Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File: u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier: XXLE82SEYmuxr0WQvnksG/9CrtBoAogeeezJXhAOUGI=
Subject key identifier: 5F:8F:FB:03:B9:B4:30:21:B9:3C:2C:F6:57:2B:B2:8C:E3:C5:AC:C4
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial: 019922C304A6AD2EFF0FDCFC0E566B31E23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number: 0572
Signing time: Sun 07 Sep 2025 06:00:29 +0000
Manifest this update: Sun 07 Sep 2025 06:00:29 +0000
Manifest next update: Mon 08 Sep 2025 06:00:29 +0000
Files and hashes: 1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: ST8uL1xutk/iYfaM4iZ7I8JaTRmDNmPLId7cPtOSk7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:04:a6:ad:2e:ff:0f:dc:fc:0e:56:6b:31:e2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Validity
Not Before: Sep 7 06:00:29 2025 GMT
Not After : Sep 8 06:00:29 2025 GMT
Subject: CN=5f8ffb03b9b43021b93c2cf6572bb28ce3c5acc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:28:e2:20:48:18:6d:4b:b2:a5:bd:d7:4c:
12:49:0d:0e:29:2e:65:63:b6:cc:bd:a5:bc:2a:65:
a4:f6:11:32:55:be:90:dd:d3:44:73:9f:e5:4d:fb:
ea:06:1e:b6:5a:36:c5:cc:f8:eb:fd:ff:d5:b2:50:
63:93:5a:c2:0e:c8:b4:7d:5f:c1:56:83:67:00:a0:
b8:73:0e:2c:53:35:ba:71:a8:0e:22:c7:d6:c5:f2:
61:a7:cb:6f:c1:36:52:eb:8a:69:27:ce:06:fd:42:
b9:c1:18:aa:da:a1:c9:a1:9a:20:3d:71:1a:6d:48:
f4:46:bf:d3:1f:d6:12:6b:60:55:5a:ef:ee:b1:ea:
6f:c0:a5:39:c1:9d:06:60:24:1d:5a:7b:66:6d:45:
60:76:2a:66:17:f1:ce:68:f4:3f:38:dc:93:df:5c:
5f:38:3a:24:17:74:35:26:07:86:42:38:c4:9c:86:
b0:96:1e:1f:19:ab:2a:2c:57:29:da:b9:7f:75:5d:
cb:95:b9:12:5f:91:5c:71:79:1e:c1:a3:83:ca:d4:
73:cf:6d:1e:72:a1:82:18:d8:7b:0f:ba:10:21:3d:
73:70:aa:98:77:8d:8e:3f:42:97:dd:13:3e:41:18:
16:ab:19:54:60:a7:34:eb:6b:c5:e9:06:a2:20:52:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8F:FB:03:B9:B4:30:21:B9:3C:2C:F6:57:2B:B2:8C:E3:C5:AC:C4
X509v3 Authority Key Identifier:
keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e4:5a:e0:8e:1d:c4:67:12:68:da:ad:92:4a:33:2b:bd:2a:
85:96:b0:e2:4a:b9:f4:82:2e:37:41:49:aa:a0:1c:99:2f:cd:
8d:3d:d5:09:7a:20:5b:7b:09:7d:1d:00:6c:9b:3d:ef:db:f3:
09:0e:03:62:8e:6f:81:41:63:e7:a5:b5:2e:6c:b4:bb:7e:79:
24:c7:69:93:36:24:d9:88:65:46:e9:43:39:24:ce:df:38:02:
b9:5c:5b:3d:28:6d:df:6f:75:6b:8f:26:d7:0e:cd:ee:04:37:
41:da:a5:a5:42:bc:3e:51:5b:e3:8e:cc:8b:78:6b:9f:d9:95:
46:4d:35:64:76:8b:b0:b2:49:39:7d:cf:f3:58:3b:9f:ea:0d:
60:72:14:f7:b9:54:b4:ad:5e:74:40:ad:f8:86:d4:69:72:ab:
d0:0b:68:da:b7:99:c2:e1:d0:52:c2:2a:15:c2:c4:d2:ce:f9:
7d:10:7d:68:ac:80:e5:b6:7f:10:de:d8:b4:4e:a5:ca:35:bd:
31:bc:d3:00:e7:68:4d:31:23:cd:d6:7d:dd:29:64:4b:d3:3b:
0c:6b:d1:0d:17:c3:09:59:ce:59:59:33:db:07:d7:56:03:e1:
ee:e5:7e:16:2b:9b:d7:71:c6:b6:11:09:d9:cc:6c:e1:08:4a:
87:ef:2e:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwwSmrS7/D9z8DlZrMeI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjBmOTEwMmRiMmViZTFhZjFkMDc1MTY4NDQzODZhNzk2
M2VmNWMwHhcNMjUwOTA3MDYwMDI5WhcNMjUwOTA4MDYwMDI5WjAzMTEwLwYDVQQD
Eyg1ZjhmZmIwM2I5YjQzMDIxYjkzYzJjZjY1NzJiYjI4Y2UzYzVhY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHco4iBIGG1LsqW910wSSQ0OKS5l
Y7bMvaW8KmWk9hEyVb6Q3dNEc5/lTfvqBh62WjbFzPjr/f/VslBjk1rCDsi0fV/B
VoNnAKC4cw4sUzW6cagOIsfWxfJhp8tvwTZS64ppJ84G/UK5wRiq2qHJoZogPXEa
bUj0Rr/TH9YSa2BVWu/usepvwKU5wZ0GYCQdWntmbUVgdipmF/HOaPQ/ONyT31xf
ODokF3Q1JgeGQjjEnIawlh4fGasqLFcp2rl/dV3LlbkSX5FccXkewaODytRzz20e
cqGCGNh7D7oQIT1zcKqYd42OP0KX3RM+QRgWqxlUYKc062vF6QaiIFJdGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+P+wO5tDAhuTws9lcrsozjxazEMB8GA1UdIwQY
MBaAFLvw+RAtsuvhrx0HUWhEOGp5Y+9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kMGRhNGQtOTU3Yy00MmIzLWI3MWMt
MDcyNzM5NjgzMzQ2LzEvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kMGRhNGQtOTU3Yy00MmIzLWI3MWMtMDcyNzM5NjgzMzQ2
LzEvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+Ra4I4d
xGcSaNqtkkozK70qhZaw4kq59IIuN0FJqqAcmS/NjT3VCXogW3sJfR0AbJs979vz
CQ4DYo5vgUFj56W1Lmy0u355JMdpkzYk2YhlRulDOSTO3zgCuVxbPSht3291a48m
1w7N7gQ3QdqlpUK8PlFb447Mi3hrn9mVRk01ZHaLsLJJOX3P81g7n+oNYHIU97lU
tK1edECt+IbUaXKr0Ato2reZwuHQUsIqFcLE0s75fRB9aKyA5bZ/EN7YtE6lyjW9
MbzTAOdoTTEjzdZ93SlkS9M7DGvRDRfDCVnOWVkz2wfXVgPh7uV+Fiub13HGthEJ
2cxs4QhKh+8uhg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:59 2025 by rpki-client