not After : Nov 6 05:00:40 2025 GMT
Subject: CN=8cb322cc5fd12870c8f1ff599d577785629754ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:63:e3:6d:87:14:a2:45:f0:5c:48:df:bb:
87:a9:1a:f0:77:47:7a:59:86:56:4a:0a:c3:4d:94:
ad:c7:72:c3:ac:75:65:3c:b0:ac:aa:7a:fd:d7:ea:
75:4a:32:68:7f:d7:66:45:90:ce:85:6b:72:bc:d3:
97:8e:f9:85:3b:9c:e9:a4:0d:25:bc:0c:69:33:22:
78:f9:4c:ae:09:80:97:3f:fc:f2:d6:93:47:1b:82:
77:1c:94:97:07:49:60:a9:5d:67:77:69:85:f2:16:
15:e2:30:84:31:b3:3f:a2:88:fc:e8:77:44:65:eb:
a7:75:35:cf:16:48:cb:a7:90:97:fc:a6:31:76:a7:
54:dd:64:77:e6:b6:e3:22:ab:51:ac:d2:6f:48:c0:
65:ef:22:a7:fe:f9:d0:77:03:ff:bf:5a:c5:d3:0a:
ed:6b:54:08:93:53:93:c8:47:5e:8e:c3:7f:1f:33:
4f:ea:e6:10:04:39:c5:6b:a1:b4:58:9b:43:7e:50:
bc:44:ce:34:65:2c:a1:69:cb:8c:88:03:28:1c:49:
81:13:b7:df:23:dc:b7:f8:4a:a0:d6:f0:b8:e6:c7:
8b:97:0a:6b:f2:84:d4:81:07:66:fc:51:4d:b0:22:
44:f7:62:cc:05:d3:c5:83:6f:c3:67:98:c9:14:25:
bc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B3:22:CC:5F:D1:28:70:C8:F1:FF:59:9D:57:77:85:62:97:54:FF
X509v3 Authority Key Identifier:
keyid:BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bb:c5:a2:16:b9:e7:ff:c8:db:c6:dd:65:44:8a:f3:2e:bc:
92:ad:49:76:f8:f0:96:2c:69:e0:86:f1:ae:f4:3e:d7:07:a5:
76:c5:6f:9b:6b:48:31:f8:5c:1e:67:bb:a4:e5:56:e6:84:42:
97:e9:02:f4:0b:0d:e4:77:af:b2:bb:05:58:64:c3:36:bf:d3:
11:dc:55:87:7b:f3:49:bb:29:fd:08:49:97:2c:62:f2:ca:6f:
33:e7:6a:be:f9:22:e5:28:d7:a1:f7:5f:a8:26:34:53:82:b3:
80:84:e7:04:e3:88:00:7d:82:b0:ed:61:be:a7:d6:47:15:42:
66:3f:3b:f6:03:42:ba:18:3e:df:e4:f0:56:2b:4d:2c:73:84:
9c:ab:a4:83:66:b8:5d:14:e0:14:aa:aa:29:cf:87:8b:f1:95:
3c:4d:58:fb:24:8d:89:9c:41:2b:2b:17:fd:48:14:90:04:48:
9f:4a:cf:8a:53:05:4e:79:7d:2c:ba:cc:12:ef:fb:5e:7b:f7:
2e:4a:80:68:27:aa:55:89:87:f7:34:c0:41:68:ac:69:29:eb:
a1:e6:c4:b7:eb:d4:f3:30:59:0c:24:1b:c2:3a:64:b7:b6:a0:
a0:17:17:bf:19:f1:6d:28:f6:ca:2a:37:cb:5a:76:18:c0:a8:
9c:4c:6d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:39 2025 by rpki-client