Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
File: UdspKXLBDGn5fs0k8vtptPZ3beg.mft (raw, json)
Hash identifier: XHU5mgoBPdWO2JAW6FdHgSwY6TJOhub6uD0rkbBxbRg=
Subject key identifier: 18:0A:E7:29:21:35:1E:1F:25:33:76:13:5A:20:DC:79:6F:4F:27:DD
Authority key identifier: 51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
Certificate issuer: /CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Certificate serial: 019A71B88E8CF925310096E75C135FE70A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: UdspKXLBDGn5fs0k8vtptPZ3beg.crl (hash: nlom/k1MLWvwaojZ92gcFLn4giXG+QYJ7XKp11u0JcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8e:8c:f9:25:31:00:96:e7:5c:13:5f:e7:0a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=180ae72921351e1f253376135a20dc796f4f27dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:0c:c0:38:28:12:37:84:3b:41:f2:18:df:
ff:dc:7e:f8:ea:e3:47:8c:a1:d8:3b:c7:84:7c:74:
bc:fa:ad:2c:ad:8e:fd:d1:fa:c0:9d:14:17:99:3e:
40:6a:0d:0b:50:51:d2:36:be:76:3f:eb:1e:95:2a:
4a:ea:42:39:90:f1:d0:c7:a4:21:e5:a1:48:a8:87:
0c:30:cc:f4:50:c3:a0:18:77:b0:83:e6:96:87:18:
80:1e:86:11:ec:5d:98:46:d8:38:45:ec:99:72:b0:
31:e4:02:f3:60:c6:f1:e9:3c:04:be:4f:1d:a0:93:
1a:b5:de:d8:63:48:3e:e4:32:35:53:ee:0a:e5:34:
35:4e:d3:9f:cc:34:7a:2e:8c:45:4c:f7:d9:9e:f4:
d9:fe:d7:0d:94:d1:7c:b5:15:9c:76:1f:74:9c:05:
18:91:ef:b8:c2:c5:e8:95:90:c0:4f:4b:72:57:56:
34:d3:4e:ca:47:44:27:61:9d:a2:1b:d9:ce:6f:50:
bb:32:a2:76:d7:f8:19:68:26:49:8c:1a:b8:39:17:
7f:e7:49:97:cd:85:c9:14:42:9f:f0:a7:8b:d3:10:
b4:cd:27:92:0f:5a:0d:86:65:3b:92:de:8d:a1:b9:
c9:62:63:76:4a:a2:71:29:c6:ab:86:89:81:e5:9b:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0A:E7:29:21:35:1E:1F:25:33:76:13:5A:20:DC:79:6F:4F:27:DD
X509v3 Authority Key Identifier:
keyid:51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:80:4e:53:52:ce:ab:6e:80:15:a5:8c:ff:2f:b0:68:01:0e:
5d:af:74:1d:fc:65:a7:ff:8c:ea:e8:2b:32:4c:38:a2:da:52:
7d:48:9d:df:9e:99:2b:76:cd:e0:4f:58:43:b7:88:ef:42:0f:
52:5c:5d:2f:4f:a1:1c:d6:30:ee:86:b8:50:a6:ef:0a:15:6e:
8d:aa:3a:ef:55:af:4b:14:9a:8d:67:f8:d7:61:1c:09:ff:cd:
8c:61:97:c4:91:e6:a3:37:7e:59:10:25:ba:95:25:31:57:e2:
d0:3d:36:da:13:0c:7a:e7:79:ad:af:43:e3:a0:dc:8e:54:91:
63:4f:d3:cb:04:d8:8d:8e:07:8b:73:3c:cb:3f:8a:6a:c7:c2:
d0:21:09:98:d2:d1:35:f6:cd:0f:66:20:3c:b2:02:62:2e:86:
ba:23:c7:a3:11:d3:6e:fb:b3:44:c8:ec:fd:9d:99:21:04:89:
de:d8:b8:ba:ac:f1:18:f4:06:99:05:0c:4c:73:04:eb:dd:31:
ec:5f:6f:d5:f2:69:49:de:f5:2f:d4:9c:ce:21:91:da:20:8d:
6e:5c:fc:c8:c4:95:9e:76:90:91:c2:d7:ce:68:f8:22:fc:8d:
13:18:19:bc:a6:74:3b:9d:fc:64:d3:8b:0c:cf:56:00:b5:5e:
4c:d6:c5:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuI6M+SUxAJbnXBNf5wqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZGIyOTI5NzJjMTBjNjlmOTdlY2QyNGYyZmI2OWI0ZjY3
NzZkZTgwHhcNMjUxMTExMDcwMTUxWhcNMjUxMTEyMDcwMTUxWjAzMTEwLwYDVQQD
EygxODBhZTcyOTIxMzUxZTFmMjUzMzc2MTM1YTIwZGM3OTZmNGYyN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqEMwDgoEjeEO0HyGN//3H746uNH
jKHYO8eEfHS8+q0srY790frAnRQXmT5Aag0LUFHSNr52P+selSpK6kI5kPHQx6Qh
5aFIqIcMMMz0UMOgGHewg+aWhxiAHoYR7F2YRtg4ReyZcrAx5ALzYMbx6TwEvk8d
oJMatd7YY0g+5DI1U+4K5TQ1TtOfzDR6LoxFTPfZnvTZ/tcNlNF8tRWcdh90nAUY
ke+4wsXolZDAT0tyV1Y0007KR0QnYZ2iG9nOb1C7MqJ21/gZaCZJjBq4ORd/50mX
zYXJFEKf8KeL0xC0zSeSD1oNhmU7kt6NobnJYmN2SqJxKcarhomB5ZuxAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgK5ykhNR4fJTN2E1og3HlvTyfdMB8GA1UdIwQY
MBaAFFHbKSlywQxp+X7NJPL7abT2d23oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWRzcEtYTEJER241ZnMwazh2dHB0UFozYmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8wYmM5NTUtMjVkZS00Nzk4LWIzY2Ut
NmVhZjlkYWJhZTBmLzEvVWRzcEtYTEJER241ZnMwazh2dHB0UFozYmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8wYmM5NTUtMjVkZS00Nzk4LWIzY2UtNmVhZjlkYWJhZTBm
LzEvVWRzcEtYTEJER241ZnMwazh2dHB0UFozYmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4BOU1LO
q26AFaWM/y+waAEOXa90Hfxlp/+M6ugrMkw4otpSfUid356ZK3bN4E9YQ7eI70IP
UlxdL0+hHNYw7oa4UKbvChVujao671WvSxSajWf412EcCf/NjGGXxJHmozd+WRAl
upUlMVfi0D022hMMeud5ra9D46DcjlSRY0/TywTYjY4Hi3M8yz+KasfC0CEJmNLR
NfbND2YgPLICYi6GuiPHoxHTbvuzRMjs/Z2ZIQSJ3ti4uqzxGPQGmQUMTHME690x
7F9v1fJpSd71L9ScziGR2iCNblz8yMSVnnaQkcLXzmj4IvyNExgZvKZ0O538ZNOL
DM9WALVeTNbFyw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:57 2025 by rpki-client