Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier: BozkGMpvA+WLYqWFGTdq/aoiRli0C+bnZBOoN6/WS4A=
Subject key identifier: A8:23:9B:A7:87:BA:4F:2D:AD:3F:31:DB:B0:E7:A8:6D:DF:90:AB:C5
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial: 019921B053FA4A92313726988CB7433AB005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number: 0AF5
Signing time: Sun 07 Sep 2025 01:00:27 +0000
Manifest this update: Sun 07 Sep 2025 01:00:27 +0000
Manifest next update: Mon 08 Sep 2025 01:00:27 +0000
Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: NWo1GcAPkG4KDBlvz0ivAysuSmlT8wYHq25Rig2xTNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:53:fa:4a:92:31:37:26:98:8c:b7:43:3a:b0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Validity
Not Before: Sep 7 01:00:27 2025 GMT
Not After : Sep 8 01:00:27 2025 GMT
Subject: CN=a8239ba787ba4f2dad3f31dbb0e7a86ddf90abc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0c:58:82:6b:03:fb:7f:16:97:3e:15:f8:d4:
be:48:57:63:40:4e:f2:00:b6:ca:95:7f:90:5c:14:
87:a4:0d:dd:9b:dd:9a:6c:2e:c0:1a:25:a4:2e:2d:
ea:27:c8:08:0d:a2:37:c3:f7:0c:34:42:15:4e:00:
9b:5f:7d:3b:75:d0:7d:98:35:6a:f9:5e:04:d8:61:
66:69:fd:c6:e9:a4:c7:a9:e0:80:cd:b3:ec:28:ce:
44:f1:b8:d1:c1:43:44:ee:83:38:d2:cb:dd:c8:16:
a8:3a:66:0e:43:cb:0c:1b:2a:dc:37:db:62:f7:f9:
69:aa:63:5a:00:c9:0b:fd:d2:83:bc:e6:85:61:a4:
16:42:71:aa:71:e4:4d:20:a4:4b:65:75:cc:9f:76:
57:63:6d:18:a9:01:25:01:82:86:75:20:63:bd:40:
fd:00:23:aa:cd:34:e0:61:38:2e:ec:e8:b7:69:8b:
0f:dd:42:ab:0f:8c:b0:9e:0d:24:2b:e5:dc:59:06:
b2:e5:a8:b1:6a:bb:30:dd:c0:4c:7d:d1:e7:1d:71:
41:01:3a:3a:2a:48:f5:05:51:6b:83:1d:30:e4:60:
49:a9:a6:86:8d:3f:d9:0a:ce:4e:44:9c:38:1d:5f:
c0:cb:d8:27:58:9f:e3:dd:e5:09:09:a9:8f:04:0f:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:23:9B:A7:87:BA:4F:2D:AD:3F:31:DB:B0:E7:A8:6D:DF:90:AB:C5
X509v3 Authority Key Identifier:
keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:43:c1:49:a4:da:2a:d1:7e:a7:e4:ce:9c:2e:da:10:41:8c:
9c:a2:4d:13:1a:58:4d:49:07:06:96:2f:00:aa:16:5f:5d:73:
4d:cd:09:5a:6b:c8:1e:56:e2:e1:4a:01:79:a4:17:55:f8:3c:
81:2f:93:eb:85:d8:52:28:53:16:9b:9b:8f:08:b9:b9:19:cc:
f7:30:d1:e3:ed:e0:33:3f:c0:f9:42:a1:dc:31:37:a2:55:0d:
8b:e4:0e:10:a3:1e:85:8e:41:0e:4b:06:95:ea:f9:6a:d7:f7:
d2:d7:1b:d1:8f:2d:f7:62:6d:61:e3:02:c5:e4:32:12:b1:ee:
32:59:e2:81:69:a1:c3:db:c9:8d:09:ef:b3:41:7e:bd:2e:0f:
e9:ce:ed:51:5b:05:17:c7:48:c7:b2:d6:c0:93:da:20:c6:da:
13:80:c1:44:6b:00:14:30:23:b4:03:66:c7:3e:38:94:94:5e:
9c:4c:2a:76:74:7a:b9:65:f0:83:cc:69:4a:aa:d0:5e:fe:7d:
d0:a7:98:ae:66:5f:8a:6f:c0:ee:e9:84:43:23:dd:31:1b:90:
a0:57:0d:3c:01:73:2c:e9:77:fb:83:d7:e8:7c:f2:2c:99:e5:
84:a6:07:e9:c6:7b:9e:e9:7b:cf:59:51:12:1b:c4:dd:49:94:
63:42:0e:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsFP6SpIxNyaYjLdDOrAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjhlNjZmYWQ4MTQ2NDU5ODRmZDRlYWFkMzEzYjZmZTAw
NTg5YjcwHhcNMjUwOTA3MDEwMDI3WhcNMjUwOTA4MDEwMDI3WjAzMTEwLwYDVQQD
EyhhODIzOWJhNzg3YmE0ZjJkYWQzZjMxZGJiMGU3YTg2ZGRmOTBhYmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwxYgmsD+38Wlz4V+NS+SFdjQE7y
ALbKlX+QXBSHpA3dm92abC7AGiWkLi3qJ8gIDaI3w/cMNEIVTgCbX307ddB9mDVq
+V4E2GFmaf3G6aTHqeCAzbPsKM5E8bjRwUNE7oM40svdyBaoOmYOQ8sMGyrcN9ti
9/lpqmNaAMkL/dKDvOaFYaQWQnGqceRNIKRLZXXMn3ZXY20YqQElAYKGdSBjvUD9
ACOqzTTgYTgu7Oi3aYsP3UKrD4ywng0kK+XcWQay5aixarsw3cBMfdHnHXFBATo6
Kkj1BVFrgx0w5GBJqaaGjT/ZCs5ORJw4HV/Ay9gnWJ/j3eUJCamPBA99IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgjm6eHuk8trT8x27DnqG3fkKvFMB8GA1UdIwQY
MBaAFLm45m+tgUZFmE/U6q0xO2/gBYm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wMjQ1ZWItY2FhMi00MDYzLWJkZWYt
MmE2MWM0ZTNlMDU3LzEvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8wMjQ1ZWItY2FhMi00MDYzLWJkZWYtMmE2MWM0ZTNlMDU3
LzEvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkPBSaTa
KtF+p+TOnC7aEEGMnKJNExpYTUkHBpYvAKoWX11zTc0JWmvIHlbi4UoBeaQXVfg8
gS+T64XYUihTFpubjwi5uRnM9zDR4+3gMz/A+UKh3DE3olUNi+QOEKMehY5BDksG
ler5atf30tcb0Y8t92JtYeMCxeQyErHuMlnigWmhw9vJjQnvs0F+vS4P6c7tUVsF
F8dIx7LWwJPaIMbaE4DBRGsAFDAjtANmxz44lJRenEwqdnR6uWXwg8xpSqrQXv59
0KeYrmZfim/A7umEQyPdMRuQoFcNPAFzLOl3+4PX6HzyLJnlhKYH6cZ7nul7z1lR
EhvE3UmUY0IOgQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:11 2025 by rpki-client