Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
File: uEDbhrmLXLMnCkjPf6AjyHrKucU.mft (raw, json)
Hash identifier: S+KSr1IFsgjVGOb0ARCFrOW+wWeI0EEKeTnrmOtBswQ=
Subject key identifier: CB:8E:1D:B3:F0:9E:0D:D6:A8:A8:4D:29:19:33:8F:AD:7B:70:6E:6E
Authority key identifier: B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5
Certificate issuer: /CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5
Certificate serial: 019A72CA7819EF5762F3412E7E189D15B55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
Manifest number: 06B7
Signing time: Tue 11 Nov 2025 12:01:02 +0000
Manifest this update: Tue 11 Nov 2025 12:01:02 +0000
Manifest next update: Wed 12 Nov 2025 12:01:02 +0000
Files and hashes: 1: FxFAHCh-xR5SmE47a0ARTd4GkRw.roa (hash: slz/fDlVOpfItIULaAZ74wfhbWz9EKShd3tsnurJfb0=)
2: uEDbhrmLXLMnCkjPf6AjyHrKucU.crl (hash: Iv57tyGFoRrewlHVTwYkHgxGen+huCZORGnaU4S0iHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:78:19:ef:57:62:f3:41:2e:7e:18:9d:15:b5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5
Validity
Not Before: Nov 11 12:01:02 2025 GMT
Not After : Nov 12 12:01:02 2025 GMT
Subject: CN=cb8e1db3f09e0dd6a8a84d2919338fad7b706e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:19:51:75:bb:06:66:1a:f3:7b:82:2c:1c:
7d:90:ab:5b:64:4a:55:59:b7:0a:6a:67:b7:cc:cb:
8f:ee:c8:87:f2:4b:0e:0a:73:76:79:48:28:3b:6d:
3a:f7:39:82:fe:4c:59:83:5c:88:d8:c3:79:c6:98:
75:f0:1d:76:24:16:96:25:1c:db:84:54:83:c3:7b:
33:bb:e0:e7:ae:77:f1:57:b0:31:b0:ad:94:a7:d5:
d3:d0:af:a7:6c:19:21:14:14:fd:6d:34:2b:4a:b8:
4c:c3:64:d3:dc:d6:0a:89:37:e0:4f:bb:ac:35:d1:
e6:77:de:fe:71:dd:4e:92:a5:68:49:43:2d:72:eb:
cd:67:32:90:52:e1:80:6c:16:d2:40:f9:c5:5b:5f:
7c:69:16:43:cc:a9:7e:c5:18:8d:8d:a5:7e:87:87:
b6:53:1c:3c:28:76:ee:83:10:ba:4a:64:26:7f:e6:
e5:08:05:90:c8:b1:e1:b2:0d:90:2b:4f:29:e7:c1:
13:2d:6a:88:31:f6:74:48:9b:52:40:19:f2:6f:02:
60:ce:a7:46:00:db:3f:0a:b8:6a:7e:63:b9:0a:17:
40:c7:e4:ae:84:5c:8c:ea:6e:2c:5d:75:fc:ca:8d:
c1:ef:94:53:b3:63:dc:ac:0c:89:08:a1:cd:48:63:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8E:1D:B3:F0:9E:0D:D6:A8:A8:4D:29:19:33:8F:AD:7B:70:6E:6E
X509v3 Authority Key Identifier:
keyid:B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a3:2f:98:c4:b3:d4:34:95:c3:0b:29:7a:c1:a6:90:ba:f7:
19:ee:d8:f1:a8:c8:7b:1a:36:23:58:bd:3e:ee:dc:f4:c8:d7:
2e:d7:6d:bf:ff:cf:63:35:8b:77:4a:e5:e2:e1:b8:0b:d5:a0:
38:e4:af:39:0a:79:25:37:70:5c:f3:a0:26:31:50:db:1d:0f:
8d:ae:d6:3c:9d:de:ee:84:7b:78:80:8c:6a:9e:87:b8:4d:a8:
14:f8:a7:96:ad:58:04:a9:fd:94:c8:43:90:0e:1d:f4:cf:cf:
c5:d5:43:36:22:23:5d:28:6c:d9:ad:10:f3:0b:a8:d0:93:24:
bc:33:02:98:ea:0a:61:bd:21:f0:6e:bd:99:88:97:0c:b2:b0:
f3:75:e3:5f:a7:51:35:65:d3:dd:b4:66:ee:0c:ff:a2:07:4c:
44:3f:30:7f:70:90:22:f8:d2:b4:d3:85:fb:5f:17:10:9b:44:
1d:9c:6c:9f:e4:c9:44:07:36:cc:85:a3:70:cc:39:43:ef:53:
c0:84:2b:16:1b:a4:11:d7:5a:38:c9:d4:a7:06:d8:77:bf:64:
c4:4c:90:53:bc:4a:51:ce:b9:eb:47:c8:25:3e:41:c2:de:fe:
ec:82:1e:bd:68:ce:c5:60:ae:1a:2e:1d:66:d6:d1:d5:93:52:
b2:ba:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:50 2025 by rpki-client