Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
File: UZxxlGfHXvlxe8YrftrpALovRiU.mft (raw, json)
Hash identifier: mvFZYu6P4i23X8XVA1CmGfKNZ3HH/zDtEL6uQuRTmI0=
Subject key identifier: DD:8B:6B:AD:96:4B:46:CD:A2:03:19:4B:99:76:C8:F4:CB:14:A1:C4
Authority key identifier: 51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
Certificate issuer: /CN=519c719467c75ef9717bc62b7edae900ba2f4625
Certificate serial: 0198342855981C3F37D89679E08A407648B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
Manifest number: 2C
Signing time: Tue 22 Jul 2025 22:01:55 +0000
Manifest this update: Tue 22 Jul 2025 22:01:55 +0000
Manifest next update: Wed 23 Jul 2025 22:01:55 +0000
Files and hashes: 1: UZxxlGfHXvlxe8YrftrpALovRiU.crl (hash: bOwTmPNheClr9ZEDOrscJ+5OKVsvKBke2KAIdqXWl0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:28:55:98:1c:3f:37:d8:96:79:e0:8a:40:76:48:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519c719467c75ef9717bc62b7edae900ba2f4625
Validity
Not Before: Jul 22 22:01:55 2025 GMT
Not After : Jul 23 22:01:55 2025 GMT
Subject: CN=dd8b6bad964b46cda203194b9976c8f4cb14a1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:04:c3:39:19:29:c5:c5:69:de:ca:8d:67:
f2:e9:f1:bf:2a:75:20:e0:81:f6:49:9f:cb:d1:a8:
10:f8:f1:42:8e:87:e4:26:4b:dc:8e:5c:aa:3f:da:
d7:42:1e:11:99:e4:ae:f9:b8:5e:3c:d7:af:10:dd:
7d:58:5c:bb:04:97:0f:c3:94:18:d3:97:de:85:c5:
87:a9:69:4e:46:fe:46:12:32:dc:23:54:a0:14:6e:
45:14:3b:9b:74:e1:39:66:e4:b5:77:22:60:4e:19:
c2:35:bb:36:58:80:89:47:36:c4:cf:24:b8:17:ce:
fe:6b:41:0b:83:d7:da:84:db:fb:bd:0f:e0:a2:02:
32:60:46:f9:15:8c:86:6b:84:38:c3:c4:d3:36:b0:
4b:27:f7:a7:d7:38:c3:b0:52:c7:b6:00:7b:f4:70:
c4:58:11:5a:a1:0c:97:3d:7d:0d:e2:56:0c:5d:89:
88:16:0d:ad:25:f8:9e:a0:93:68:8c:dd:9f:90:80:
56:6e:8b:c1:10:47:00:7f:19:3c:ae:8e:ba:5e:d3:
cc:3a:6a:f9:b9:09:11:dd:1e:f5:37:a8:45:bf:a2:
ed:ca:5d:72:d3:1a:ff:c9:b9:f0:2f:ac:7c:a8:49:
14:03:a5:ad:06:c3:db:71:d3:d2:81:5e:c8:bc:31:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8B:6B:AD:96:4B:46:CD:A2:03:19:4B:99:76:C8:F4:CB:14:A1:C4
X509v3 Authority Key Identifier:
keyid:51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fe:ff:12:f9:3e:93:11:b0:2b:57:f0:ce:3b:da:55:88:72:
d4:49:f9:b5:5c:24:44:8a:82:30:eb:07:81:54:2b:57:3d:2c:
f3:52:77:04:0e:e3:4a:5a:e0:04:cd:e3:6c:16:26:0d:5c:f2:
0b:a6:fe:e6:7c:5d:3f:ed:05:77:be:bc:b8:9a:d0:3a:80:81:
a4:95:18:07:d6:c6:8e:3d:aa:bb:c2:3f:6c:8b:cc:af:80:52:
61:cf:af:85:57:39:10:93:5b:36:78:d0:8a:38:81:38:ab:4e:
b8:f5:a8:40:c2:b6:c7:0e:e9:34:56:83:47:3d:49:45:a3:32:
78:74:dd:dc:d3:ff:40:3e:d6:4a:5f:31:98:f1:3f:fe:65:89:
5c:c4:9b:e0:23:91:8f:23:53:1a:19:d7:0f:fe:db:aa:df:d5:
ed:66:78:9f:4c:0f:a6:fc:88:e9:80:f0:24:2c:26:1c:a9:48:
a1:7f:7b:78:68:2e:60:e3:61:50:d3:de:e8:f6:e8:de:89:fa:
3b:f2:d9:c2:d9:12:55:e4:89:56:1b:20:52:f9:63:ba:2c:35:
44:0f:62:05:3a:1a:b7:96:63:fb:80:d1:05:bb:34:76:55:84:
16:7c:82:49:ec:ea:d1:f6:87:fb:ae:a2:0e:6d:bf:e7:7a:d8:
c4:a1:25:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg0KFWYHD832JZ54IpAdki4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWM3MTk0NjdjNzVlZjk3MTdiYzYyYjdlZGFlOTAwYmEy
ZjQ2MjUwHhcNMjUwNzIyMjIwMTU1WhcNMjUwNzIzMjIwMTU1WjAzMTEwLwYDVQQD
EyhkZDhiNmJhZDk2NGI0NmNkYTIwMzE5NGI5OTc2YzhmNGNiMTRhMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwscEwzkZKcXFad7KjWfy6fG/KnUg
4IH2SZ/L0agQ+PFCjofkJkvcjlyqP9rXQh4RmeSu+bhePNevEN19WFy7BJcPw5QY
05fehcWHqWlORv5GEjLcI1SgFG5FFDubdOE5ZuS1dyJgThnCNbs2WICJRzbEzyS4
F87+a0ELg9fahNv7vQ/gogIyYEb5FYyGa4Q4w8TTNrBLJ/en1zjDsFLHtgB79HDE
WBFaoQyXPX0N4lYMXYmIFg2tJfieoJNojN2fkIBWbovBEEcAfxk8ro66XtPMOmr5
uQkR3R71N6hFv6Ltyl1y0xr/ybnwL6x8qEkUA6WtBsPbcdPSgV7IvDEppwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2La62WS0bNogMZS5l2yPTLFKHEMB8GA1UdIwQY
MBaAFFGccZRnx175cXvGK37a6QC6L0YlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVp4eGxHZkhYdmx4ZThZcmZ0cnBBTG92UmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lZDIwOWQtMzdkNi00NWU0LTllZTEt
ZTY3ZTc3NTlmOWEwLzEvVVp4eGxHZkhYdmx4ZThZcmZ0cnBBTG92UmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lZDIwOWQtMzdkNi00NWU0LTllZTEtZTY3ZTc3NTlmOWEw
LzEvVVp4eGxHZkhYdmx4ZThZcmZ0cnBBTG92UmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkv7/Evk+
kxGwK1fwzjvaVYhy1En5tVwkRIqCMOsHgVQrVz0s81J3BA7jSlrgBM3jbBYmDVzy
C6b+5nxdP+0Fd768uJrQOoCBpJUYB9bGjj2qu8I/bIvMr4BSYc+vhVc5EJNbNnjQ
ijiBOKtOuPWoQMK2xw7pNFaDRz1JRaMyeHTd3NP/QD7WSl8xmPE//mWJXMSb4COR
jyNTGhnXD/7bqt/V7WZ4n0wPpvyI6YDwJCwmHKlIoX97eGguYONhUNPe6Pbo3on6
O/LZwtkSVeSJVhsgUvljuiw1RA9iBToat5Zj+4DRBbs0dlWEFnyCSezq0faH+66i
Dm2/53rYxKEl7Q==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:19:23 2025 by rpki-client