Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
File: UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft (raw, json)
Hash identifier: XqVIUldqTYbj7a1vduweCbaBpZOfirtfNAremlW06bI=
Subject key identifier: D6:AB:5A:5B:4E:5B:6B:77:93:C0:6B:E1:2A:F4:3A:5B:8E:80:E3:9E
Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
Certificate issuer: /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Certificate serial: 019A71EEED270B84E199352F6AEDA1422C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
Manifest number: 14C1
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl (hash: h8SKEMhsps1rmLyPTsz31YJD2/K7hCKF8cRe059fbOM=)
2: _a7tAKf339v0StwY-99zGhTqG38.roa (hash: JYQNh/oqUzKN3SGNytd9bNClD0WxhF6t77T6aTG1SXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ed:27:0b:84:e1:99:35:2f:6a:ed:a1:42:2c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=d6ab5a5b4e5b6b7793c06be12af43a5b8e80e39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:f4:66:88:56:a3:2b:54:64:64:cc:09:2c:
84:94:d7:64:67:5f:d8:35:7c:6d:30:fc:27:a9:f3:
e6:57:0b:96:03:3e:07:7f:29:93:29:37:de:80:f5:
62:67:ef:07:73:95:f4:ae:53:11:1f:1c:3d:a2:1e:
19:a0:69:61:93:6a:48:09:84:7e:1e:17:1a:05:b1:
d5:92:de:fd:b8:a1:3e:33:7f:0a:ec:59:66:ef:c5:
72:fc:37:ce:7b:f7:52:3a:f2:ff:aa:b7:32:ea:f4:
95:47:15:47:3b:db:f3:29:42:35:3b:76:b4:3e:91:
4e:82:09:3a:fe:eb:b4:da:08:bd:99:dc:8d:ce:f5:
2a:e0:e8:2d:6d:0d:51:c6:96:9d:e0:78:25:a0:75:
89:5d:95:7c:c2:61:6d:5e:e5:1c:3c:a1:69:33:e4:
78:8a:2d:2e:02:88:28:36:84:59:78:dc:c6:06:8b:
d8:2d:27:5f:c6:2b:79:77:00:8a:38:82:ef:81:b9:
53:7b:9f:e8:93:90:5d:03:b1:99:c6:c7:78:25:b1:
db:07:c2:e3:da:a3:cc:79:38:af:c0:60:c4:8f:d3:
2e:da:8d:ea:80:3e:fc:53:34:f8:a8:73:27:62:61:
8c:6b:81:b7:71:b9:a6:5e:f6:9d:77:1f:94:e5:37:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:5A:5B:4E:5B:6B:77:93:C0:6B:E1:2A:F4:3A:5B:8E:80:E3:9E
X509v3 Authority Key Identifier:
keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:72:a5:18:7e:6b:8b:f0:77:05:60:11:15:1a:53:9f:2f:a5:
91:74:18:0d:9f:f1:e5:07:22:25:80:2e:57:e5:bd:f7:d0:c6:
9e:f6:dc:6f:ac:21:c6:c3:79:71:f1:bf:fe:0b:1c:5f:04:4e:
a0:b5:d2:5e:d2:a6:46:67:28:32:a3:b8:3e:90:8c:49:f1:e8:
f3:81:dc:9c:11:ef:6a:f8:4e:3a:4f:ef:4b:33:27:ed:e5:ad:
0e:a4:30:1c:e6:82:3b:4e:42:e9:6e:d4:f8:1b:bf:d4:ce:9e:
da:76:81:6c:b8:65:10:ee:22:6f:d9:16:3a:20:cc:f6:bc:79:
d5:bf:0d:d1:27:60:16:40:c6:dd:e9:0e:a3:e4:9e:65:17:77:
1d:9e:ae:c6:59:72:1b:ab:bf:6b:90:6d:ce:31:c7:4b:00:15:
dd:9d:b1:a6:a0:4e:b2:90:32:52:9d:d6:24:6a:1c:f1:85:d7:
32:bb:f6:d3:d5:53:70:18:b6:cf:41:ea:51:70:04:44:b9:a2:
26:6f:33:25:ba:33:da:a0:e9:17:81:23:12:c6:57:7b:88:96:
76:4c:c1:5d:bb:9f:08:60:3d:d2:59:83:d2:8c:6b:ef:13:d4:
f3:3d:ae:6c:e7:6e:42:27:67:3f:14:89:f3:c0:ea:6b:b1:24:
b2:28:3d:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7u0nC4ThmTUvau2hQiwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxM2JkZmVjNTViMDQ4YjBkMmYwM2I0M2JmNjZlM2U2N2U4
NjU1M2YwHhcNMjUxMTExMDgwMTE0WhcNMjUxMTEyMDgwMTE0WjAzMTEwLwYDVQQD
EyhkNmFiNWE1YjRlNWI2Yjc3OTNjMDZiZTEyYWY0M2E1YjhlODBlMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08n0ZohWoytUZGTMCSyElNdkZ1/Y
NXxtMPwnqfPmVwuWAz4HfymTKTfegPViZ+8Hc5X0rlMRHxw9oh4ZoGlhk2pICYR+
HhcaBbHVkt79uKE+M38K7Flm78Vy/DfOe/dSOvL/qrcy6vSVRxVHO9vzKUI1O3a0
PpFOggk6/uu02gi9mdyNzvUq4OgtbQ1Rxpad4HgloHWJXZV8wmFtXuUcPKFpM+R4
ii0uAogoNoRZeNzGBovYLSdfxit5dwCKOILvgblTe5/ok5BdA7GZxsd4JbHbB8Lj
2qPMeTivwGDEj9Mu2o3qgD78UzT4qHMnYmGMa4G3cbmmXvaddx+U5TdwKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNarWltOW2t3k8Br4Sr0OluOgOOeMB8GA1UdIwQY
MBaAFFE73+xVsEiw0vA7Q79m4+Z+hlU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jYmU2OTUtZDJkOS00ZDZmLTg3ZTIt
YTFjY2U2ZjgwY2EzLzEvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jYmU2OTUtZDJkOS00ZDZmLTg3ZTItYTFjY2U2ZjgwY2Ez
LzEvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnKlGH5r
i/B3BWARFRpTny+lkXQYDZ/x5QciJYAuV+W999DGnvbcb6whxsN5cfG//gscXwRO
oLXSXtKmRmcoMqO4PpCMSfHo84HcnBHvavhOOk/vSzMn7eWtDqQwHOaCO05C6W7U
+Bu/1M6e2naBbLhlEO4ib9kWOiDM9rx51b8N0SdgFkDG3ekOo+SeZRd3HZ6uxlly
G6u/a5BtzjHHSwAV3Z2xpqBOspAyUp3WJGoc8YXXMrv209VTcBi2z0HqUXAERLmi
Jm8zJboz2qDpF4EjEsZXe4iWdkzBXbufCGA90lmD0oxr7xPU8z2ubOduQidnPxSJ
88Dqa7Eksig9cw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:50 2025 by rpki-client