Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier: rpKb327pN1u5BL2TJ2Jr7PKOPGd0Twu/3uz1mbAZjII=
Subject key identifier: 77:26:E3:47:CE:F3:14:C3:D0:45:11:F5:F1:81:C2:A7:DE:14:92:D4
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 019A711334D42F3C4F6AD37E5FE973F833FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number: 06B1
Signing time: Tue 11 Nov 2025 04:01:15 +0000
Manifest this update: Tue 11 Nov 2025 04:01:15 +0000
Manifest next update: Wed 12 Nov 2025 04:01:15 +0000
Files and hashes: 1: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: uKnljfbLwtLqwH5d+4tnpkrjKFbFO8YzJSTKBL2Y27o=)
2: y_KZFLyx6LB5ap_GILmPLg-5ycM.roa (hash: jyTla7fsBC19wAEeiM1utmLy4FEG2TIj9sVLX9ZK0Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:34:d4:2f:3c:4f:6a:d3:7e:5f:e9:73:f8:33:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Nov 11 04:01:15 2025 GMT
Not After : Nov 12 04:01:15 2025 GMT
Subject: CN=7726e347cef314c3d04511f5f181c2a7de1492d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:2b:3b:56:46:90:d7:2c:5c:b1:fb:d2:15:
0e:32:2f:1a:5f:21:53:19:e3:f4:08:09:3a:2c:61:
5b:06:c4:6e:49:ee:54:a3:83:40:04:7d:ac:de:86:
39:47:ff:8d:32:61:37:5f:31:c7:5d:6e:f6:82:94:
79:7b:3b:f3:22:c1:a3:f6:93:c9:eb:ef:23:c0:86:
bd:8c:0a:43:84:5e:c9:73:d5:30:51:81:6d:ac:19:
28:36:55:a2:27:92:6c:1a:e3:c9:9c:03:50:25:51:
bd:69:dc:9b:ab:bd:cd:45:46:97:12:a2:69:0d:00:
76:18:b0:45:c1:0b:9d:e0:67:3b:7d:71:3a:76:b5:
bd:b4:00:a6:bb:55:99:e1:16:ab:08:81:9c:a1:f2:
b7:cf:cc:e7:b8:4f:dd:a1:53:cf:aa:32:fe:3d:fc:
4d:dd:55:b3:af:f0:97:df:5d:d7:38:d5:69:e6:ed:
c8:23:43:2f:65:55:9d:35:76:78:e7:c3:07:36:e4:
05:ab:56:cd:90:ea:db:e8:79:67:4c:da:28:85:2b:
77:e2:48:dc:e4:b4:48:cb:f4:f1:9a:89:8b:93:68:
02:08:2a:b9:04:5a:72:02:9b:76:72:1c:48:a6:67:
93:a8:1b:88:ea:da:76:56:1f:8e:16:22:a3:85:af:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:26:E3:47:CE:F3:14:C3:D0:45:11:F5:F1:81:C2:A7:DE:14:92:D4
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5e:c7:6d:1b:d9:31:a6:e1:91:b9:83:92:45:c0:02:53:d5:
d4:d5:1b:1f:1e:bb:fa:70:0d:d1:49:83:82:ce:8c:e0:0a:cf:
02:2d:42:95:03:6e:a5:af:73:88:89:75:0c:05:f0:30:a3:2b:
4e:1f:6d:56:4a:9b:38:5d:71:f2:78:62:13:bc:ba:30:5d:b0:
21:92:60:0e:ef:dc:61:f0:38:35:37:c4:c4:c3:10:52:f8:8d:
e0:16:70:69:59:1f:ef:43:61:39:66:fe:e9:42:fd:30:02:3b:
6a:ac:f2:ff:3e:11:21:cf:77:61:f1:09:24:5a:a9:80:d0:bb:
7e:91:49:8c:dc:5c:e8:cc:8c:b2:e1:88:17:84:9e:86:88:03:
90:54:d2:6b:52:59:6b:d5:0a:ac:98:47:43:64:db:f2:ab:d4:
c2:c1:58:f2:52:35:1e:95:6a:67:8d:f5:4b:fa:19:c4:52:d0:
f0:71:77:92:64:af:06:9e:90:2a:69:35:c9:e5:ed:74:f3:88:
ed:0c:85:b8:42:a6:1b:29:37:5b:ad:9a:cb:fa:ea:f3:be:8d:
ee:93:07:fd:a4:ee:be:e6:a0:fe:a2:a4:5d:d4:a4:69:03:07:
ed:06:03:aa:9c:1e:a8:55:f2:c8:c1:f7:ac:98:99:db:28:ce:
ab:b9:75:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:37 2025 by rpki-client