Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
File: urOPSeByR4vlU-z_NjXz3Zd1gQE.mft (raw, json)
Hash identifier: AdS8IcSemuECxgA9bdvD3lWVPVS5oyZghgU01NAUzVg=
Subject key identifier: 34:6A:62:1B:81:6B:73:26:7D:58:C6:E5:5F:9F:CD:34:7E:6B:34:F2
Authority key identifier: BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
Certificate issuer: /CN=bab38f49e072478be553ecff3635f3dd97758101
Certificate serial: 0199228C8DB3FD1F49CA6AD6C29579DA95A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
Manifest number: 1060
Signing time: Sun 07 Sep 2025 05:01:00 +0000
Manifest this update: Sun 07 Sep 2025 05:01:00 +0000
Manifest next update: Mon 08 Sep 2025 05:01:00 +0000
Files and hashes: 1: urOPSeByR4vlU-z_NjXz3Zd1gQE.crl (hash: i75tTWg5igAhoKfQ/eg5aqALsZfBF7k5Q6eU+7InFQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:8d:b3:fd:1f:49:ca:6a:d6:c2:95:79:da:95:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab38f49e072478be553ecff3635f3dd97758101
Validity
Not Before: Sep 7 05:01:00 2025 GMT
Not After : Sep 8 05:01:00 2025 GMT
Subject: CN=346a621b816b73267d58c6e55f9fcd347e6b34f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:f7:cf:58:48:e0:ec:68:49:b4:ee:96:e0:
9b:da:d3:c3:38:1f:b3:34:29:ed:11:19:18:23:29:
f4:66:80:0f:5a:eb:4f:07:61:be:4d:da:e8:42:41:
ea:fd:0f:99:c2:5a:06:9b:19:d0:b6:95:dc:6b:4d:
4c:3b:ac:4b:98:c6:fa:bf:05:02:3f:ff:d2:15:70:
9b:16:48:a9:bd:a5:b1:ea:1f:b5:51:c1:4b:3b:03:
40:47:e2:4d:96:07:22:b0:78:2e:39:8a:3c:24:7d:
1c:e1:a4:b8:37:14:d0:51:4b:e2:02:5e:c5:57:94:
06:d1:ab:b6:2e:1d:46:57:21:3f:77:fa:24:fd:32:
14:a3:fe:4a:8e:46:fb:bc:91:96:a2:2d:7a:ad:49:
6f:ff:8f:b5:78:ac:f2:7c:9c:b1:75:c9:65:f6:bf:
f0:08:2b:d6:26:1f:99:d7:67:35:10:70:60:4b:c9:
b9:2e:77:07:e7:ca:2e:76:54:5b:78:81:69:3d:0f:
e1:11:da:97:9d:4f:16:f1:f4:aa:0f:1d:33:2c:91:
b6:8c:68:03:a1:05:8e:79:be:57:c8:d1:b5:a4:11:
86:a7:b4:3a:47:16:60:01:8f:63:b2:44:6c:03:c2:
a1:ea:a5:53:d4:8a:93:ff:cb:73:6c:b2:60:8b:98:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:62:1B:81:6B:73:26:7D:58:C6:E5:5F:9F:CD:34:7E:6B:34:F2
X509v3 Authority Key Identifier:
keyid:BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:95:f3:00:3b:5c:37:8a:7c:5c:fb:8b:62:3c:3d:4c:3a:bd:
2e:4b:2d:1f:75:76:8c:3c:77:a3:d2:8b:ab:d9:b1:62:01:5d:
05:70:1c:94:98:5e:56:35:3b:3d:3e:b8:88:86:6e:71:7c:03:
20:2e:94:0e:6c:3c:46:69:5c:45:c3:da:c5:0d:1d:0e:7f:41:
bb:3f:93:df:04:47:4f:87:c4:26:fa:1b:eb:2f:6b:3d:ea:e8:
0b:12:cf:78:a0:03:79:4e:de:c4:9d:00:38:f5:20:bc:fc:49:
cb:0f:24:89:2d:81:e6:f4:64:54:1c:35:b5:c1:07:4b:8a:62:
15:52:dc:70:06:a2:7c:b8:6f:1e:a0:7f:b4:b8:5e:45:9a:1b:
63:a8:5d:5b:3b:a0:17:d0:88:01:7b:85:b2:9d:7f:24:38:d7:
c5:25:9d:3b:32:c3:e8:40:79:0c:96:08:e4:e8:59:99:48:88:
da:18:95:0a:8c:04:ea:64:f7:a3:9c:14:53:ea:2f:c3:2c:11:
7c:2f:32:f8:18:7e:86:5f:c5:c2:19:b4:e7:68:c0:3b:d3:85:
a5:73:22:d4:ac:d4:27:e1:8e:34:14:00:7b:04:9b:3c:a8:af:
17:3e:3d:94:73:a6:2d:44:19:96:ce:78:9b:59:d6:28:c7:35:
aa:23:66:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijI2z/R9JymrWwpV52pWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjM4ZjQ5ZTA3MjQ3OGJlNTUzZWNmZjM2MzVmM2RkOTc3
NTgxMDEwHhcNMjUwOTA3MDUwMTAwWhcNMjUwOTA4MDUwMTAwWjAzMTEwLwYDVQQD
EygzNDZhNjIxYjgxNmI3MzI2N2Q1OGM2ZTU1ZjlmY2QzNDdlNmIzNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt73z1hI4OxoSbTuluCb2tPDOB+z
NCntERkYIyn0ZoAPWutPB2G+TdroQkHq/Q+ZwloGmxnQtpXca01MO6xLmMb6vwUC
P//SFXCbFkipvaWx6h+1UcFLOwNAR+JNlgcisHguOYo8JH0c4aS4NxTQUUviAl7F
V5QG0au2Lh1GVyE/d/ok/TIUo/5Kjkb7vJGWoi16rUlv/4+1eKzyfJyxdcll9r/w
CCvWJh+Z12c1EHBgS8m5LncH58oudlRbeIFpPQ/hEdqXnU8W8fSqDx0zLJG2jGgD
oQWOeb5XyNG1pBGGp7Q6RxZgAY9jskRsA8Kh6qVT1IqT/8tzbLJgi5jfFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRqYhuBa3MmfVjG5V+fzTR+azTyMB8GA1UdIwQY
MBaAFLqzj0ngckeL5VPs/zY1892XdYEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJPUFNlQnlSNHZsVS16X05qWHozWmQxZ1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zOTJiMjMtYTVlYS00NThiLWJjMzgt
MzQ5YjUyMzM4ZGJkLzEvdXJPUFNlQnlSNHZsVS16X05qWHozWmQxZ1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zOTJiMjMtYTVlYS00NThiLWJjMzgtMzQ5YjUyMzM4ZGJk
LzEvdXJPUFNlQnlSNHZsVS16X05qWHozWmQxZ1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJXzADtc
N4p8XPuLYjw9TDq9LkstH3V2jDx3o9KLq9mxYgFdBXAclJheVjU7PT64iIZucXwD
IC6UDmw8RmlcRcPaxQ0dDn9Buz+T3wRHT4fEJvob6y9rPeroCxLPeKADeU7exJ0A
OPUgvPxJyw8kiS2B5vRkVBw1tcEHS4piFVLccAaifLhvHqB/tLheRZobY6hdWzug
F9CIAXuFsp1/JDjXxSWdOzLD6EB5DJYI5OhZmUiI2hiVCowE6mT3o5wUU+ovwywR
fC8y+Bh+hl/Fwhm052jAO9OFpXMi1KzUJ+GONBQAewSbPKivFz49lHOmLUQZls54
m1nWKMc1qiNmHg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:03 2025 by rpki-client