Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
File: Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json)
Hash identifier: v68MyLf5jfbdbOFQz5JBa5TFzEl9nuvTVrtnZlbMF5I=
Subject key identifier: 15:CD:0B:BB:68:2B:55:ED:6E:9F:D0:5F:77:86:47:3E:65:85:C5:1C
Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Certificate issuer: /CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Certificate serial: 0199FBEB49B113CED5BED05338D8597E3DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
Manifest number: 0F95
Signing time: Sun 19 Oct 2025 10:02:04 +0000
Manifest this update: Sun 19 Oct 2025 10:02:04 +0000
Manifest next update: Mon 20 Oct 2025 10:02:04 +0000
Files and hashes: 1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: HHVUCdFPATBPWgp0Uql8pWdMu3GPmWt9WOOgSz3Xez0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:49:b1:13:ce:d5:be:d0:53:38:d8:59:7e:3d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Validity
Not Before: Oct 19 10:02:04 2025 GMT
Not After : Oct 20 10:02:04 2025 GMT
Subject: CN=15cd0bbb682b55ed6e9fd05f7786473e6585c51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:e7:cb:4e:52:e9:02:6c:99:26:68:d4:80:
54:ae:a2:1c:9f:4e:e5:1c:40:ed:d6:97:02:d7:16:
ad:38:c4:77:ab:27:f4:ce:e9:88:a8:4e:30:8b:f8:
c0:d1:dd:aa:b4:a8:74:e7:29:a2:9c:00:73:bc:25:
ef:4a:c9:c2:52:f4:5a:a5:15:2a:c5:82:80:69:11:
75:ff:a6:d5:3c:78:f8:1b:79:69:e2:01:96:bf:75:
40:34:88:11:be:88:28:b1:78:e9:0d:93:31:64:34:
fe:53:2c:86:31:3d:58:05:73:d8:bb:c9:8c:12:50:
c0:0e:e5:15:1a:ff:b2:56:ef:4d:da:e7:47:0d:c3:
69:01:d1:9c:c0:dc:4d:74:fc:40:35:3e:19:4a:d5:
1a:b5:ad:7e:a1:6e:57:75:ad:49:62:66:f9:b6:eb:
e6:bf:c8:46:f0:51:1b:71:e3:a3:b2:8f:37:6b:8a:
5b:e9:c7:ba:ef:5b:39:d6:ab:f0:76:a5:03:ae:06:
f3:5c:3f:90:21:3e:32:56:bf:dd:e7:21:a8:0b:d3:
b7:3a:3b:95:d5:fb:f9:3c:f5:b3:c4:57:8e:7a:f1:
e9:70:1f:36:ee:07:59:aa:bd:15:35:55:0d:2c:17:
cc:ae:24:fc:a8:66:a5:5a:39:90:3d:33:e3:d1:75:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CD:0B:BB:68:2B:55:ED:6E:9F:D0:5F:77:86:47:3E:65:85:C5:1C
X509v3 Authority Key Identifier:
keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3a:0b:1c:ed:43:d3:a5:39:a1:e1:60:87:09:ac:97:98:3b:
54:38:a4:ec:60:ca:53:63:54:4b:19:1b:8e:30:df:6f:ba:bd:
4c:01:6b:07:99:fc:99:f2:11:c8:a7:a0:ed:09:fe:5e:c7:f4:
9f:82:10:56:47:92:60:3e:60:54:bb:1b:b2:1a:02:a2:fe:83:
1c:ba:c5:ea:89:f0:d2:1e:9d:53:23:7e:70:91:df:54:5d:0b:
3d:52:76:2d:84:b0:13:e1:8e:01:84:9e:00:fd:12:91:4d:e0:
5b:f5:8d:ba:b8:3c:d2:f4:f7:c7:d2:2c:ab:fe:0a:e1:d7:c1:
29:2e:ad:d4:28:c3:66:13:49:1a:e7:14:4d:b5:24:ab:92:d5:
46:c1:0a:8e:33:dd:17:5a:59:4a:30:d2:8f:cd:41:59:4e:bd:
83:8a:3f:a7:41:fc:74:94:4a:28:aa:fc:cb:64:ca:86:3a:59:
02:2a:dc:12:0e:99:20:07:f6:55:73:f2:14:31:91:2a:41:48:
56:ff:af:43:97:80:63:84:ac:2a:c3:33:29:17:f6:2a:94:66:
5d:a9:21:40:29:6f:59:36:9f:61:5c:40:66:94:a8:1c:c6:2b:
81:ac:56:9b:0a:c6:9c:be:1e:aa:cc:22:87:b4:b1:2c:a9:d9:
8d:c7:bc:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn760mxE87VvtBTONhZfj2lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMGUzMTY0YjE2YWUwOTEyNjg0ZmFhOTBlNDM5MTRkZTFm
ZGQ1YTUwHhcNMjUxMDE5MTAwMjA0WhcNMjUxMDIwMTAwMjA0WjAzMTEwLwYDVQQD
EygxNWNkMGJiYjY4MmI1NWVkNmU5ZmQwNWY3Nzg2NDczZTY1ODVjNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqzny05S6QJsmSZo1IBUrqIcn07l
HEDt1pcC1xatOMR3qyf0zumIqE4wi/jA0d2qtKh05yminABzvCXvSsnCUvRapRUq
xYKAaRF1/6bVPHj4G3lp4gGWv3VANIgRvogosXjpDZMxZDT+UyyGMT1YBXPYu8mM
ElDADuUVGv+yVu9N2udHDcNpAdGcwNxNdPxANT4ZStUata1+oW5Xda1JYmb5tuvm
v8hG8FEbceOjso83a4pb6ce671s51qvwdqUDrgbzXD+QIT4yVr/d5yGoC9O3OjuV
1fv5PPWzxFeOevHpcB827gdZqr0VNVUNLBfMriT8qGalWjmQPTPj0XUX5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXNC7toK1Xtbp/QX3eGRz5lhcUcMB8GA1UdIwQY
MBaAFFMOMWSxauCRJoT6qQ5DkU3h/dWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAt
MDQ5Y2JiZTJmNzY3LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAtMDQ5Y2JiZTJmNzY3
LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszoLHO1D
06U5oeFghwmsl5g7VDik7GDKU2NUSxkbjjDfb7q9TAFrB5n8mfIRyKeg7Qn+Xsf0
n4IQVkeSYD5gVLsbshoCov6DHLrF6onw0h6dUyN+cJHfVF0LPVJ2LYSwE+GOAYSe
AP0SkU3gW/WNurg80vT3x9Isq/4K4dfBKS6t1CjDZhNJGucUTbUkq5LVRsEKjjPd
F1pZSjDSj81BWU69g4o/p0H8dJRKKKr8y2TKhjpZAircEg6ZIAf2VXPyFDGRKkFI
Vv+vQ5eAY4SsKsMzKRf2KpRmXakhQClvWTafYVxAZpSoHMYrgaxWmwrGnL4eqswi
h7SxLKnZjce8YQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:29 2025 by rpki-client