Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier: UzkkfHV+H2CIB2PEW5mR+GCjaPCGRBZHE8xwVFJefjI=
Subject key identifier: B5:E0:4F:C6:2E:53:72:44:F7:33:B4:D7:75:38:42:6C:78:14:41:7D
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial: 019A71EEF054F394874545928C20DC9282D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number: 0643
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: 1wkeMw02tS7o9r+vy02lb7Y4rY58jmtKmq5b4oUoL2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f0:54:f3:94:87:45:45:92:8c:20:dc:92:82:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=b5e04fc62e537244f733b4d77538426c7814417d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:1d:39:7b:d2:88:1b:c8:41:e6:da:13:75:
fd:53:7b:8e:a3:76:12:af:e6:f6:83:3d:46:5d:9b:
6a:a8:ae:71:56:90:45:59:4c:bf:1a:54:d8:85:72:
ce:ee:f8:42:34:2c:0c:bf:76:c8:1e:13:db:64:dd:
cf:e8:b5:17:8a:c3:5d:89:bd:c3:9b:23:45:ce:dc:
77:05:5c:cf:e0:da:54:5c:6d:aa:19:f3:bc:ad:5c:
4a:10:a7:3f:f4:bc:91:ee:d3:81:22:96:a8:27:0a:
6a:37:3c:e9:8e:98:00:fb:25:f1:8a:99:70:a8:44:
39:6f:78:c3:af:cc:4e:43:01:e3:84:4e:f9:30:ab:
6d:d6:27:00:30:8b:0b:44:61:30:ae:11:72:7a:be:
e7:17:bb:18:ac:6c:48:ea:07:a4:7e:d3:47:ae:00:
b9:98:69:8a:aa:95:38:9a:8a:e1:6c:9f:00:0b:b1:
67:62:8c:b3:f5:84:a6:19:ba:68:47:e8:2b:2c:16:
ee:0f:3d:e8:51:ad:1c:82:a1:b0:d8:b9:ab:14:04:
cf:a0:f7:b9:1c:93:d3:30:8d:17:1a:63:5a:e8:a3:
92:4d:ed:3c:1e:32:99:b6:0f:94:09:b8:34:5e:63:
5a:cd:fe:40:d2:76:0e:32:09:14:1e:97:01:d7:76:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E0:4F:C6:2E:53:72:44:F7:33:B4:D7:75:38:42:6C:78:14:41:7D
X509v3 Authority Key Identifier:
keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d8:92:80:e9:c8:10:50:ac:38:81:8c:31:d0:2e:92:dd:6c:
22:7a:d6:9e:e6:1e:60:bd:db:c8:a3:56:8e:0f:09:99:9e:65:
a2:4c:54:86:8e:fe:c6:8e:94:fb:10:76:18:0c:2f:4f:72:89:
32:ba:ec:1d:9f:eb:e4:18:77:0b:a1:3b:00:e6:cc:99:61:4a:
dd:7e:28:b6:59:dd:15:c3:92:f1:23:53:4d:90:23:e1:3a:3a:
28:f1:40:c7:35:31:f5:ae:0a:e6:77:72:b0:e5:a5:9a:5d:44:
68:75:46:35:28:20:4e:50:a2:5b:b1:be:e0:91:b3:e1:4c:89:
bc:69:e6:e9:6b:0b:28:cf:70:35:96:b0:83:17:55:1e:c0:ed:
bb:4c:3e:b6:dc:0d:db:73:d9:7e:91:91:55:7c:b2:d7:1a:ca:
0d:04:f8:df:bb:4b:00:5b:aa:96:b4:93:60:71:b0:0f:95:b7:
17:70:d4:6d:da:74:93:3a:2c:ca:a8:b4:18:f8:4a:34:27:2e:
c3:cd:b5:ac:4a:14:3a:5b:b7:64:28:4b:9e:07:28:81:7e:21:
f6:34:ff:08:8e:06:31:a2:45:f0:8e:eb:91:9c:7d:7a:d6:68:
80:d9:90:65:03:63:44:72:19:f1:9b:be:79:56:50:c0:f2:ae:
eb:7e:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:14 2025 by rpki-client