Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: a5vjacS7V4dgV/T2zWSQ8GZJKgg4WT6f3AtWPAeJZbE=
Subject key identifier: 26:4C:9D:C6:99:D3:2E:08:8F:2E:8E:5D:82:D4:66:89:33:F0:E2:95
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 019922FAE94020A40D0996FD13B021EF07BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 1170
Signing time: Sun 07 Sep 2025 07:01:33 +0000
Manifest this update: Sun 07 Sep 2025 07:01:33 +0000
Manifest next update: Mon 08 Sep 2025 07:01:33 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: dzsH+gLPazksd9CoA4N6PWgFjo6qtMcF6dLGy45N1C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e9:40:20:a4:0d:09:96:fd:13:b0:21:ef:07:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: Sep 7 07:01:33 2025 GMT
Not After : Sep 8 07:01:33 2025 GMT
Subject: CN=264c9dc699d32e088f2e8e5d82d4668933f0e295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:28:2d:c2:ca:87:1e:b8:96:27:6b:f4:85:
66:dc:e7:e7:92:b8:74:c9:4b:e0:18:7a:fd:f4:4c:
fd:cb:9a:a5:68:61:4a:13:cc:ec:21:36:00:7b:76:
a9:ff:27:b3:3a:b6:db:59:4d:e4:ff:49:86:cb:e6:
17:c9:af:b8:f8:c4:73:28:fc:34:41:d1:0d:2e:a5:
3b:bb:3b:f8:a0:1d:c3:ec:01:a6:e5:f9:31:52:f2:
45:10:eb:7f:5c:a4:13:f0:32:7b:dc:04:ac:12:88:
7b:3b:a7:ab:1b:d3:bb:46:80:29:4a:82:31:e7:0c:
c5:b7:9b:b5:d5:54:e9:00:c5:68:58:8d:34:9e:b7:
58:44:1f:ea:f1:6a:ee:98:94:f2:5e:19:a0:14:b1:
93:4a:79:67:0b:a0:d8:00:5e:ff:b7:c6:a8:5d:58:
04:47:c1:48:49:60:22:bc:fd:c3:9a:6f:36:fc:54:
9c:3e:fc:e3:8d:cf:bd:7a:19:63:e0:33:45:93:9e:
c4:03:c9:4b:07:3f:6d:2c:7f:52:27:b3:1e:85:8a:
99:69:28:40:d1:9b:cd:b6:84:6b:b0:83:f0:0b:22:
39:d0:fc:b3:45:ad:f8:94:b6:a4:8e:31:af:bb:5b:
fb:86:78:ad:fc:10:3c:8d:f4:65:ca:58:56:00:79:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4C:9D:C6:99:D3:2E:08:8F:2E:8E:5D:82:D4:66:89:33:F0:E2:95
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:90:76:40:a9:52:e3:f0:d2:84:30:77:11:89:22:2f:b2:b5:
e9:de:c0:62:e8:ee:84:a0:3f:8e:93:8d:dd:2c:54:fc:f1:71:
33:ea:4a:32:44:69:dc:bc:c1:f0:8d:d4:19:a8:b5:5b:5f:4f:
0b:1f:4d:53:ae:27:b1:a0:d9:3f:f5:44:4e:70:77:5c:9c:ac:
af:95:9d:95:16:da:7b:82:7c:34:ef:d4:52:46:eb:50:10:84:
05:65:a9:48:42:7e:83:32:6f:a5:c7:f5:be:b5:20:5e:69:82:
3a:3a:07:d0:b3:73:57:b2:ef:88:08:d0:5c:42:09:88:8f:fe:
ab:3e:13:7c:7a:df:61:b8:76:58:37:bd:30:45:aa:26:da:3b:
e3:ad:d5:a8:11:a4:ef:45:f5:5f:18:52:0a:87:0c:62:ab:c6:
6f:7e:03:78:b3:09:10:8d:dc:ca:65:47:78:d8:c6:5c:7e:d4:
75:76:72:ce:25:d4:c5:1d:ad:9a:5c:59:ba:ef:df:c1:15:9d:
47:c2:c1:e8:1c:35:15:fb:fd:8e:e9:da:67:ff:a7:1b:8f:c2:
35:df:99:76:96:8e:8b:d4:ea:65:75:d9:93:2a:a6:55:64:42:
c6:50:c1:fd:45:4a:e9:6f:87:3e:bc:25:1d:29:3a:7b:a2:d6:
3c:88:6e:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+ulAIKQNCZb9E7Ah7we/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDUwM2RkNWY2YWQwYTYwZTdiNDAzYTVhNjQyYWRlNDYx
OTk2M2MwHhcNMjUwOTA3MDcwMTMzWhcNMjUwOTA4MDcwMTMzWjAzMTEwLwYDVQQD
EygyNjRjOWRjNjk5ZDMyZTA4OGYyZThlNWQ4MmQ0NjY4OTMzZjBlMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB8oLcLKhx64lidr9IVm3Ofnkrh0
yUvgGHr99Ez9y5qlaGFKE8zsITYAe3ap/yezOrbbWU3k/0mGy+YXya+4+MRzKPw0
QdENLqU7uzv4oB3D7AGm5fkxUvJFEOt/XKQT8DJ73ASsEoh7O6erG9O7RoApSoIx
5wzFt5u11VTpAMVoWI00nrdYRB/q8WrumJTyXhmgFLGTSnlnC6DYAF7/t8aoXVgE
R8FISWAivP3Dmm82/FScPvzjjc+9ehlj4DNFk57EA8lLBz9tLH9SJ7MehYqZaShA
0ZvNtoRrsIPwCyI50PyzRa34lLakjjGvu1v7hnit/BA8jfRlylhWAHl9DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZMncaZ0y4Ijy6OXYLUZokz8OKVMB8GA1UdIwQY
MBaAFJNFA91fatCmDntAOlpkKt5GGZY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xMTc0MmEtOGNkMC00MjM3LWIyNmQt
YzZlYTA4ODc1NzM3LzEvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xMTc0MmEtOGNkMC00MjM3LWIyNmQtYzZlYTA4ODc1NzM3
LzEvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpB2QKlS
4/DShDB3EYkiL7K16d7AYujuhKA/jpON3SxU/PFxM+pKMkRp3LzB8I3UGai1W19P
Cx9NU64nsaDZP/VETnB3XJysr5WdlRbae4J8NO/UUkbrUBCEBWWpSEJ+gzJvpcf1
vrUgXmmCOjoH0LNzV7LviAjQXEIJiI/+qz4TfHrfYbh2WDe9MEWqJto7463VqBGk
70X1XxhSCocMYqvGb34DeLMJEI3cymVHeNjGXH7UdXZyziXUxR2tmlxZuu/fwRWd
R8LB6Bw1Ffv9junaZ/+nG4/CNd+ZdpaOi9TqZXXZkyqmVWRCxlDB/UVK6W+HPrwl
HSk6e6LWPIhuAw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:22 2025 by rpki-client