Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
File: u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json)
Hash identifier: lAI2NZPitk+hMQYxWSGbDdHh31/zFJzI34ThFq2X8kg=
Subject key identifier: 74:41:DC:7E:B1:20:34:67:E4:4A:5C:64:EA:D6:18:DF:06:7C:A2:58
Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Certificate serial: 019A725CCECD3BEAB927693FEEA362AC9929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
Manifest number: 1035
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: qojwO3L9jg1p6UhN03evhyipuOQ.roa (hash: dfUoGagRhqiwPd1LKf2UOdIpsG5QndFaYf8UR5Y9xlA=)
2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: bHfdeYh9sb40o383PrKli2WuEaY+VAU0L64Mhqt9hoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ce:cd:3b:ea:b9:27:69:3f:ee:a3:62:ac:99:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=7441dc7eb1203467e44a5c64ead618df067ca258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cd:2f:a8:70:fe:16:d4:77:56:e1:40:85:c8:
99:bc:11:68:62:f9:b6:d7:93:9c:2b:67:a4:c1:64:
3a:24:6a:a0:9c:78:97:95:3d:1c:30:46:ec:73:71:
49:71:e0:a5:44:7d:fb:c4:74:9e:27:2f:9d:80:5a:
5a:c5:bd:a9:c2:fa:3a:3b:89:6c:b5:d0:a7:ed:82:
b0:92:19:02:46:10:65:77:0a:77:d7:e4:77:6d:f2:
53:26:45:88:3f:c6:18:04:a5:36:65:73:a9:cb:47:
74:c0:90:95:58:86:f7:13:98:47:b0:6d:f0:37:fa:
93:5c:05:a6:a1:97:d9:36:4b:e6:c6:f7:ef:61:46:
89:8b:fe:dd:38:9c:75:c6:7a:3e:c0:5f:ad:1b:3e:
46:76:82:08:2f:74:41:be:93:a0:84:f0:78:78:99:
95:9d:55:ef:75:0b:4a:b0:ba:b5:f1:df:9e:fc:47:
66:89:8e:88:cd:78:22:2f:31:26:9e:39:41:24:9b:
e5:70:a1:27:f0:05:5f:12:6c:c8:ea:7a:2d:78:23:
4c:33:23:98:cd:f2:af:aa:2b:5d:83:69:82:a2:e1:
cb:1f:b8:26:63:c2:4e:3b:bf:92:39:b7:37:b8:ec:
f2:b2:9b:2d:6a:16:bd:76:d5:aa:9f:55:e8:e0:2f:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:41:DC:7E:B1:20:34:67:E4:4A:5C:64:EA:D6:18:DF:06:7C:A2:58
X509v3 Authority Key Identifier:
keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c9:56:45:f3:8d:13:0b:cb:5b:aa:ef:84:01:a7:8b:4e:28:
d3:04:6a:d9:52:3d:cd:c9:59:eb:18:2f:b2:14:f1:fa:82:69:
5e:1b:e0:60:90:9e:2a:ce:0b:bc:2b:8b:b1:41:b9:b8:77:7f:
02:c3:6a:9f:1d:2b:a9:94:6f:e7:54:72:33:da:63:16:5f:bb:
6c:c6:cb:f7:41:23:e9:70:43:00:d7:32:7f:dc:37:ec:cf:9d:
f8:94:73:70:6c:b2:38:26:c5:3b:5a:98:ed:56:90:b2:e6:3f:
a0:b3:38:87:ad:24:fc:81:c0:e3:81:fa:2c:10:28:d1:43:52:
7b:ae:fd:6b:16:12:65:42:65:4f:e6:86:81:f7:ce:45:85:63:
25:0b:53:6b:07:97:b5:48:55:7b:e4:ce:f5:d0:07:cd:87:ce:
32:b5:5e:53:ef:a3:ae:51:d5:da:2b:fc:00:58:aa:13:f5:6d:
3a:a3:ac:a2:cf:8b:0e:94:f8:8b:15:a2:13:85:fc:67:19:8e:
4e:70:a9:78:8c:3c:ff:44:39:39:8f:a1:e6:c2:6b:49:92:a6:
af:3c:81:4c:4b:53:32:f8:3e:b9:28:25:6c:14:fb:d1:56:f1:
40:4e:59:68:9d:5a:70:40:c1:3e:33:23:8b:40:b1:fb:8e:29:
e5:90:54:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:51 2025 by rpki-client