Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
File: uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft (raw, json)
Hash identifier: FyviROX9MDM91kXbNAwAfCaN3A/xuJbe2TfesgoTtaM=
Subject key identifier: DF:D1:67:0C:7F:AD:E5:CF:23:B5:C8:C0:51:27:EB:15:FC:4C:ED:B3
Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
Certificate issuer: /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Certificate serial: 0198D47273A36E737F1E38544796F2CCAB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
Manifest number: 1643
Signing time: Sat 23 Aug 2025 01:02:07 +0000
Manifest this update: Sat 23 Aug 2025 01:02:07 +0000
Manifest next update: Sun 24 Aug 2025 01:02:07 +0000
Files and hashes: 1: uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl (hash: DlPnQ7bHmREbm6WV20EcdtSet2GAKKFSc0bc/i4I8qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:73:a3:6e:73:7f:1e:38:54:47:96:f2:cc:ab:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Validity
Not Before: Aug 23 01:02:07 2025 GMT
Not After : Aug 24 01:02:07 2025 GMT
Subject: CN=dfd1670c7fade5cf23b5c8c05127eb15fc4cedb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:d0:ab:65:7d:af:29:cf:54:78:fe:75:0d:
1c:ac:82:75:55:b9:fc:8b:bd:38:03:7c:1d:4f:78:
3a:1b:54:30:4a:99:0e:34:0e:e9:e8:a3:17:36:08:
c6:ee:8c:91:c0:7a:63:d2:f5:33:aa:63:fa:8b:5a:
3d:7b:19:7a:a2:2a:4d:7e:a9:38:79:99:d4:ed:8a:
3d:1f:c3:2f:fe:d9:19:b1:28:2f:cf:f6:de:47:73:
32:22:8c:57:44:1b:f2:b3:14:2f:d6:6f:61:cb:35:
17:1a:b1:a9:ee:3c:ef:60:35:9a:00:13:1b:93:1a:
0b:43:2f:91:46:2e:9a:30:da:d5:61:93:e0:d4:98:
cb:0d:8d:0d:81:6c:a3:21:66:97:4c:a1:6a:c8:e5:
72:f0:b1:46:75:6c:59:5a:e2:2a:f9:86:8c:61:23:
d1:ef:1e:b7:54:e6:d6:48:db:fc:57:95:4b:ee:62:
63:1f:06:7a:87:39:bb:27:25:02:5c:98:ee:7b:e1:
76:04:49:0d:49:94:e1:44:e1:82:95:1f:8e:1f:81:
e3:12:a8:11:fa:d0:1b:ae:83:15:b6:2b:bc:58:24:
f1:9a:1a:dc:9d:30:3a:6b:59:43:2f:29:13:03:b5:
d9:43:35:07:f3:d3:70:b1:15:37:a0:5d:23:09:bb:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D1:67:0C:7F:AD:E5:CF:23:B5:C8:C0:51:27:EB:15:FC:4C:ED:B3
X509v3 Authority Key Identifier:
keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2a:d5:88:01:08:4d:0b:e7:76:85:01:5a:f5:57:2c:76:28:
00:52:18:d9:b1:bd:94:55:ee:91:a7:8b:ca:e4:e1:70:dd:c1:
2d:33:48:ee:3c:49:ee:24:ce:9a:f2:5b:51:ae:1f:19:e9:89:
26:ef:02:0b:40:be:90:77:2b:1e:d1:68:a2:b7:ad:97:14:8e:
26:d6:6f:b9:e3:1a:3f:09:a3:37:82:51:ba:84:fe:fa:3e:63:
33:b2:e1:68:f4:41:a2:ec:60:78:14:5f:9f:41:9c:07:d0:eb:
95:97:b3:61:1e:b8:9a:42:c7:61:a9:ff:21:6a:e1:97:5a:99:
02:a3:1d:0b:48:aa:2b:38:52:b7:3e:af:de:3c:34:8d:43:a0:
32:14:34:72:3c:6c:9e:f7:28:f6:fd:fb:a6:c4:3c:7e:16:d4:
d9:69:cb:bb:7a:3c:98:73:9b:c6:53:bc:37:35:0f:b8:f2:1b:
2f:1c:dd:4c:8e:e4:27:cf:78:dd:9e:50:c9:a7:ea:fd:5d:ad:
dd:4d:db:fd:b3:f9:ac:e3:01:ac:2c:99:fa:8c:14:e8:9d:7c:
2e:56:72:5a:aa:39:78:21:25:12:de:8c:e5:4c:70:d6:f8:74:
01:31:8b:cc:37:3c:43:5c:31:fa:b5:dc:d2:72:3d:59:c8:fb:
cd:7f:d8:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcnOjbnN/HjhUR5byzKsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ1MzE1YjQ0Y2I2NWQyYTc5MWEwYWU1ODIzNjY0ZDBj
NDQ0NWUwHhcNMjUwODIzMDEwMjA3WhcNMjUwODI0MDEwMjA3WjAzMTEwLwYDVQQD
EyhkZmQxNjcwYzdmYWRlNWNmMjNiNWM4YzA1MTI3ZWIxNWZjNGNlZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0nQq2V9rynPVHj+dQ0crIJ1Vbn8
i704A3wdT3g6G1QwSpkONA7p6KMXNgjG7oyRwHpj0vUzqmP6i1o9exl6oipNfqk4
eZnU7Yo9H8Mv/tkZsSgvz/beR3MyIoxXRBvysxQv1m9hyzUXGrGp7jzvYDWaABMb
kxoLQy+RRi6aMNrVYZPg1JjLDY0NgWyjIWaXTKFqyOVy8LFGdWxZWuIq+YaMYSPR
7x63VObWSNv8V5VL7mJjHwZ6hzm7JyUCXJjue+F2BEkNSZThROGClR+OH4HjEqgR
+tAbroMVtiu8WCTxmhrcnTA6a1lDLykTA7XZQzUH89NwsRU3oF0jCbuxhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/RZwx/reXPI7XIwFEn6xX8TO2zMB8GA1UdIwQY
MBaAFLkUUxW0TLZdKnkaCuWCNmTQxEReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80Zjg4N2UtM2Y2Yy00OGEzLWJiMDMt
ZGZiOTQ2ZDE3ZDBjLzEvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80Zjg4N2UtM2Y2Yy00OGEzLWJiMDMtZGZiOTQ2ZDE3ZDBj
LzEvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyrViAEI
TQvndoUBWvVXLHYoAFIY2bG9lFXukaeLyuThcN3BLTNI7jxJ7iTOmvJbUa4fGemJ
Ju8CC0C+kHcrHtFooretlxSOJtZvueMaPwmjN4JRuoT++j5jM7LhaPRBouxgeBRf
n0GcB9DrlZezYR64mkLHYan/IWrhl1qZAqMdC0iqKzhStz6v3jw0jUOgMhQ0cjxs
nvco9v37psQ8fhbU2WnLu3o8mHObxlO8NzUPuPIbLxzdTI7kJ8943Z5Qyafq/V2t
3U3b/bP5rOMBrCyZ+owU6J18LlZyWqo5eCElEt6M5Uxw1vh0ATGLzDc8Q1wx+rXc
0nI9Wcj7zX/YUw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:17 2025 by rpki-client