Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft
File: U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft (raw, json)
Hash identifier: T9u/OeXq7UhVsxNczMclY5c5iveD2uSlM8/jN/KkWRM=
Subject key identifier: 09:45:EE:60:90:CB:82:FA:96:50:86:45:48:2F:24:2C:E3:A7:8E:1D
Authority key identifier: 53:F6:66:01:B7:CE:AC:08:C1:82:07:84:06:4E:57:1D:B9:88:7B:EB
Certificate issuer: /CN=53f66601b7ceac08c1820784064e571db9887beb
Certificate serial: 019A7293A79D5CDDAB88FB8B8E2B4FCA38B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_ZmAbfOrAjBggeEBk5XHbmIe-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft
Manifest number: 48
Signing time: Tue 11 Nov 2025 11:01:10 +0000
Manifest this update: Tue 11 Nov 2025 11:01:10 +0000
Manifest next update: Wed 12 Nov 2025 11:01:10 +0000
Files and hashes: 1: U_ZmAbfOrAjBggeEBk5XHbmIe-s.crl (hash: xajTT5MfzKuIhlkQur/kr5gCaplTrVosXVKHVaPPJTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_ZmAbfOrAjBggeEBk5XHbmIe-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a7:9d:5c:dd:ab:88:fb:8b:8e:2b:4f:ca:38:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f66601b7ceac08c1820784064e571db9887beb
Validity
Not Before: Nov 11 11:01:10 2025 GMT
Not After : Nov 12 11:01:10 2025 GMT
Subject: CN=0945ee6090cb82fa96508645482f242ce3a78e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:b1:8e:96:1f:a8:54:b7:40:0a:75:5b:01:
92:62:ad:fd:92:70:28:e3:96:7a:9c:92:e6:1f:22:
c2:fb:dc:54:fb:2d:ae:0f:dd:eb:53:c9:13:cb:7a:
b1:56:90:a8:52:ee:2d:c5:dc:e7:45:a7:a6:1a:f2:
6f:59:bd:b7:7d:8a:ad:60:bd:81:df:73:ec:5a:35:
d8:60:96:bb:26:d6:27:5d:0b:05:33:0a:50:36:e7:
65:44:57:cc:6c:97:52:d2:ce:1e:34:3b:24:4d:44:
7c:0d:92:7f:57:d2:60:e9:42:a8:a6:a4:84:a4:51:
76:b9:c8:60:24:bc:bd:e6:48:82:0d:2c:14:e0:5e:
77:ac:c8:38:2f:f6:1f:cb:de:40:34:77:ec:0e:94:
a8:21:7e:f1:80:73:2f:99:e1:05:5d:34:e6:bf:b3:
fb:86:24:fa:1a:19:49:f3:fc:c8:67:94:48:bd:d0:
73:fe:d3:14:3f:c4:11:05:f7:8f:08:d5:a4:63:f4:
c7:5d:0b:b7:03:6e:be:26:30:8b:80:b0:99:a9:31:
1b:ff:67:1d:77:23:c9:80:57:83:ce:7e:e1:2b:59:
e6:c2:0d:b7:eb:88:b3:8c:bd:d4:e0:57:aa:22:92:
77:f2:73:d4:f4:7f:a1:ee:3c:bc:a2:80:28:5f:9f:
38:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:45:EE:60:90:CB:82:FA:96:50:86:45:48:2F:24:2C:E3:A7:8E:1D
X509v3 Authority Key Identifier:
keyid:53:F6:66:01:B7:CE:AC:08:C1:82:07:84:06:4E:57:1D:B9:88:7B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_ZmAbfOrAjBggeEBk5XHbmIe-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e0:be:91:cf:2c:bc:a8:7c:43:86:fa:73:e0:dc:fe:54:be:
84:f2:fa:31:2f:9c:2d:4b:7f:5d:17:bc:bf:d6:69:03:81:6b:
86:cb:b6:ca:69:68:7a:13:f8:4b:50:c9:10:2c:e4:be:d9:a5:
08:32:03:d1:bb:bb:c8:ab:3b:04:48:f9:77:a1:1b:c2:b9:ee:
59:cb:7c:13:b1:a9:6f:ef:2f:c4:ab:a9:eb:39:17:ec:d1:98:
55:45:09:c5:ae:bb:4f:55:c4:ff:b8:eb:fe:7a:57:85:68:a0:
0c:92:80:31:eb:e2:58:d6:2b:5f:83:3c:65:4e:d0:e1:37:52:
e6:63:a1:ae:d6:63:40:54:1d:b1:de:24:7a:3c:20:66:2b:42:
47:0a:50:3c:af:af:f3:af:2b:53:a7:f6:6c:33:cf:ac:c9:a1:
41:4e:80:9c:31:eb:04:45:7b:50:cb:9a:76:9e:22:ad:08:3e:
85:8f:97:05:9a:c3:c4:19:b1:31:3e:14:81:5c:1e:59:ba:fb:
78:d1:80:e9:cc:e5:f2:7f:65:77:45:11:a2:96:56:52:d9:fd:
78:cd:5e:b1:68:b2:d2:12:2e:98:ec:37:03:fc:fe:53:e8:c1:
4d:38:79:99:50:91:b1:00:a0:dc:bf:16:47:ad:e6:af:75:97:
2e:fb:d7:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk6edXN2riPuLjitPyji2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjY2NjAxYjdjZWFjMDhjMTgyMDc4NDA2NGU1NzFkYjk4
ODdiZWIwHhcNMjUxMTExMTEwMTEwWhcNMjUxMTEyMTEwMTEwWjAzMTEwLwYDVQQD
EygwOTQ1ZWU2MDkwY2I4MmZhOTY1MDg2NDU0ODJmMjQyY2UzYTc4ZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yuxjpYfqFS3QAp1WwGSYq39knAo
45Z6nJLmHyLC+9xU+y2uD93rU8kTy3qxVpCoUu4txdznRaemGvJvWb23fYqtYL2B
33PsWjXYYJa7JtYnXQsFMwpQNudlRFfMbJdS0s4eNDskTUR8DZJ/V9Jg6UKopqSE
pFF2uchgJLy95kiCDSwU4F53rMg4L/Yfy95ANHfsDpSoIX7xgHMvmeEFXTTmv7P7
hiT6GhlJ8/zIZ5RIvdBz/tMUP8QRBfePCNWkY/THXQu3A26+JjCLgLCZqTEb/2cd
dyPJgFeDzn7hK1nmwg2364izjL3U4FeqIpJ38nPU9H+h7jy8ooAoX584oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlF7mCQy4L6llCGRUgvJCzjp44dMB8GA1UdIwQY
MBaAFFP2ZgG3zqwIwYIHhAZOVx25iHvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9abUFiZk9yQWpCZ2dlRUJrNVhIYm1JZS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kNDNjMmYtZmZhOS00ZjJiLWE4MzEt
YWQwYjVkY2YzMzAzLzEvVV9abUFiZk9yQWpCZ2dlRUJrNVhIYm1JZS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kNDNjMmYtZmZhOS00ZjJiLWE4MzEtYWQwYjVkY2YzMzAz
LzEvVV9abUFiZk9yQWpCZ2dlRUJrNVhIYm1JZS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOC+kc8s
vKh8Q4b6c+Dc/lS+hPL6MS+cLUt/XRe8v9ZpA4Frhsu2ymloehP4S1DJECzkvtml
CDID0bu7yKs7BEj5d6EbwrnuWct8E7Gpb+8vxKup6zkX7NGYVUUJxa67T1XE/7jr
/npXhWigDJKAMeviWNYrX4M8ZU7Q4TdS5mOhrtZjQFQdsd4kejwgZitCRwpQPK+v
868rU6f2bDPPrMmhQU6AnDHrBEV7UMuadp4irQg+hY+XBZrDxBmxMT4UgVweWbr7
eNGA6czl8n9ld0URopZWUtn9eM1esWiy0hIumOw3A/z+U+jBTTh5mVCRsQCg3L8W
R63mr3WXLvvXyQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:01 2025 by rpki-client