Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File: pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier: NkoZlWYK8n8rZHQ8Ge8O8gD1lA7EjtWFF+lfKEZSeQQ=
Subject key identifier: FA:95:07:2C:67:2A:B1:4E:43:A4:C6:90:2E:FD:45:84:39:E4:A3:18
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer: /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial: 019A73019DD1276CFDF44E29F95162F0AE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number: 06C4
Signing time: Tue 11 Nov 2025 13:01:16 +0000
Manifest this update: Tue 11 Nov 2025 13:01:16 +0000
Manifest next update: Wed 12 Nov 2025 13:01:16 +0000
Files and hashes: 1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: jq3tVidxlwHq++twRRwoH8SGDJ77bid9GC918tWHCW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:9d:d1:27:6c:fd:f4:4e:29:f9:51:62:f0:ae:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Validity
Not Before: Nov 11 13:01:16 2025 GMT
Not After : Nov 12 13:01:16 2025 GMT
Subject: CN=fa95072c672ab14e43a4c6902efd458439e4a318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:12:a2:90:2d:68:01:77:20:b9:41:82:7d:
10:04:98:c2:cc:13:2c:0c:06:93:9e:60:28:3c:13:
83:35:93:e5:28:16:0f:d2:29:e5:16:03:0b:79:6d:
f0:34:ed:52:fd:5b:a1:8c:37:1f:0c:b6:ac:04:aa:
2b:0d:ba:82:83:c4:46:43:29:4f:36:4d:d1:6b:e5:
6d:2c:14:9a:61:16:f1:ef:ce:aa:a0:c1:a9:3f:1f:
c4:9e:1d:73:c0:b0:bf:ad:42:8c:78:a8:f8:95:9e:
9f:82:7a:9c:9a:d8:5a:e8:49:6c:c3:cc:47:6d:26:
d9:33:79:3f:fd:5c:aa:73:b2:ef:7a:b7:a3:22:36:
e3:2c:83:82:ef:9a:fb:f1:e3:f5:06:30:64:0b:9c:
2e:40:46:f4:76:64:e1:7d:2e:a1:2a:ab:da:77:43:
74:01:71:1d:10:0a:7e:12:82:64:b6:de:09:78:63:
cf:d6:af:5a:30:c8:28:eb:d9:8e:5c:c5:b3:2c:9b:
73:24:6d:3b:07:68:47:64:e7:c3:0a:b3:bf:bb:8e:
d3:b5:87:d2:37:71:0a:ab:dc:12:26:a9:49:20:90:
42:ef:29:78:b9:92:57:9a:1b:2d:d4:79:20:84:70:
33:5d:6e:09:a1:ec:0a:0b:ad:cf:59:5a:b7:11:fb:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:95:07:2C:67:2A:B1:4E:43:A4:C6:90:2E:FD:45:84:39:E4:A3:18
X509v3 Authority Key Identifier:
keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a9:60:44:98:29:e9:1e:31:ea:3b:d0:b4:00:3c:50:14:5d:
3b:5b:9e:d1:a0:3a:0f:de:7f:9e:37:e9:26:12:b6:63:47:c4:
8f:88:70:e9:4d:e5:bb:14:3e:9e:5e:c1:0a:68:a3:cf:52:c3:
45:cf:2a:c7:e5:01:25:b9:e7:8b:31:e1:62:c0:de:21:b2:0d:
57:9d:cb:09:07:85:fb:08:22:7f:15:60:66:be:d2:1c:60:93:
4f:3d:e9:bf:99:a6:aa:7b:72:5c:e7:26:e1:2f:df:87:ea:58:
32:cc:38:5a:10:07:00:d2:d7:45:9c:14:7c:ec:6e:ff:c6:56:
56:c9:d5:dd:c7:27:7a:7d:2a:bc:93:56:38:b4:52:5c:43:4b:
68:16:ce:09:dd:3c:7f:85:78:b7:69:5a:b8:7b:f3:46:7a:c6:
9d:3f:59:1e:a0:28:05:0e:05:62:59:e2:d0:7c:33:40:e5:88:
39:86:c3:7c:ae:78:9b:f0:b3:71:ab:a2:82:dd:35:df:b1:d1:
5f:28:9c:8c:aa:d8:12:67:a1:68:9a:aa:9b:d4:e5:f7:e5:5d:
b4:84:6d:af:0b:50:54:a0:5d:0d:dc:0f:59:eb:6a:c0:5d:3b:
02:a0:ef:18:e8:a5:fc:1e:52:51:e4:1c:aa:c0:5c:c5:65:d7:
b0:d0:b6:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAZ3RJ2z99E4p+VFi8K4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NDQ3ODRmYzJmNTZhZGFkZTdkYjc2MjMzZDEzNmVlOWI3
YmViYzcwHhcNMjUxMTExMTMwMTE2WhcNMjUxMTEyMTMwMTE2WjAzMTEwLwYDVQQD
EyhmYTk1MDcyYzY3MmFiMTRlNDNhNGM2OTAyZWZkNDU4NDM5ZTRhMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g8SopAtaAF3ILlBgn0QBJjCzBMs
DAaTnmAoPBODNZPlKBYP0inlFgMLeW3wNO1S/VuhjDcfDLasBKorDbqCg8RGQylP
Nk3Ra+VtLBSaYRbx786qoMGpPx/Enh1zwLC/rUKMeKj4lZ6fgnqcmtha6Elsw8xH
bSbZM3k//Vyqc7LverejIjbjLIOC75r78eP1BjBkC5wuQEb0dmThfS6hKqvad0N0
AXEdEAp+EoJktt4JeGPP1q9aMMgo69mOXMWzLJtzJG07B2hHZOfDCrO/u47TtYfS
N3EKq9wSJqlJIJBC7yl4uZJXmhst1HkghHAzXW4JoewKC63PWVq3EfuSTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqVByxnKrFOQ6TGkC79RYQ55KMYMB8GA1UdIwQY
MBaAFKVEeE/C9Wra3n23YjPRNu6be+vHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVSNFQ4TDFhdHJlZmJkaU05RTI3cHQ3NjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80OGY3OTktNDQ0My00OWY4LTkyNDIt
OGNiZWVmYzkyZjlhLzEvcFVSNFQ4TDFhdHJlZmJkaU05RTI3cHQ3NjhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80OGY3OTktNDQ0My00OWY4LTkyNDItOGNiZWVmYzkyZjlh
LzEvcFVSNFQ4TDFhdHJlZmJkaU05RTI3cHQ3NjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKlgRJgp
6R4x6jvQtAA8UBRdO1ue0aA6D95/njfpJhK2Y0fEj4hw6U3luxQ+nl7BCmijz1LD
Rc8qx+UBJbnnizHhYsDeIbINV53LCQeF+wgifxVgZr7SHGCTTz3pv5mmqntyXOcm
4S/fh+pYMsw4WhAHANLXRZwUfOxu/8ZWVsnV3ccnen0qvJNWOLRSXENLaBbOCd08
f4V4t2lauHvzRnrGnT9ZHqAoBQ4FYlni0HwzQOWIOYbDfK54m/Czcauigt0137HR
XyicjKrYEmehaJqqm9Tl9+VdtIRtrwtQVKBdDdwPWetqwF07AqDvGOil/B5SUeQc
qsBcxWXXsNC2Yg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:50 2025 by rpki-client