Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File: ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier: H/F1cov8AQOAgtqrZa8Aj8iC7cI4zYFE9N+bThobL5w=
Subject key identifier: 5A:0F:AB:0C:77:96:02:D8:12:E9:E2:D1:42:9F:B0:24:DD:E3:C9:19
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer: /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial: 019A71B8C22D64987EEF095F0B7C7479D08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number: 13FE
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: QSF0gaLYc6nfqRB9hePsLUfPNuwb03lcnEiJLfzRjiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c2:2d:64:98:7e:ef:09:5f:0b:7c:74:79:d0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=5a0fab0c779602d812e9e2d1429fb024dde3c919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:55:f5:62:b4:9f:1c:12:00:da:a2:58:84:
c2:25:7a:9b:17:bb:81:d8:92:5c:57:8f:84:85:ad:
36:20:08:99:bb:c8:6d:28:32:94:6c:a7:a4:0a:27:
3b:e2:b0:89:be:56:e9:9e:0a:86:47:bb:e8:69:c7:
d4:8e:8e:71:4e:f9:b8:7e:27:aa:02:87:d0:b7:bb:
ea:ae:bf:d8:e0:1a:27:b8:32:59:d3:8c:0f:8d:06:
ec:b3:60:43:e5:59:e8:8a:1b:aa:05:79:cc:47:bb:
66:a5:9a:4c:2c:df:c7:44:22:ae:fe:9c:9f:95:b9:
19:95:88:82:0d:d0:bd:ca:aa:d2:fe:3d:4b:f9:14:
ce:a3:1d:6f:eb:eb:53:4b:8a:e4:e3:6c:10:0f:4b:
bd:6f:9f:06:29:fc:4b:c5:1f:95:b3:a4:91:da:d1:
ed:cb:e6:ef:1f:1b:37:d5:24:78:34:0f:9f:88:51:
7b:52:d1:20:37:f2:92:f7:ed:34:77:02:76:28:be:
68:71:f3:89:9b:d6:7a:4d:52:a4:56:d5:67:6f:1f:
85:45:10:d3:b1:57:5e:a3:3c:5e:6a:82:6e:7f:dc:
07:22:ea:c0:bc:09:93:34:9d:3a:87:f7:ef:6d:01:
4f:f9:ba:bd:ea:43:18:2d:37:52:91:27:e0:7c:71:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0F:AB:0C:77:96:02:D8:12:E9:E2:D1:42:9F:B0:24:DD:E3:C9:19
X509v3 Authority Key Identifier:
keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7d:b2:9a:9a:c6:8b:93:02:ed:82:01:55:dd:2f:a2:1f:cc:
59:af:32:5a:8d:5e:ed:26:ea:d4:93:76:07:67:53:b1:77:da:
9a:51:1d:1b:f9:f6:45:41:f0:11:15:c2:a2:b5:d0:37:a8:5b:
9b:d9:af:b2:a7:ab:45:fc:fd:86:56:6a:19:08:98:6a:fa:aa:
e4:5c:d3:7f:c4:2c:c5:ed:b9:81:6d:49:e5:a1:6e:9e:b2:3f:
37:bc:53:43:71:41:c3:0a:0e:72:7e:73:36:c2:25:e1:62:05:
35:da:b2:8f:60:ca:c1:63:8f:70:53:23:11:24:8d:05:1c:6b:
71:7d:ed:7a:94:28:bd:6a:71:04:55:5b:87:7f:31:b3:bb:5e:
09:8a:77:b2:1e:a6:c4:86:23:30:fb:b4:4b:07:58:e4:c6:4c:
58:2f:27:61:40:b8:39:d8:d4:6d:e0:08:7e:f5:11:11:77:2d:
c0:fc:2c:ca:45:98:53:9a:a9:25:c9:f8:18:c3:4d:83:10:62:
1b:3b:1c:58:74:42:e4:5c:86:64:e9:02:b9:6c:e0:1b:95:37:
5d:95:96:00:6e:dc:c7:90:ff:56:64:32:b1:bf:b0:4d:e0:7b:
60:a7:4c:2a:48:4d:9f:9f:2c:95:3a:9f:f2:31:e1:cf:ad:50:
21:a9:63:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuMItZJh+7wlfC3x0edCOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMzQ4ZmRlMWIzYWQyMmNmMjhmZTY0MDMwYWUyZmU0ZjIy
Y2I3ZmIwHhcNMjUxMTExMDcwMjA1WhcNMjUxMTEyMDcwMjA1WjAzMTEwLwYDVQQD
Eyg1YTBmYWIwYzc3OTYwMmQ4MTJlOWUyZDE0MjlmYjAyNGRkZTNjOTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSBV9WK0nxwSANqiWITCJXqbF7uB
2JJcV4+Eha02IAiZu8htKDKUbKekCic74rCJvlbpngqGR7voacfUjo5xTvm4fieq
AofQt7vqrr/Y4BonuDJZ04wPjQbss2BD5VnoihuqBXnMR7tmpZpMLN/HRCKu/pyf
lbkZlYiCDdC9yqrS/j1L+RTOox1v6+tTS4rk42wQD0u9b58GKfxLxR+Vs6SR2tHt
y+bvHxs31SR4NA+fiFF7UtEgN/KS9+00dwJ2KL5ocfOJm9Z6TVKkVtVnbx+FRRDT
sVdeozxeaoJuf9wHIurAvAmTNJ06h/fvbQFP+bq96kMYLTdSkSfgfHEORQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoPqwx3lgLYEuni0UKfsCTd48kZMB8GA1UdIwQY
MBaAFLo0j94bOtIs8o/mQDCuL+TyLLf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82N2NhZTgtMmVkMi00NTE3LTliMmYt
YTU0NzYwMzZmZjMxLzEvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82N2NhZTgtMmVkMi00NTE3LTliMmYtYTU0NzYwMzZmZjMx
LzEvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALn2ymprG
i5MC7YIBVd0voh/MWa8yWo1e7Sbq1JN2B2dTsXfamlEdG/n2RUHwERXCorXQN6hb
m9mvsqerRfz9hlZqGQiYavqq5FzTf8Qsxe25gW1J5aFunrI/N7xTQ3FBwwoOcn5z
NsIl4WIFNdqyj2DKwWOPcFMjESSNBRxrcX3tepQovWpxBFVbh38xs7teCYp3sh6m
xIYjMPu0SwdY5MZMWC8nYUC4OdjUbeAIfvUREXctwPwsykWYU5qpJcn4GMNNgxBi
GzscWHRC5FyGZOkCuWzgG5U3XZWWAG7cx5D/VmQysb+wTeB7YKdMKkhNn58slTqf
8jHhz61QIaljxA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:15 2025 by rpki-client