Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier: R4pWuNtax+0FrBT/FJqIKxunW9kfoLujvfjg2e0SWTw=
Subject key identifier: 8E:4E:E0:8F:12:6C:B5:BE:91:54:2F:8B:81:1E:DB:5F:F8:8C:2F:A4
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial: 0199FE100FEFD67B0B7AF48D2EEB4BC2746C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number: 046A
Signing time: Sun 19 Oct 2025 20:01:29 +0000
Manifest this update: Sun 19 Oct 2025 20:01:29 +0000
Manifest next update: Mon 20 Oct 2025 20:01:29 +0000
Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: nysjfwbta3bq68kUc/AzdBZwIuZtPE0L44EwtYQHj+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:0f:ef:d6:7b:0b:7a:f4:8d:2e:eb:4b:c2:74:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Validity
Not Before: Oct 19 20:01:29 2025 GMT
Not After : Oct 20 20:01:29 2025 GMT
Subject: CN=8e4ee08f126cb5be91542f8b811edb5ff88c2fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:80:93:fd:1e:2d:1a:1a:c2:3d:b6:0f:4f:
a8:c3:5a:90:d9:09:4a:21:e7:de:88:f8:94:78:ff:
e0:d8:32:df:11:37:e3:a5:99:50:8d:02:f6:d6:30:
21:af:7f:77:01:a6:4c:14:d1:94:cc:ad:ba:36:14:
50:c3:82:b5:49:cf:6e:f8:17:ea:9e:aa:c0:cf:a9:
77:3e:a9:a1:a9:82:06:c9:77:4b:f8:2d:bf:45:d8:
3b:d7:2f:f6:26:89:7f:77:08:2f:b9:31:d6:49:91:
86:c4:11:c7:63:86:9d:6d:f5:62:e2:eb:5f:0a:d0:
63:ff:65:0e:76:23:8d:62:1d:4c:01:7d:d0:7d:f1:
de:34:c0:2a:a7:c5:d2:da:df:f4:00:6b:6d:30:b6:
03:55:12:f7:56:ec:fe:02:02:ea:d0:fd:35:b8:0c:
37:d2:c5:86:1e:32:14:3e:d0:55:ab:ca:01:41:ef:
9f:4a:0f:ca:f6:67:a7:8f:b4:7e:21:b9:2c:1d:4f:
fb:13:2d:45:ed:74:33:4d:59:7c:3b:5e:8b:92:c0:
cb:53:f1:90:fd:7f:20:03:02:83:cd:87:85:95:af:
5f:a1:01:54:57:79:ae:8e:d7:17:8c:7c:30:40:92:
55:e0:6c:3d:72:16:62:0a:92:24:f1:b9:ab:39:04:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4E:E0:8F:12:6C:B5:BE:91:54:2F:8B:81:1E:DB:5F:F8:8C:2F:A4
X509v3 Authority Key Identifier:
keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:75:c9:e1:e2:cb:85:c8:d3:e7:b9:d3:9f:53:fd:a1:34:12:
8e:b1:9a:c5:ec:f4:67:34:c1:5f:ea:4d:82:1d:5d:eb:6a:6e:
66:6e:c9:41:29:70:6d:6e:d0:6c:8a:05:3b:a8:ae:1e:7d:9f:
07:38:0a:3e:1f:5f:4c:80:a2:97:b9:77:69:aa:4b:76:2b:e6:
59:30:1d:4e:f1:db:11:7b:c6:4d:15:c2:7b:af:e1:8b:ae:7e:
4d:f3:54:8d:56:6c:02:5f:08:06:e7:d2:ff:3b:df:d4:e0:db:
79:e2:a5:dd:b6:e3:c9:0e:13:cb:f6:84:20:d9:9c:92:c6:73:
7b:d1:40:87:e9:10:94:82:07:1e:ba:46:54:bb:70:aa:cd:72:
da:c1:ac:4d:89:ed:06:6f:68:a9:e3:ee:fb:37:4f:d7:de:33:
c4:b5:73:5f:0e:70:5f:3f:40:f0:7f:8b:7b:5a:80:40:25:68:
ce:2e:f1:12:01:29:be:e7:08:69:83:27:7f:14:3d:fa:18:de:
5d:78:7e:0c:4c:ef:3e:29:49:07:65:8c:53:7e:bd:5f:9e:ba:
70:7c:eb:34:6b:ad:94:cb:b6:9b:85:5c:53:d5:d2:3d:5c:af:
5b:44:9d:67:f7:0d:41:19:42:81:da:01:53:1d:83:36:1a:3e:
e3:dc:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:01 2025 by rpki-client