
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
File: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft (raw, json)
Hash identifier: 6QL1sDNRUYvNujalXxwS3BXtw3X5/Z63UZbN4hZIgAk=
Subject key identifier: 52:22:F6:FD:B0:D8:F1:4A:BB:48:32:10:F9:3C:F3:03:01:4B:54:B8
Authority key identifier: 75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
Certificate issuer: /CN=754c57866e97aadaad75decc69d0df072d506ee7
Certificate serial: 019A7113352A6D535CBC0F914C744AF280C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
Manifest number: 01FB
Signing time: Tue 11 Nov 2025 04:01:15 +0000
Manifest this update: Tue 11 Nov 2025 04:01:15 +0000
Manifest next update: Wed 12 Nov 2025 04:01:15 +0000
Files and hashes: 1: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl (hash: bxYdLLBGC3vJMuwLrDiiMyp3KBYa0pJ95OiHOTGU9DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:35:2a:6d:53:5c:bc:0f:91:4c:74:4a:f2:80:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754c57866e97aadaad75decc69d0df072d506ee7
Validity
Not Before: Nov 11 04:01:15 2025 GMT
Not After : Nov 12 04:01:15 2025 GMT
Subject: CN=5222f6fdb0d8f14abb483210f93cf303014b54b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:5b:fd:05:40:4f:64:af:a2:48:2c:57:14:
53:9c:19:5d:58:d4:35:9a:44:27:28:45:2f:ff:26:
47:9a:dc:6d:9b:49:24:d1:22:f1:a2:c1:ef:a7:20:
9d:75:96:29:dc:ff:da:b2:3d:b5:9f:38:4c:c3:b4:
a3:fe:7d:e6:f5:8a:7a:da:66:1f:dd:a2:c9:72:79:
75:2e:d6:78:17:6d:72:aa:05:8b:28:02:96:ad:0c:
86:2f:11:de:70:29:37:71:dd:84:a4:f8:05:cb:2d:
cf:9f:f7:f4:86:54:58:01:bd:df:cb:5c:32:c2:99:
53:51:5f:2a:90:50:23:89:2c:6d:e8:c8:2a:57:6f:
0a:97:4d:d6:bf:c9:c2:8f:de:98:7c:cb:a5:af:96:
c3:26:d9:b9:fe:d9:64:92:fe:37:86:95:93:96:12:
8d:24:4e:9b:72:04:6c:fe:f0:d1:71:48:5d:0d:34:
2e:72:9c:0b:60:87:ec:5c:47:d2:ef:b2:f4:64:70:
77:7a:cc:06:61:29:23:51:0d:01:db:29:83:a7:9a:
4f:b0:9f:d8:3c:aa:4d:e0:80:f3:f5:06:f6:ab:1e:
ce:25:24:fb:3e:fe:fc:cb:5c:21:f2:ca:8d:87:63:
92:a9:ea:cd:e7:8c:a8:b8:a8:ce:f2:c7:94:ea:b3:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:22:F6:FD:B0:D8:F1:4A:BB:48:32:10:F9:3C:F3:03:01:4B:54:B8
X509v3 Authority Key Identifier:
keyid:75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ed:c1:56:09:49:44:f7:f8:08:40:c9:e0:74:70:5d:20:39:
4a:2f:df:c2:e8:de:d6:c7:79:a5:10:82:48:6a:1c:fa:ac:5b:
88:c6:c6:a1:1d:2b:ba:e8:d1:0a:93:5c:1a:fc:ee:8a:c0:0f:
55:49:94:12:8a:b1:1a:f9:cf:7a:62:32:c2:71:1e:5f:d8:a2:
23:41:2f:af:a2:db:f9:67:4a:c1:7d:df:30:02:16:ae:11:e9:
9a:e0:7c:3d:51:4a:54:1d:c3:e4:f2:05:e8:d6:ca:c1:b4:48:
d3:da:90:c1:d0:98:39:75:b5:93:cb:12:b8:ac:e9:71:2d:af:
e9:3b:09:a5:08:ef:4f:d5:1b:28:a5:94:39:db:e8:38:06:63:
50:f2:df:7c:7a:fa:b8:3d:1c:3d:56:c0:f9:64:54:ad:fa:b8:
02:a8:77:e9:7b:e1:04:6d:b6:82:1e:5e:27:49:25:96:b6:bd:
ff:e5:51:51:5a:c4:ec:2f:b5:17:bc:69:f6:a8:30:98:bc:f1:
13:48:4e:ab:82:2c:cc:48:6d:9c:e2:3e:12:4e:04:05:a3:5b:
83:06:a6:b6:99:14:06:40:0b:e5:c6:37:ba:52:fd:15:30:81:
72:78:97:a6:4d:4e:0d:f1:ff:15:10:de:67:a4:ad:51:b6:d0:
01:1a:35:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEzUqbVNcvA+RTHRK8oDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NGM1Nzg2NmU5N2FhZGFhZDc1ZGVjYzY5ZDBkZjA3MmQ1
MDZlZTcwHhcNMjUxMTExMDQwMTE1WhcNMjUxMTEyMDQwMTE1WjAzMTEwLwYDVQQD
Eyg1MjIyZjZmZGIwZDhmMTRhYmI0ODMyMTBmOTNjZjMwMzAxNGI1NGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb1b/QVAT2SvokgsVxRTnBldWNQ1
mkQnKEUv/yZHmtxtm0kk0SLxosHvpyCddZYp3P/asj21nzhMw7Sj/n3m9Yp62mYf
3aLJcnl1LtZ4F21yqgWLKAKWrQyGLxHecCk3cd2EpPgFyy3Pn/f0hlRYAb3fy1wy
wplTUV8qkFAjiSxt6MgqV28Kl03Wv8nCj96YfMulr5bDJtm5/tlkkv43hpWTlhKN
JE6bcgRs/vDRcUhdDTQucpwLYIfsXEfS77L0ZHB3eswGYSkjUQ0B2ymDp5pPsJ/Y
PKpN4IDz9Qb2qx7OJST7Pv78y1wh8sqNh2OSqerN54youKjO8seU6rPSXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIi9v2w2PFKu0gyEPk88wMBS1S4MB8GA1UdIwQY
MBaAFHVMV4Zul6rarXXezGnQ3wctUG7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFV4WGhtNlhxdHF0ZGQ3TWFkRGZCeTFRYnVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lM2JiZGYtOTU4NS00NmU1LWI1Y2Mt
ZjY4YTU5ZDJmZTBkLzEvZFV4WGhtNlhxdHF0ZGQ3TWFkRGZCeTFRYnVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lM2JiZGYtOTU4NS00NmU1LWI1Y2MtZjY4YTU5ZDJmZTBk
LzEvZFV4WGhtNlhxdHF0ZGQ3TWFkRGZCeTFRYnVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyu3BVglJ
RPf4CEDJ4HRwXSA5Si/fwuje1sd5pRCCSGoc+qxbiMbGoR0ruujRCpNcGvzuisAP
VUmUEoqxGvnPemIywnEeX9iiI0Evr6Lb+WdKwX3fMAIWrhHpmuB8PVFKVB3D5PIF
6NbKwbRI09qQwdCYOXW1k8sSuKzpcS2v6TsJpQjvT9UbKKWUOdvoOAZjUPLffHr6
uD0cPVbA+WRUrfq4Aqh36XvhBG22gh5eJ0kllra9/+VRUVrE7C+1F7xp9qgwmLzx
E0hOq4IszEhtnOI+Ek4EBaNbgwamtpkUBkAL5cY3ulL9FTCBcniXpk1ODfH/FRDe
Z6StUbbQARo1Jw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:21:54 2025 by rpki-client