Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
File: uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft (raw, json)
Hash identifier: l5H3yBf53PagLwMcmDVWd+eSzvtkpekaRXXVAdft7v4=
Subject key identifier: E9:C4:CD:59:1D:1E:9A:44:89:49:F6:4B:06:B2:F7:1F:8D:87:73:AC
Authority key identifier: B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
Certificate issuer: /CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Certificate serial: 0199240D40672C542E1D1373BB36CFED31D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
Manifest number: 0D3A
Signing time: Sun 07 Sep 2025 12:01:12 +0000
Manifest this update: Sun 07 Sep 2025 12:01:12 +0000
Manifest next update: Mon 08 Sep 2025 12:01:12 +0000
Files and hashes: 1: uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl (hash: N5vRHuNbCQaQRXwKRwI2lvI8Mb+HV32Gl8wLIuSMGCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:40:67:2c:54:2e:1d:13:73:bb:36:cf:ed:31:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Validity
Not Before: Sep 7 12:01:12 2025 GMT
Not After : Sep 8 12:01:12 2025 GMT
Subject: CN=e9c4cd591d1e9a448949f64b06b2f71f8d8773ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:60:29:ed:95:a8:49:50:a8:4e:4c:e6:1d:0d:
40:8f:ee:ad:e9:7c:23:12:a0:24:ed:4e:de:9a:62:
04:b9:79:62:4b:92:70:10:59:4e:8d:70:7f:79:46:
df:56:ba:00:af:18:9e:50:ce:ff:f0:fe:ec:99:78:
92:7f:4e:54:1d:7e:2f:b3:3f:2e:86:e0:e1:a5:d6:
86:13:f6:0d:d6:e7:47:53:88:3b:a4:ee:5b:e8:01:
ff:ee:31:60:8e:d4:6d:47:f5:c5:e8:86:33:8c:05:
fa:b2:2a:96:95:48:40:4f:c2:82:f4:6a:0c:86:d7:
fb:5b:72:ad:77:93:b6:05:fb:39:85:b5:e0:23:80:
0a:a9:1c:cf:e7:7c:80:50:c4:45:db:09:48:62:0b:
91:64:60:f7:3e:34:14:08:74:ba:ae:ac:59:67:72:
b2:87:8b:ba:c9:39:a1:0d:ae:0f:75:44:4b:cb:0b:
5d:94:52:93:d9:c8:76:19:55:78:a8:6f:cc:e4:f3:
f4:6c:e7:8d:54:01:28:d2:bc:39:c7:95:ed:29:9e:
36:1b:22:6e:58:9a:7e:97:3e:69:83:17:14:e8:42:
0a:50:30:15:d1:db:58:6f:58:64:0e:2c:dc:2c:4a:
55:4c:66:8d:21:58:0c:9e:db:de:54:02:fc:50:a2:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:CD:59:1D:1E:9A:44:89:49:F6:4B:06:B2:F7:1F:8D:87:73:AC
X509v3 Authority Key Identifier:
keyid:B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5e:4f:96:d0:8b:17:14:2e:7f:f2:d9:63:30:94:f8:88:df:
cd:08:dd:8e:9f:83:b2:21:a6:57:b6:87:c7:d2:a4:3e:41:49:
9c:e0:3e:37:42:85:67:1a:3e:38:f4:52:21:7d:ab:9f:f6:61:
bc:bd:d6:0c:95:40:cc:47:d1:9a:c3:96:3a:02:18:51:52:51:
44:2b:e1:74:de:42:a7:db:8c:88:64:8a:40:f1:97:46:70:36:
b4:92:78:f0:8b:e1:7e:6e:71:cc:66:05:e7:c9:5a:a3:28:68:
7f:7e:44:de:9e:42:6b:e6:39:fe:5e:bc:b8:e1:05:e7:ab:5e:
2d:53:ff:ab:c7:56:e3:f4:ec:68:a7:3b:0b:bd:84:b5:92:eb:
b5:d2:48:62:c8:6a:3e:bb:fb:cc:a7:82:ef:d3:03:bc:f5:67:
60:5c:35:8e:6a:db:58:db:a1:43:de:4c:65:eb:95:fd:83:88:
02:12:4d:8d:3c:ec:ac:f1:6d:4a:03:eb:a5:b8:a0:c9:fe:99:
93:59:cc:2c:fd:40:21:5b:de:15:98:65:89:5e:f0:86:0e:14:
3c:f7:34:11:2e:ba:87:53:9e:fa:f3:c5:97:be:2d:38:3f:b2:
57:a2:ed:b1:66:68:51:bb:58:e5:1b:44:cc:a7:f8:dc:62:61:
3c:20:8e:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDUBnLFQuHRNzuzbP7THTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NmFlZDQyNmZiMWEwNjMyNWEyNjM3OTIxYTRiNWFiOThh
MWE1OTQwHhcNMjUwOTA3MTIwMTEyWhcNMjUwOTA4MTIwMTEyWjAzMTEwLwYDVQQD
EyhlOWM0Y2Q1OTFkMWU5YTQ0ODk0OWY2NGIwNmIyZjcxZjhkODc3M2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGAp7ZWoSVCoTkzmHQ1Aj+6t6Xwj
EqAk7U7emmIEuXliS5JwEFlOjXB/eUbfVroArxieUM7/8P7smXiSf05UHX4vsz8u
huDhpdaGE/YN1udHU4g7pO5b6AH/7jFgjtRtR/XF6IYzjAX6siqWlUhAT8KC9GoM
htf7W3Ktd5O2Bfs5hbXgI4AKqRzP53yAUMRF2wlIYguRZGD3PjQUCHS6rqxZZ3Ky
h4u6yTmhDa4PdURLywtdlFKT2ch2GVV4qG/M5PP0bOeNVAEo0rw5x5XtKZ42GyJu
WJp+lz5pgxcU6EIKUDAV0dtYb1hkDizcLEpVTGaNIVgMntveVAL8UKIs7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnEzVkdHppEiUn2Sway9x+Nh3OsMB8GA1UdIwQY
MBaAFLlq7UJvsaBjJaJjeSGktauYoaWUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVdydFFtLXhvR01sb21ONUlhUzFxNWlocFpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80YTU3YjItNDQ1OC00ZjYxLWJmMjgt
NzkyOTZkM2U2MzI4LzEvdVdydFFtLXhvR01sb21ONUlhUzFxNWlocFpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80YTU3YjItNDQ1OC00ZjYxLWJmMjgtNzkyOTZkM2U2MzI4
LzEvdVdydFFtLXhvR01sb21ONUlhUzFxNWlocFpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh15PltCL
FxQuf/LZYzCU+IjfzQjdjp+DsiGmV7aHx9KkPkFJnOA+N0KFZxo+OPRSIX2rn/Zh
vL3WDJVAzEfRmsOWOgIYUVJRRCvhdN5Cp9uMiGSKQPGXRnA2tJJ48Ivhfm5xzGYF
58laoyhof35E3p5Ca+Y5/l68uOEF56teLVP/q8dW4/TsaKc7C72EtZLrtdJIYshq
Prv7zKeC79MDvPVnYFw1jmrbWNuhQ95MZeuV/YOIAhJNjTzsrPFtSgPrpbigyf6Z
k1nMLP1AIVveFZhliV7whg4UPPc0ES66h1Oe+vPFl74tOD+yV6LtsWZoUbtY5RtE
zKf43GJhPCCOoA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:14 2025 by rpki-client