Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: WLXVXLKxXgGnF9qf/M5gym4H/uPsnwawdIgK2W25iNQ=
Subject key identifier: 57:94:44:A8:B8:F5:7A:16:13:44:3C:4B:70:1B:93:CC:78:13:2D:D6
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 019A71EE9870A603CDDDFF999B257807C429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 0BB2
Signing time: Tue 11 Nov 2025 08:00:53 +0000
Manifest this update: Tue 11 Nov 2025 08:00:53 +0000
Manifest next update: Wed 12 Nov 2025 08:00:53 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: 2UuymyPQa49nQV0PZEdMh2sF+7UWPujbkcrYc7PZW7w=)
2: akVfoe2NMwgKKix-I6Nd4k5ngMM.roa (hash: Na2cRAe6jotzXC7LjsbqIgTy4+1+OZSmFcHXYaFK5lY=)
3: uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa (hash: 0pV5mcTfxFzm13bkl5Ni2QZOplGIOcdfnivcOrYLhtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:98:70:a6:03:cd:dd:ff:99:9b:25:78:07:c4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Nov 11 08:00:53 2025 GMT
Not After : Nov 12 08:00:53 2025 GMT
Subject: CN=579444a8b8f57a1613443c4b701b93cc78132dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:ff:d4:a6:d4:b6:2b:7b:d3:e9:76:27:ea:
6e:44:c3:6d:f9:0b:2e:48:4d:ba:ae:12:58:e7:7e:
6b:94:b6:cb:d3:36:3a:4e:8f:02:1e:94:8f:75:1b:
3b:1c:eb:3c:9f:16:ae:8e:3e:54:50:a3:8d:c6:5d:
61:22:a9:41:9a:6e:49:71:97:24:d6:4a:94:4d:d6:
71:4d:7e:fa:e4:22:a8:66:50:50:90:c7:06:b2:29:
57:36:16:75:b3:ab:71:18:29:29:d7:c6:0b:67:b7:
08:28:43:cb:49:97:82:a0:a2:50:f2:2e:fa:6a:fd:
92:6c:9d:10:08:f2:4f:f9:25:73:af:6d:9c:6b:97:
02:20:e1:cd:89:30:91:2b:53:6b:ab:88:a8:78:81:
1c:ad:59:30:b1:47:dc:ef:a9:54:53:5f:51:32:4b:
59:1f:e0:ba:06:22:29:cd:e5:5d:1b:ff:89:00:06:
be:15:4c:21:3e:be:97:a2:11:55:e0:9f:02:bd:42:
ee:7a:2c:89:8d:5f:73:96:0f:ca:f4:97:a4:36:35:
35:74:e4:bd:55:d5:67:d5:74:17:62:97:e7:59:3e:
47:5d:c1:b5:97:bc:e9:4a:dc:b1:97:58:ab:23:f1:
92:2c:01:18:11:fe:c7:ff:43:1e:dc:f2:09:b2:3b:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:44:A8:B8:F5:7A:16:13:44:3C:4B:70:1B:93:CC:78:13:2D:D6
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e1:00:f7:c7:31:f2:ac:08:39:de:38:55:a4:ca:c3:0e:b4:
b9:36:10:0a:38:38:46:1c:a3:c5:df:c8:bf:63:9c:f0:fe:80:
f9:21:a0:9e:c6:b6:31:7c:f9:ed:68:d0:68:dd:5d:b7:c6:d1:
b9:63:fc:d3:df:ec:76:16:bf:9f:b3:d6:59:f0:c5:6e:4e:b4:
9f:07:85:37:ff:85:94:a1:24:56:e1:cd:f3:c4:51:66:36:64:
e3:9b:c3:6e:2e:a9:f0:9e:1d:2c:cb:b2:ac:84:cd:c5:f3:2d:
dd:d2:5c:d6:8c:2b:42:65:47:f5:2c:63:b4:1b:ab:ce:4a:0d:
2c:c5:2e:47:5e:0f:9c:78:ac:67:0c:be:23:f2:32:1e:75:9c:
c4:49:5a:da:2c:3c:12:6a:26:c3:9a:ac:38:81:d9:28:a8:48:
be:45:a9:fd:b6:55:83:e2:f4:0d:86:2d:84:70:ab:a9:25:b8:
41:f8:51:ad:40:a3:9a:bf:56:52:c4:f2:b4:13:e6:b4:2f:54:
59:5a:c2:1c:74:31:bf:3f:63:8f:e0:ce:28:bf:19:2a:6a:0c:
6d:20:af:fa:66:16:80:a1:ab:26:13:93:57:ec:23:ab:66:d0:
d4:f9:11:1c:07:5e:10:d4:95:c3:2a:7a:04:e8:14:41:d9:f6:
ee:1e:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:14 2025 by rpki-client