Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier: a4icbUzsrXkHGWIlO8T/knzS6WoXDPnn9fmECfXo60Y=
Subject key identifier: 60:4E:E3:3B:88:94:B0:41:D4:77:A7:C0:E9:6C:53:85:C5:73:D0:21
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial: 0199228CA5E656C259CC28A4A27037F749AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number: 0386
Signing time: Sun 07 Sep 2025 05:01:06 +0000
Manifest this update: Sun 07 Sep 2025 05:01:06 +0000
Manifest next update: Mon 08 Sep 2025 05:01:06 +0000
Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: H72hGrt9pgYDo7LWwUxzCpHGdVgXEVafnOcNq5na8TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a5:e6:56:c2:59:cc:28:a4:a2:70:37:f7:49:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Validity
Not Before: Sep 7 05:01:06 2025 GMT
Not After : Sep 8 05:01:06 2025 GMT
Subject: CN=604ee33b8894b041d477a7c0e96c5385c573d021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:1c:84:a2:48:33:45:07:9d:f9:09:86:9a:
8a:29:3f:0c:db:af:60:cd:4d:ad:cf:87:02:b1:1c:
fc:7a:54:1c:64:03:14:9f:ea:69:c2:c6:9d:f2:87:
4d:d6:34:b2:ab:ee:9a:20:3d:a4:05:02:47:59:c2:
22:4a:4f:1f:02:3a:42:25:56:1f:31:af:7a:ec:15:
ed:0c:b2:64:0f:ee:4f:d9:6c:42:b7:6e:78:58:d2:
06:7e:7d:c6:ec:f8:f6:f0:8e:5e:74:ab:d8:62:fa:
0f:77:d0:4e:90:63:9a:f5:80:ec:54:f0:c4:40:c5:
97:bb:bd:41:f4:0d:33:a0:85:6a:c6:01:1a:f0:54:
f9:d9:6b:b2:99:c0:9b:c6:b4:93:4f:b1:17:76:93:
1a:b0:15:07:52:31:2b:39:ed:c1:5f:49:58:e2:8f:
92:35:8f:17:29:7f:85:a7:9d:2b:42:80:9b:b6:9b:
47:c8:bf:40:bd:a5:68:ba:8b:67:c3:1c:b0:9d:b6:
d7:7b:cc:2f:cb:8b:dc:49:34:50:bd:d3:ae:7d:be:
0d:29:c4:a5:58:30:8c:56:de:f5:92:a6:b9:c7:58:
00:14:ca:85:7d:f8:23:9c:61:60:c5:82:69:23:3d:
44:e2:45:82:5a:62:b3:64:01:7b:c2:aa:f2:8f:bf:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:E3:3B:88:94:B0:41:D4:77:A7:C0:E9:6C:53:85:C5:73:D0:21
X509v3 Authority Key Identifier:
keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:be:39:4a:ad:88:d7:c4:fa:76:55:f8:d0:79:62:18:09:ff:
be:c1:ec:61:b4:ba:5b:fc:3c:24:af:58:d3:61:e1:49:d5:8f:
3d:a3:7e:b2:87:e0:86:9d:d6:61:3a:cf:8b:7c:5f:40:1b:06:
f8:f7:c3:08:b5:a1:6d:01:28:e7:f2:cc:50:00:54:22:92:c8:
5f:06:85:c3:f9:73:14:ce:a6:2e:b0:20:78:1c:01:1d:b9:40:
b7:38:f8:ef:a4:e0:52:d2:6b:b4:22:0e:94:03:2a:cb:80:0c:
9b:f1:24:94:18:c4:28:a3:11:37:ed:8e:bd:e3:ee:26:60:d9:
b2:7e:82:cb:66:99:56:f1:db:cf:fa:bc:ee:69:1b:fd:e7:f7:
8d:86:14:37:aa:8e:98:45:f7:e5:a8:45:2a:1d:1f:2b:63:ff:
f2:4e:e8:b6:9b:fd:52:76:72:0f:99:37:03:57:26:40:63:f0:
7f:85:11:c2:1b:63:1d:5e:be:c8:ce:bc:91:7b:98:fc:b6:2f:
bf:dd:17:8c:74:75:5b:44:13:be:97:e9:fa:58:cd:48:6a:73:
c7:e0:21:8e:c9:89:de:db:d2:33:3b:3d:ee:db:f4:1a:94:43:
1c:24:b9:05:39:e1:98:96:9d:5e:50:4c:77:16:78:c7:28:76:
02:2a:6b:a8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkijKXmVsJZzCikonA390mrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTExNWMzMDJiZTBiNGI4YmNjYTBiMzJhODI5M2EwNWM2
OWQ3MGIwHhcNMjUwOTA3MDUwMTA2WhcNMjUwOTA4MDUwMTA2WjAzMTEwLwYDVQQD
Eyg2MDRlZTMzYjg4OTRiMDQxZDQ3N2E3YzBlOTZjNTM4NWM1NzNkMDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3IchKJIM0UHnfkJhpqKKT8M269g
zU2tz4cCsRz8elQcZAMUn+ppwsad8odN1jSyq+6aID2kBQJHWcIiSk8fAjpCJVYf
Ma967BXtDLJkD+5P2WxCt254WNIGfn3G7Pj28I5edKvYYvoPd9BOkGOa9YDsVPDE
QMWXu71B9A0zoIVqxgEa8FT52WuymcCbxrSTT7EXdpMasBUHUjErOe3BX0lY4o+S
NY8XKX+Fp50rQoCbtptHyL9AvaVouotnwxywnbbXe8wvy4vcSTRQvdOufb4NKcSl
WDCMVt71kqa5x1gAFMqFffgjnGFgxYJpIz1E4kWCWmKzZAF7wqryj78KWwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGBO4zuIlLBB1HenwOlsU4XFc9AhMB8GA1UdIwQY
MBaAFPrhFcMCvgtLi8ygsyqCk6BcadcLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11RVZ3d0stQzB1THpLQ3pLb0tUb0Z4cDF3cy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvZGRlYjc5LTZhYjgtNDdlMS1hNWZl
LWQwZjcwNGUwMzA5Zi8xLzEtdUVWd3dLLUMwdUx6S0N6S29LVG9GeHAxd3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI4L2RkZWI3OS02YWI4LTQ3ZTEtYTVmZS1kMGY3MDRlMDMw
OWYvMS8xLXVFVnd3Sy1DMHVMektDektvS1RvRnhwMXdzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATr45
Sq2I18T6dlX40HliGAn/vsHsYbS6W/w8JK9Y02HhSdWPPaN+sofghp3WYTrPi3xf
QBsG+PfDCLWhbQEo5/LMUABUIpLIXwaFw/lzFM6mLrAgeBwBHblAtzj476TgUtJr
tCIOlAMqy4AMm/EklBjEKKMRN+2OvePuJmDZsn6Cy2aZVvHbz/q87mkb/ef3jYYU
N6qOmEX35ahFKh0fK2P/8k7otpv9UnZyD5k3A1cmQGPwf4URwhtjHV6+yM68kXuY
/LYvv90XjHR1W0QTvpfp+ljNSGpzx+AhjsmJ3tvSMzs97tv0GpRDHCS5BTnhmJad
XlBMdxZ4xyh2AiprqA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:34 2025 by rpki-client