Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier: 4byHTUUSzfdWY+tD+e1aAcALwloMPdpw5cqlFeWrmOo=
Subject key identifier: 41:CF:9E:F3:2C:04:EF:AF:D8:69:EE:FF:59:8A:54:72:88:72:94:83
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial: 019A20640B9455A12E01C9CEBAC7BAA0296E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number: 0B79
Signing time: Sun 26 Oct 2025 12:00:18 +0000
Manifest this update: Sun 26 Oct 2025 12:00:18 +0000
Manifest next update: Mon 27 Oct 2025 12:00:18 +0000
Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: zgH5nn6wGQ/OBGq5cr3QJcPX5Y0n4JVBhswxc46ZEvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:64:0b:94:55:a1:2e:01:c9:ce:ba:c7:ba:a0:29:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Validity
Not Before: Oct 26 12:00:18 2025 GMT
Not After : Oct 27 12:00:18 2025 GMT
Subject: CN=41cf9ef32c04efafd869eeff598a547288729483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:38:3e:aa:df:ce:c2:f2:2f:2d:06:28:08:
d5:21:e1:d7:71:03:09:1a:54:cc:93:bb:8d:1a:b3:
1d:45:68:73:81:23:1f:ee:b4:2f:b4:af:67:45:dd:
b4:a8:dd:ff:6d:07:b3:5d:8f:69:36:98:87:1f:2b:
ca:f7:2c:40:fc:3b:2f:1f:4c:22:88:c4:ac:4e:61:
3d:14:0e:5e:ca:42:c0:d4:a5:17:1f:cc:f0:73:d7:
47:24:21:19:ee:96:f5:4d:a0:22:e5:f0:98:bc:11:
56:12:4d:95:46:6c:3b:11:8e:db:f4:d0:9d:e8:cb:
9c:b1:5d:d2:54:3d:0f:c3:b1:0e:11:c1:ea:ba:31:
bc:bf:05:d0:ec:45:e8:0f:a7:df:70:cd:dc:3c:2f:
04:8f:71:c6:a0:c0:7f:3b:2c:e8:c0:54:e4:34:7d:
7e:72:ef:c2:56:58:72:94:80:14:9e:2d:d5:44:e7:
c0:78:f1:74:6a:6b:ed:46:50:02:c6:c1:7b:15:63:
34:43:b7:ba:8b:7e:f6:0c:57:75:31:5e:43:b5:09:
22:43:d3:e2:60:38:b4:5f:9c:81:98:0a:94:67:6a:
77:b2:e8:3b:8a:52:b8:9d:3c:e4:8e:9c:05:86:d2:
bc:33:fa:0a:5e:b1:33:d1:33:a4:ce:c9:51:7d:aa:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CF:9E:F3:2C:04:EF:AF:D8:69:EE:FF:59:8A:54:72:88:72:94:83
X509v3 Authority Key Identifier:
keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1a:02:f5:78:49:1a:5a:1c:4d:44:ed:3e:f5:a3:dc:1f:6c:
37:ee:8b:79:75:3b:a8:0a:c3:19:21:37:2a:d6:0e:f9:79:d2:
fa:93:a0:d1:9a:13:07:48:41:c8:ba:f7:cf:7b:5f:28:9b:7c:
95:d0:8c:bc:0c:43:66:77:f1:89:a9:33:66:fb:fd:1e:ee:c6:
5a:c8:61:93:54:e9:36:c0:8f:83:49:0e:f8:dc:2c:54:87:a6:
18:61:14:50:cb:1e:23:25:70:9e:8f:99:30:9a:a9:c7:bf:ca:
2b:79:b2:47:65:4a:3a:97:78:13:1d:14:49:3a:71:b6:54:78:
7f:d1:fc:ef:a8:d8:c5:d1:ea:59:51:e0:3d:be:40:9d:76:22:
45:0d:d8:8a:24:21:a9:09:fe:f0:66:0a:96:f9:0c:e3:ad:7c:
92:55:d5:b8:93:6d:51:95:df:2f:ec:fb:f9:68:d6:1d:7c:6a:
29:a4:53:e6:f7:a8:1d:10:44:56:97:00:fe:ad:cd:6e:ac:1e:
e5:f1:14:4f:9d:12:b9:0a:f6:c0:e5:56:bb:0a:58:c7:e9:e7:
bb:c1:34:af:48:f7:9a:0f:f7:b1:3b:1e:d2:b9:09:68:e2:fb:
eb:24:f2:d8:de:6b:35:9c:1b:a2:fb:b5:cf:72:c7:7e:80:16:
2c:4f:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:27:03 2025 by rpki-client