Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
File: tU0YlEyigIUFOR3pf6nWsrxhiZo.mft (raw, json)
Hash identifier: t3vYLf6iwdX9ErVd9s0uowW+rZG4nndyrixn+7vrZ0U=
Subject key identifier: CC:CF:87:EB:75:A0:35:9C:70:70:A7:69:46:57:92:6E:D3:7F:63:54
Authority key identifier: B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
Certificate issuer: /CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Certificate serial: 019A71B873B7D210704BE59CF80F1B40A3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
Manifest number: 11BC
Signing time: Tue 11 Nov 2025 07:01:44 +0000
Manifest this update: Tue 11 Nov 2025 07:01:44 +0000
Manifest next update: Wed 12 Nov 2025 07:01:44 +0000
Files and hashes: 1: tU0YlEyigIUFOR3pf6nWsrxhiZo.crl (hash: 6UO0faPjLpJQQiJXaOkwobFeuZJdtcYCRPn0Ab0d0NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:73:b7:d2:10:70:4b:e5:9c:f8:0f:1b:40:a3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Validity
Not Before: Nov 11 07:01:44 2025 GMT
Not After : Nov 12 07:01:44 2025 GMT
Subject: CN=cccf87eb75a0359c7070a7694657926ed37f6354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:12:0b:03:62:ef:e1:b2:4f:29:0a:fa:42:
79:04:2c:a1:9e:ea:6c:b0:86:db:59:4c:2e:32:ee:
13:c9:b5:56:91:35:cf:b9:c9:79:3e:f9:56:5e:c4:
21:4e:74:ef:63:0f:48:1d:76:4e:dc:7c:ff:6e:e9:
6b:97:27:e7:7b:f1:a1:06:65:a2:6e:86:99:59:1b:
2a:15:3e:3d:16:f9:e0:87:7a:8b:5e:a7:5e:61:41:
1a:7e:2f:dc:00:d3:6d:57:32:3c:01:03:d1:9c:08:
27:fe:96:64:d1:be:e3:c9:ef:af:f2:4d:2e:ca:fc:
9f:6f:7f:f8:10:17:b6:6f:0a:28:e9:75:1b:3b:86:
ef:08:91:24:1d:09:96:7d:f2:07:1c:30:3f:52:78:
c9:31:01:d5:9b:21:94:9a:a4:51:6b:2c:bf:bc:e0:
92:a4:2b:2e:97:0c:5c:9c:65:94:b6:17:6d:c6:b9:
4f:d8:47:47:e8:fc:62:04:d1:ee:52:3d:98:95:3c:
2a:26:43:cc:76:68:f5:af:04:93:f4:b6:7b:6c:02:
2a:e0:6b:15:20:85:6c:35:97:02:4e:21:ac:ff:f8:
13:c0:e6:ce:9f:d8:8e:7b:52:bd:97:9d:e7:fb:2d:
c7:97:db:3f:e6:b5:2d:38:bb:93:5d:c0:2c:f8:cf:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CF:87:EB:75:A0:35:9C:70:70:A7:69:46:57:92:6E:D3:7F:63:54
X509v3 Authority Key Identifier:
keyid:B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:92:43:3b:d2:17:bb:58:32:7a:25:02:c1:8a:16:3f:d8:58:
4a:ed:fb:cc:7d:1a:bf:9a:2e:b2:83:ce:6a:34:fa:39:4e:21:
56:46:f7:90:bd:a1:4d:d1:f1:68:a1:d1:fd:1c:8d:20:5a:17:
3e:2c:3e:d7:2b:65:8b:a3:f3:f6:03:c4:e7:0d:b3:dc:db:e2:
71:fb:9c:ed:57:ce:b0:5a:74:ee:b8:01:42:83:65:8c:9a:9b:
e1:a2:de:a6:c8:5b:f3:51:28:c1:86:e4:c3:2a:6f:e9:6b:21:
0c:30:94:0d:26:40:05:e1:c6:94:5d:7e:c3:95:46:4b:2c:10:
a5:82:52:a5:5e:6f:8b:58:4d:32:52:11:20:87:e9:44:90:c2:
ba:d7:ee:de:ba:d5:77:9e:9e:1b:8a:f3:1c:c0:07:6e:2e:7f:
80:de:74:78:35:1c:10:a0:c4:64:0f:be:78:60:9f:f0:59:80:
3e:36:ad:ad:df:f9:5c:5f:26:7c:c6:69:66:22:c1:11:c7:ca:
3f:a0:1d:e7:c3:f1:65:37:2a:5e:19:e6:df:16:6b:08:5d:47:
d7:80:34:be:11:fe:8e:af:ef:3b:b5:a0:eb:3c:76:bf:6c:15:
1e:c4:98:db:ae:76:4e:58:00:e7:9d:94:3a:55:89:06:5c:ba:
60:05:7c:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHO30hBwS+Wc+A8bQKPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NGQxODk0NGNhMjgwODUwNTM5MWRlOTdmYTlkNmIyYmM2
MTg5OWEwHhcNMjUxMTExMDcwMTQ0WhcNMjUxMTEyMDcwMTQ0WjAzMTEwLwYDVQQD
EyhjY2NmODdlYjc1YTAzNTljNzA3MGE3Njk0NjU3OTI2ZWQzN2Y2MzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZYSCwNi7+GyTykK+kJ5BCyhnups
sIbbWUwuMu4TybVWkTXPucl5PvlWXsQhTnTvYw9IHXZO3Hz/bulrlyfne/GhBmWi
boaZWRsqFT49Fvngh3qLXqdeYUEafi/cANNtVzI8AQPRnAgn/pZk0b7jye+v8k0u
yvyfb3/4EBe2bwoo6XUbO4bvCJEkHQmWffIHHDA/UnjJMQHVmyGUmqRRayy/vOCS
pCsulwxcnGWUthdtxrlP2EdH6PxiBNHuUj2YlTwqJkPMdmj1rwST9LZ7bAIq4GsV
IIVsNZcCTiGs//gTwObOn9iOe1K9l53n+y3Hl9s/5rUtOLuTXcAs+M+yJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzPh+t1oDWccHCnaUZXkm7Tf2NUMB8GA1UdIwQY
MBaAFLVNGJRMooCFBTkd6X+p1rK8YYmaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFUwWWxFeWlnSVVGT1IzcGY2bldzcnhoaVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xYzI5ODQtZmQ4My00MWJhLWIxZGMt
ZjY4M2I5NjgxZDYxLzEvdFUwWWxFeWlnSVVGT1IzcGY2bldzcnhoaVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xYzI5ODQtZmQ4My00MWJhLWIxZGMtZjY4M2I5NjgxZDYx
LzEvdFUwWWxFeWlnSVVGT1IzcGY2bldzcnhoaVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpJDO9IX
u1gyeiUCwYoWP9hYSu37zH0av5ousoPOajT6OU4hVkb3kL2hTdHxaKHR/RyNIFoX
Piw+1ytli6Pz9gPE5w2z3Nvicfuc7VfOsFp07rgBQoNljJqb4aLepshb81EowYbk
wypv6WshDDCUDSZABeHGlF1+w5VGSywQpYJSpV5vi1hNMlIRIIfpRJDCutfu3rrV
d56eG4rzHMAHbi5/gN50eDUcEKDEZA++eGCf8FmAPjatrd/5XF8mfMZpZiLBEcfK
P6Ad58PxZTcqXhnm3xZrCF1H14A0vhH+jq/vO7Wg6zx2v2wVHsSY2652TlgA552U
OlWJBly6YAV8SQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:51 2025 by rpki-client