Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File: uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier: TPp2BrmIfB0XI2VuBtEAO7w6FkRkn/P71mTNajPgmI4=
Subject key identifier: D2:4F:ED:32:1A:CE:A3:75:97:CF:AC:E9:A0:A0:D8:5A:8B:A6:6E:FC
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial: 0199221F1EF68BB3834E4BC512948E4136C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number: 1603
Signing time: Sun 07 Sep 2025 03:01:28 +0000
Manifest this update: Sun 07 Sep 2025 03:01:28 +0000
Manifest next update: Mon 08 Sep 2025 03:01:28 +0000
Files and hashes: 1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: 4mOo0uzo7BMJkDXx/anF8hKlI+AI9wtXqi9h9Um1rAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:1e:f6:8b:b3:83:4e:4b:c5:12:94:8e:41:36:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Validity
Not Before: Sep 7 03:01:28 2025 GMT
Not After : Sep 8 03:01:28 2025 GMT
Subject: CN=d24fed321acea37597cface9a0a0d85a8ba66efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:36:b2:68:0f:28:72:4a:76:af:71:90:74:
76:fb:02:a6:38:45:13:f2:d4:1e:69:34:b9:d1:3f:
b9:b8:f1:43:cd:e3:15:32:08:f3:64:c2:f3:1c:31:
23:8a:cf:48:b3:2b:a5:bf:7b:be:b5:21:02:71:ce:
42:cc:90:3b:8b:3d:c1:75:83:27:39:c2:b1:b3:0c:
18:55:5a:6c:4b:1b:f3:6f:4e:0b:05:c2:69:43:d2:
ac:d9:9d:24:3a:b9:f4:ed:8e:10:2b:29:94:27:19:
7c:12:33:6e:7b:27:62:f0:be:17:1f:70:76:e2:82:
5b:76:75:54:93:4c:b0:31:b5:47:c4:32:ef:0c:f5:
dc:a2:47:5b:2d:cb:32:23:be:e7:42:64:d3:ff:24:
6a:be:a3:03:4e:46:b5:60:e6:03:f0:a0:04:c6:bc:
da:d9:a5:bc:ce:70:d9:5f:3a:d5:a1:36:3e:cc:e0:
12:86:02:de:2c:9b:ea:bc:a3:3e:c2:da:f5:d2:bb:
67:95:18:1c:bc:ce:dc:0a:a2:ce:fb:98:ab:d1:0c:
6e:db:1e:97:64:27:55:e5:1c:a8:e0:7e:cc:1e:60:
46:03:64:f4:f9:c5:29:a6:80:ab:41:2b:82:35:14:
ff:cc:c1:1a:c6:37:8d:01:dd:ed:4a:b6:96:cb:b8:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4F:ED:32:1A:CE:A3:75:97:CF:AC:E9:A0:A0:D8:5A:8B:A6:6E:FC
X509v3 Authority Key Identifier:
keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5f:14:20:89:ee:fc:08:29:ae:9d:41:c4:c8:f5:33:1e:1e:
85:80:94:55:97:78:3e:01:08:1d:89:1d:f2:ee:1f:fb:3b:17:
83:a3:4f:3e:38:4f:83:a8:ba:db:a1:42:2d:3a:ff:34:ea:33:
94:11:37:74:f6:2b:58:4d:ad:97:ac:c5:76:40:d3:3e:46:ee:
ad:81:e7:d8:43:8b:fd:34:99:f4:b1:36:b2:91:b3:cb:f1:06:
2f:8b:4a:b8:6c:07:1b:c5:7f:7a:18:7b:35:18:b7:03:8d:4d:
cc:7a:62:fc:d9:77:6f:f4:33:bc:cd:a6:78:d2:a7:cb:a1:62:
ee:d4:e3:a7:a8:f5:1c:a2:df:24:e0:af:39:4d:9c:08:79:11:
f1:8e:42:36:7e:2a:40:54:dc:9b:a6:52:ba:ec:fc:07:77:51:
e8:b0:31:35:5e:30:f6:71:9e:83:59:2a:2e:85:b1:eb:cc:ce:
da:17:2d:ac:87:2c:a9:8e:5c:cd:d5:f9:b1:40:ab:0b:12:33:
25:0e:f4:87:0d:b7:fb:7c:5c:b2:4d:62:9c:0a:27:13:3a:f9:
ce:46:ec:96:37:88:4e:55:88:23:1f:41:2a:75:8b:72:fe:ce:
e2:dc:54:f9:fa:fd:7f:5a:c5:a5:00:b6:e6:0b:c9:b8:57:80:
05:a3:93:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHx72i7ODTkvFEpSOQTbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Nzg1M2RkNTc3M2YyYTZiMDcxODc5ZjViOWViYjBlNmY0
ZTdkYWEwHhcNMjUwOTA3MDMwMTI4WhcNMjUwOTA4MDMwMTI4WjAzMTEwLwYDVQQD
EyhkMjRmZWQzMjFhY2VhMzc1OTdjZmFjZTlhMGEwZDg1YThiYTY2ZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYg2smgPKHJKdq9xkHR2+wKmOEUT
8tQeaTS50T+5uPFDzeMVMgjzZMLzHDEjis9Isyulv3u+tSECcc5CzJA7iz3BdYMn
OcKxswwYVVpsSxvzb04LBcJpQ9Ks2Z0kOrn07Y4QKymUJxl8EjNueydi8L4XH3B2
4oJbdnVUk0ywMbVHxDLvDPXcokdbLcsyI77nQmTT/yRqvqMDTka1YOYD8KAExrza
2aW8znDZXzrVoTY+zOAShgLeLJvqvKM+wtr10rtnlRgcvM7cCqLO+5ir0Qxu2x6X
ZCdV5Ryo4H7MHmBGA2T0+cUppoCrQSuCNRT/zMEaxjeNAd3tSraWy7hAZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJP7TIazqN1l8+s6aCg2FqLpm78MB8GA1UdIwQY
MBaAFLl4U91Xc/KmsHGHn1ueuw5vTn2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgt
N2ZmODQ0M2Q5YzIxLzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgtN2ZmODQ0M2Q5YzIx
LzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiV8UIInu
/Agprp1BxMj1Mx4ehYCUVZd4PgEIHYkd8u4f+zsXg6NPPjhPg6i626FCLTr/NOoz
lBE3dPYrWE2tl6zFdkDTPkburYHn2EOL/TSZ9LE2spGzy/EGL4tKuGwHG8V/ehh7
NRi3A41NzHpi/Nl3b/QzvM2meNKny6Fi7tTjp6j1HKLfJOCvOU2cCHkR8Y5CNn4q
QFTcm6ZSuuz8B3dR6LAxNV4w9nGeg1kqLoWx68zO2hctrIcsqY5czdX5sUCrCxIz
JQ70hw23+3xcsk1inAonEzr5zkbsljeITlWIIx9BKnWLcv7O4txU+fr9f1rFpQC2
5gvJuFeABaOTJQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:08 2025 by rpki-client