
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: VWLgGX0mHBAf17ma35pC/8qFsZLiam+LQwkyQ+2fxs4=
Subject key identifier: D2:E8:EF:E0:DE:DB:ED:28:09:23:DF:75:7E:1B:1B:AF:DD:EA:83:BD
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 0199FDD90A54AC03F4D783DB6D8A49777F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0DC8
Signing time: Sun 19 Oct 2025 19:01:23 +0000
Manifest this update: Sun 19 Oct 2025 19:01:23 +0000
Manifest next update: Mon 20 Oct 2025 19:01:23 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: 55mJGGj+fs+NZtyT9JcWAJ/TIK75LPjRNk/54NTnzcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:0a:54:ac:03:f4:d7:83:db:6d:8a:49:77:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: Oct 19 19:01:23 2025 GMT
Not After : Oct 20 19:01:23 2025 GMT
Subject: CN=d2e8efe0dedbed280923df757e1b1bafddea83bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:1b:78:f8:9b:a8:2a:43:6d:76:b5:c6:e5:
79:54:d0:5d:58:87:ed:cf:7a:a7:1a:7f:16:55:d2:
f8:12:5c:d3:be:60:52:40:18:0a:d5:60:0a:c5:e7:
85:95:dd:33:b0:d6:20:a8:44:2e:19:60:72:b8:ba:
52:a6:af:99:e6:80:d1:65:0e:76:fc:82:b7:ae:33:
42:8c:1f:db:b8:e1:45:1d:9c:0f:b2:8b:5a:f5:04:
9e:c4:e9:7c:15:27:8a:85:48:bb:13:de:5d:fc:a0:
fa:90:fa:24:1e:8b:dc:d2:ec:5c:6c:47:9e:5e:4f:
4f:04:b6:77:11:9e:d3:38:14:20:a4:a1:f0:1f:f3:
c2:a6:b3:e9:20:87:60:f7:71:dd:e1:2a:7d:52:e0:
a4:9e:68:e0:ff:37:59:91:de:c0:d7:c2:68:8c:b6:
34:2e:6b:61:d6:03:f8:3c:dc:7d:da:c8:f3:2b:61:
c3:29:c8:8f:e1:aa:fd:40:96:f2:43:70:2a:56:f7:
08:94:a6:f1:57:b3:13:0c:c7:99:d9:07:3f:cd:85:
ea:be:23:ba:b5:1a:a0:32:c2:40:3d:e2:f9:36:55:
18:09:7d:da:fa:04:bb:63:23:51:1a:85:76:91:2e:
f2:81:dc:f1:23:15:89:60:55:54:de:c9:03:2f:1d:
51:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E8:EF:E0:DE:DB:ED:28:09:23:DF:75:7E:1B:1B:AF:DD:EA:83:BD
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7b:6e:d6:e2:24:64:fd:de:92:56:76:3f:85:99:58:f7:0a:
42:a3:95:56:c7:b7:e5:70:1e:89:3c:ea:6e:56:12:80:ea:c5:
ae:2e:06:73:6e:95:76:b4:ac:5c:62:a1:37:da:ad:d6:9b:3f:
1d:e8:3a:39:e2:5c:1e:9e:dd:6e:91:94:da:5c:b8:de:ae:c5:
b0:c7:7f:58:37:b7:2f:f1:b6:0e:47:42:d9:cf:80:8f:b2:eb:
6d:22:60:22:22:b3:55:d7:c3:85:e5:10:f8:6e:d9:89:16:79:
3c:b4:7f:ac:c3:03:89:ac:5d:ca:b0:af:fe:5d:7f:d5:bd:63:
cb:51:ce:ce:c3:64:51:98:51:5c:ce:d2:1e:2e:90:cc:d3:4a:
e1:91:f2:70:c7:8c:25:c5:4f:05:03:3f:d3:67:34:1a:8c:3c:
d7:3a:13:69:64:c9:d9:9f:8d:4e:ca:76:d9:44:17:0e:92:75:
5c:0f:e9:4b:ba:3d:d2:97:95:46:ee:3e:06:9f:ae:a2:d2:64:
f1:d5:bf:52:3f:e0:3c:96:15:c9:8c:44:c6:aa:55:9a:42:52:
48:6b:f9:f6:c9:d2:79:cf:2a:b3:61:f7:87:9d:b9:c4:80:9a:
30:ab:e7:37:d7:26:3f:41:8f:9a:dc:af:e7:8d:aa:5e:57:f3:
47:cc:ce:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92QpUrAP014PbbYpJd39AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDNjNWY0OGM3N2E3OWM5ODVmNWU1MzYyZTA4MmFkNTRl
MjMwNjMwHhcNMjUxMDE5MTkwMTIzWhcNMjUxMDIwMTkwMTIzWjAzMTEwLwYDVQQD
EyhkMmU4ZWZlMGRlZGJlZDI4MDkyM2RmNzU3ZTFiMWJhZmRkZWE4M2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoQbePibqCpDbXa1xuV5VNBdWIft
z3qnGn8WVdL4ElzTvmBSQBgK1WAKxeeFld0zsNYgqEQuGWByuLpSpq+Z5oDRZQ52
/IK3rjNCjB/buOFFHZwPsota9QSexOl8FSeKhUi7E95d/KD6kPokHovc0uxcbEee
Xk9PBLZ3EZ7TOBQgpKHwH/PCprPpIIdg93Hd4Sp9UuCknmjg/zdZkd7A18JojLY0
Lmth1gP4PNx92sjzK2HDKciP4ar9QJbyQ3AqVvcIlKbxV7MTDMeZ2Qc/zYXqviO6
tRqgMsJAPeL5NlUYCX3a+gS7YyNRGoV2kS7ygdzxIxWJYFVU3skDLx1R/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLo7+De2+0oCSPfdX4bG6/d6oO9MB8GA1UdIwQY
MBaAFJFDxfSMd6ecmF9eU2Lggq1U4jBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUt
YmRmMzY0YmE3N2NkLzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUtYmRmMzY0YmE3N2Nk
LzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHtu1uIk
ZP3eklZ2P4WZWPcKQqOVVse35XAeiTzqblYSgOrFri4Gc26VdrSsXGKhN9qt1ps/
Heg6OeJcHp7dbpGU2ly43q7FsMd/WDe3L/G2DkdC2c+Aj7LrbSJgIiKzVdfDheUQ
+G7ZiRZ5PLR/rMMDiaxdyrCv/l1/1b1jy1HOzsNkUZhRXM7SHi6QzNNK4ZHycMeM
JcVPBQM/02c0Gow81zoTaWTJ2Z+NTsp22UQXDpJ1XA/pS7o90peVRu4+Bp+uotJk
8dW/Uj/gPJYVyYxExqpVmkJSSGv59snSec8qs2H3h525xICaMKvnN9cmP0GPmtyv
542qXlfzR8zOFQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:07 2025 by rpki-client