Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier: uMWOEHyqboSQyfJfmTrkBHcyq4yaHlpKeVdVmlM6Lv0=
Subject key identifier: BE:B1:E4:30:AE:EC:0B:94:F0:D3:18:27:BB:E5:D2:F7:C8:40:CF:8A
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial: 019A722669BED3BF3AE2412D778A9A4D91D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number: 0E2D
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: Z8ucfg3nIe11jfojCXOncwVoM3LXeF4Q92/zEemk0pA=)
2: otWydKJIblYoFDAZjlf3bz3XaMM.roa (hash: xwlrdUyrXAa6g8e84xQqVsN9ku3EVyiSX1A/Nu5VNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:69:be:d3:bf:3a:e2:41:2d:77:8a:9a:4d:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=beb1e430aeec0b94f0d31827bbe5d2f7c840cf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:39:10:96:e2:3d:46:65:49:2c:86:75:7c:
7f:6b:63:98:e0:e4:44:df:ee:fa:5e:97:09:ad:53:
89:08:f2:eb:29:74:19:15:00:d3:32:b3:49:2a:94:
2a:84:79:92:50:6e:69:0b:c3:d2:7e:91:80:dc:5e:
42:bf:9c:f4:b3:59:fd:42:b6:14:f1:52:da:16:44:
e6:c3:34:7c:26:84:2c:76:77:c4:2c:6a:5d:c2:de:
77:f3:e2:7e:9a:ff:28:76:ab:c4:1c:59:0f:bc:00:
7b:94:3f:f3:dd:f3:15:d9:bd:bb:b2:09:9f:f2:13:
2f:fa:15:3d:51:78:c8:c0:1d:01:91:77:d4:a6:d5:
ca:98:79:1f:66:37:6e:7f:b1:8d:62:df:75:ae:38:
d5:b0:32:eb:2e:49:62:4e:c7:1b:59:7d:75:5d:d4:
96:23:fd:de:dc:7a:a8:0f:97:ff:68:3e:85:49:ce:
50:bc:c6:91:77:45:23:c8:b3:9a:42:19:31:0f:5b:
f8:4b:8b:64:d8:6c:64:37:e9:9f:15:70:56:ed:d9:
c8:8d:89:77:f0:c7:c1:35:52:92:12:18:ff:b4:ef:
e5:aa:c1:93:d8:4b:04:33:43:b1:39:a9:3a:fd:2d:
f9:34:35:d5:7c:18:cd:56:cd:35:d0:16:17:c3:f2:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:E4:30:AE:EC:0B:94:F0:D3:18:27:BB:E5:D2:F7:C8:40:CF:8A
X509v3 Authority Key Identifier:
keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9a:7b:23:16:13:d9:c2:b4:99:f9:12:2d:87:3d:31:02:d4:
92:3a:98:3e:a0:57:3f:cb:27:61:91:20:93:53:eb:33:85:ca:
d6:29:2d:40:2d:1e:f7:ef:38:7a:b6:53:b4:1f:ab:7a:1f:ce:
ea:a1:f0:10:c3:c3:1b:22:19:31:43:f6:9c:19:bc:90:18:89:
47:f8:5a:4d:23:e5:5d:cb:b1:d6:27:7c:c4:c4:a6:12:32:46:
00:47:5d:65:c2:68:1c:e0:e6:b2:2f:66:2a:3c:aa:1c:c0:e6:
81:44:1a:6f:f7:38:a9:e8:8d:4f:66:a3:06:a6:7c:9e:f7:20:
a4:15:df:3b:ac:9d:ea:a1:70:2b:54:aa:35:2c:40:6b:37:78:
64:10:71:3c:93:cd:5a:ed:48:51:65:af:7a:da:ce:41:db:d2:
30:b9:d8:bb:77:37:a4:fb:00:61:4e:03:9e:89:26:e0:a8:24:
dc:0d:c4:c6:88:0e:df:3a:14:a0:b2:19:d2:bf:d8:d0:73:84:
df:98:19:d2:0a:36:ac:4e:ce:fa:2b:cb:7e:f8:87:a4:ee:da:
02:c5:4c:c1:0a:76:8e:d1:05:af:ff:d6:37:39:9b:17:dc:b7:
93:42:87:7c:55:a2:94:ca:9e:1e:be:f2:de:b0:7a:f4:08:eb:
48:2c:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:36 2025 by rpki-client