Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
File: uU8woHaUohE5ZIclom6zTOSha6s.mft (raw, json)
Hash identifier: LX0hFCMKNoTtwweOVV3k+EAG+eiQJmMBbSxFpd+zoRI=
Subject key identifier: E5:C1:BE:72:3C:9A:D8:DD:7A:2A:6A:F1:4E:9A:8F:6D:95:C1:3B:3F
Authority key identifier: B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
Certificate issuer: /CN=b94f30a07694a21139648725a26eb34ce4a16bab
Certificate serial: 01984A41119A216F75550B1535F187156599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
Manifest number: 0295
Signing time: Sun 27 Jul 2025 05:00:34 +0000
Manifest this update: Sun 27 Jul 2025 05:00:34 +0000
Manifest next update: Mon 28 Jul 2025 05:00:34 +0000
Files and hashes: 1: uU8woHaUohE5ZIclom6zTOSha6s.crl (hash: bWrqSNijQnKZG1KbNzU+i40rQSt4idunUO9HpnisROo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:11:9a:21:6f:75:55:0b:15:35:f1:87:15:65:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94f30a07694a21139648725a26eb34ce4a16bab
Validity
Not Before: Jul 27 05:00:34 2025 GMT
Not After : Jul 28 05:00:34 2025 GMT
Subject: CN=e5c1be723c9ad8dd7a2a6af14e9a8f6d95c13b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:68:0c:fd:7f:e9:88:14:ab:65:d4:d2:3c:
fe:f9:0c:2c:e1:85:16:c3:c9:04:94:88:fb:25:64:
20:ff:ef:c5:60:6b:06:c1:bb:6a:e5:3b:a8:f1:d2:
64:f7:21:e7:54:ce:d1:4f:45:eb:2e:84:4e:b8:e8:
96:75:de:12:d0:88:cb:7e:d6:9a:3a:f8:21:9c:40:
6c:38:a3:28:1c:70:63:34:52:a7:b2:37:ea:c1:8d:
7d:c5:15:56:a0:d4:9c:d7:d8:d5:d1:da:e1:82:8f:
6e:d2:24:d0:02:30:23:30:bd:36:0b:e5:86:80:f9:
ce:82:4d:dc:3c:67:4a:3e:5a:78:ef:a8:4e:7d:c6:
66:02:d3:67:54:70:13:cf:3e:34:5c:fe:2d:5d:19:
5c:c8:71:7d:8f:13:77:56:63:ec:08:bf:65:a5:9e:
02:fa:59:c7:0b:1a:c5:6f:77:65:41:de:c1:e6:9b:
cf:df:ad:84:24:55:d9:41:5d:61:63:1a:8c:22:52:
d0:d3:27:ed:54:cc:52:dd:02:c1:3f:5b:c1:69:4c:
77:48:5b:ed:99:7d:d7:3b:48:05:83:c2:78:0b:e6:
fe:5a:d8:87:ee:67:f9:35:bc:c2:99:e3:21:7c:20:
35:79:4d:61:88:29:2e:3e:4b:b7:83:18:34:82:72:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C1:BE:72:3C:9A:D8:DD:7A:2A:6A:F1:4E:9A:8F:6D:95:C1:3B:3F
X509v3 Authority Key Identifier:
keyid:B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:13:71:5c:61:f2:6f:42:b4:76:93:f9:e6:da:19:16:67:eb:
2a:29:b1:a6:f6:94:65:fd:c4:1a:9b:55:14:4b:62:74:4d:fa:
aa:2b:6e:47:e0:dd:8d:5e:35:ac:42:da:e2:16:a9:14:e9:94:
dc:1e:f6:b4:0c:94:8e:fd:1e:b1:1c:8a:3b:87:df:c9:1f:8d:
7c:59:e0:78:4c:31:84:28:a1:c0:25:19:24:bb:57:d7:49:f5:
ba:10:2e:d2:d4:f3:d2:e6:bc:b7:b3:77:37:88:0f:07:8d:c4:
51:9f:53:4a:15:e9:ab:cd:b9:eb:15:5d:3f:e1:52:50:ac:2b:
95:4f:74:95:b4:0d:81:a8:43:38:74:4c:1d:1f:2b:4a:32:e1:
e4:4f:13:98:51:e0:62:65:e1:95:30:27:eb:aa:e5:1c:7a:fb:
f6:dd:fd:24:e9:a1:bb:58:9a:3a:32:25:28:81:a2:19:f5:0a:
c7:17:e3:8d:ba:0c:98:42:89:d3:14:ed:13:5d:61:a0:9f:74:
e2:a4:0d:98:3d:33:b8:32:b5:b4:26:5f:03:d5:e5:f3:a4:34:
12:90:b0:f5:a4:53:5f:e3:97:2d:e4:eb:43:38:ea:1e:a2:0b:
06:5f:3a:8e:a1:fe:fd:37:86:f7:0e:c0:a6:91:20:4d:63:92:
3b:b8:ab:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQRGaIW91VQsVNfGHFWWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NGYzMGEwNzY5NGEyMTEzOTY0ODcyNWEyNmViMzRjZTRh
MTZiYWIwHhcNMjUwNzI3MDUwMDM0WhcNMjUwNzI4MDUwMDM0WjAzMTEwLwYDVQQD
EyhlNWMxYmU3MjNjOWFkOGRkN2EyYTZhZjE0ZTlhOGY2ZDk1YzEzYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMtoDP1/6YgUq2XU0jz++Qws4YUW
w8kElIj7JWQg/+/FYGsGwbtq5Tuo8dJk9yHnVM7RT0XrLoROuOiWdd4S0IjLftaa
OvghnEBsOKMoHHBjNFKnsjfqwY19xRVWoNSc19jV0drhgo9u0iTQAjAjML02C+WG
gPnOgk3cPGdKPlp476hOfcZmAtNnVHATzz40XP4tXRlcyHF9jxN3VmPsCL9lpZ4C
+lnHCxrFb3dlQd7B5pvP362EJFXZQV1hYxqMIlLQ0yftVMxS3QLBP1vBaUx3SFvt
mX3XO0gFg8J4C+b+WtiH7mf5NbzCmeMhfCA1eU1hiCkuPku3gxg0gnL9bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXBvnI8mtjdeipq8U6aj22VwTs/MB8GA1UdIwQY
MBaAFLlPMKB2lKIROWSHJaJus0zkoWurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVU4d29IYVVvaEU1WkljbG9tNnpUT1NoYTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mNzZjMjEtOTljMy00ZjlhLThiNDIt
NzdhMzgzNWQ0ZmJiLzEvdVU4d29IYVVvaEU1WkljbG9tNnpUT1NoYTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9mNzZjMjEtOTljMy00ZjlhLThiNDItNzdhMzgzNWQ0ZmJi
LzEvdVU4d29IYVVvaEU1WkljbG9tNnpUT1NoYTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRNxXGHy
b0K0dpP55toZFmfrKimxpvaUZf3EGptVFEtidE36qituR+DdjV41rELa4hapFOmU
3B72tAyUjv0esRyKO4ffyR+NfFngeEwxhCihwCUZJLtX10n1uhAu0tTz0ua8t7N3
N4gPB43EUZ9TShXpq8256xVdP+FSUKwrlU90lbQNgahDOHRMHR8rSjLh5E8TmFHg
YmXhlTAn66rlHHr79t39JOmhu1iaOjIlKIGiGfUKxxfjjboMmEKJ0xTtE11hoJ90
4qQNmD0zuDK1tCZfA9Xl86Q0EpCw9aRTX+OXLeTrQzjqHqILBl86jqH+/TeG9w7A
ppEgTWOSO7irmg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:35:21 2025 by rpki-client