Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier: nqFCbIBARlXRdpOCaX8kW/o1ausBNr7Zhb0Bcssjxlc=
Subject key identifier: 81:65:66:32:EC:A1:5C:0B:4D:4B:E2:F6:31:FB:FC:48:7C:56:5E:79
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer: /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial: 019A72266B50C11A4155EA0A4824AA5AA5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: kRNXYCW9OqZCe6Bt8ILwnvSMn5z+iHhwRzEn6hsCTFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6b:50:c1:1a:41:55:ea:0a:48:24:aa:5a:a5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=81656632eca15c0b4d4be2f631fbfc487c565e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:f4:b8:13:4c:55:26:06:31:9e:33:36:cb:
77:dc:38:f7:62:ea:be:15:01:f3:3a:c6:c1:41:45:
8e:fd:28:cc:0b:ab:26:d6:ca:48:ad:88:87:7a:47:
84:f7:7e:1d:73:63:9d:20:b4:43:46:8f:d4:fc:1b:
d7:0b:cd:74:ad:68:ec:de:97:ed:3c:09:ee:e3:ba:
c8:54:bf:d6:63:04:d0:40:e0:49:fb:53:bd:96:ce:
4d:23:77:0c:8c:db:16:2e:e2:62:3d:6c:47:e5:35:
2f:02:cf:61:fc:64:01:ef:28:a0:a3:c9:30:25:cd:
35:91:09:b4:36:97:5e:ce:bb:3e:ef:41:6d:09:5b:
63:7e:cc:6e:c9:d4:27:cf:fc:e4:90:48:76:8a:71:
16:1f:20:a4:89:b0:05:4c:47:7c:55:69:4c:b3:d6:
82:a3:a9:c2:59:22:ba:84:6e:32:4a:0d:be:23:be:
48:bd:47:b9:84:63:19:68:51:be:b5:17:07:66:b2:
72:38:a7:dc:60:51:97:9f:75:f3:ad:e7:8f:8e:6b:
bc:80:85:38:76:9a:ca:f6:18:d3:18:29:07:ed:2d:
c3:3e:41:b7:42:79:9d:fa:0c:f9:e2:53:3e:8d:50:
14:14:9f:a7:f0:a5:09:92:d9:4e:c0:d3:17:fd:a5:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:65:66:32:EC:A1:5C:0B:4D:4B:E2:F6:31:FB:FC:48:7C:56:5E:79
X509v3 Authority Key Identifier:
keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f5:2a:bd:1a:4e:8f:40:43:9a:a7:e6:f3:d0:2e:90:66:db:
24:8e:1c:83:85:cf:b0:bd:52:6d:e6:24:88:5e:ad:3d:3f:cc:
40:1e:65:2f:e6:c8:18:0a:fd:6b:4c:35:db:90:9b:49:86:9a:
73:07:83:33:2f:4d:d0:90:d8:01:0c:15:02:5c:53:07:7c:2b:
ed:bb:f4:b1:b3:2b:65:df:d2:d9:ca:ef:fd:52:8f:b3:76:59:
21:fc:9e:00:72:d8:e3:42:41:81:ed:af:9f:a5:53:9d:50:f7:
50:5c:b8:43:3a:b1:59:f2:04:75:59:bf:fe:36:da:2a:66:41:
5e:fd:30:bc:40:7f:55:08:db:29:4e:00:0e:4b:52:93:06:b8:
e2:61:61:54:1f:8e:56:71:a2:4e:59:29:48:ba:ae:f3:54:ce:
68:3c:8b:e2:50:30:70:57:97:fa:f2:f6:5a:12:5d:6e:e3:02:
83:e5:02:2e:a3:81:92:13:bb:ab:12:05:97:57:35:f8:62:1c:
91:ab:41:af:2f:87:e3:96:c0:c9:c6:36:e9:15:9f:f4:cf:8a:
73:25:0e:97:8e:af:73:6e:9a:52:73:88:41:f2:e0:1a:8b:ed:
95:86:b8:c8:64:fb:43:5d:f2:64:d2:52:eb:80:c2:2e:c1:9b:
b9:d4:24:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJmtQwRpBVeoKSCSqWqW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NGI4MmQ3MTkxNDQwMDIwNTFkYTBmODhjNzY4ZGU0NDBh
YzIwYmQwHhcNMjUxMTExMDkwMTUxWhcNMjUxMTEyMDkwMTUxWjAzMTEwLwYDVQQD
Eyg4MTY1NjYzMmVjYTE1YzBiNGQ0YmUyZjYzMWZiZmM0ODdjNTY1ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSr0uBNMVSYGMZ4zNst33Dj3Yuq+
FQHzOsbBQUWO/SjMC6sm1spIrYiHekeE934dc2OdILRDRo/U/BvXC810rWjs3pft
PAnu47rIVL/WYwTQQOBJ+1O9ls5NI3cMjNsWLuJiPWxH5TUvAs9h/GQB7yigo8kw
Jc01kQm0Npdezrs+70FtCVtjfsxuydQnz/zkkEh2inEWHyCkibAFTEd8VWlMs9aC
o6nCWSK6hG4ySg2+I75IvUe5hGMZaFG+tRcHZrJyOKfcYFGXn3XzreePjmu8gIU4
dprK9hjTGCkH7S3DPkG3Qnmd+gz54lM+jVAUFJ+n8KUJktlOwNMX/aXBDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFlZjLsoVwLTUvi9jH7/Eh8Vl55MB8GA1UdIwQY
MBaAFNVLgtcZFEACBR2g+Ix2jeRArCC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVV1QzF4a1VRQUlGSGFENGpIYU41RUNzSUwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yN2NjMTktNzg4Ny00MmZhLWE2MmMt
NmU1ZjlkMzk4Mjc5LzEvMVV1QzF4a1VRQUlGSGFENGpIYU41RUNzSUwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8yN2NjMTktNzg4Ny00MmZhLWE2MmMtNmU1ZjlkMzk4Mjc5
LzEvMVV1QzF4a1VRQUlGSGFENGpIYU41RUNzSUwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPUqvRpO
j0BDmqfm89AukGbbJI4cg4XPsL1SbeYkiF6tPT/MQB5lL+bIGAr9a0w125CbSYaa
cweDMy9N0JDYAQwVAlxTB3wr7bv0sbMrZd/S2crv/VKPs3ZZIfyeAHLY40JBge2v
n6VTnVD3UFy4QzqxWfIEdVm//jbaKmZBXv0wvEB/VQjbKU4ADktSkwa44mFhVB+O
VnGiTlkpSLqu81TOaDyL4lAwcFeX+vL2WhJdbuMCg+UCLqOBkhO7qxIFl1c1+GIc
katBry+H45bAycY26RWf9M+KcyUOl46vc26aUnOIQfLgGovtlYa4yGT7Q13yZNJS
64DCLsGbudQkxg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:47 2025 by rpki-client