Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
File: UW2UBk9zhVXozjZaGVfWnnaICcQ.mft (raw, json)
Hash identifier: jtphpN3C9wVrp9etDpr6NgDBpk6jrrYILGtlXW+APAM=
Subject key identifier: AB:A7:2F:DE:5D:83:2C:6E:AF:91:F6:39:09:B6:43:99:88:E8:F8:0E
Authority key identifier: 51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
Certificate issuer: /CN=516d94064f738555e8ce365a1957d69e768809c4
Certificate serial: 019A71B92D4DE1AC63ECCAB4E8EC6D3A10F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
Manifest number: 0700
Signing time: Tue 11 Nov 2025 07:02:32 +0000
Manifest this update: Tue 11 Nov 2025 07:02:32 +0000
Manifest next update: Wed 12 Nov 2025 07:02:32 +0000
Files and hashes: 1: UW2UBk9zhVXozjZaGVfWnnaICcQ.crl (hash: igERFOIJ7IR/vLfG1/NG6bB4IPWwheO5m+Nwd/e45u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2d:4d:e1:ac:63:ec:ca:b4:e8:ec:6d:3a:10:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=516d94064f738555e8ce365a1957d69e768809c4
Validity
Not Before: Nov 11 07:02:32 2025 GMT
Not After : Nov 12 07:02:32 2025 GMT
Subject: CN=aba72fde5d832c6eaf91f63909b6439988e8f80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:53:3c:9b:23:a9:c1:75:c9:f6:06:22:f2:
37:51:2b:99:46:cf:51:ea:83:42:22:b6:36:0c:ba:
52:0c:b2:00:26:1e:38:de:4b:1c:5d:02:55:34:54:
4f:fa:16:c5:2f:8b:17:f0:bc:7e:1a:16:5e:b7:5e:
56:f0:89:22:00:07:5f:30:9e:29:ac:78:b1:cd:8b:
2e:43:a3:af:b4:0c:0a:d0:ec:72:44:3b:61:c6:56:
40:ae:65:81:c7:66:82:ce:6d:96:9b:09:d4:a6:ae:
42:a5:fa:39:40:b2:cc:f8:e3:fe:5c:bb:bd:7f:c3:
fc:7e:ac:ac:fe:29:7f:aa:77:84:aa:7a:22:1b:43:
50:c5:e9:52:ca:dd:ae:5d:69:9a:48:b6:e6:44:19:
21:61:1e:50:fc:fe:fd:35:f8:73:37:d4:da:6d:a6:
99:04:2f:60:39:62:5f:1b:c2:2e:41:26:cc:d8:49:
b5:c2:b1:c1:39:fa:2d:d2:d3:8d:fa:0d:8d:df:cf:
15:14:8d:60:e7:1e:b2:01:3b:83:c0:11:72:fd:c1:
1e:ab:c7:ee:3f:ec:5e:cc:a9:cf:1e:dd:a7:ff:4d:
80:14:c8:74:94:60:89:e9:9d:96:64:1b:b8:45:a6:
15:dd:c0:ec:39:04:87:9a:f3:b2:24:e2:3f:6a:15:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A7:2F:DE:5D:83:2C:6E:AF:91:F6:39:09:B6:43:99:88:E8:F8:0E
X509v3 Authority Key Identifier:
keyid:51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e8:45:98:59:bb:c8:36:c4:02:6f:2a:70:c2:9f:fa:07:27:
dc:ce:b5:63:80:ec:65:46:52:b6:2d:c1:9f:dd:f1:06:5f:09:
f1:3f:7c:11:1f:49:9b:f8:61:15:7a:d1:00:9c:de:cc:b3:7b:
e5:1b:25:2b:c7:a3:d6:96:88:55:84:df:d9:9f:36:0e:a4:a8:
b2:55:18:56:e4:f1:c7:17:29:9e:6b:2c:a5:2f:71:c3:87:30:
65:d0:0b:6b:2c:2f:43:5b:e5:3f:b8:d2:82:d0:0b:83:57:7f:
5e:57:c7:a4:db:e4:90:c8:c4:80:62:ee:cc:0e:36:22:78:d9:
29:19:72:19:4b:9b:cf:15:16:ec:ef:88:95:e1:1b:76:1b:38:
eb:7f:4e:cd:81:8c:ad:80:87:dd:bd:a6:b8:d1:3f:17:22:3c:
9c:11:bc:65:93:6e:dc:43:f4:cb:8f:82:b8:dd:97:a7:43:9f:
b5:2e:35:0d:cd:44:1f:4b:f2:20:c1:71:e6:2c:34:4c:fc:fe:
39:9a:6e:c7:d5:bb:3c:42:9e:cd:10:06:76:5b:a4:5f:63:2d:
64:94:1e:bb:ee:fd:c1:b4:03:8f:fc:33:05:3c:00:39:7b:cd:
c9:82:2f:42:f2:9f:14:23:0c:cd:bb:c6:90:93:80:b2:59:05:
cc:52:ea:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuS1N4axj7Mq06OxtOhD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNmQ5NDA2NGY3Mzg1NTVlOGNlMzY1YTE5NTdkNjllNzY4
ODA5YzQwHhcNMjUxMTExMDcwMjMyWhcNMjUxMTEyMDcwMjMyWjAzMTEwLwYDVQQD
EyhhYmE3MmZkZTVkODMyYzZlYWY5MWY2MzkwOWI2NDM5OTg4ZThmODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVdTPJsjqcF1yfYGIvI3USuZRs9R
6oNCIrY2DLpSDLIAJh443kscXQJVNFRP+hbFL4sX8Lx+GhZet15W8IkiAAdfMJ4p
rHixzYsuQ6OvtAwK0OxyRDthxlZArmWBx2aCzm2WmwnUpq5Cpfo5QLLM+OP+XLu9
f8P8fqys/il/qneEqnoiG0NQxelSyt2uXWmaSLbmRBkhYR5Q/P79NfhzN9TabaaZ
BC9gOWJfG8IuQSbM2Em1wrHBOfot0tON+g2N388VFI1g5x6yATuDwBFy/cEeq8fu
P+xezKnPHt2n/02AFMh0lGCJ6Z2WZBu4RaYV3cDsOQSHmvOyJOI/ahWbTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKunL95dgyxur5H2OQm2Q5mI6PgOMB8GA1UdIwQY
MBaAFFFtlAZPc4VV6M42WhlX1p52iAnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVcyVUJrOXpoVlhvempaYUdWZldubmFJQ2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iODE4OTUtYzYwNS00MWUyLWIyODMt
YzA1NjVmYTg0MGQ0LzEvVVcyVUJrOXpoVlhvempaYUdWZldubmFJQ2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iODE4OTUtYzYwNS00MWUyLWIyODMtYzA1NjVmYTg0MGQ0
LzEvVVcyVUJrOXpoVlhvempaYUdWZldubmFJQ2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuhFmFm7
yDbEAm8qcMKf+gcn3M61Y4DsZUZSti3Bn93xBl8J8T98ER9Jm/hhFXrRAJzezLN7
5RslK8ej1paIVYTf2Z82DqSoslUYVuTxxxcpnmsspS9xw4cwZdALaywvQ1vlP7jS
gtALg1d/XlfHpNvkkMjEgGLuzA42InjZKRlyGUubzxUW7O+IleEbdhs4639OzYGM
rYCH3b2muNE/FyI8nBG8ZZNu3EP0y4+CuN2Xp0OftS41Dc1EH0vyIMFx5iw0TPz+
OZpux9W7PEKezRAGdlukX2MtZJQeu+79wbQDj/wzBTwAOXvNyYIvQvKfFCMMzbvG
kJOAslkFzFLqxw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:18 2025 by rpki-client