Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: qKdcMDxzTKkEoZ4FBhDv+E+J+3C7RPnDkd+ag3wJbeU=
Subject key identifier: B5:3B:BC:62:E7:33:30:A1:39:7C:6C:3B:62:13:F5:4A:AE:58:38:4D
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 0199239EBD480FF28D3E6528D6F0C8F07B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 10:00:29 +0000
Manifest this update: Sun 07 Sep 2025 10:00:29 +0000
Manifest next update: Mon 08 Sep 2025 10:00:29 +0000
Files and hashes: 1: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: T50O2+NUuLep0pYLphkaM4awst6C7N1SiMzOqR3tiC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:bd:48:0f:f2:8d:3e:65:28:d6:f0:c8:f0:7b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Sep 7 10:00:29 2025 GMT
Not After : Sep 8 10:00:29 2025 GMT
Subject: CN=b53bbc62e73330a1397c6c3b6213f54aae58384d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:f5:7a:ad:ab:23:2a:58:3a:79:76:f3:ea:
94:23:03:e1:e8:a5:d4:30:a6:6f:b9:4b:fa:e2:0d:
a3:4a:e1:06:81:8a:61:a2:b8:f7:a4:90:f5:1a:ed:
b5:30:06:4d:da:6f:62:04:46:0a:65:f3:85:bf:c4:
5a:5a:fd:c6:aa:f2:dd:6a:64:c5:de:02:dc:c6:7c:
10:b4:1e:5d:a4:4b:7c:db:c2:45:7c:fe:dd:db:4f:
cf:07:00:f8:20:9b:9a:74:4b:60:d6:07:11:24:40:
d9:3c:44:c7:b6:04:c9:d1:9e:e2:62:04:db:cb:12:
26:fe:9c:f7:f6:be:c0:9e:c9:f9:3f:d7:07:6d:8f:
57:07:e9:08:4a:8f:23:a9:a1:1c:cb:0b:56:c6:44:
5e:08:5a:4a:d8:d0:54:89:ed:2b:f4:5a:d3:d8:15:
80:7f:95:e5:9f:4f:55:73:de:45:00:2d:2b:d3:c9:
5f:92:ba:6e:0e:4f:23:35:eb:3c:2c:b3:d0:fb:af:
ae:6c:6e:03:f8:1a:69:40:c0:47:95:f9:6c:08:6d:
2f:60:22:c5:44:f0:42:52:a5:fb:39:33:45:68:de:
27:a7:df:f5:0b:5f:ae:0b:20:74:57:68:39:47:97:
94:b8:fd:93:6e:fc:3c:a9:f0:65:02:60:cc:0d:e5:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3B:BC:62:E7:33:30:A1:39:7C:6C:3B:62:13:F5:4A:AE:58:38:4D
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:64:de:f9:1c:63:65:32:90:ce:df:00:59:33:ef:d8:b3:76:
6e:94:09:0c:ce:37:22:0a:60:86:92:4e:b8:62:58:12:40:bc:
ab:9b:ac:14:b8:05:51:bb:be:bb:eb:f7:ec:80:08:a4:2e:80:
51:4d:2c:2c:d7:26:4b:ce:5e:e9:29:c1:d7:7c:6d:3d:86:33:
43:5b:8e:ac:11:9e:3a:a2:b0:11:33:27:55:9a:91:51:0e:6f:
0a:7a:f8:65:5d:c9:3c:20:c2:8a:b7:13:16:92:ad:ea:77:87:
8d:c0:9d:80:6b:ed:e0:c5:2c:79:e5:b3:cf:78:46:39:c1:3c:
4a:59:f1:9e:76:cf:f7:e0:7f:3b:e2:75:b4:27:25:65:6c:f0:
bf:3c:6b:4f:dd:ac:02:ef:05:af:12:10:5e:53:e1:9e:f1:9b:
20:cc:83:9f:0c:c2:e6:e6:6b:bc:c7:c2:0d:60:b7:ff:5f:3d:
a3:53:10:73:fd:80:7d:d1:bc:bb:19:cd:bb:43:25:d8:81:05:
79:4a:22:0b:5a:c0:60:93:3e:87:77:44:de:2d:44:e5:02:92:
78:aa:31:a7:91:da:59:ce:74:60:d9:a8:be:33:8e:28:58:4b:
17:c7:0a:a7:a3:c0:3f:b7:ba:10:f3:bf:d4:8b:29:94:cf:7d:
d1:3f:62:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnr1ID/KNPmUo1vDI8HsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTUyYjQ4Yjk2MTY0OWIzN2MxZTg5ZjgxMTA2MTUzZGM3
YjE0MzUwHhcNMjUwOTA3MTAwMDI5WhcNMjUwOTA4MTAwMDI5WjAzMTEwLwYDVQQD
EyhiNTNiYmM2MmU3MzMzMGExMzk3YzZjM2I2MjEzZjU0YWFlNTgzODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAn1eq2rIypYOnl28+qUIwPh6KXU
MKZvuUv64g2jSuEGgYphorj3pJD1Gu21MAZN2m9iBEYKZfOFv8RaWv3GqvLdamTF
3gLcxnwQtB5dpEt828JFfP7d20/PBwD4IJuadEtg1gcRJEDZPETHtgTJ0Z7iYgTb
yxIm/pz39r7Ansn5P9cHbY9XB+kISo8jqaEcywtWxkReCFpK2NBUie0r9FrT2BWA
f5Xln09Vc95FAC0r08lfkrpuDk8jNes8LLPQ+6+ubG4D+BppQMBHlflsCG0vYCLF
RPBCUqX7OTNFaN4np9/1C1+uCyB0V2g5R5eUuP2Tbvw8qfBlAmDMDeXI2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLU7vGLnMzChOXxsO2IT9UquWDhNMB8GA1UdIwQY
MBaAFPwVK0i5YWSbN8Hon4EQYVPcexQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGIt
YTQ3Njk1MTQxYTliLzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGItYTQ3Njk1MTQxYTli
LzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWTe+Rxj
ZTKQzt8AWTPv2LN2bpQJDM43IgpghpJOuGJYEkC8q5usFLgFUbu+u+v37IAIpC6A
UU0sLNcmS85e6SnB13xtPYYzQ1uOrBGeOqKwETMnVZqRUQ5vCnr4ZV3JPCDCircT
FpKt6neHjcCdgGvt4MUseeWzz3hGOcE8SlnxnnbP9+B/O+J1tCclZWzwvzxrT92s
Au8FrxIQXlPhnvGbIMyDnwzC5uZrvMfCDWC3/189o1MQc/2AfdG8uxnNu0Ml2IEF
eUoiC1rAYJM+h3dE3i1E5QKSeKoxp5HaWc50YNmovjOOKFhLF8cKp6PAP7e6EPO/
1IsplM990T9iBw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:54:32 2025 by rpki-client