Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
File: Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft (raw, json)
Hash identifier: zD8J40cD0xh9ZUaaKOSZNqxDBxU1GmoLPR+R4XmwKfo=
Subject key identifier: AB:C9:FB:68:12:D5:5D:41:71:5B:44:79:69:90:8E:DE:5E:C8:D8:1D
Authority key identifier: 51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D
Certificate issuer: /CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
Certificate serial: 019A725C991981C4E22AAC23FA06FB1BE7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
Manifest number: 09DC
Signing time: Tue 11 Nov 2025 10:01:02 +0000
Manifest this update: Tue 11 Nov 2025 10:01:02 +0000
Manifest next update: Wed 12 Nov 2025 10:01:02 +0000
Files and hashes: 1: Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl (hash: AfpklYVfWKtolRfqlV3U5qXDLQ/YFiTY2TkCCExLnEA=)
2: prCxRzdOKVY3koTOxcE1wLy92wY.roa (hash: /SPXT+MGYRPaGYNF9H/7HrgrHhVyCw6xaZxVFgwwJJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:99:19:81:c4:e2:2a:ac:23:fa:06:fb:1b:e7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
Validity
Not Before: Nov 11 10:01:02 2025 GMT
Not After : Nov 12 10:01:02 2025 GMT
Subject: CN=abc9fb6812d55d41715b447969908ede5ec8d81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:75:b9:11:f9:f2:98:11:09:96:c4:1a:0d:
6a:81:74:a9:28:78:e5:dd:04:db:54:e7:6c:3e:6e:
85:9a:d8:5b:fd:ff:e1:e5:bb:42:a7:e9:69:20:2a:
ea:bd:df:9b:83:06:ba:25:46:a8:dd:53:69:d4:c1:
b6:14:01:99:b4:4b:a9:10:e7:60:8f:5e:8d:af:9d:
77:29:ed:71:3b:07:9d:c0:d8:6b:b4:d2:14:d6:8d:
af:4a:45:14:d1:06:44:76:80:22:48:62:28:d4:81:
0d:51:47:ce:ac:7f:87:0c:dc:13:03:6e:5a:e2:42:
88:5a:ab:0b:63:8d:b0:b7:f3:61:dd:0a:39:7e:36:
d0:29:06:78:31:a8:e9:f6:ff:50:d3:e5:c1:31:25:
44:23:cf:09:06:29:ae:cc:01:6d:27:27:54:74:f5:
69:7d:4e:c8:93:7f:de:da:d5:c3:1e:05:3d:6b:ed:
f7:ee:f8:c2:c7:98:67:b3:b1:23:29:89:c8:4f:0b:
ee:5c:6b:75:57:25:b7:55:5a:26:1a:2c:d2:70:17:
7a:4f:88:e5:e1:c8:bc:ce:a8:d2:52:5e:83:2a:82:
b8:3e:7b:5a:8b:f5:d2:41:3d:ef:95:e3:31:e8:83:
bb:73:f5:51:a7:3c:81:23:3d:24:74:b4:66:5c:0e:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C9:FB:68:12:D5:5D:41:71:5B:44:79:69:90:8E:DE:5E:C8:D8:1D
X509v3 Authority Key Identifier:
keyid:51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:60:bc:1a:0a:51:d8:1a:e5:2a:76:2d:a5:de:25:85:8e:fd:
43:fa:e0:6d:6c:79:de:6c:11:1e:90:b2:d7:7c:1c:af:f3:2e:
8d:79:5c:1b:fe:89:32:25:ec:41:a0:c2:77:a8:18:cf:0f:cf:
0e:93:b6:3c:f9:a9:c7:9b:65:06:eb:f9:b3:57:b0:43:68:d0:
c6:94:2a:bb:fd:0b:fa:0b:cd:a6:cf:95:16:59:ef:ec:66:4c:
e9:1e:37:86:94:22:d2:0e:23:4c:53:26:c9:9f:5e:12:82:5f:
15:15:65:7d:52:3b:98:59:d4:c0:af:7a:c9:88:9f:80:c7:49:
e3:46:ec:d0:cd:07:67:8c:ab:75:bd:58:22:46:e0:cf:06:5c:
ee:e6:8d:65:48:0a:9d:a2:26:b4:45:f6:10:8a:09:8d:89:4e:
b2:c7:cd:03:06:fe:f8:e6:af:5f:6c:9b:38:9f:d9:b9:c2:e8:
47:56:4a:81:92:c6:27:6e:67:43:5d:27:0a:da:8c:1f:ba:0b:
28:ac:f1:0c:de:04:4a:6c:52:6e:12:01:de:13:89:44:0e:0a:
1f:d3:4f:16:c0:78:ba:94:bf:20:80:ca:f4:04:d8:57:1b:05:
94:94:d7:e7:f4:5f:1e:a7:d8:de:40:16:15:b2:a1:de:76:e2:
d1:d0:b3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:03:34 2025 by rpki-client