Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
File: U3YJ5EhhINufF7bT10v4VfJxV18.mft (raw, json)
Hash identifier: O7o6IXtEDSdhTzBchSLYlwi/1BGGgjA1JetXTZnmdqg=
Subject key identifier: 74:79:16:C7:0E:2C:6D:F8:A7:83:C5:24:D7:22:16:9F:20:A4:64:94
Authority key identifier: 53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
Certificate issuer: /CN=537609e4486120db9f17b6d3d74bf855f271575f
Certificate serial: 01984966B4D1D40481205BE0C638F53FDD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
Manifest number: 0C7F
Signing time: Sun 27 Jul 2025 01:02:04 +0000
Manifest this update: Sun 27 Jul 2025 01:02:04 +0000
Manifest next update: Mon 28 Jul 2025 01:02:04 +0000
Files and hashes: 1: U3YJ5EhhINufF7bT10v4VfJxV18.crl (hash: VKnCG3Xsqe3xP32Kg7QICB9UWTSIXq+b6n6ZWq/CKsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:b4:d1:d4:04:81:20:5b:e0:c6:38:f5:3f:dd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537609e4486120db9f17b6d3d74bf855f271575f
Validity
Not Before: Jul 27 01:02:04 2025 GMT
Not After : Jul 28 01:02:04 2025 GMT
Subject: CN=747916c70e2c6df8a783c524d722169f20a46494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:ea:9e:f8:66:b8:a8:e1:19:74:46:40:7f:
5b:0f:de:0e:63:cc:61:db:73:b2:63:4f:f8:3f:3c:
c5:6e:67:7c:c4:a5:e9:97:e7:de:96:68:9f:45:5e:
d5:28:27:9e:0f:ce:e1:f6:13:7f:72:97:a7:c2:f2:
82:c9:7d:da:8d:07:5d:81:0b:4e:9a:90:f4:74:d1:
19:87:86:df:e0:c6:72:0c:c9:3f:14:74:26:4d:6f:
08:f9:19:cf:71:ed:9b:c9:a1:50:d8:40:50:11:54:
d0:9d:5e:cd:da:c1:f3:c1:df:31:34:09:60:a8:81:
72:18:b5:0c:a9:75:b2:88:f6:8f:93:5c:22:cb:54:
1e:b5:34:70:7c:77:9a:b5:5a:a5:94:5c:5e:e2:06:
01:cd:45:ce:8c:2f:f9:2d:aa:41:70:ce:6b:f1:7b:
ad:51:7b:b4:00:d2:30:9e:ce:df:a5:a4:5c:b4:ce:
72:34:a6:b9:4a:1b:39:42:e2:5c:7b:df:b7:e4:6a:
cc:4f:a7:4e:0e:2d:14:8e:3e:cf:9c:ed:9c:83:32:
fe:06:eb:c7:a9:91:5b:92:82:33:41:e0:1d:87:9b:
a9:74:fa:46:f1:a3:40:f7:b8:5b:e1:87:3f:c4:c8:
51:40:45:04:52:55:28:7b:3d:29:2e:eb:e2:9e:56:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:79:16:C7:0E:2C:6D:F8:A7:83:C5:24:D7:22:16:9F:20:A4:64:94
X509v3 Authority Key Identifier:
keyid:53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:01:45:e8:c1:e9:f3:d2:58:2d:a2:90:71:42:1c:f3:63:16:
12:d1:68:bf:49:29:0f:c3:0e:f3:c0:81:38:f2:48:97:33:2d:
3e:1a:dd:e0:c0:27:16:b4:14:5d:bc:72:58:7b:6c:00:ce:1c:
4c:d4:e8:db:d2:4b:41:21:d1:fb:78:3a:a0:23:ee:9f:e3:86:
b2:2b:91:57:d3:a0:d5:3d:a4:5d:f7:40:bb:da:af:6f:24:e2:
ea:09:ed:10:c1:46:e5:55:a2:fe:95:1c:7a:7c:b1:99:da:6c:
33:c8:f7:5b:43:a9:79:8a:8e:c6:5b:b1:99:83:b8:3d:fd:d6:
36:19:c8:97:20:fe:a5:a6:fc:b3:93:d7:bc:b1:74:df:2c:f7:
3c:e1:db:fe:d6:75:53:c1:b9:9b:c8:30:0a:9f:82:56:68:41:
2b:e1:1c:f8:9c:7d:6f:03:48:b3:bb:4a:1e:28:24:f6:5b:a1:
3b:26:6c:f6:41:2b:74:54:fb:ac:ec:fb:66:1f:c6:f2:8e:5f:
92:4f:5f:7e:16:2c:4b:f2:7b:70:2a:89:88:2a:d2:65:48:d1:
d6:63:84:a5:4f:2a:1d:88:0b:43:18:bf:88:a8:50:87:c1:e9:
46:7a:ca:ac:e8:4d:04:bc:3c:6b:bd:e1:e8:bc:f7:c5:cb:1d:
4d:9e:89:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZrTR1ASBIFvgxjj1P908MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzYwOWU0NDg2MTIwZGI5ZjE3YjZkM2Q3NGJmODU1ZjI3
MTU3NWYwHhcNMjUwNzI3MDEwMjA0WhcNMjUwNzI4MDEwMjA0WjAzMTEwLwYDVQQD
Eyg3NDc5MTZjNzBlMmM2ZGY4YTc4M2M1MjRkNzIyMTY5ZjIwYTQ2NDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny/qnvhmuKjhGXRGQH9bD94OY8xh
23OyY0/4PzzFbmd8xKXpl+felmifRV7VKCeeD87h9hN/cpenwvKCyX3ajQddgQtO
mpD0dNEZh4bf4MZyDMk/FHQmTW8I+RnPce2byaFQ2EBQEVTQnV7N2sHzwd8xNAlg
qIFyGLUMqXWyiPaPk1wiy1QetTRwfHeatVqllFxe4gYBzUXOjC/5LapBcM5r8Xut
UXu0ANIwns7fpaRctM5yNKa5Shs5QuJce9+35GrMT6dODi0Ujj7PnO2cgzL+BuvH
qZFbkoIzQeAdh5updPpG8aNA97hb4Yc/xMhRQEUEUlUoez0pLuvinlYckwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHR5FscOLG34p4PFJNciFp8gpGSUMB8GA1UdIwQY
MBaAFFN2CeRIYSDbnxe209dL+FXycVdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNZSjVFaGhJTnVmRjdiVDEwdjRWZkp4VjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wNWRiODAtMWJhZi00MzdhLWE0OGYt
ZDRkNDRiZDkxYWZlLzEvVTNZSjVFaGhJTnVmRjdiVDEwdjRWZkp4VjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wNWRiODAtMWJhZi00MzdhLWE0OGYtZDRkNDRiZDkxYWZl
LzEvVTNZSjVFaGhJTnVmRjdiVDEwdjRWZkp4VjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwFF6MHp
89JYLaKQcUIc82MWEtFov0kpD8MO88CBOPJIlzMtPhrd4MAnFrQUXbxyWHtsAM4c
TNTo29JLQSHR+3g6oCPun+OGsiuRV9Og1T2kXfdAu9qvbyTi6gntEMFG5VWi/pUc
enyxmdpsM8j3W0OpeYqOxluxmYO4Pf3WNhnIlyD+pab8s5PXvLF03yz3POHb/tZ1
U8G5m8gwCp+CVmhBK+Ec+Jx9bwNIs7tKHigk9luhOyZs9kErdFT7rOz7Zh/G8o5f
kk9ffhYsS/J7cCqJiCrSZUjR1mOEpU8qHYgLQxi/iKhQh8HpRnrKrOhNBLw8a73h
6Lz3xcsdTZ6JVg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:25:25 2025 by rpki-client