
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: GlBjm94PVEUg13KjVORzi4Eupn8zGLKuYzHr2HZILZY=
Subject key identifier: 16:A0:49:52:F2:ED:46:0B:6E:6E:96:FE:45:C4:59:5D:9D:C8:EF:A6
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 0199FC217253E6D5976C70119807872ED60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 0853
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: jth+vF56yVh9XjP8XJPGD08TpTAoOPvIXsVcpq1xorU=)
2: UrDlMe0qpvsS_4c6z9IjME9U_ys.roa (hash: /PhhJk4agPsHh1xc3D32x5yCUJu5RdhwQAjI1byTCj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:72:53:e6:d5:97:6c:70:11:98:07:87:2e:d6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=16a04952f2ed460b6e6e96fe45c4595d9dc8efa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:3a:13:c1:5b:65:8d:af:84:43:5d:9f:90:
62:7e:8f:37:2e:1f:76:8c:6b:e7:c2:69:7b:70:e8:
e3:09:89:1a:04:1a:42:93:9f:87:70:a3:8f:6a:8a:
fe:f9:86:b7:1e:60:1c:a7:43:db:73:09:a4:91:84:
e3:e5:34:18:db:1f:3c:b3:2c:b9:78:de:ce:d7:f0:
b0:2f:19:d7:f5:8b:97:1d:51:77:d5:35:01:c8:5d:
52:27:2c:0e:73:e1:4e:cb:7d:03:59:e1:8f:79:23:
1c:07:d1:8e:e7:02:6a:90:db:59:d7:44:77:bf:00:
23:30:93:83:f4:8a:0b:f0:54:62:2c:a8:9e:07:2c:
62:cb:70:20:82:c8:ea:91:b4:94:ea:a0:3a:1d:a6:
43:c7:f7:5a:b3:fb:18:bb:7c:07:92:82:50:ef:08:
9b:94:18:c5:1f:1d:e3:3b:07:c5:4b:45:c8:f5:f6:
85:f5:06:43:7c:c9:a9:dc:be:68:f0:b6:7f:6c:20:
d1:1e:89:fb:b2:a6:61:c4:65:be:ed:4e:13:14:36:
00:ba:a5:58:a8:0f:37:d7:fa:28:51:57:1e:f6:b3:
ee:e8:50:66:e5:cb:c1:c4:7a:ce:bb:d7:f5:05:6d:
1e:e8:e4:c2:2e:4b:1b:e3:5c:6a:90:a5:ba:f6:ed:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A0:49:52:F2:ED:46:0B:6E:6E:96:FE:45:C4:59:5D:9D:C8:EF:A6
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:be:fd:27:c3:02:80:35:da:59:03:3a:bd:c2:0c:0f:64:dc:
a6:13:c1:2c:81:11:e7:88:b9:a2:a2:50:e8:42:54:32:1b:e7:
40:6a:48:6e:9c:c4:13:a9:d2:38:a4:e2:be:d0:2a:95:47:4e:
bd:fc:ae:a7:02:9e:70:7b:e1:d8:90:3c:9a:84:8d:09:70:14:
a3:03:bf:98:97:75:e1:89:32:b9:78:b1:1c:0e:f4:78:ff:7e:
a1:ef:fd:ee:57:15:27:37:8e:05:4e:6f:16:b3:6e:8f:61:29:
e4:ab:36:bf:e6:cc:48:18:e8:0b:f8:9a:92:44:32:68:0e:1f:
cb:96:05:67:94:ad:b6:a3:6f:6d:82:78:f4:6b:f1:5d:af:6b:
a8:5d:01:a4:fb:15:f9:96:06:a2:fd:81:7c:00:3e:8d:84:2b:
91:10:1a:7c:4f:f1:ee:93:10:60:1e:47:0a:95:32:c4:78:87:
eb:e0:8b:62:b9:ce:b1:9c:9b:f8:29:68:bb:b5:09:6d:c8:2e:
ee:42:f2:5c:fe:05:3f:39:69:5f:a5:2c:a4:b7:55:dd:48:8e:
18:4b:df:8a:69:dd:31:8d:b9:cf:ef:ed:ef:3f:2e:9c:14:2c:
7d:93:2a:54:cd:1a:99:d7:a9:52:a2:59:ad:23:6c:5a:91:d8:
17:74:b4:82
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8IXJT5tWXbHARmAeHLtYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi
ZTFhYjUwHhcNMjUxMDE5MTEwMTE0WhcNMjUxMDIwMTEwMTE0WjAzMTEwLwYDVQQD
EygxNmEwNDk1MmYyZWQ0NjBiNmU2ZTk2ZmU0NWM0NTk1ZDlkYzhlZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8c6E8FbZY2vhENdn5Bifo83Lh92
jGvnwml7cOjjCYkaBBpCk5+HcKOPaor++Ya3HmAcp0PbcwmkkYTj5TQY2x88syy5
eN7O1/CwLxnX9YuXHVF31TUByF1SJywOc+FOy30DWeGPeSMcB9GO5wJqkNtZ10R3
vwAjMJOD9IoL8FRiLKieByxiy3AggsjqkbSU6qA6HaZDx/das/sYu3wHkoJQ7wib
lBjFHx3jOwfFS0XI9faF9QZDfMmp3L5o8LZ/bCDRHon7sqZhxGW+7U4TFDYAuqVY
qA831/ooUVce9rPu6FBm5cvBxHrOu9f1BW0e6OTCLksb41xqkKW69u2FTQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBagSVLy7UYLbm6W/kXEWV2dyO+mMB8GA1UdIwQY
MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4
LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3
ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM779
J8MCgDXaWQM6vcIMD2TcphPBLIER54i5oqJQ6EJUMhvnQGpIbpzEE6nSOKTivtAq
lUdOvfyupwKecHvh2JA8moSNCXAUowO/mJd14YkyuXixHA70eP9+oe/97lcVJzeO
BU5vFrNuj2Ep5Ks2v+bMSBjoC/iakkQyaA4fy5YFZ5SttqNvbYJ49GvxXa9rqF0B
pPsV+ZYGov2BfAA+jYQrkRAafE/x7pMQYB5HCpUyxHiH6+CLYrnOsZyb+Clou7UJ
bcgu7kLyXP4FPzlpX6UspLdV3UiOGEvfimndMY25z+/t7z8unBQsfZMqVM0amdep
UqJZrSNsWpHYF3S0gg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:20 2025 by rpki-client