Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json)
Hash identifier: J39KpQluTANjetfrA9tnSp8dVspC17ZrGPkrhqIVJW4=
Subject key identifier: EA:8A:43:AE:48:5A:83:35:20:9C:C6:A7:90:76:55:18:6F:71:BE:51
Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293
Certificate serial: 0199FC21D159898C94937A5EDB1E8A6FDDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
Manifest number: 06
Signing time: Sun 19 Oct 2025 11:01:38 +0000
Manifest this update: Sun 19 Oct 2025 11:01:38 +0000
Manifest next update: Mon 20 Oct 2025 11:01:38 +0000
Files and hashes: 1: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: gqFsSm16fC80dheHYSkgTLNu4vcZQKdoIyzeaWiLLXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:d1:59:89:8c:94:93:7a:5e:db:1e:8a:6f:dd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293
Validity
Not Before: Oct 19 11:01:38 2025 GMT
Not After : Oct 20 11:01:38 2025 GMT
Subject: CN=ea8a43ae485a8335209cc6a7907655186f71be51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:22:03:0f:b8:98:ee:42:db:2c:09:06:72:
37:7d:8b:e1:88:58:42:7d:21:f6:e0:ff:70:93:db:
5e:4d:9a:f2:14:83:8f:94:e5:a3:4d:69:e3:75:1f:
1a:f4:20:9f:d0:94:e4:fd:cb:65:27:63:89:81:7b:
ef:60:75:17:f6:53:2c:28:d2:e3:84:02:23:2e:2d:
78:75:ed:af:7f:39:75:f5:f2:3a:a3:26:b1:10:f4:
0f:f1:ec:f5:19:ba:ba:27:79:a6:37:95:5c:1c:03:
e3:1f:22:15:f6:a3:bb:04:e6:ea:0c:5a:82:13:00:
5b:b4:29:e7:83:d3:21:3a:15:cd:d2:7a:b0:db:23:
24:71:4b:09:d8:88:32:f1:13:af:9e:fa:64:1f:07:
14:cf:6b:b4:b7:c9:59:24:ad:06:b2:bc:76:98:33:
5e:a7:5a:6f:77:8e:75:f1:c9:68:40:95:a3:36:b1:
6b:d0:84:f2:a5:da:df:a6:a5:ef:d0:6c:56:05:8c:
d6:ca:ab:f2:03:7a:23:17:1a:74:75:cd:4f:47:3d:
18:80:72:af:3a:6a:d3:32:3f:ef:b9:9e:6c:34:9d:
3b:60:f4:3e:87:9b:14:79:b0:e3:62:e0:77:cc:bc:
f1:94:ed:72:b3:ce:80:4e:72:d1:42:8e:13:e6:26:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8A:43:AE:48:5A:83:35:20:9C:C6:A7:90:76:55:18:6F:71:BE:51
X509v3 Authority Key Identifier:
keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7f:fc:ed:31:b1:03:9b:dd:34:94:d5:90:f9:00:0a:53:d1:
63:75:a1:45:b4:23:57:57:6f:e6:b2:1c:ce:ea:12:81:ca:c6:
ce:62:91:db:af:71:2c:e0:89:ed:ee:e8:a2:6d:34:5f:20:67:
1e:e3:c2:7b:61:24:ca:55:75:fe:7a:72:cd:34:bb:f4:e4:1c:
aa:32:74:3d:22:2f:01:1f:14:63:26:8b:d2:d1:3a:ea:02:b4:
a8:e0:55:f4:3a:8a:fb:19:e7:13:26:68:c1:2a:ca:43:9d:3f:
53:bd:2a:8c:12:29:32:3e:f1:c3:c8:4f:ed:45:05:d6:56:88:
5f:fe:6a:1f:8c:3e:9d:27:9a:4c:b8:7c:71:13:67:33:11:59:
4c:76:7f:9a:5d:49:8d:99:62:3b:20:fc:63:8d:19:2e:93:ee:
7e:ef:f9:c2:89:64:bf:24:eb:3c:e1:03:62:aa:8d:69:c4:b9:
52:4f:5e:60:5a:ac:4c:6a:97:90:8f:95:ef:cc:80:6c:e5:47:
e0:7c:ab:4d:99:6a:56:ad:9e:cb:6d:19:99:07:c7:ab:0b:75:
08:86:31:03:00:34:10:2d:2c:64:16:8d:91:d7:fa:fe:4f:c4:
43:bd:43:11:cf:d6:9b:e7:ca:04:4d:69:38:74:f8:4c:4d:b4:
74:98:1a:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IdFZiYyUk3pe2x6Kb93wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDI1Yzg2YWZkNGZiZTIyYTY5ZTAwNDJlMDA3NjIzNDIz
MWMyOTMwHhcNMjUxMDE5MTEwMTM4WhcNMjUxMDIwMTEwMTM4WjAzMTEwLwYDVQQD
EyhlYThhNDNhZTQ4NWE4MzM1MjA5Y2M2YTc5MDc2NTUxODZmNzFiZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFwiAw+4mO5C2ywJBnI3fYvhiFhC
fSH24P9wk9teTZryFIOPlOWjTWnjdR8a9CCf0JTk/ctlJ2OJgXvvYHUX9lMsKNLj
hAIjLi14de2vfzl19fI6oyaxEPQP8ez1Gbq6J3mmN5VcHAPjHyIV9qO7BObqDFqC
EwBbtCnng9MhOhXN0nqw2yMkcUsJ2Igy8ROvnvpkHwcUz2u0t8lZJK0Gsrx2mDNe
p1pvd4518cloQJWjNrFr0ITypdrfpqXv0GxWBYzWyqvyA3ojFxp0dc1PRz0YgHKv
OmrTMj/vuZ5sNJ07YPQ+h5sUebDjYuB3zLzxlO1ys86ATnLRQo4T5ibyaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqKQ65IWoM1IJzGp5B2VRhvcb5RMB8GA1UdIwQY
MBaAFJFCXIav1PviKmngBC4AdiNCMcKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VKY2hxX1UtLUlxYWVBRUxnQjJJMEl4d3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83NTA4Y2YtNDE5OC00MmNjLTlmMjUt
ODIxZGIwMDI2NzM4LzEva1VKY2hxX1UtLUlxYWVBRUxnQjJJMEl4d3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83NTA4Y2YtNDE5OC00MmNjLTlmMjUtODIxZGIwMDI2NzM4
LzEva1VKY2hxX1UtLUlxYWVBRUxnQjJJMEl4d3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3/87TGx
A5vdNJTVkPkAClPRY3WhRbQjV1dv5rIczuoSgcrGzmKR269xLOCJ7e7oom00XyBn
HuPCe2EkylV1/npyzTS79OQcqjJ0PSIvAR8UYyaL0tE66gK0qOBV9DqK+xnnEyZo
wSrKQ50/U70qjBIpMj7xw8hP7UUF1laIX/5qH4w+nSeaTLh8cRNnMxFZTHZ/ml1J
jZliOyD8Y40ZLpPufu/5wolkvyTrPOEDYqqNacS5Uk9eYFqsTGqXkI+V78yAbOVH
4HyrTZlqVq2ey20ZmQfHqwt1CIYxAwA0EC0sZBaNkdf6/k/EQ71DEc/Wm+fKBE1p
OHT4TE20dJgaYw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:06 2025 by rpki-client