Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File: 0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier: rkkus1NmEjm8l/62BAfbbPV2x3G964ViPUuEMWt8crM=
Subject key identifier: 3F:4F:B1:A7:77:8E:D9:43:62:2E:6C:FE:C5:EA:1A:37:35:CC:8F:8C
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer: /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial: 019A70A4E57EFF288B141C9E912D7374A694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number: 15D0
Signing time: Tue 11 Nov 2025 02:00:46 +0000
Manifest this update: Tue 11 Nov 2025 02:00:46 +0000
Manifest next update: Wed 12 Nov 2025 02:00:46 +0000
Files and hashes: 1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: ejnV+Xk9BYeM6sp5oxYPXqf0e+mPE880P3Kmwci37+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e5:7e:ff:28:8b:14:1c:9e:91:2d:73:74:a6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Validity
Not Before: Nov 11 02:00:46 2025 GMT
Not After : Nov 12 02:00:46 2025 GMT
Subject: CN=3f4fb1a7778ed943622e6cfec5ea1a3735cc8f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ae:0e:c6:66:b5:d4:be:b6:13:ce:ce:18:57:
ca:32:9f:27:07:eb:70:53:6d:9e:74:d1:87:7a:82:
0a:f2:17:44:3f:21:8b:57:83:72:24:1e:a2:ba:45:
f6:62:06:97:20:08:d0:ed:98:e5:93:4f:fc:14:87:
75:bd:7b:4a:6f:5e:4b:30:5a:97:53:df:6d:86:11:
5c:72:44:11:9d:f0:bc:56:e1:ce:7e:71:ca:2d:b9:
d4:db:39:aa:ff:cf:cd:7c:c0:1b:e9:d5:ec:ae:df:
0e:95:39:f6:b3:72:65:c5:2e:23:ee:ab:7d:93:ac:
d6:6a:79:04:e7:98:19:cc:4f:34:47:06:e5:85:84:
21:8a:9c:5c:d1:ab:b1:e0:18:76:ce:3a:6e:3e:7f:
d4:84:7f:ca:6b:e3:97:ab:d0:7d:a8:e1:a5:5b:5b:
e2:03:a6:b8:52:b5:1f:65:33:cd:d4:ea:39:92:14:
ae:56:93:57:c7:de:dd:50:05:31:c9:b7:07:1a:79:
8e:60:d6:bf:b1:d8:a2:7b:61:70:c3:fb:84:0c:54:
b1:d6:47:32:ed:19:50:1d:de:4b:88:4c:b4:b8:4c:
38:cf:1f:cf:3b:8b:b5:8b:98:cb:17:91:ba:58:16:
75:4c:b7:04:0d:c9:df:b4:92:89:e7:45:e7:55:2f:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4F:B1:A7:77:8E:D9:43:62:2E:6C:FE:C5:EA:1A:37:35:CC:8F:8C
X509v3 Authority Key Identifier:
keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6e:74:bf:7b:2b:53:ef:89:43:00:53:81:c6:dd:88:53:46:
6f:59:64:cd:31:28:99:eb:77:fd:2e:d3:5e:b7:33:f7:0a:5d:
50:a5:04:ec:fd:ec:fe:95:65:be:c7:bb:55:b1:2d:22:3d:f6:
29:85:90:ba:40:32:2c:2b:cf:d1:a3:73:66:c5:7d:24:b8:a5:
0d:ee:e5:e1:17:65:a5:a8:62:f2:30:0f:e8:0e:32:25:e0:9c:
f4:4e:97:d2:3b:60:cf:3f:9d:77:5d:86:b9:5f:c8:ad:3c:b4:
8c:54:73:e5:73:9e:7c:59:19:6c:67:46:f6:37:7a:0b:a0:17:
3e:99:b6:6f:73:6f:49:d4:6e:02:e3:41:1c:40:30:f4:74:82:
53:02:e1:33:5d:61:ba:47:16:56:09:6d:ac:c0:ec:0d:dd:65:
ca:b1:1a:3a:61:83:42:3a:f8:a1:9b:9d:ce:41:a7:dd:20:80:
de:55:ee:67:d1:d9:9c:16:a2:4c:fd:f5:d7:c0:08:b0:cf:52:
ee:98:c1:1d:4e:ca:d1:b1:3c:3b:6f:9a:10:11:03:fb:92:cf:
2b:c9:fc:b3:43:68:78:51:b5:0c:aa:3a:41:e3:1c:b3:53:c4:
f2:55:f3:6e:3b:22:aa:f8:c5:54:6d:1e:d5:9e:3b:f1:2d:6c:
94:2d:2e:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpOV+/yiLFByekS1zdKaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZjUwYjRmYzA5NTg5MGI4MzFjMDNkOTk2MjVjMGVlNTQx
OWQzNWEwHhcNMjUxMTExMDIwMDQ2WhcNMjUxMTEyMDIwMDQ2WjAzMTEwLwYDVQQD
EygzZjRmYjFhNzc3OGVkOTQzNjIyZTZjZmVjNWVhMWEzNzM1Y2M4ZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA564Oxma11L62E87OGFfKMp8nB+tw
U22edNGHeoIK8hdEPyGLV4NyJB6iukX2YgaXIAjQ7Zjlk0/8FId1vXtKb15LMFqX
U99thhFcckQRnfC8VuHOfnHKLbnU2zmq/8/NfMAb6dXsrt8OlTn2s3JlxS4j7qt9
k6zWankE55gZzE80RwblhYQhipxc0aux4Bh2zjpuPn/UhH/Ka+OXq9B9qOGlW1vi
A6a4UrUfZTPN1Oo5khSuVpNXx97dUAUxybcHGnmOYNa/sdiie2Fww/uEDFSx1kcy
7RlQHd5LiEy0uEw4zx/PO4u1i5jLF5G6WBZ1TLcEDcnftJKJ50XnVS9JJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9Psad3jtlDYi5s/sXqGjc1zI+MMB8GA1UdIwQY
MBaAFNP1C0/AlYkLgxwD2ZYlwO5UGdNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjMwMzctNjJiZC00YjRkLWFmNGQt
NzdlMzIxN2NkMzlmLzEvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zYjMwMzctNjJiZC00YjRkLWFmNGQtNzdlMzIxN2NkMzlm
LzEvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn250v3sr
U++JQwBTgcbdiFNGb1lkzTEomet3/S7TXrcz9wpdUKUE7P3s/pVlvse7VbEtIj32
KYWQukAyLCvP0aNzZsV9JLilDe7l4Rdlpahi8jAP6A4yJeCc9E6X0jtgzz+dd12G
uV/IrTy0jFRz5XOefFkZbGdG9jd6C6AXPpm2b3NvSdRuAuNBHEAw9HSCUwLhM11h
ukcWVgltrMDsDd1lyrEaOmGDQjr4oZudzkGn3SCA3lXuZ9HZnBaiTP3118AIsM9S
7pjBHU7K0bE8O2+aEBED+5LPK8n8s0NoeFG1DKo6QeMcs1PE8lXzbjsiqvjFVG0e
1Z478S1slC0ukg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:44 2025 by rpki-client