Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json)
Hash identifier: LUDRNLAMPCegDLa/Ip72lnxEQF0mTzZAwIUD3XN32ik=
Subject key identifier: 46:69:46:6B:3A:2B:8B:15:CE:AA:F8:3F:DA:1A:F7:50:CE:BE:47:FE
Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Certificate serial: 019A71B951FCE7106F2A3D2EF86439339B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
Manifest number: 07C9
Signing time: Tue 11 Nov 2025 07:02:41 +0000
Manifest this update: Tue 11 Nov 2025 07:02:41 +0000
Manifest next update: Wed 12 Nov 2025 07:02:41 +0000
Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: QIGdpSasNKSnzkDbvH8yaskBL/2xHfusCdcP317JPzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:51:fc:e7:10:6f:2a:3d:2e:f8:64:39:33:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Validity
Not Before: Nov 11 07:02:41 2025 GMT
Not After : Nov 12 07:02:41 2025 GMT
Subject: CN=4669466b3a2b8b15ceaaf83fda1af750cebe47fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:9a:2b:42:d3:fc:1c:8d:fc:b6:6c:42:d2:
e1:65:d0:6e:ba:8a:6d:77:51:d3:96:66:ac:23:f7:
fe:67:c2:9a:a8:28:51:96:c1:c0:0e:a6:9c:91:b6:
c1:83:35:e5:2e:ba:75:52:fa:d4:9c:59:91:a1:81:
29:04:08:0c:4b:81:90:6e:6a:2f:dc:c2:30:b9:49:
d3:70:f1:dd:29:80:1d:bc:b9:08:43:ff:e8:32:ce:
7c:e3:4b:8e:da:43:d6:7d:8d:70:c3:64:aa:1c:8b:
11:a4:cb:82:75:7e:a2:04:dd:03:ef:8a:bf:a5:32:
55:50:31:e8:c4:31:a1:10:66:0f:3d:40:59:86:82:
a2:49:86:b5:f9:4d:a0:5b:3d:a2:43:78:b8:aa:c1:
52:1f:61:8d:68:45:67:1f:13:44:01:95:47:73:81:
df:32:9f:4c:3a:af:68:4a:01:a2:0f:e9:72:75:e8:
1a:c2:fc:bd:73:ce:66:85:44:77:ad:ed:11:59:0f:
e6:b4:a7:b7:2d:c7:5d:c4:9c:9d:11:90:06:2a:d5:
11:47:14:07:33:c8:1a:10:33:2c:4c:e3:c3:70:7b:
9a:0c:43:a9:19:e6:19:ae:b0:51:f3:34:bd:8f:0e:
17:fa:f8:21:68:bb:f0:49:25:c8:19:b7:8a:1a:48:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:46:6B:3A:2B:8B:15:CE:AA:F8:3F:DA:1A:F7:50:CE:BE:47:FE
X509v3 Authority Key Identifier:
keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:11:d2:e1:a9:55:ef:88:f1:c6:f5:6a:28:82:3a:4d:2c:d4:
b0:6a:0f:13:0f:a3:f8:fe:40:2f:ba:7b:3f:10:ae:51:d5:9e:
e4:71:0d:d3:db:78:df:bd:47:ff:65:48:6f:74:ef:56:b6:17:
2d:87:be:1a:67:50:b7:82:3a:f9:08:61:5b:e2:40:bb:3d:ab:
92:da:92:34:a4:12:11:48:2a:f9:c2:36:32:59:8e:ef:a0:2f:
eb:55:84:3c:9b:3a:44:b2:cd:9e:f6:67:ac:40:8f:a8:8e:ba:
81:53:87:9d:c2:75:d9:27:22:f9:07:b1:a2:8f:21:f0:19:f1:
e6:3d:ea:f7:e4:5e:35:f2:d7:6a:b3:10:08:d5:c2:24:f8:cd:
ef:e3:4b:fc:5b:a4:1c:d2:8d:14:45:c3:2d:ad:c7:60:e9:3f:
2f:14:98:7e:76:0a:dd:cc:4d:a2:84:29:ab:64:c4:55:00:fa:
5f:9c:ca:84:1e:ff:e8:a6:a1:11:2f:cf:6f:f6:f9:64:fc:cb:
26:16:27:6e:f7:a6:d5:d4:71:50:b7:e3:bf:d5:f7:c4:2e:38:
7a:c8:79:29:81:19:d0:6f:10:b3:08:20:09:cb:30:ea:4a:e0:
fe:a9:c4:df:d1:c0:33:da:d0:4a:47:6d:2f:10:38:80:73:8f:
1c:49:ee:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuVH85xBvKj0u+GQ5M5tgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYjkxNDAxN2RiNDVlOWY3NWUzOGRkZTNmMDM1N2NlMmI3
MWQ4MjcwHhcNMjUxMTExMDcwMjQxWhcNMjUxMTEyMDcwMjQxWjAzMTEwLwYDVQQD
Eyg0NjY5NDY2YjNhMmI4YjE1Y2VhYWY4M2ZkYTFhZjc1MGNlYmU0N2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGeaK0LT/ByN/LZsQtLhZdBuuopt
d1HTlmasI/f+Z8KaqChRlsHADqackbbBgzXlLrp1UvrUnFmRoYEpBAgMS4GQbmov
3MIwuUnTcPHdKYAdvLkIQ//oMs5840uO2kPWfY1ww2SqHIsRpMuCdX6iBN0D74q/
pTJVUDHoxDGhEGYPPUBZhoKiSYa1+U2gWz2iQ3i4qsFSH2GNaEVnHxNEAZVHc4Hf
Mp9MOq9oSgGiD+lydegawvy9c85mhUR3re0RWQ/mtKe3LcddxJydEZAGKtURRxQH
M8gaEDMsTOPDcHuaDEOpGeYZrrBR8zS9jw4X+vghaLvwSSXIGbeKGkh6gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZpRms6K4sVzqr4P9oa91DOvkf+MB8GA1UdIwQY
MBaAFLu5FAF9tF6fdeON3j8DV84rcdgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9hM2JiZjItMjYxZS00NGU4LWI5YmMt
NmJlOTdlMzcyNDFmLzEvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9hM2JiZjItMjYxZS00NGU4LWI5YmMtNmJlOTdlMzcyNDFm
LzEvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxHS4alV
74jxxvVqKII6TSzUsGoPEw+j+P5AL7p7PxCuUdWe5HEN09t4371H/2VIb3TvVrYX
LYe+GmdQt4I6+QhhW+JAuz2rktqSNKQSEUgq+cI2MlmO76Av61WEPJs6RLLNnvZn
rECPqI66gVOHncJ12Sci+Qexoo8h8Bnx5j3q9+ReNfLXarMQCNXCJPjN7+NL/Fuk
HNKNFEXDLa3HYOk/LxSYfnYK3cxNooQpq2TEVQD6X5zKhB7/6KahES/Pb/b5ZPzL
JhYnbvem1dRxULfjv9X3xC44esh5KYEZ0G8QswggCcsw6krg/qnE39HAM9rQSkdt
LxA4gHOPHEnuGQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:21 2025 by rpki-client