Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
File: u0WFtGeSNzbELHly4QQvGy4w3GY.mft (raw, json)
Hash identifier: O4zeJwxVTsAKOhMU9D6BejT12TA7Yn1HPgeHocOCLi4=
Subject key identifier: E4:E3:E6:15:53:F2:DE:9D:F9:15:DC:2C:1B:F1:4D:44:61:37:41:2C
Authority key identifier: BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
Certificate issuer: /CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Certificate serial: 0198530EE29823E0493C1559AC183C1D6758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 22:02:21 +0000
Manifest this update: Mon 28 Jul 2025 22:02:21 +0000
Manifest next update: Tue 29 Jul 2025 22:02:21 +0000
Files and hashes: 1: u0WFtGeSNzbELHly4QQvGy4w3GY.crl (hash: eWHs+dxjWw/EQAv/MHh5zwVa6FZe7TjhfpDj6v5DB8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:e2:98:23:e0:49:3c:15:59:ac:18:3c:1d:67:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Validity
Not Before: Jul 28 22:02:21 2025 GMT
Not After : Jul 29 22:02:21 2025 GMT
Subject: CN=e4e3e61553f2de9df915dc2c1bf14d446137412c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2c:61:05:de:ec:57:12:5a:70:84:92:09:73:
ab:5c:9f:d9:c9:46:a6:a8:cd:13:26:df:48:f8:89:
59:19:b5:e5:21:61:6f:db:70:84:a7:e7:13:e3:63:
27:0f:ea:f9:b2:b7:b8:bf:bf:7f:96:ad:45:18:6e:
2a:f6:78:02:9b:9d:a1:0a:79:bf:d9:9c:c8:59:9f:
5a:15:db:0d:d6:4f:b7:8f:f5:a9:d0:5e:5b:3c:e5:
9b:a6:e7:b0:0b:a2:f5:e8:1d:1a:18:40:1a:25:82:
b9:a2:41:3d:8a:15:7d:0f:0e:78:32:5f:1b:b5:90:
a8:5c:df:e4:e4:41:e3:42:fe:63:0d:eb:47:9d:5c:
8c:cc:fb:22:a7:ac:c0:bc:d9:53:7d:80:18:2b:aa:
a1:c7:7d:51:ee:05:1d:78:7d:c7:30:2d:42:8c:08:
79:17:50:3d:71:fd:30:f7:4d:e1:25:63:5a:64:56:
e5:e1:74:f4:06:92:f7:6d:5b:c5:96:61:6d:50:a8:
22:c4:2d:b4:da:ba:44:cc:93:84:9c:e4:7b:b2:a7:
9e:d0:17:6c:ad:44:9b:f6:4f:76:65:d9:6b:93:f6:
63:e1:fd:b9:39:d7:c2:46:28:29:f0:cf:5a:84:7f:
72:f3:88:4a:aa:47:4b:b5:51:e9:98:9d:c8:b6:dc:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E3:E6:15:53:F2:DE:9D:F9:15:DC:2C:1B:F1:4D:44:61:37:41:2C
X509v3 Authority Key Identifier:
keyid:BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:31:ee:6e:9b:f0:5c:1b:3b:31:b1:11:bb:2e:46:89:71:7e:
31:ca:61:55:42:7c:f3:a6:e9:85:78:41:a0:b6:81:28:3f:57:
17:ca:57:74:44:9a:e3:e9:68:4a:1b:cc:31:36:5f:24:ae:e2:
d9:34:3c:98:d4:63:5a:7c:49:1c:65:97:89:66:e6:66:e7:f2:
4c:08:9f:66:3c:06:1b:ff:a3:1d:ba:a3:a1:99:a9:13:01:d0:
6c:be:66:e3:3e:4a:82:26:21:7c:06:5a:8c:92:24:71:b4:76:
d3:9b:42:2d:80:be:b8:2c:18:a4:83:4e:bd:27:23:14:f2:7b:
1f:bb:17:bd:32:7c:bf:eb:2e:77:7a:ed:ce:38:e8:15:28:ac:
bf:0a:de:b2:a6:d6:32:5e:85:26:0b:aa:04:0b:aa:42:a0:ab:
c1:71:7a:10:83:ef:c9:dd:b3:63:93:fa:e4:c9:bd:66:c2:31:
bd:2d:78:f4:e5:35:94:9a:90:49:f5:39:0a:52:bd:97:da:6f:
d3:93:65:c9:f3:1d:05:9d:81:dc:53:08:b6:ba:d3:11:61:9e:
c4:d9:32:76:85:5f:09:78:70:5e:a3:87:c5:85:80:30:cd:e3:
20:de:a7:9b:77:0d:e6:3b:dd:9e:e2:d4:62:f0:4f:76:70:5f:
9e:5d:f5:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDuKYI+BJPBVZrBg8HWdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDU4NWI0Njc5MjM3MzZjNDJjNzk3MmUxMDQyZjFiMmUz
MGRjNjYwHhcNMjUwNzI4MjIwMjIxWhcNMjUwNzI5MjIwMjIxWjAzMTEwLwYDVQQD
EyhlNGUzZTYxNTUzZjJkZTlkZjkxNWRjMmMxYmYxNGQ0NDYxMzc0MTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yxhBd7sVxJacISSCXOrXJ/ZyUam
qM0TJt9I+IlZGbXlIWFv23CEp+cT42MnD+r5sre4v79/lq1FGG4q9ngCm52hCnm/
2ZzIWZ9aFdsN1k+3j/Wp0F5bPOWbpuewC6L16B0aGEAaJYK5okE9ihV9Dw54Ml8b
tZCoXN/k5EHjQv5jDetHnVyMzPsip6zAvNlTfYAYK6qhx31R7gUdeH3HMC1CjAh5
F1A9cf0w903hJWNaZFbl4XT0BpL3bVvFlmFtUKgixC202rpEzJOEnOR7sqee0Bds
rUSb9k92Zdlrk/Zj4f25OdfCRigp8M9ahH9y84hKqkdLtVHpmJ3IttzqnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTj5hVT8t6d+RXcLBvxTURhN0EsMB8GA1UdIwQY
MBaAFLtFhbRnkjc2xCx5cuEELxsuMNxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBXRnRHZVNOemJFTEhseTRRUXZHeTR3M0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9kY2I4NDYtM2ZhMi00NTdmLTg5ODUt
NjYzODEwMWUzMTliLzEvdTBXRnRHZVNOemJFTEhseTRRUXZHeTR3M0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9kY2I4NDYtM2ZhMi00NTdmLTg5ODUtNjYzODEwMWUzMTli
LzEvdTBXRnRHZVNOemJFTEhseTRRUXZHeTR3M0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjHubpvw
XBs7MbERuy5GiXF+McphVUJ886bphXhBoLaBKD9XF8pXdESa4+loShvMMTZfJK7i
2TQ8mNRjWnxJHGWXiWbmZufyTAifZjwGG/+jHbqjoZmpEwHQbL5m4z5KgiYhfAZa
jJIkcbR205tCLYC+uCwYpINOvScjFPJ7H7sXvTJ8v+sud3rtzjjoFSisvwresqbW
Ml6FJguqBAuqQqCrwXF6EIPvyd2zY5P65Mm9ZsIxvS149OU1lJqQSfU5ClK9l9pv
05NlyfMdBZ2B3FMItrrTEWGexNkydoVfCXhwXqOHxYWAMM3jIN6nm3cN5jvdnuLU
YvBPdnBfnl31Ag==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:25:24 2025 by rpki-client