Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
File: uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft (raw, json)
Hash identifier: N1XDsYY2y1/2Wif7F36QqICasHQYOCiXtmetTqH2tcc=
Subject key identifier: 5E:38:8D:0A:5D:8C:6B:39:71:68:59:D0:4E:E7:5D:B5:67:9E:76:D0
Authority key identifier: BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
Certificate issuer: /CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Certificate serial: 0198469B019E7C35CB4C731A6E081C4355E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
Manifest number: 0581
Signing time: Sat 26 Jul 2025 12:00:20 +0000
Manifest this update: Sat 26 Jul 2025 12:00:20 +0000
Manifest next update: Sun 27 Jul 2025 12:00:20 +0000
Files and hashes: 1: uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl (hash: PmjG4b447vZ/OzkE4K104GwNPdF/dznhK6yUuyBSbkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:01:9e:7c:35:cb:4c:73:1a:6e:08:1c:43:55:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Validity
Not Before: Jul 26 12:00:20 2025 GMT
Not After : Jul 27 12:00:20 2025 GMT
Subject: CN=5e388d0a5d8c6b39716859d04ee75db5679e76d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:0e:52:af:88:45:ab:69:ec:20:72:bb:0b:
81:50:5d:d7:67:32:4d:ef:e2:03:ab:ce:1d:8d:0a:
6e:25:99:8e:44:61:cc:45:25:0e:83:60:10:0a:2d:
a8:17:95:96:29:0e:c2:17:69:f2:e5:68:da:d2:a9:
f8:08:3f:5b:e8:8e:b0:c4:f7:3c:cc:70:57:36:29:
8d:ca:f7:78:c4:f8:ff:28:0b:94:88:ba:4d:24:06:
f7:61:bd:d0:ba:16:e5:fd:c6:5e:4c:61:b6:80:c0:
9b:31:bd:c2:b1:91:10:de:ef:e3:26:dc:b2:b7:f2:
97:54:9c:f9:c8:bb:7d:64:b4:17:27:db:c7:a8:99:
65:78:fd:77:63:25:2e:21:97:83:f7:54:a2:b1:b3:
c6:46:62:42:0e:59:35:93:f7:29:7f:54:a9:01:ec:
d4:33:dd:e2:ed:fd:06:1d:31:64:1d:68:c5:12:e8:
1b:26:4e:91:28:09:6a:68:3e:69:fd:aa:14:5e:4f:
84:ea:6a:10:a3:0d:1e:55:4b:d2:e5:c2:00:3d:42:
66:cc:64:08:9e:9c:32:68:05:6f:7c:05:12:36:b6:
0a:2f:4c:82:23:df:44:54:96:96:63:f9:08:6a:3f:
21:4c:8c:2f:1c:a8:a1:6a:d2:b1:5b:ed:06:d3:1e:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:38:8D:0A:5D:8C:6B:39:71:68:59:D0:4E:E7:5D:B5:67:9E:76:D0
X509v3 Authority Key Identifier:
keyid:BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:44:f3:cb:d3:c0:c3:e7:f0:c2:11:e6:f9:95:d1:d2:f3:04:
9f:a7:c9:f5:94:66:1c:bf:ec:24:51:e2:fd:2c:79:c2:64:64:
92:40:29:2d:43:f7:48:30:a3:ee:9f:c5:8e:bd:b7:82:23:f0:
ee:a8:9c:46:49:93:91:4b:91:41:9e:ed:b3:32:8e:cf:ba:61:
c7:c7:06:a2:de:cd:05:dc:a0:f2:59:58:12:ab:6d:3b:b7:36:
69:f3:38:c9:3f:d4:71:08:55:b8:72:b9:33:81:33:78:44:d5:
6c:eb:74:bf:f7:2a:db:87:b8:f3:13:c4:f4:34:12:22:a9:57:
f1:2e:59:07:80:f7:44:a7:28:04:71:a0:32:6f:29:fd:4e:4e:
50:a7:61:5b:b3:22:77:5e:f9:0a:14:57:52:91:6a:bc:7d:c2:
34:cb:54:11:ae:c8:ee:2b:4c:fa:2a:dc:ff:d6:5b:b0:47:dc:
db:6f:e3:49:f5:a4:8e:6a:07:0b:fa:0f:65:a1:59:64:4c:1c:
1a:f6:5f:65:5d:67:2c:7e:95:06:10:b4:55:40:ac:85:7c:1e:
ed:a1:76:20:5e:67:1f:76:36:94:28:b6:f1:31:6e:e2:ec:f5:
67:23:91:01:e0:a7:d5:73:33:b1:f9:f4:2c:52:a8:82:b6:a8:
32:2b:f3:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGmwGefDXLTHMabggcQ1XmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWY2YzA4YmNhMzA4YzFjNzhiMGVlZDhlZjMwYjRhMDQ2
ODExOGUwHhcNMjUwNzI2MTIwMDIwWhcNMjUwNzI3MTIwMDIwWjAzMTEwLwYDVQQD
Eyg1ZTM4OGQwYTVkOGM2YjM5NzE2ODU5ZDA0ZWU3NWRiNTY3OWU3NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprwOUq+IRatp7CByuwuBUF3XZzJN
7+IDq84djQpuJZmORGHMRSUOg2AQCi2oF5WWKQ7CF2ny5Wja0qn4CD9b6I6wxPc8
zHBXNimNyvd4xPj/KAuUiLpNJAb3Yb3Quhbl/cZeTGG2gMCbMb3CsZEQ3u/jJtyy
t/KXVJz5yLt9ZLQXJ9vHqJlleP13YyUuIZeD91SisbPGRmJCDlk1k/cpf1SpAezU
M93i7f0GHTFkHWjFEugbJk6RKAlqaD5p/aoUXk+E6moQow0eVUvS5cIAPUJmzGQI
npwyaAVvfAUSNrYKL0yCI99EVJaWY/kIaj8hTIwvHKihatKxW+0G0x5G9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF44jQpdjGs5cWhZ0E7nXbVnnnbQMB8GA1UdIwQY
MBaAFLqvbAi8owjBx4sO7Y7zC0oEaBGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXE5c0NMeWpDTUhIaXc3dGp2TUxTZ1JvRVk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80YWE1NzAtNTVmZS00Yjk0LWJjNTkt
YjQ5OTNiMjMyZTZjLzEvdXE5c0NMeWpDTUhIaXc3dGp2TUxTZ1JvRVk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80YWE1NzAtNTVmZS00Yjk0LWJjNTktYjQ5OTNiMjMyZTZj
LzEvdXE5c0NMeWpDTUhIaXc3dGp2TUxTZ1JvRVk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0Tzy9PA
w+fwwhHm+ZXR0vMEn6fJ9ZRmHL/sJFHi/Sx5wmRkkkApLUP3SDCj7p/Fjr23giPw
7qicRkmTkUuRQZ7tszKOz7phx8cGot7NBdyg8llYEqttO7c2afM4yT/UcQhVuHK5
M4EzeETVbOt0v/cq24e48xPE9DQSIqlX8S5ZB4D3RKcoBHGgMm8p/U5OUKdhW7Mi
d175ChRXUpFqvH3CNMtUEa7I7itM+irc/9ZbsEfc22/jSfWkjmoHC/oPZaFZZEwc
GvZfZV1nLH6VBhC0VUCshXwe7aF2IF5nH3Y2lCi28TFu4uz1ZyORAeCn1XMzsfn0
LFKograoMivzFA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:52:44 2025 by rpki-client