Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
File: u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json)
Hash identifier: AOup9ySaYrNNjtBBMn3yL4uwT2f4W/4qa9/pyaGXASU=
Subject key identifier: 98:23:8F:BB:58:56:0B:D7:7F:60:A9:50:06:3E:74:4F:65:8D:2D:C9
Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
Certificate issuer: /CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Certificate serial: 019A71130BA570CD274AC83C1894D1D897D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
Manifest number: 10C6
Signing time: Tue 11 Nov 2025 04:01:04 +0000
Manifest this update: Tue 11 Nov 2025 04:01:04 +0000
Manifest next update: Wed 12 Nov 2025 04:01:04 +0000
Files and hashes: 1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: dbfP20oZhEeuAkgMCHTm0hVK7dvqYv1qFZeCYU6bLGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0b:a5:70:cd:27:4a:c8:3c:18:94:d1:d8:97:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Validity
Not Before: Nov 11 04:01:04 2025 GMT
Not After : Nov 12 04:01:04 2025 GMT
Subject: CN=98238fbb58560bd77f60a950063e744f658d2dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:77:45:66:d2:89:2b:a5:b5:90:4a:b8:9e:
68:2d:d2:72:a8:d8:71:e0:e2:a1:46:03:b8:f3:0a:
cf:f7:cd:6a:72:6a:b4:70:75:5f:24:e9:f8:b3:33:
83:71:84:17:03:5c:26:0a:da:4e:cc:8b:a2:de:87:
9a:ef:3a:a5:af:b8:dc:ec:15:29:82:8d:12:08:3d:
97:b2:86:6b:c6:f2:f8:84:c2:de:04:aa:58:26:b5:
0b:91:4e:b2:b6:da:e7:88:0a:5e:a5:1a:ef:f4:17:
47:0c:b9:e8:a5:b0:93:69:8a:13:5f:29:ea:1d:71:
00:26:7b:da:2e:7c:c7:6a:e8:bf:b5:ce:d3:f9:5b:
38:c8:70:92:15:0c:d5:45:0c:3d:8c:c7:82:2b:e5:
8a:44:a3:d0:14:87:d3:7c:a8:32:26:28:f9:bc:b9:
cd:74:80:9c:db:a6:44:07:f6:72:a8:43:5a:7a:be:
ff:21:04:52:f7:6e:5d:ae:13:b9:6b:fa:d4:57:ec:
34:64:44:af:41:b6:2b:76:d7:b1:cd:0c:a4:41:c2:
a4:02:d5:82:2e:be:af:2a:f9:a4:97:6e:f1:cc:db:
d2:f5:88:94:c4:5d:ed:db:81:19:45:15:92:eb:a0:
07:5b:a1:5c:d6:ab:f5:82:95:87:56:e1:e1:0d:4d:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:23:8F:BB:58:56:0B:D7:7F:60:A9:50:06:3E:74:4F:65:8D:2D:C9
X509v3 Authority Key Identifier:
keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:27:d8:94:7e:f4:ff:f8:0b:e0:72:79:54:8d:6f:50:2d:4a:
bb:55:fb:55:ee:06:26:85:66:ff:be:cc:60:1b:05:c5:a8:d9:
a8:96:f3:d6:dc:16:e5:e8:d6:a8:f3:56:5d:47:4b:97:44:55:
70:4d:85:7b:3b:a0:8d:d0:82:85:c2:be:6b:10:82:f4:49:46:
31:ea:f3:14:7f:ac:ec:53:c1:4a:8e:89:b8:f9:92:d1:d1:e9:
25:eb:0a:5b:fb:34:b3:a5:21:61:6b:91:c0:f7:d8:fd:92:6e:
86:bb:5e:5d:41:9b:5f:59:d5:f8:65:c7:ac:3d:a4:b4:81:28:
a9:12:f2:f4:70:cf:02:10:d6:23:77:65:38:a9:1e:5d:13:74:
fe:f4:1d:64:98:96:6a:6c:77:d8:8a:0b:db:94:72:e7:0e:55:
22:a4:51:19:31:de:2d:98:72:6f:ed:20:15:31:0b:fc:1f:d9:
ab:d8:73:5a:8d:10:d3:21:14:65:1f:95:73:e0:8b:fe:9c:7b:
b3:39:a2:40:9c:4a:0a:7d:c1:38:7c:77:f7:ca:f3:d3:86:6f:
4b:0d:bc:21:97:99:10:eb:95:98:64:64:4d:e8:54:19:0d:67:
dd:6c:60:66:73:72:0f:d6:3e:1e:41:e5:dc:ba:2c:ca:48:23:
13:cb:60:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:03 2025 by rpki-client