Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
File: u0WFtGeSNzbELHly4QQvGy4w3GY.mft (raw, json)
Hash identifier: oIkP2QSuTmV2nMTnUVsAcyBe8Jy/WenBVD+1CErVB2I=
Subject key identifier: B1:2D:FD:0A:39:3B:06:B8:97:2A:C6:3D:38:0D:A2:E3:55:66:E1:D5
Authority key identifier: BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
Certificate issuer: /CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Certificate serial: 019A73A74C0EECE9A25EBAC25BBC1C9CC38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 16:02:15 +0000
Manifest this update: Tue 11 Nov 2025 16:02:15 +0000
Manifest next update: Wed 12 Nov 2025 16:02:15 +0000
Files and hashes: 1: u0WFtGeSNzbELHly4QQvGy4w3GY.crl (hash: +wxdEHomhEilH9haD2cjb//OhfahcwU4sPmIvpgdo+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:4c:0e:ec:e9:a2:5e:ba:c2:5b:bc:1c:9c:c3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Validity
Not Before: Nov 11 16:02:15 2025 GMT
Not After : Nov 12 16:02:15 2025 GMT
Subject: CN=b12dfd0a393b06b8972ac63d380da2e35566e1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:48:ff:f9:06:7a:01:75:6e:89:c8:f7:fe:5e:
5f:df:39:e6:78:69:76:64:27:a7:d6:35:c5:df:cb:
4c:84:6c:a7:95:47:a2:e4:00:a6:ac:78:41:e9:d9:
15:8f:45:7f:e6:6f:d3:22:53:44:41:36:12:01:5e:
29:2d:90:17:2f:06:34:13:48:33:28:b3:42:4e:84:
35:34:eb:9c:56:3d:56:fd:5b:d9:68:5c:6e:24:03:
ca:b6:72:6e:c0:b1:44:9d:f3:60:ca:4c:85:cf:a4:
ec:a9:bf:a4:fc:a8:73:a9:7e:66:d7:50:08:d4:74:
64:4a:d6:f2:19:3c:82:ea:a4:f1:2d:78:7e:36:69:
0a:f7:3e:92:a0:ea:f3:c0:87:4e:a2:81:d7:5a:9b:
73:09:0c:6b:f3:ce:50:0a:4e:9e:5f:24:b1:ea:05:
65:11:0f:06:00:87:da:47:b5:5e:76:90:eb:07:23:
9d:b8:6b:dc:6b:83:d6:b1:00:c1:63:49:99:83:94:
ca:fa:43:28:af:60:0b:e5:9f:21:18:fd:a2:34:95:
61:38:5f:ee:24:e2:c3:1b:e7:f1:9a:97:1f:b4:f8:
3d:c4:86:c2:37:9d:95:3e:a5:1d:e4:13:fe:52:81:
2e:5c:e5:5b:65:60:d1:d5:b9:6f:d0:64:8b:2c:ba:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2D:FD:0A:39:3B:06:B8:97:2A:C6:3D:38:0D:A2:E3:55:66:E1:D5
X509v3 Authority Key Identifier:
keyid:BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:25:0b:d7:c1:48:3d:9b:21:39:65:03:33:1d:1b:a8:9c:13:
f1:49:5f:26:93:b6:77:a2:d3:95:79:50:57:e7:53:5b:21:e5:
32:b1:7c:46:d8:78:55:5b:47:f9:21:a0:f5:3b:aa:66:21:fd:
3d:e6:aa:17:99:d0:90:a9:32:75:92:15:a7:45:9b:7f:07:96:
da:9c:2a:28:47:ab:0c:1c:83:a3:76:10:7f:38:2e:31:5e:e0:
92:c5:14:18:1c:fe:9b:0d:eb:2c:65:66:e0:76:86:aa:5d:bc:
52:39:e7:d0:9b:90:10:ce:f8:b0:de:a1:27:14:f9:17:5e:47:
b8:e3:0d:b7:38:17:5c:5f:9e:7f:c7:7b:08:0c:77:6f:32:da:
cc:8b:b0:d9:36:12:60:b6:69:47:a3:54:30:d7:d4:06:32:73:
91:5c:2d:18:9c:51:a0:31:e9:a9:a0:20:f7:e5:19:4a:c4:c8:
13:17:6c:49:a3:10:23:4a:34:64:f8:ad:f2:d1:a3:ac:b3:c0:
10:89:99:e1:f7:b8:a3:07:0f:21:04:e9:7a:f5:38:94:21:59:
14:ab:0c:d4:80:bf:b7:aa:6a:44:b5:81:41:ce:e9:07:e9:d6:
7a:cc:14:24:09:ac:c8:d3:a4:f8:cb:bc:85:9d:c1:b7:4c:a4:
dc:82:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:11:30 2025 by rpki-client