Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
File: U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft (raw, json)
Hash identifier: 7RZ2rsAEYsi9D5TDYKyeouhwyC6Tb6SDI9s+g+tGJuA=
Subject key identifier: 20:16:7C:E7:39:1E:C7:4B:41:2C:21:C7:D6:68:8C:67:68:7F:08:90
Authority key identifier: 53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
Certificate issuer: /CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Certificate serial: 019922FA1D22D7D8117164B0E625EC12943A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 07:00:40 +0000
Manifest this update: Sun 07 Sep 2025 07:00:40 +0000
Manifest next update: Mon 08 Sep 2025 07:00:40 +0000
Files and hashes: 1: U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl (hash: huidwYKf5Z0KgpONItkwTQT+FjHsYACT0v3lcF93Yo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:1d:22:d7:d8:11:71:64:b0:e6:25:ec:12:94:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Validity
Not Before: Sep 7 07:00:40 2025 GMT
Not After : Sep 8 07:00:40 2025 GMT
Subject: CN=20167ce7391ec74b412c21c7d6688c67687f0890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:ac:ad:c8:85:0d:b2:73:fc:ef:69:2a:26:
dd:aa:60:86:68:08:1d:b1:a8:b5:61:48:69:de:90:
82:ad:e4:38:fd:9b:43:4d:89:85:f7:08:76:66:aa:
7d:56:48:4d:d1:7a:12:17:c9:e0:43:8f:93:29:07:
17:81:22:e3:ea:4c:66:e6:80:22:9d:ec:71:89:e5:
2f:98:5a:5f:71:2a:0d:a3:36:77:f7:dd:5b:b7:bd:
15:bb:5a:e7:31:3f:26:de:80:e0:0e:86:8c:38:49:
f4:a1:7a:f0:32:b6:a6:08:3c:20:64:ee:27:77:93:
77:60:36:73:de:f2:d9:8a:de:e0:ce:6b:e4:9c:6d:
54:66:31:a6:e3:8b:8f:57:41:60:c4:37:25:17:b7:
29:f5:5b:ce:5a:ac:df:95:7d:26:ea:db:47:9f:f2:
5e:e1:2b:73:f1:c5:9c:2f:f6:4c:be:25:86:74:cb:
c9:25:5c:d2:7d:c7:8c:54:50:85:f1:d5:d7:59:46:
46:31:3d:7b:8f:24:73:ea:dc:88:d0:ed:d7:b7:41:
7d:00:4f:74:ea:f7:6f:8f:ac:4f:11:8a:1c:a5:3e:
13:f0:6f:af:e5:f6:a7:70:12:59:9f:df:4c:a6:cd:
1a:6d:24:57:f7:d6:a1:19:e2:ba:de:fa:f9:2b:08:
10:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:16:7C:E7:39:1E:C7:4B:41:2C:21:C7:D6:68:8C:67:68:7F:08:90
X509v3 Authority Key Identifier:
keyid:53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:55:04:08:77:b4:4f:c7:40:b1:d2:e8:4e:1e:6b:81:40:15:
b5:5e:af:3a:c7:d2:17:73:a7:ca:b6:41:92:9e:44:d0:07:23:
83:40:e3:57:4b:a0:8d:16:e7:fa:55:a5:1a:ad:28:a2:6d:10:
70:15:c1:62:e7:12:be:70:dd:6d:98:9a:be:87:02:65:20:58:
f2:8f:bd:48:26:b8:e9:f6:9f:87:94:89:97:9d:34:9d:9a:1a:
9a:a6:1d:43:5a:6f:70:1d:49:19:40:a2:9b:fe:6d:f4:ce:c2:
da:6b:e7:80:6a:90:02:25:86:e9:96:61:37:7e:94:c0:aa:84:
3d:51:0a:fd:44:5c:c6:8c:30:8c:78:c7:f7:1b:42:fa:a0:a4:
c0:93:9a:50:80:4d:e7:9a:92:50:76:5e:de:28:df:2b:06:80:
84:56:60:17:bd:f2:03:66:75:a8:12:65:43:bd:23:a1:e1:3c:
f3:25:85:33:3d:9b:95:e8:55:73:60:95:3a:9b:d4:8a:c8:48:
31:72:b5:bd:72:26:dd:18:06:59:ed:f5:57:b3:cc:95:8e:07:
8f:f3:30:d6:e0:97:a2:69:26:ed:15:f1:6d:a9:63:4d:7a:77:
4c:81:9c:55:55:eb:f5:b3:19:97:7a:49:47:90:8d:71:5e:4a:
66:91:1f:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+h0i19gRcWSw5iXsEpQ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNjU4M2RlODM2ZmNjMjhlNzBiZjY2ZWFkYjhkMzhmM2Y2
NGY0ZTEwHhcNMjUwOTA3MDcwMDQwWhcNMjUwOTA4MDcwMDQwWjAzMTEwLwYDVQQD
EygyMDE2N2NlNzM5MWVjNzRiNDEyYzIxYzdkNjY4OGM2NzY4N2YwODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMGsrciFDbJz/O9pKibdqmCGaAgd
sai1YUhp3pCCreQ4/ZtDTYmF9wh2Zqp9VkhN0XoSF8ngQ4+TKQcXgSLj6kxm5oAi
nexxieUvmFpfcSoNozZ3991bt70Vu1rnMT8m3oDgDoaMOEn0oXrwMramCDwgZO4n
d5N3YDZz3vLZit7gzmvknG1UZjGm44uPV0FgxDclF7cp9VvOWqzflX0m6ttHn/Je
4Stz8cWcL/ZMviWGdMvJJVzSfceMVFCF8dXXWUZGMT17jyRz6tyI0O3Xt0F9AE90
6vdvj6xPEYocpT4T8G+v5fancBJZn99Mps0abSRX99ahGeK63vr5KwgQcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAWfOc5HsdLQSwhx9ZojGdofwiQMB8GA1UdIwQY
MBaAFFNlg96Db8wo5wv2bq24048/ZPThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTJXRDNvTnZ6Q2puQ19adXJialRqejlrOU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82ZjI2M2EtNDE5My00MzA5LTljN2Et
ODJhNjk5MGRmMzhkLzEvVTJXRDNvTnZ6Q2puQ19adXJialRqejlrOU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy82ZjI2M2EtNDE5My00MzA5LTljN2EtODJhNjk5MGRmMzhk
LzEvVTJXRDNvTnZ6Q2puQ19adXJialRqejlrOU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFUECHe0
T8dAsdLoTh5rgUAVtV6vOsfSF3OnyrZBkp5E0Acjg0DjV0ugjRbn+lWlGq0oom0Q
cBXBYucSvnDdbZiavocCZSBY8o+9SCa46fafh5SJl500nZoamqYdQ1pvcB1JGUCi
m/5t9M7C2mvngGqQAiWG6ZZhN36UwKqEPVEK/URcxowwjHjH9xtC+qCkwJOaUIBN
55qSUHZe3ijfKwaAhFZgF73yA2Z1qBJlQ70joeE88yWFMz2blehVc2CVOpvUishI
MXK1vXIm3RgGWe31V7PMlY4Hj/Mw1uCXomkm7RXxbaljTXp3TIGcVVXr9bMZl3pJ
R5CNcV5KZpEfbA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:00 2025 by rpki-client