Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
File: u_e8bHyTo8-x4lu778TyB64lvaU.mft (raw, json)
Hash identifier: iUPdjswM7H8neDTRWKA86iPJJjggYo9XrDxq5KzdBWk=
Subject key identifier: DE:DE:11:20:A5:5D:51:BE:9C:30:89:E4:94:FA:94:DE:8B:2D:64:25
Authority key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
Certificate issuer: /CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Certificate serial: 019A7225D0B6DC89168F78AEE9EE89184274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
Manifest number: 0A51
Signing time: Tue 11 Nov 2025 09:01:12 +0000
Manifest this update: Tue 11 Nov 2025 09:01:12 +0000
Manifest next update: Wed 12 Nov 2025 09:01:12 +0000
Files and hashes: 1: BbjjnTO6x8pCO-c9XIXawU4Q-Wg.roa (hash: O0QT5VY+thGDoU+G5JqnH6rDs/DiZAhj1p6YD6BBCu4=)
2: u_e8bHyTo8-x4lu778TyB64lvaU.crl (hash: ZBwBIex6t9+Dwr6QBU30Hn2QCNrwy3NRKId4ULTscfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d0:b6:dc:89:16:8f:78:ae:e9:ee:89:18:42:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Validity
Not Before: Nov 11 09:01:12 2025 GMT
Not After : Nov 12 09:01:12 2025 GMT
Subject: CN=dede1120a55d51be9c3089e494fa94de8b2d6425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:99:05:31:be:b0:06:e3:60:79:61:67:c9:
94:3f:a3:2c:00:b9:a2:ec:23:e7:47:ea:28:73:19:
f4:f7:db:8c:81:3c:e4:2c:bb:bf:a8:d5:d9:d8:b8:
11:fe:3f:f0:e8:f3:a9:66:21:70:4d:00:e5:53:48:
40:c3:31:00:62:16:d7:81:95:31:9c:07:f0:29:23:
8c:c6:1d:90:c0:ad:4e:fe:2a:30:1d:48:90:b9:43:
79:f7:28:61:c7:a9:4b:a1:f7:c8:7c:51:8b:d9:84:
8c:56:b3:fd:b6:0d:0a:15:f9:db:99:37:5b:e0:ce:
dc:33:ce:f4:d5:20:88:c7:30:e5:9d:b9:3e:ef:da:
45:a1:fb:c9:14:bb:d0:22:0f:db:f7:6e:e6:a6:6f:
4f:20:66:46:d9:43:b5:8c:82:44:d3:eb:5a:3f:a7:
73:23:ee:63:1f:2c:3c:94:60:c3:e3:e4:50:81:30:
61:7c:a5:f7:61:15:0a:43:76:ea:06:61:99:a6:a7:
e3:dc:60:f5:41:a6:87:f3:8b:eb:0e:17:ab:83:c1:
c2:34:45:6c:d9:41:db:74:44:12:08:4c:3d:e9:bf:
11:27:ea:8a:3c:1e:55:d1:89:09:16:64:bd:8e:9a:
8f:01:1c:de:35:9c:69:fe:f4:7a:4d:ac:67:ce:0c:
70:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DE:11:20:A5:5D:51:BE:9C:30:89:E4:94:FA:94:DE:8B:2D:64:25
X509v3 Authority Key Identifier:
keyid:BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c2:07:8f:6a:b2:07:e5:e9:fe:38:05:7b:48:64:2d:3c:5e:
8b:46:53:26:4d:55:8e:44:c3:e5:8b:4f:31:84:cf:13:f7:ea:
30:fd:8f:99:a9:32:5e:bd:e4:2b:81:ab:92:90:b6:0b:62:df:
f2:7f:30:67:5a:8a:98:9f:eb:f7:e9:8e:c2:df:00:02:27:72:
7b:d0:56:66:68:c1:e7:12:5b:bc:62:32:54:6c:bd:31:59:86:
da:f3:23:df:71:97:fb:49:fa:b8:13:93:bc:4e:55:d2:9d:80:
d7:13:c9:c1:28:ca:48:fc:29:cb:df:0d:8a:2a:bd:ff:f6:e9:
a2:a0:56:7c:8a:d3:62:fe:8d:ec:7c:7f:eb:86:8e:47:69:fd:
f0:35:15:af:50:76:db:cf:cf:b9:47:a0:19:77:ce:0f:46:d3:
63:50:92:cb:b4:ea:b8:7f:c8:d7:71:9c:d1:fe:ad:31:e1:ed:
43:14:ed:e5:26:09:5f:85:ea:ad:5a:66:bb:1d:7e:95:39:e8:
9d:55:17:15:ab:ae:f4:ef:02:f9:82:b3:ff:91:a6:fb:8f:00:
06:7a:b5:08:a0:da:86:8c:8b:3f:ba:24:49:9e:34:f3:f2:a4:
5b:8b:c2:fb:f2:ef:12:a7:7a:14:bc:50:57:47:23:08:d6:63:
b8:8d:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:28 2025 by rpki-client