Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
File: uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json)
Hash identifier: bNU2m69kucHSeHqUobcF0Fe5hG84MCzh00lzjBPJWqg=
Subject key identifier: 0B:9C:FD:28:A9:F9:DE:A5:2C:7E:A6:1A:9E:36:28:CC:12:63:D9:C8
Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Certificate issuer: /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Certificate serial: 019921B15ECED222DF08629F882A95B71E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
Manifest number: 1600
Signing time: Sun 07 Sep 2025 01:01:36 +0000
Manifest this update: Sun 07 Sep 2025 01:01:36 +0000
Manifest next update: Mon 08 Sep 2025 01:01:36 +0000
Files and hashes: 1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: a7pMory8a35/ZhVSRut/a9eA/stdhw9MhQHpkC4myM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:5e:ce:d2:22:df:08:62:9f:88:2a:95:b7:1e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Validity
Not Before: Sep 7 01:01:36 2025 GMT
Not After : Sep 8 01:01:36 2025 GMT
Subject: CN=0b9cfd28a9f9dea52c7ea61a9e3628cc1263d9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:c0:0a:9b:d6:f5:6a:ff:1b:4b:3d:8c:ee:
40:b3:8d:8e:3e:a4:3c:77:a4:18:f2:84:f7:43:c9:
9d:c3:a6:42:96:7f:d7:a1:87:fa:37:f8:8e:c9:0b:
8f:da:7d:e4:89:31:9a:20:f0:2c:80:11:ee:0b:21:
d0:e7:dc:ac:f6:3b:b4:51:20:a8:14:47:0a:53:0d:
39:00:e4:6c:ba:3c:56:60:07:8b:20:e8:f6:a7:df:
9e:9d:fb:43:12:41:5e:36:33:07:12:81:03:e0:4f:
36:dd:a1:b2:b6:e1:d2:7b:e8:50:a2:11:be:d3:af:
92:a0:22:01:93:1a:75:b3:e5:0c:54:21:94:09:07:
24:b4:10:e4:0c:3a:e4:22:39:11:8e:50:2b:47:d5:
5c:d2:87:18:fc:11:75:83:4f:93:4f:2e:c2:84:9f:
28:4c:76:63:c4:0e:70:98:4c:5a:5c:b1:56:8d:3f:
4f:e7:18:aa:e8:dd:f7:3f:f0:af:89:72:35:49:93:
c4:69:f6:0b:29:fe:ee:7b:1d:35:ce:33:b0:06:48:
b1:67:13:dc:ab:82:52:bd:34:0a:ea:f6:1e:c6:85:
2e:ed:4d:67:e3:d7:78:5a:15:aa:04:c0:97:f5:6c:
d6:5b:d6:9d:cc:f3:44:fb:05:97:95:89:73:6e:7e:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9C:FD:28:A9:F9:DE:A5:2C:7E:A6:1A:9E:36:28:CC:12:63:D9:C8
X509v3 Authority Key Identifier:
keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5c:3e:2f:c3:19:b5:fc:76:c3:06:d7:df:d3:42:d3:69:22:
50:dd:c6:6d:bc:db:f1:84:2c:cf:be:94:02:4c:80:cf:fe:b4:
c7:6a:5a:85:72:84:b5:98:2b:b9:65:37:a7:8d:ea:e8:ab:54:
c8:94:18:00:11:a0:df:f7:79:21:b0:3a:88:ee:c7:53:12:d3:
63:26:f1:87:50:5d:58:5c:3a:01:c7:66:69:e7:18:cf:d3:fa:
c3:4f:11:7a:a8:ae:a5:21:59:2d:a1:76:3d:77:d5:64:c4:37:
91:ff:cc:43:12:bf:0a:87:2d:00:cc:94:e2:40:96:0f:c9:84:
6c:fa:40:c9:1c:9c:17:f6:5c:e5:c4:24:9a:c4:04:92:2e:9e:
42:79:08:c9:db:82:08:5f:ca:b5:a3:51:5b:01:e6:20:35:0f:
b3:a3:d8:4f:66:14:a5:3b:bb:c9:62:06:e5:31:81:11:b5:24:
73:f9:13:db:8a:b9:c5:a3:f8:d1:26:ff:65:b6:b6:f1:b9:9a:
d8:da:eb:99:c5:10:1f:d0:95:cf:79:a3:42:1e:91:28:55:41:
d4:47:83:3b:f6:9c:57:6b:10:21:3d:4b:20:33:56:61:42:32:
74:1b:22:de:41:c7:26:f9:aa:ef:c6:62:2e:15:d8:96:c2:4b:
a4:99:ea:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsV7O0iLfCGKfiCqVtx58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOGQ2Nzk4YmRkMGIyYjg4MDVkNDNiMzQ1NWY3NjczOWI5
NDZmMWQwHhcNMjUwOTA3MDEwMTM2WhcNMjUwOTA4MDEwMTM2WjAzMTEwLwYDVQQD
EygwYjljZmQyOGE5ZjlkZWE1MmM3ZWE2MWE5ZTM2MjhjYzEyNjNkOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCPACpvW9Wr/G0s9jO5As42OPqQ8
d6QY8oT3Q8mdw6ZCln/XoYf6N/iOyQuP2n3kiTGaIPAsgBHuCyHQ59ys9ju0USCo
FEcKUw05AORsujxWYAeLIOj2p9+enftDEkFeNjMHEoED4E823aGytuHSe+hQohG+
06+SoCIBkxp1s+UMVCGUCQcktBDkDDrkIjkRjlArR9Vc0ocY/BF1g0+TTy7ChJ8o
THZjxA5wmExaXLFWjT9P5xiq6N33P/CviXI1SZPEafYLKf7uex01zjOwBkixZxPc
q4JSvTQK6vYexoUu7U1n49d4WhWqBMCX9WzWW9adzPNE+wWXlYlzbn4zrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuc/Sip+d6lLH6mGp42KMwSY9nIMB8GA1UdIwQY
MBaAFLqNZ5i90LK4gF1Ds0VfdnOblG8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW8xbm1MM1FzcmlBWFVPelJWOTJjNXVVYngwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy82OGI1N2ItZDE4ZC00Nzg1LTk3YjAt
ZWM1NmMwYjA4MWFlLzEvdW8xbm1MM1FzcmlBWFVPelJWOTJjNXVVYngwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy82OGI1N2ItZDE4ZC00Nzg1LTk3YjAtZWM1NmMwYjA4MWFl
LzEvdW8xbm1MM1FzcmlBWFVPelJWOTJjNXVVYngwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFw+L8MZ
tfx2wwbX39NC02kiUN3Gbbzb8YQsz76UAkyAz/60x2pahXKEtZgruWU3p43q6KtU
yJQYABGg3/d5IbA6iO7HUxLTYybxh1BdWFw6AcdmaecYz9P6w08ReqiupSFZLaF2
PXfVZMQ3kf/MQxK/CoctAMyU4kCWD8mEbPpAyRycF/Zc5cQkmsQEki6eQnkIyduC
CF/KtaNRWwHmIDUPs6PYT2YUpTu7yWIG5TGBEbUkc/kT24q5xaP40Sb/Zba28bma
2NrrmcUQH9CVz3mjQh6RKFVB1EeDO/acV2sQIT1LIDNWYUIydBsi3kHHJvmq78Zi
LhXYlsJLpJnqLQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:38 2025 by rpki-client