Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft
File: u-BbYYon9sEO-Zm8ltmqDL0UraU.mft (raw, json)
Hash identifier: RAR09M+cy5Na/nqob0Up9zDL/anCIBHhSFX4N8c2j8I=
Subject key identifier: B8:24:F3:29:61:AB:12:EB:D1:52:AB:09:97:04:11:8C:51:94:5F:2C
Authority key identifier: BB:E0:5B:61:8A:27:F6:C1:0E:F9:99:BC:96:D9:AA:0C:BD:14:AD:A5
Certificate issuer: /CN=bbe05b618a27f6c10ef999bc96d9aa0cbd14ada5
Certificate serial: 019A72935DF0C267023E3F82FA1ADFAE87EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft
Manifest number: 02A1
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: u-BbYYon9sEO-Zm8ltmqDL0UraU.crl (hash: e4vOOVpkX+7E224JUMwoUsLldHig7IWYHsNnO78w/mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5d:f0:c2:67:02:3e:3f:82:fa:1a:df:ae:87:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe05b618a27f6c10ef999bc96d9aa0cbd14ada5
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=b824f32961ab12ebd152ab099704118c51945f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:f7:fe:73:55:da:c9:62:72:c7:17:b7:ea:
21:7c:d0:43:24:12:1a:09:fa:ab:c7:c0:50:6e:6e:
eb:ef:78:56:76:80:da:31:ce:bc:ed:51:60:95:87:
3b:3e:50:ac:55:ed:42:8f:fa:eb:fa:cd:b5:ab:01:
bd:3c:13:8d:31:ca:8c:07:96:d6:ac:ce:c1:12:12:
ac:15:2e:17:df:e0:c5:ca:09:4c:0f:ae:55:e1:8e:
6b:6b:11:80:2c:a8:8d:69:79:e8:a7:da:26:f3:34:
19:bc:1b:6b:f2:0f:62:7e:9c:0c:2c:f9:11:dc:88:
c8:da:7d:bc:5e:04:e1:ba:c9:56:ff:74:e6:dc:ec:
92:ae:b8:3d:95:00:51:6a:8d:c1:6b:98:3c:6b:e8:
c3:da:e8:d6:33:a5:54:b5:33:08:3a:3f:fc:5d:48:
b0:a3:ef:26:0e:15:66:c4:87:ce:18:13:30:f3:a0:
57:19:92:c3:d7:5a:99:cb:cf:39:24:44:8b:8a:2e:
e4:60:86:7d:ce:fa:f8:f4:19:31:e6:ea:30:98:e5:
bf:54:21:64:7d:96:71:5c:aa:63:05:64:80:3d:05:
03:95:5c:a5:c3:18:4d:c3:2e:22:c9:19:6e:c7:0a:
3b:4e:08:7d:5c:66:97:14:44:da:78:11:5c:c4:94:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:24:F3:29:61:AB:12:EB:D1:52:AB:09:97:04:11:8C:51:94:5F:2C
X509v3 Authority Key Identifier:
keyid:BB:E0:5B:61:8A:27:F6:C1:0E:F9:99:BC:96:D9:AA:0C:BD:14:AD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:23:86:b2:1d:8e:88:cc:9f:8a:a9:02:f1:3e:6a:20:75:78:
ef:b3:ad:35:c7:6b:48:61:0f:f9:17:a6:3a:9a:b9:05:dc:57:
95:97:51:7f:10:e4:72:fb:63:1d:b0:e4:dd:52:cb:53:f8:33:
e9:57:04:eb:38:7b:a8:bb:00:25:4b:3d:38:ef:a1:be:c0:76:
d7:8f:d2:24:46:aa:59:fc:77:06:31:4c:60:df:d0:f3:cc:e1:
85:84:b9:fe:3c:fb:41:74:67:da:c6:ce:f8:d7:8b:33:43:fc:
c8:c5:38:f6:a4:90:86:60:d8:cb:73:f7:92:e4:11:0e:c2:25:
89:04:86:87:3d:46:40:43:66:08:a7:86:23:06:1b:45:95:ff:
bd:4d:47:53:02:36:bf:81:16:16:31:95:69:65:1f:22:79:39:
c4:9b:6f:8a:d4:22:29:1c:5b:e6:fe:5c:b7:70:04:a7:4e:2e:
ba:81:8f:45:38:89:6e:12:a4:c1:c6:b9:7c:62:e5:a6:84:41:
5a:0c:f0:05:05:24:63:55:76:9e:3d:02:7c:8b:19:fd:e8:bd:
5f:03:4b:ea:4f:0e:08:4c:06:68:ac:4a:2d:1b:6a:ad:b1:2d:
d9:c0:7b:28:96:ca:d5:71:42:62:7c:9b:12:3a:5a:09:81:36:
70:2b:0d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:21 2025 by rpki-client