Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
File: UfsmDqHIG4GxkdCujcNkESHp65Y.mft (raw, json)
Hash identifier: BiFHfT2TDShIDbWBa+AZFrDY+8LRV/mNALZJjZxm4VE=
Subject key identifier: ED:8B:3E:A9:B8:AE:71:0C:1E:5F:DC:84:C1:9C:89:A9:C9:23:F7:48
Authority key identifier: 51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
Certificate issuer: /CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Certificate serial: 0199FC8F6B1FBBF810F3AAB29BC1EA805211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
Manifest number: 0684
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: UfsmDqHIG4GxkdCujcNkESHp65Y.crl (hash: xaKeNaNFfqn0kNa9RYbV72Vi5C2/bm3Mcm8v9BlhWn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6b:1f:bb:f8:10:f3:aa:b2:9b:c1:ea:80:52:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=ed8b3ea9b8ae710c1e5fdc84c19c89a9c923f748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:db:c0:98:c2:60:ba:be:fa:5a:01:c1:c0:
5a:f3:12:b5:87:ab:0c:6d:b5:8d:d2:12:5a:35:5c:
3b:85:87:c2:5c:04:ad:cf:1e:e1:0e:bf:1e:62:e2:
f1:85:ea:c6:b4:44:c8:75:78:2b:6d:3d:0d:db:52:
53:e2:1c:64:25:d8:b8:5a:57:9f:c3:b8:31:6e:d4:
51:57:3d:eb:0e:67:c3:c5:6d:e9:1c:81:48:73:af:
ca:2b:9e:05:96:8f:21:94:67:5e:c1:b3:b3:18:d6:
ce:2d:c7:3b:8e:d1:21:14:cd:ca:20:b7:29:52:fc:
22:6c:ab:51:da:f9:d1:bb:88:9a:09:9f:c1:a7:cf:
7f:d5:0c:f9:c6:32:27:11:8c:48:f3:c5:04:76:96:
90:eb:67:15:87:89:61:44:53:fd:13:ee:d2:a8:fe:
1b:30:94:85:61:da:20:d4:77:24:2e:32:e3:a8:72:
81:d8:11:a9:32:1d:38:7e:4d:79:19:f7:d2:62:89:
ef:1b:74:d5:1f:a3:3f:e0:54:ea:b0:bf:3e:46:92:
8f:ab:f2:45:ea:05:14:bf:e8:8f:08:9c:a0:3c:45:
30:d3:68:7a:f5:fb:24:25:1b:7c:de:5e:6c:fe:aa:
40:85:dc:4b:bb:6d:7e:29:81:b9:b8:cd:7e:a8:e9:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8B:3E:A9:B8:AE:71:0C:1E:5F:DC:84:C1:9C:89:A9:C9:23:F7:48
X509v3 Authority Key Identifier:
keyid:51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:07:0b:3b:22:74:1d:3a:4b:fd:c1:62:a2:e9:c7:fb:6c:52:
f5:92:f9:7f:51:4a:41:e2:20:a1:37:33:a2:fc:6f:f9:17:8b:
c4:20:e8:52:7e:81:70:47:51:64:fc:5f:86:9c:f3:92:7d:4e:
92:82:b2:35:06:16:6b:c4:4b:62:4b:f8:0f:39:02:c6:44:1f:
33:48:3a:32:88:ed:b4:90:0c:62:70:4b:76:36:a8:e3:18:cb:
55:44:33:24:bb:2b:d8:48:36:29:ea:51:d0:97:73:87:10:a6:
41:28:dd:f7:38:e9:cb:a2:7a:35:07:f4:5d:46:2c:76:92:a2:
e8:11:aa:d1:5d:65:dc:a4:f4:30:c3:95:fa:89:4a:a6:a0:26:
17:7b:5f:94:d4:9d:a8:95:1c:1a:af:a8:86:f2:c5:f0:32:96:
5e:43:12:1b:94:bb:5b:99:5d:a2:30:c3:61:84:3d:77:d5:a3:
ee:3c:d1:6f:25:45:d5:80:2f:a7:8c:41:f0:bf:28:b9:9c:ff:
31:82:1a:b1:ad:73:0e:06:0c:0a:f7:f8:0b:50:13:fc:27:d3:
3a:83:f6:54:99:f7:d3:e0:be:64:df:55:b6:03:e3:c9:5d:45:
d9:ae:e6:f2:a1:14:78:d1:04:49:24:b8:a0:02:f1:22:e9:f7:
25:8e:b8:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j2sfu/gQ86qym8HqgFIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZmIyNjBlYTFjODFiODFiMTkxZDBhZThkYzM2NDExMjFl
OWViOTYwHhcNMjUxMDE5MTMwMTIxWhcNMjUxMDIwMTMwMTIxWjAzMTEwLwYDVQQD
EyhlZDhiM2VhOWI4YWU3MTBjMWU1ZmRjODRjMTljODlhOWM5MjNmNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+vbwJjCYLq++loBwcBa8xK1h6sM
bbWN0hJaNVw7hYfCXAStzx7hDr8eYuLxherGtETIdXgrbT0N21JT4hxkJdi4Wlef
w7gxbtRRVz3rDmfDxW3pHIFIc6/KK54Flo8hlGdewbOzGNbOLcc7jtEhFM3KILcp
UvwibKtR2vnRu4iaCZ/Bp89/1Qz5xjInEYxI88UEdpaQ62cVh4lhRFP9E+7SqP4b
MJSFYdog1HckLjLjqHKB2BGpMh04fk15GffSYonvG3TVH6M/4FTqsL8+RpKPq/JF
6gUUv+iPCJygPEUw02h69fskJRt83l5s/qpAhdxLu21+KYG5uM1+qOm+CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2LPqm4rnEMHl/chMGcianJI/dIMB8GA1UdIwQY
MBaAFFH7Jg6hyBuBsZHQro3DZBEh6euWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWZzbURxSElHNEd4a2RDdWpjTmtFU0hwNjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80ZjVlN2ItMTRlNy00NGJjLThkNWQt
ZDI5NTc0NTNiODQ0LzEvVWZzbURxSElHNEd4a2RDdWpjTmtFU0hwNjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80ZjVlN2ItMTRlNy00NGJjLThkNWQtZDI5NTc0NTNiODQ0
LzEvVWZzbURxSElHNEd4a2RDdWpjTmtFU0hwNjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwcLOyJ0
HTpL/cFiounH+2xS9ZL5f1FKQeIgoTczovxv+ReLxCDoUn6BcEdRZPxfhpzzkn1O
koKyNQYWa8RLYkv4DzkCxkQfM0g6MojttJAMYnBLdjao4xjLVUQzJLsr2Eg2KepR
0JdzhxCmQSjd9zjpy6J6NQf0XUYsdpKi6BGq0V1l3KT0MMOV+olKpqAmF3tflNSd
qJUcGq+ohvLF8DKWXkMSG5S7W5ldojDDYYQ9d9Wj7jzRbyVF1YAvp4xB8L8ouZz/
MYIasa1zDgYMCvf4C1AT/CfTOoP2VJn30+C+ZN9VtgPjyV1F2a7m8qEUeNEESSS4
oALxIun3JY64zA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:22 2025 by rpki-client