Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: h73q1ghQwWc8byUKVBiP+BXRiIptF8uDd4P19nbcEXY=
Subject key identifier: 1C:4E:4C:61:D3:DB:AB:14:76:3A:6C:38:29:58:58:40:CF:23:AF:2B
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 019A71B8D5387C9D3AA37226FEC764888DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 056A
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: tskVAFHzX3XPt9CXNXhvw8Ydc4sqqNB03gr7Js3Lgqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d5:38:7c:9d:3a:a3:72:26:fe:c7:64:88:8d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=1c4e4c61d3dbab14763a6c3829585840cf23af2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:e9:d2:a4:d8:8d:b8:3f:65:99:08:67:39:
96:3b:dc:1b:05:dd:7f:2f:75:58:f4:eb:3c:46:73:
7a:e7:b2:f3:ae:ea:68:72:dc:04:11:2c:fe:16:25:
65:6d:90:a3:c0:97:cb:e2:be:ec:b7:58:f2:09:d3:
e5:98:e2:4b:29:02:07:ae:d3:f1:c9:3d:2f:bb:dc:
fd:5e:92:07:90:e0:d2:6a:61:7c:82:87:52:a1:f1:
eb:c3:43:93:6a:a0:b0:a2:55:13:f9:37:7c:f4:3f:
6f:2f:bd:45:91:69:ff:34:74:62:b5:fc:b7:16:4d:
80:52:e9:31:d5:66:f3:34:d9:75:dc:7e:bd:85:c9:
02:33:6c:69:8c:e7:cb:6e:54:02:f6:fa:dc:d0:2d:
45:20:72:a6:14:11:8d:62:99:d5:25:b4:1c:19:b3:
71:5c:4e:b9:fe:e4:ee:42:44:eb:1a:8e:ae:40:f1:
8a:bb:88:0b:8a:74:ad:ad:49:42:69:06:18:29:47:
bf:8d:71:8f:26:19:4e:19:94:bb:1c:84:f2:20:fb:
a5:db:59:ea:89:91:4e:e4:ab:98:3f:24:51:6e:c0:
f5:2d:5f:8d:12:31:6b:06:5b:d8:5b:c9:b3:66:42:
bd:00:17:bf:37:27:f1:4e:37:70:27:73:98:f0:c5:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4E:4C:61:D3:DB:AB:14:76:3A:6C:38:29:58:58:40:CF:23:AF:2B
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d6:bd:fa:1e:08:8e:05:a6:23:5e:a5:18:eb:bf:c2:06:cf:
24:a0:23:08:bd:d3:9b:f2:e7:f9:13:33:1c:c7:32:37:b7:83:
fd:fe:62:86:65:28:d9:4b:92:4a:46:22:08:b1:2b:9b:c3:c6:
a8:c2:9b:b9:06:8b:48:a9:29:6c:e0:9d:82:89:23:82:00:50:
e5:3c:17:9e:c4:2d:0a:48:f7:0a:7e:3d:44:83:fd:56:71:36:
2c:38:de:f0:9c:a1:ce:78:c7:f7:94:1e:f6:4f:2b:98:8a:d4:
fa:87:55:e6:2d:84:fb:4e:f0:d5:b5:9f:f0:10:cf:db:a2:38:
8c:24:63:fc:c3:7f:84:28:96:a4:14:7b:62:03:a4:62:dd:dc:
40:35:8b:7f:10:b2:ad:ac:97:1a:18:23:c4:38:62:7a:93:5b:
e9:99:cd:90:16:6d:42:d0:6c:62:4b:4f:3a:4b:7e:9d:43:46:
a2:28:86:be:b2:a1:00:1f:cc:e3:0d:58:68:a8:0a:38:f9:be:
43:49:bc:da:24:9e:52:ef:ee:b9:cc:9d:fa:8c:7e:a3:9c:c2:
9b:ec:91:26:67:c4:0a:68:dc:58:0b:a0:86:a3:cf:9d:9a:cc:
bc:db:e2:b0:b2:9d:51:91:ff:ff:71:f0:3f:39:84:cf:a9:ae:
ab:47:f0:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuNU4fJ06o3Im/sdkiI3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NDEzNTg0NzAzMjE1NjRhZGI0MmE3NmQ3NzNhZTNjYWU3
YmJkNTYwHhcNMjUxMTExMDcwMjA5WhcNMjUxMTEyMDcwMjA5WjAzMTEwLwYDVQQD
EygxYzRlNGM2MWQzZGJhYjE0NzYzYTZjMzgyOTU4NTg0MGNmMjNhZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ibp0qTYjbg/ZZkIZzmWO9wbBd1/
L3VY9Os8RnN657LzrupoctwEESz+FiVlbZCjwJfL4r7st1jyCdPlmOJLKQIHrtPx
yT0vu9z9XpIHkODSamF8godSofHrw0OTaqCwolUT+Td89D9vL71FkWn/NHRitfy3
Fk2AUukx1WbzNNl13H69hckCM2xpjOfLblQC9vrc0C1FIHKmFBGNYpnVJbQcGbNx
XE65/uTuQkTrGo6uQPGKu4gLinStrUlCaQYYKUe/jXGPJhlOGZS7HITyIPul21nq
iZFO5KuYPyRRbsD1LV+NEjFrBlvYW8mzZkK9ABe/NyfxTjdwJ3OY8MXd/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxOTGHT26sUdjpsOClYWEDPI68rMB8GA1UdIwQY
MBaAFHVBNYRwMhVkrbQqdtdzrjyue71WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFVFMWhIQXlGV1N0dENwMjEzT3VQSzU3dlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMTYwNDMtYTNkZS00YWIzLTllNTYt
ODI2NWE5NmU0MjBkLzEvZFVFMWhIQXlGV1N0dENwMjEzT3VQSzU3dlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jMTYwNDMtYTNkZS00YWIzLTllNTYtODI2NWE5NmU0MjBk
LzEvZFVFMWhIQXlGV1N0dENwMjEzT3VQSzU3dlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNa9+h4I
jgWmI16lGOu/wgbPJKAjCL3Tm/Ln+RMzHMcyN7eD/f5ihmUo2UuSSkYiCLErm8PG
qMKbuQaLSKkpbOCdgokjggBQ5TwXnsQtCkj3Cn49RIP9VnE2LDje8JyhznjH95Qe
9k8rmIrU+odV5i2E+07w1bWf8BDP26I4jCRj/MN/hCiWpBR7YgOkYt3cQDWLfxCy
rayXGhgjxDhiepNb6ZnNkBZtQtBsYktPOkt+nUNGoiiGvrKhAB/M4w1YaKgKOPm+
Q0m82iSeUu/uucyd+ox+o5zCm+yRJmfECmjcWAughqPPnZrMvNvisLKdUZH//3Hw
PzmEz6muq0fwbg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:12 2025 by rpki-client