Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
File: uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft (raw, json)
Hash identifier: qxFH/6RnkhbD0+M5Y+j3sh9Rlg5F4mYmoIKeP9wFRg8=
Subject key identifier: B0:24:B6:22:ED:51:A3:A0:6F:70:C7:E0:67:30:E6:6B:29:47:CC:2C
Authority key identifier: BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
Certificate issuer: /CN=bb24311c1ec0673c50497924c202a13d212659b6
Certificate serial: 019A72CA63C60FDCEA2844B9379EB79A66BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
Manifest number: 0657
Signing time: Tue 11 Nov 2025 12:00:57 +0000
Manifest this update: Tue 11 Nov 2025 12:00:57 +0000
Manifest next update: Wed 12 Nov 2025 12:00:57 +0000
Files and hashes: 1: uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl (hash: XulwOvGqGs0SUKXNbnCfZUlhG2LMZRCV6d6QRE1e4KM=)
2: v258OvpTjeTGa9nj7XVSV8d0bA0.roa (hash: zeqjbwUFGVgiPWTdMolQ6HqxRrkUBi59wIsSlb2gw2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:63:c6:0f:dc:ea:28:44:b9:37:9e:b7:9a:66:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb24311c1ec0673c50497924c202a13d212659b6
Validity
Not Before: Nov 11 12:00:57 2025 GMT
Not After : Nov 12 12:00:57 2025 GMT
Subject: CN=b024b622ed51a3a06f70c7e06730e66b2947cc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2b:b7:0a:19:76:75:1e:72:28:a9:07:45:dd:
1a:39:6d:25:2f:f4:91:94:6b:cd:b6:84:a6:4d:f4:
e1:19:f2:3c:d2:27:be:c9:5e:97:42:68:45:a5:bd:
67:e3:d5:4f:42:c7:47:70:b5:d2:49:90:0a:30:4a:
1e:6f:a8:f0:04:44:56:f6:2c:f3:e7:72:cb:4a:5d:
e1:0d:a2:b5:8d:5f:da:34:ac:e0:c3:4b:2c:59:5d:
17:59:e3:59:20:ed:61:ae:f4:27:3c:e9:80:4f:8f:
12:52:5c:92:e0:a0:d6:ac:b7:33:ef:7e:cc:82:ee:
33:53:e1:c5:0c:79:f0:f6:2e:5a:1f:74:97:a9:fa:
bf:cd:f8:a4:8e:60:86:ad:b3:2e:a5:8a:8a:5b:03:
7e:54:24:55:06:78:b7:be:30:f8:ab:d5:8a:0a:e5:
e7:44:73:81:3e:f6:fd:a7:7f:1c:3a:0a:84:be:fb:
ce:e5:56:39:12:68:aa:86:0f:64:cc:13:55:f5:f9:
1d:57:0e:a1:f1:9c:89:62:d1:ba:c8:bc:e1:3e:08:
3a:fd:24:a0:3d:e3:b2:6a:d5:9a:ed:ad:e8:db:52:
a2:02:ee:d6:33:77:7d:92:cb:15:81:dd:31:3d:b7:
ce:03:e2:f9:fa:9f:cd:21:53:5a:06:bb:0c:72:b8:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:24:B6:22:ED:51:A3:A0:6F:70:C7:E0:67:30:E6:6B:29:47:CC:2C
X509v3 Authority Key Identifier:
keyid:BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:62:94:e2:6e:e9:2d:18:61:74:e5:ff:3f:3d:92:3a:d8:7b:
dd:62:3d:c3:83:b9:5e:bd:25:53:50:df:f2:39:63:26:4b:d1:
1b:87:90:d7:f2:e9:d8:25:cb:34:13:fc:55:11:d6:a0:c8:c1:
33:a3:e3:e4:ce:43:f0:bc:dd:57:08:bc:f7:45:74:77:cd:ee:
01:5d:f7:5f:91:e2:b4:74:52:81:93:58:03:18:28:dc:ac:7e:
f6:bb:24:c3:63:79:ee:36:7f:de:90:f3:36:31:c1:ab:15:3b:
ee:04:8e:da:95:f5:06:6a:10:3e:ed:a2:44:39:ad:ba:1f:2e:
0c:5f:ca:b0:be:a8:1c:c2:4c:1e:67:71:b4:c3:36:ba:ae:b6:
b3:b7:c3:75:da:7d:90:7b:82:65:bb:46:05:92:b1:a7:68:a7:
8f:9f:0f:b9:14:60:74:4c:4d:06:3d:43:9f:c9:b2:56:be:95:
92:57:7e:f6:db:cd:34:0b:c7:5a:6f:48:c6:50:56:db:61:f4:
11:ea:e3:15:8a:01:d5:62:e6:12:1e:6e:53:55:30:18:6e:58:
d7:f3:26:8e:7f:1c:67:9f:b0:45:03:92:b6:c2:71:0d:f2:24:
c7:5e:05:d3:b2:4c:40:98:1d:c2:62:7c:69:1c:7a:6e:af:86:
4a:a3:75:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:34:20 2025 by rpki-client