
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json)
Hash identifier: 9ZqGnNOFIPN8VynoRbjrIAXtIT7FaZWuFJVkvqVKumY=
Subject key identifier: AA:18:21:A6:22:EB:E6:44:64:8C:F9:FA:C3:BE:08:7F:9D:76:7C:65
Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Certificate serial: 0199FBEB1AB25565134AFD82560838BDBA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
Manifest number: 078C
Signing time: Sun 19 Oct 2025 10:01:52 +0000
Manifest this update: Sun 19 Oct 2025 10:01:52 +0000
Manifest next update: Mon 20 Oct 2025 10:01:52 +0000
Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: 7PJGNLfipie0K/WMxp0L8vna2k/PwxJlORkns4nCVNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1a:b2:55:65:13:4a:fd:82:56:08:38:bd:ba:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Validity
Not Before: Oct 19 10:01:52 2025 GMT
Not After : Oct 20 10:01:52 2025 GMT
Subject: CN=aa1821a622ebe644648cf9fac3be087f9d767c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:21:4a:82:94:a8:5a:85:2d:06:0e:db:e8:
9e:7d:d1:8b:51:8a:8d:c5:65:32:d2:12:29:7d:2b:
b1:f3:1b:2b:38:29:d9:61:e0:ea:01:0f:99:d5:19:
3d:cd:37:85:96:bd:66:a8:29:8c:bb:06:25:46:6d:
61:9b:08:de:e7:0d:b0:18:5a:35:32:91:3f:09:dd:
1e:ff:f5:17:e4:5e:5f:ec:82:ae:0f:2f:26:a4:bb:
b8:93:5c:e7:f5:06:54:86:ba:53:e9:28:7e:5f:b8:
48:2c:5b:d1:d0:ec:a2:9e:fe:82:f1:0a:61:03:20:
ca:76:74:62:f9:77:cb:26:b3:3d:0b:fe:eb:be:f6:
20:69:7f:2c:11:3d:04:2a:af:d4:d3:6a:64:c8:e1:
e2:62:f7:1a:57:4d:e9:2a:37:60:03:56:06:ef:00:
27:8c:d5:e8:f8:60:e1:4f:27:27:e2:56:b2:f7:ef:
04:94:b1:11:b5:8b:ea:fc:bf:98:95:3c:4b:17:ca:
8c:e7:e0:8c:30:e3:79:bf:ae:52:8a:4c:e0:de:2e:
8e:9d:af:78:62:98:9b:4d:27:18:b2:18:11:2c:e2:
2d:ae:75:f4:14:08:e4:f3:3b:f3:1e:01:d3:03:32:
b5:cb:3c:4f:fb:10:21:8e:83:bf:65:50:cb:86:29:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:18:21:A6:22:EB:E6:44:64:8C:F9:FA:C3:BE:08:7F:9D:76:7C:65
X509v3 Authority Key Identifier:
keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:65:a8:1a:e6:db:cd:92:50:d6:a3:9d:7e:19:6b:4f:33:a4:
f2:c5:0e:a4:60:ef:c8:3a:6d:74:a8:a1:94:47:5a:23:3c:d1:
5b:be:e8:41:3f:a0:70:f8:35:55:4a:40:01:21:41:39:81:5d:
d2:0f:a0:18:c6:de:18:0d:b0:0d:2b:99:e5:bb:40:63:82:ec:
7f:6d:74:dd:f9:c0:09:06:ab:e3:46:24:58:7f:ad:77:23:77:
fe:12:68:94:eb:4a:aa:25:c6:17:ac:91:0b:fb:83:eb:2c:35:
7d:d3:33:aa:c7:83:44:93:d5:8f:83:76:4e:4b:ed:f7:45:4f:
57:53:e4:49:76:99:fd:0f:1d:7c:e0:45:36:29:51:31:d6:c3:
e2:76:a9:21:32:2b:ef:6f:71:29:c3:df:a7:ad:30:47:6f:24:
0c:ef:bd:b0:ab:d7:8e:88:97:a2:bc:c4:5a:83:7f:34:cb:0f:
c7:65:d4:2d:b7:81:02:58:19:36:cc:aa:8a:a1:c4:1b:eb:f6:
e0:40:d0:cc:06:61:6a:63:0b:81:00:4f:23:d8:38:91:88:48:
a6:a8:df:63:1a:b3:cd:07:04:91:44:c7:fb:15:46:e4:62:27:
dc:49:dd:09:de:a9:44:65:f7:3b:93:7e:5d:eb:44:a1:c4:83:
4a:5f:ed:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:16 2025 by rpki-client