Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier: //wxvEpDLRGNXVoARJIp1FnEpkSvLhiPplJVuKnlENo=
Subject key identifier: 88:17:3D:9C:50:41:EC:4B:8E:F8:C2:E2:96:B8:75:6B:68:B7:2B:C9
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial: 0199FBEB3869A3340E827A6C2AF7B170AD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number: 0FB5
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: MJwpekD9DaboMkJU/zdYPFK4QJcJ/jEQVchFQ9fJ7Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:38:69:a3:34:0e:82:7a:6c:2a:f7:b1:70:ad:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=88173d9c5041ec4b8ef8c2e296b8756b68b72bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:ef:65:16:71:08:98:89:c6:f6:a5:f8:55:
cd:4a:10:eb:da:97:a2:c4:b1:fc:ed:27:b7:40:3f:
be:33:ab:c8:7b:60:99:c6:4c:e4:80:b5:42:46:df:
ca:3f:3a:57:63:f0:8a:6d:b8:aa:00:11:9d:b3:b3:
df:2d:12:a4:f0:73:cb:e7:d5:1c:93:82:ff:b2:3c:
b2:36:0e:93:fb:3e:a3:03:47:b5:3f:1c:b6:48:b1:
66:55:b1:0e:2a:88:2e:83:72:5e:a8:aa:57:79:b9:
17:24:5a:c4:23:5b:36:a5:e8:f5:a2:85:90:d5:d4:
48:fd:c6:b7:19:88:48:41:50:70:8f:31:dd:e5:33:
ac:9b:48:4e:55:67:eb:db:28:16:96:14:10:dc:3e:
d7:51:6a:3a:10:7c:43:c5:3c:c4:3a:4c:fc:d5:2f:
0d:21:90:1d:e6:cc:21:91:ca:f1:a1:f0:4a:ff:f5:
33:55:3f:64:b8:d1:ad:c9:56:13:67:b5:35:5d:91:
22:43:77:a8:3b:d8:08:49:cd:f8:3b:dc:cb:e5:51:
ea:7a:d4:89:5c:82:1a:5e:b9:73:1e:22:64:4c:3a:
fa:83:56:7e:c5:d3:cf:f4:24:c4:77:34:95:bf:ad:
e7:a2:70:1f:43:04:5d:b2:a1:24:a2:4b:5f:96:bd:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:17:3D:9C:50:41:EC:4B:8E:F8:C2:E2:96:B8:75:6B:68:B7:2B:C9
X509v3 Authority Key Identifier:
keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e5:13:f7:4b:f2:e7:f7:0b:b2:4e:42:62:c9:75:5a:5e:01:
f0:c1:fe:ea:69:5d:ba:93:43:03:fa:a3:a2:7c:65:cc:e9:7b:
08:55:a0:e8:83:a9:3f:da:37:d8:b2:77:f4:ed:e4:b4:4a:c8:
a5:25:6f:34:60:21:1f:af:f2:1e:cf:da:b8:1f:de:08:86:b3:
59:2f:af:09:92:03:6a:0b:4b:2f:44:2a:e8:2c:62:9f:0b:6d:
cd:27:34:e2:f5:dc:8f:fc:0d:6b:e5:24:12:25:1d:15:e3:6d:
f8:25:5e:50:b9:92:e6:91:bb:89:40:e0:37:89:1c:52:82:7c:
f6:3c:f5:ee:bb:42:2b:60:f0:41:9a:2d:e7:ed:ab:76:22:4f:
eb:3c:7c:2b:a7:21:4b:12:5b:df:66:8c:66:db:64:48:a7:64:
af:7c:34:8d:d8:80:fd:86:cd:f6:7d:1d:11:ea:3f:dd:95:95:
57:8b:48:4d:49:d4:46:e4:7e:0c:9b:60:17:8c:b7:5d:83:b6:
0d:e3:eb:2d:63:88:ae:19:98:81:28:52:55:e9:6f:47:25:bf:
3c:0a:f6:61:9e:de:6c:cd:2a:46:28:9e:e7:d8:b9:b4:74:f0:
1c:45:99:96:b1:e3:50:94:76:da:fc:e7:32:d4:e2:46:45:2e:
00:12:b1:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zhpozQOgnpsKvexcK2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNDI4MzBlZWVkMjhiMDRiY2RkMDNmYTNmZGE0OGM1NDg1
YWZjZmUwHhcNMjUxMDE5MTAwMjAwWhcNMjUxMDIwMTAwMjAwWjAzMTEwLwYDVQQD
Eyg4ODE3M2Q5YzUwNDFlYzRiOGVmOGMyZTI5NmI4NzU2YjY4YjcyYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr3vZRZxCJiJxval+FXNShDr2pei
xLH87Se3QD++M6vIe2CZxkzkgLVCRt/KPzpXY/CKbbiqABGds7PfLRKk8HPL59Uc
k4L/sjyyNg6T+z6jA0e1Pxy2SLFmVbEOKogug3JeqKpXebkXJFrEI1s2pej1ooWQ
1dRI/ca3GYhIQVBwjzHd5TOsm0hOVWfr2ygWlhQQ3D7XUWo6EHxDxTzEOkz81S8N
IZAd5swhkcrxofBK//UzVT9kuNGtyVYTZ7U1XZEiQ3eoO9gISc34O9zL5VHqetSJ
XIIaXrlzHiJkTDr6g1Z+xdPP9CTEdzSVv63nonAfQwRdsqEkoktflr1trwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgXPZxQQexLjvjC4pa4dWtotyvJMB8GA1UdIwQY
MBaAFHFCgw7u0osEvN0D+j/aSMVIWvz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1VLRER1N1Npd1M4M1FQNlA5cEl4VWhhX1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hZmQxMTgtZThhNS00ZWE0LTk4OTUt
ZWIxMzNhMGFmNWZjLzEvY1VLRER1N1Npd1M4M1FQNlA5cEl4VWhhX1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hZmQxMTgtZThhNS00ZWE0LTk4OTUtZWIxMzNhMGFmNWZj
LzEvY1VLRER1N1Npd1M4M1FQNlA5cEl4VWhhX1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+UT90vy
5/cLsk5CYsl1Wl4B8MH+6mldupNDA/qjonxlzOl7CFWg6IOpP9o32LJ39O3ktErI
pSVvNGAhH6/yHs/auB/eCIazWS+vCZIDagtLL0Qq6CxinwttzSc04vXcj/wNa+Uk
EiUdFeNt+CVeULmS5pG7iUDgN4kcUoJ89jz17rtCK2DwQZot5+2rdiJP6zx8K6ch
SxJb32aMZttkSKdkr3w0jdiA/YbN9n0dEeo/3ZWVV4tITUnURuR+DJtgF4y3XYO2
DePrLWOIrhmYgShSVelvRyW/PAr2YZ7ebM0qRiie59i5tHTwHEWZlrHjUJR22vzn
MtTiRkUuABKx3Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:36 2025 by rpki-client