Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier: 2K5ff8/7tzQ9MIl8hhq7nC5ZLctwaIBPlriAAkkPyhY=
Subject key identifier: 6A:42:C7:3E:70:C7:28:05:6A:06:44:F7:E6:72:48:D1:17:6F:06:20
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial: 019A71B906EC4791FAD22134E2E802C91C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number: 0FF2
Signing time: Tue 11 Nov 2025 07:02:22 +0000
Manifest this update: Tue 11 Nov 2025 07:02:22 +0000
Manifest next update: Wed 12 Nov 2025 07:02:22 +0000
Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: fUkS/EpBg62GcJ2IyZZ4JXbSpDNVZsZZ9C3GKvXuSVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:06:ec:47:91:fa:d2:21:34:e2:e8:02:c9:1c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Validity
Not Before: Nov 11 07:02:22 2025 GMT
Not After : Nov 12 07:02:22 2025 GMT
Subject: CN=6a42c73e70c728056a0644f7e67248d1176f0620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:40:6c:fe:eb:f4:55:aa:40:2d:b8:cd:76:
60:d2:af:68:2d:92:a2:9a:9f:de:c5:32:f0:3d:65:
b4:a9:d4:d4:fb:6b:c6:a5:e9:1a:17:b6:3b:5f:4b:
57:51:78:8b:46:dc:9e:60:01:44:e1:72:47:3f:85:
e2:5f:47:75:3a:28:da:83:14:23:aa:1a:14:eb:58:
fd:3e:52:5a:94:31:54:a2:cc:d1:73:c5:d5:5d:49:
8b:91:f7:ae:69:fd:5d:bd:e5:5f:ca:c9:b1:49:50:
fe:e8:a1:ba:92:c8:8e:e7:9a:42:31:cc:25:0c:d6:
96:19:12:b3:bb:db:26:0e:f9:0f:08:4a:25:97:4e:
56:09:ce:21:f3:c0:bd:df:a5:48:79:6d:e4:c0:fc:
be:4c:6c:dc:87:fa:83:3d:f7:f1:a8:65:91:48:84:
f0:b4:77:2b:23:c6:f7:65:0d:6f:83:cf:ed:ab:15:
8f:c6:53:8c:8d:a2:f5:91:ea:b5:31:8d:ef:07:4c:
cd:b1:d4:36:97:72:c0:bf:b8:72:36:7d:ed:8b:18:
f0:df:e0:68:6a:e1:a3:53:31:b5:91:13:6c:3c:63:
2e:ee:6c:26:15:0d:60:8e:9d:81:11:9b:a6:45:e2:
10:28:73:30:b8:4d:0e:2d:8a:64:23:1f:70:6f:84:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:C7:3E:70:C7:28:05:6A:06:44:F7:E6:72:48:D1:17:6F:06:20
X509v3 Authority Key Identifier:
keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:de:01:26:54:87:b4:d5:15:21:17:ab:14:6d:3e:eb:81:8b:
16:21:e2:97:89:1a:25:4f:35:c5:41:96:af:1f:89:9f:9d:97:
cb:63:11:2b:84:d8:3b:2f:c5:5a:68:ba:63:2f:98:b8:1d:08:
d7:31:64:83:38:7c:a8:59:c1:bc:68:50:06:e1:f9:cd:4d:ef:
b1:f0:f8:ef:c3:72:70:c8:3b:a6:a2:c2:e6:6c:8b:24:68:5c:
34:95:b7:95:c4:8d:40:5d:10:8c:77:a2:04:34:f3:56:a2:d4:
1b:bc:93:2f:67:57:60:71:a2:10:c2:50:f1:b2:29:b9:31:81:
bc:10:b5:67:3f:fd:c9:3f:85:be:0e:97:1c:2a:de:fa:a1:b6:
84:d4:ca:5d:d4:a8:86:35:23:ad:1c:d3:9f:54:aa:1f:e7:98:
d5:18:cc:bc:d7:7c:e1:8a:40:81:81:ba:ee:c9:61:b0:0d:b1:
d0:ac:33:06:83:f9:87:fa:bc:ac:c6:7b:2a:28:61:f4:a0:be:
61:6f:ce:6a:66:48:a1:ad:d8:36:79:70:3d:4e:90:98:6a:ed:
14:1e:92:90:e1:2d:69:32:06:b7:d4:7f:80:85:78:e6:c0:56:
64:9e:dc:09:00:ff:9a:9a:03:ff:10:f2:cb:dd:d7:cf:ea:ba:
fb:dc:43:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuQbsR5H60iE04ugCyRyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNDI4MzBlZWVkMjhiMDRiY2RkMDNmYTNmZGE0OGM1NDg1
YWZjZmUwHhcNMjUxMTExMDcwMjIyWhcNMjUxMTEyMDcwMjIyWjAzMTEwLwYDVQQD
Eyg2YTQyYzczZTcwYzcyODA1NmEwNjQ0ZjdlNjcyNDhkMTE3NmYwNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWRAbP7r9FWqQC24zXZg0q9oLZKi
mp/exTLwPWW0qdTU+2vGpekaF7Y7X0tXUXiLRtyeYAFE4XJHP4XiX0d1OijagxQj
qhoU61j9PlJalDFUoszRc8XVXUmLkfeuaf1dveVfysmxSVD+6KG6ksiO55pCMcwl
DNaWGRKzu9smDvkPCEoll05WCc4h88C936VIeW3kwPy+TGzch/qDPffxqGWRSITw
tHcrI8b3ZQ1vg8/tqxWPxlOMjaL1keq1MY3vB0zNsdQ2l3LAv7hyNn3tixjw3+Bo
auGjUzG1kRNsPGMu7mwmFQ1gjp2BEZumReIQKHMwuE0OLYpkIx9wb4RpawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpCxz5wxygFagZE9+ZySNEXbwYgMB8GA1UdIwQY
MBaAFHFCgw7u0osEvN0D+j/aSMVIWvz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1VLRER1N1Npd1M4M1FQNlA5cEl4VWhhX1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hZmQxMTgtZThhNS00ZWE0LTk4OTUt
ZWIxMzNhMGFmNWZjLzEvY1VLRER1N1Npd1M4M1FQNlA5cEl4VWhhX1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hZmQxMTgtZThhNS00ZWE0LTk4OTUtZWIxMzNhMGFmNWZj
LzEvY1VLRER1N1Npd1M4M1FQNlA5cEl4VWhhX1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt94BJlSH
tNUVIRerFG0+64GLFiHil4kaJU81xUGWrx+Jn52Xy2MRK4TYOy/FWmi6Yy+YuB0I
1zFkgzh8qFnBvGhQBuH5zU3vsfD478NycMg7pqLC5myLJGhcNJW3lcSNQF0QjHei
BDTzVqLUG7yTL2dXYHGiEMJQ8bIpuTGBvBC1Zz/9yT+Fvg6XHCre+qG2hNTKXdSo
hjUjrRzTn1SqH+eY1RjMvNd84YpAgYG67slhsA2x0KwzBoP5h/q8rMZ7Kihh9KC+
YW/OamZIoa3YNnlwPU6QmGrtFB6SkOEtaTIGt9R/gIV45sBWZJ7cCQD/mpoD/xDy
y93Xz+q6+9xDnQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:11 2025 by rpki-client