Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
File: uIazyxP9IWfYnRIYXpNQbdRcmvk.mft (raw, json)
Hash identifier: 5/iTnkNSkRGyxIHvyNASfkmpUPjeTkJuUDqSpPhg4gM=
Subject key identifier: BC:88:AE:D3:99:7C:70:4A:76:73:CA:5A:E3:AA:0D:A1:0C:14:0B:D9
Authority key identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
Certificate issuer: /CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Certificate serial: 0199FD3497413B7D4F6AD577AE3AB900C0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
Manifest number: 0C03
Signing time: Sun 19 Oct 2025 16:01:46 +0000
Manifest this update: Sun 19 Oct 2025 16:01:46 +0000
Manifest next update: Mon 20 Oct 2025 16:01:46 +0000
Files and hashes: 1: uIazyxP9IWfYnRIYXpNQbdRcmvk.crl (hash: ZQrHPSjYHcAKh8StNNDrrlCmfMh+PYeEngUU0B/TObw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:97:41:3b:7d:4f:6a:d5:77:ae:3a:b9:00:c0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Validity
Not Before: Oct 19 16:01:46 2025 GMT
Not After : Oct 20 16:01:46 2025 GMT
Subject: CN=bc88aed3997c704a7673ca5ae3aa0da10c140bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:7b:08:a9:ce:13:81:52:13:1d:e2:55:75:
dc:2b:37:6d:49:ac:84:01:29:68:4a:ff:24:3a:12:
7b:66:9b:d8:53:43:5a:bf:2a:a0:e2:5c:ac:0f:67:
57:be:24:35:e2:31:96:e7:91:37:d1:d0:08:27:25:
13:1d:3f:82:4a:86:77:5b:35:db:e5:b3:8a:3a:d4:
76:e5:85:33:59:d7:b1:65:11:d5:24:bc:d5:73:b1:
26:b5:62:f8:e7:90:22:45:09:14:32:12:7a:91:61:
ff:8b:ec:07:86:71:97:66:79:84:81:e1:5b:a4:31:
cd:72:48:80:13:c8:f9:22:1d:c4:04:1b:f2:5f:1b:
8a:94:99:52:79:af:cb:01:df:69:4e:58:19:a5:8c:
ec:b4:ec:39:0f:12:9d:ff:b0:c0:60:73:e8:b9:c0:
c3:39:48:44:54:42:37:2f:62:02:b2:a3:b7:da:ae:
8f:0e:1e:a9:01:13:c5:97:5a:bc:b3:96:07:ed:12:
2d:88:e9:14:0b:5f:56:9c:c2:86:7a:0a:78:83:0c:
43:77:d0:66:4e:0a:5c:30:f8:4d:89:18:a6:c2:f7:
40:ea:62:24:a0:7a:d7:ce:b9:27:f9:9a:41:7e:a6:
b1:55:9d:c8:84:e9:f2:0b:af:8d:de:61:f9:4a:f8:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:88:AE:D3:99:7C:70:4A:76:73:CA:5A:E3:AA:0D:A1:0C:14:0B:D9
X509v3 Authority Key Identifier:
keyid:B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b0:4d:6b:d0:96:b0:72:95:4c:f9:45:68:b5:b9:66:33:60:
0a:ed:2a:b1:57:62:fe:a1:bc:86:9b:ca:53:d6:3e:e6:d3:40:
c1:1b:b8:e4:8c:b6:3a:23:1b:05:32:23:c4:c1:56:a9:a8:4b:
9c:32:0c:cd:d3:d6:8d:07:ce:e1:3b:de:13:a0:4d:b5:0b:35:
34:42:a7:fa:f0:0d:e1:92:10:f5:cf:0b:1b:c9:8f:9b:58:f8:
02:32:ac:cc:e5:96:27:b9:8a:ce:6a:d4:2d:e2:86:b4:a3:08:
3c:91:ec:72:f8:34:0a:b4:dd:98:01:15:a2:13:6d:eb:50:ab:
b4:66:82:86:96:1f:ed:73:bf:f3:c5:39:d1:48:76:0f:4f:53:
e0:bc:81:2e:60:63:60:f9:50:05:c9:b5:71:81:05:c8:fc:dc:
f5:69:6c:91:8a:72:77:d3:0e:cd:03:bf:58:b8:f1:fa:56:33:
6e:ee:69:3a:3c:49:5e:28:d2:0d:5d:02:b0:f3:7e:2b:c0:ed:
23:8b:d9:d8:4c:1f:91:31:77:d9:19:ec:04:a0:3d:f7:f1:aa:
34:eb:5c:9f:d4:69:b6:d5:1a:33:cb:b3:ea:b8:c3:3c:d6:7d:
9e:1c:57:99:4d:0e:3e:6c:1e:ce:6a:ac:3e:4d:b8:e6:e8:52:
22:0c:07:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NJdBO31PatV3rjq5AMC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ODZiM2NiMTNmZDIxNjdkODlkMTIxODVlOTM1MDZkZDQ1
YzlhZjkwHhcNMjUxMDE5MTYwMTQ2WhcNMjUxMDIwMTYwMTQ2WjAzMTEwLwYDVQQD
EyhiYzg4YWVkMzk5N2M3MDRhNzY3M2NhNWFlM2FhMGRhMTBjMTQwYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwF7CKnOE4FSEx3iVXXcKzdtSayE
ASloSv8kOhJ7ZpvYU0Navyqg4lysD2dXviQ14jGW55E30dAIJyUTHT+CSoZ3WzXb
5bOKOtR25YUzWdexZRHVJLzVc7EmtWL455AiRQkUMhJ6kWH/i+wHhnGXZnmEgeFb
pDHNckiAE8j5Ih3EBBvyXxuKlJlSea/LAd9pTlgZpYzstOw5DxKd/7DAYHPoucDD
OUhEVEI3L2ICsqO32q6PDh6pARPFl1q8s5YH7RItiOkUC19WnMKGegp4gwxDd9Bm
TgpcMPhNiRimwvdA6mIkoHrXzrkn+ZpBfqaxVZ3IhOnyC6+N3mH5SvjXWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyIrtOZfHBKdnPKWuOqDaEMFAvZMB8GA1UdIwQY
MBaAFLiGs8sT/SFn2J0SGF6TUG3UXJr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUlhenl4UDlJV2ZZblJJWVhwTlFiZFJjbXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80MmFjM2MtYzU4My00YjgyLWJjYjct
MDQ3Mzk0MDJlMjdiLzEvdUlhenl4UDlJV2ZZblJJWVhwTlFiZFJjbXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80MmFjM2MtYzU4My00YjgyLWJjYjctMDQ3Mzk0MDJlMjdi
LzEvdUlhenl4UDlJV2ZZblJJWVhwTlFiZFJjbXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbBNa9CW
sHKVTPlFaLW5ZjNgCu0qsVdi/qG8hpvKU9Y+5tNAwRu45Iy2OiMbBTIjxMFWqahL
nDIMzdPWjQfO4TveE6BNtQs1NEKn+vAN4ZIQ9c8LG8mPm1j4AjKszOWWJ7mKzmrU
LeKGtKMIPJHscvg0CrTdmAEVohNt61CrtGaChpYf7XO/88U50Uh2D09T4LyBLmBj
YPlQBcm1cYEFyPzc9WlskYpyd9MOzQO/WLjx+lYzbu5pOjxJXijSDV0CsPN+K8Dt
I4vZ2EwfkTF32RnsBKA99/GqNOtcn9RpttUaM8uz6rjDPNZ9nhxXmU0OPmwezmqs
Pk245uhSIgwHDA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:43 2025 by rpki-client