Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: eQzg4ZvKXjWgxkUfMhAMJkTGBqiVAfh+W2TjyL7BEBg=
Subject key identifier: 44:49:33:CA:B6:EE:F5:E9:E7:B9:9F:47:15:FF:CC:17:9B:D5:82:F7
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 019A71B7DB5324F7DC3234BEEABDA74A999F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0B2B
Signing time: Tue 11 Nov 2025 07:01:05 +0000
Manifest this update: Tue 11 Nov 2025 07:01:05 +0000
Manifest next update: Wed 12 Nov 2025 07:01:05 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: kHAWIopCdQ1ZSRWSWMno1GUF40ZQ1Qy4SrqEg9HLN50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:db:53:24:f7:dc:32:34:be:ea:bd:a7:4a:99:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Nov 11 07:01:05 2025 GMT
Not After : Nov 12 07:01:05 2025 GMT
Subject: CN=444933cab6eef5e9e7b99f4715ffcc179bd582f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:83:72:ca:79:1b:4c:9b:cf:15:04:51:61:
d5:5b:e6:f0:a1:92:11:1c:70:ae:7d:f6:cb:15:80:
0c:29:36:8b:d8:7c:8b:cc:3e:d3:46:b9:67:6a:bb:
79:9f:0b:ab:54:bb:f7:88:2f:40:c1:ae:7f:d8:74:
5a:df:4d:9e:72:2f:41:fd:23:fd:59:25:66:ad:df:
8e:35:f7:e7:39:72:a3:0e:f3:3b:74:11:37:26:4a:
bd:e3:6a:4b:bb:5b:cb:6f:b9:b8:af:eb:f2:3e:97:
29:4c:f2:39:69:96:ef:38:ca:72:09:ad:13:a0:2b:
8d:d6:ba:ab:6e:96:ce:97:e2:3d:78:30:53:1d:d3:
72:3f:c2:9f:9d:6b:e1:62:94:56:fa:b5:8c:92:bb:
f1:29:dd:da:85:40:e3:17:46:2d:88:ae:c7:f3:8b:
e1:c1:1c:cf:1b:da:d6:a3:c8:e5:f5:67:f9:1c:0f:
fb:a3:0d:99:8b:f0:ce:8d:82:c3:3b:ee:da:89:fb:
2a:d8:d6:12:5b:5b:e7:27:ec:b4:68:f9:30:0c:40:
ca:54:61:75:a1:ac:f0:95:66:13:4b:a8:08:cd:de:
24:a4:5a:a0:bf:37:56:42:17:3c:c1:65:8e:fd:dd:
7d:ac:81:6e:9f:55:79:97:63:72:bd:40:9f:34:2b:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:49:33:CA:B6:EE:F5:E9:E7:B9:9F:47:15:FF:CC:17:9B:D5:82:F7
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:aa:b6:6e:f2:12:4a:86:b7:7a:ff:32:13:87:23:a3:04:c3:
8b:c7:ee:e3:33:b5:fa:97:36:57:95:a3:f6:2f:4b:4e:57:2a:
81:39:4d:a7:bd:db:0a:1e:72:e8:fc:bd:c8:f2:3a:f3:8e:44:
ce:c9:bc:69:ec:a1:26:78:21:d2:27:73:23:f0:56:c6:c4:ac:
33:4e:8f:76:a4:1b:d0:0c:0e:98:53:92:40:3c:77:d8:18:4f:
9f:c1:22:bf:5b:82:c6:17:65:13:a5:e7:58:95:e1:a2:34:c8:
5e:0f:4d:15:7b:40:d5:05:7f:b6:5b:cc:1e:53:d7:d8:09:13:
de:f6:68:43:4f:cf:86:6c:03:b7:49:55:6d:45:1a:68:e3:6e:
d7:59:7e:fe:5b:39:d4:6f:ed:29:2c:f8:1f:0f:6a:f9:d3:20:
05:81:c0:c6:30:cd:9c:04:d4:ed:68:b1:40:67:03:84:f7:a2:
d2:bb:af:32:ff:e0:97:02:5c:5f:c2:7f:07:9e:41:5a:24:ce:
60:ad:c6:09:87:70:80:45:8d:c2:ce:22:f9:4b:85:e7:59:bc:
d4:64:5c:cd:c3:0e:13:67:c0:b8:79:34:8f:52:3b:f8:64:28:
70:c3:04:1d:f1:20:fd:cd:1b:ef:d4:be:76:d1:09:27:bb:10:
d2:b9:dc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:12 2025 by rpki-client