Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
File: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft (raw, json)
Hash identifier: 6TQVmrAuApqhDy5qeLGbug4xwjL1cNa6TN/z9JGQ5sQ=
Subject key identifier: BA:D3:4C:B8:68:98:9A:DB:7F:97:7B:B8:28:FB:9B:F3:16:C4:A2:1B
Authority key identifier: 52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
Certificate issuer: /CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Certificate serial: 0198D660ABDCACC1EDE420C9EE40B849DB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
Manifest number: 1030
Signing time: Sat 23 Aug 2025 10:01:56 +0000
Manifest this update: Sat 23 Aug 2025 10:01:56 +0000
Manifest next update: Sun 24 Aug 2025 10:01:56 +0000
Files and hashes: 1: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl (hash: Qn8F5co6WC6cHvwR5RIH+4yHbYcrdbP7xJkKC55mzXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ab:dc:ac:c1:ed:e4:20:c9:ee:40:b8:49:db:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Validity
Not Before: Aug 23 10:01:56 2025 GMT
Not After : Aug 24 10:01:56 2025 GMT
Subject: CN=bad34cb868989adb7f977bb828fb9bf316c4a21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c0:36:ab:57:57:53:0f:fd:10:e6:71:d0:93:
d7:ed:e3:50:bf:e7:de:89:16:0a:29:b7:53:12:09:
08:09:d6:b3:0d:a5:57:c6:0a:22:ed:6a:a1:cf:f5:
2a:53:79:44:a5:13:15:b6:b4:88:89:fc:b7:44:6b:
ef:58:8d:99:d4:60:b7:d2:9c:ff:9b:7e:16:af:32:
7d:b5:02:7e:77:e0:0a:0e:7d:88:7d:5d:36:66:6e:
ff:f9:ad:dc:d8:da:90:3c:ae:72:6a:79:a0:39:7c:
22:0c:68:be:9a:e7:2c:7f:9a:01:cd:50:50:bc:37:
08:55:54:c4:ba:53:b3:e1:93:9b:09:de:68:78:6b:
02:98:f4:c6:9a:7e:70:c2:a3:ab:6b:8d:01:c5:c5:
5d:93:50:ec:c6:42:44:a2:79:d3:22:d6:7c:97:eb:
69:75:64:c4:78:27:1d:5f:75:32:07:1b:01:98:0e:
d5:cd:14:fa:1d:54:40:ba:32:d5:be:fc:28:cc:d4:
b3:ad:59:7c:71:72:13:10:70:e8:a8:eb:16:07:ce:
cf:a4:2d:5c:a9:cf:cf:8c:ed:c2:8f:64:ca:41:6f:
9b:ab:d8:3f:ec:4a:98:d9:14:c5:cd:13:40:59:f0:
9c:e9:fc:b2:fa:6a:5d:29:28:c6:47:52:82:72:9d:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D3:4C:B8:68:98:9A:DB:7F:97:7B:B8:28:FB:9B:F3:16:C4:A2:1B
X509v3 Authority Key Identifier:
keyid:52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:80:ed:70:6e:b3:6f:0f:1c:1e:9b:6f:d4:8f:38:e2:30:3d:
cf:e4:b4:12:92:d4:16:fc:e3:64:c6:8c:e1:df:a9:a4:7c:f5:
c7:80:a7:f0:45:bd:cf:03:0f:61:11:ea:1a:c2:74:f3:5d:1a:
5a:0f:e4:51:65:f6:fb:9a:24:94:e3:fe:92:3d:95:eb:0f:97:
a7:cb:c4:90:f6:da:a8:a6:78:73:c8:cb:67:6a:4d:96:98:0e:
94:ca:5d:1b:71:4d:dc:0a:15:c6:69:68:ba:38:ab:c3:f2:ed:
0d:1e:74:15:fa:26:9e:b3:5e:55:4f:72:3c:d1:c5:ee:51:f1:
f3:75:24:d8:06:a1:50:50:8b:e5:88:b8:76:cc:40:b5:95:a3:
d7:33:ab:e4:92:64:30:2d:03:f9:84:11:ca:d1:00:53:1e:9f:
cf:c8:65:d5:4f:48:e4:7f:3d:64:12:43:1e:b6:c9:c1:d3:87:
ef:aa:36:dd:01:40:04:4a:d6:1d:f1:3c:f8:c6:7d:f0:4a:b4:
13:57:8a:ec:2a:7b:14:fb:63:70:8c:11:5f:4b:fd:f2:d9:23:
7a:20:44:42:9c:b3:2a:69:21:db:a8:a3:b9:87:28:e1:d8:49:
c0:91:37:75:8c:c9:82:29:22:9b:c4:e7:c3:68:37:4d:99:2b:
8b:6e:55:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYKvcrMHt5CDJ7kC4SduWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjhkM2QzMzBiZDY2MjBiYjE3ZDQ4N2U0MDU1ZDk1YjI3
NGFmMTYwHhcNMjUwODIzMTAwMTU2WhcNMjUwODI0MTAwMTU2WjAzMTEwLwYDVQQD
EyhiYWQzNGNiODY4OTg5YWRiN2Y5NzdiYjgyOGZiOWJmMzE2YzRhMjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cA2q1dXUw/9EOZx0JPX7eNQv+fe
iRYKKbdTEgkICdazDaVXxgoi7Wqhz/UqU3lEpRMVtrSIify3RGvvWI2Z1GC30pz/
m34WrzJ9tQJ+d+AKDn2IfV02Zm7/+a3c2NqQPK5yanmgOXwiDGi+mucsf5oBzVBQ
vDcIVVTEulOz4ZObCd5oeGsCmPTGmn5wwqOra40BxcVdk1DsxkJEonnTItZ8l+tp
dWTEeCcdX3UyBxsBmA7VzRT6HVRAujLVvvwozNSzrVl8cXITEHDoqOsWB87PpC1c
qc/PjO3Cj2TKQW+bq9g/7EqY2RTFzRNAWfCc6fyy+mpdKSjGR1KCcp3PTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrTTLhomJrbf5d7uCj7m/MWxKIbMB8GA1UdIwQY
MBaAFFK409MwvWYguxfUh+QFXZWydK8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJqVDB6QzlaaUM3RjlTSDVBVmRsYkowcnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80Y2E4ZmEtNmMxNS00YjQ3LWFiOTMt
YmJiZWI2MDkwNTIxLzEvVXJqVDB6QzlaaUM3RjlTSDVBVmRsYkowcnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80Y2E4ZmEtNmMxNS00YjQ3LWFiOTMtYmJiZWI2MDkwNTIx
LzEvVXJqVDB6QzlaaUM3RjlTSDVBVmRsYkowcnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIDtcG6z
bw8cHptv1I844jA9z+S0EpLUFvzjZMaM4d+ppHz1x4Cn8EW9zwMPYRHqGsJ0810a
Wg/kUWX2+5oklOP+kj2V6w+Xp8vEkPbaqKZ4c8jLZ2pNlpgOlMpdG3FN3AoVxmlo
ujirw/LtDR50FfomnrNeVU9yPNHF7lHx83Uk2AahUFCL5Yi4dsxAtZWj1zOr5JJk
MC0D+YQRytEAUx6fz8hl1U9I5H89ZBJDHrbJwdOH76o23QFABErWHfE8+MZ98Eq0
E1eK7Cp7FPtjcIwRX0v98tkjeiBEQpyzKmkh26ijuYco4dhJwJE3dYzJgikim8Tn
w2g3TZkri25V3g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:40 2025 by rpki-client