Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
File: pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft (raw, json)
Hash identifier: p18wTkBITXZi3ZOvsb9gWGyNAT6fiXkh9pg7fJeRkec=
Subject key identifier: FC:8B:3B:4C:26:14:E1:2E:B7:55:EC:8B:05:FE:14:4B:AF:B3:F3:13
Authority key identifier: A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
Certificate issuer: /CN=a540abd19882cac80b766d72ad8fec24ab9550af
Certificate serial: 0199FC588B7E914920902DF0A5A51EB58E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
Manifest number: AE
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl (hash: xhZ20JK3GaBv5FnC3dUVdSHDwzWR130wyVxWc+mV80I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8b:7e:91:49:20:90:2d:f0:a5:a5:1e:b5:8e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a540abd19882cac80b766d72ad8fec24ab9550af
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=fc8b3b4c2614e12eb755ec8b05fe144bafb3f313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:5c:1a:9e:c0:f4:55:28:c7:8e:27:00:4e:
55:31:fc:c4:df:ea:d3:77:32:6f:e0:da:df:27:5b:
c3:57:85:ec:cf:cf:fb:b3:e3:7b:28:52:57:37:11:
fd:6d:7f:65:53:55:84:18:6e:90:4a:a0:d3:32:09:
f2:bf:ee:43:c9:af:38:ab:e4:84:40:22:d8:29:5a:
35:0c:8f:d4:20:de:4b:2e:ec:bf:e6:cb:1e:6a:93:
4b:50:f3:f1:a6:da:0d:5f:f8:c0:9f:e0:37:70:d5:
19:84:a1:17:10:66:46:a0:a9:28:cb:15:db:22:75:
17:1d:9e:2c:15:1c:ea:2a:06:48:57:82:57:34:70:
e4:de:79:61:33:82:29:cf:b8:ec:cf:34:4f:17:c9:
aa:df:a5:66:b5:02:27:00:cc:e6:7c:fc:88:c8:9e:
8d:15:6d:35:04:3a:d8:cf:d5:73:6d:68:f9:1a:3e:
af:0b:9a:1a:b4:c2:12:d2:1b:a8:6c:50:4e:54:d8:
b3:35:cd:3f:c5:a0:c6:fe:a3:6b:4c:f6:b0:6c:f7:
dd:7d:c8:be:8f:d9:b4:30:2a:60:f0:a9:6e:8c:e3:
ff:1b:16:04:b1:c0:d4:ef:7f:65:b5:66:4d:e2:ff:
16:f3:60:81:ca:9e:3c:d8:a2:33:be:40:e8:5d:28:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8B:3B:4C:26:14:E1:2E:B7:55:EC:8B:05:FE:14:4B:AF:B3:F3:13
X509v3 Authority Key Identifier:
keyid:A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8c:d6:46:a0:8f:fd:51:54:d6:aa:75:a5:a7:91:a3:12:e4:
ea:ff:16:84:4a:33:5b:3b:bc:eb:9b:55:93:9a:4e:fd:43:85:
63:15:63:d8:09:d0:c2:db:7f:70:21:e8:be:ec:20:85:93:be:
02:08:c7:31:20:15:52:3c:c4:3e:a3:c3:cd:6e:62:6b:89:5a:
49:06:4d:af:a1:53:2a:af:c5:21:47:14:be:cf:31:c6:ed:fd:
04:d1:47:ba:22:f6:49:ff:70:d8:d8:42:be:b3:5d:d4:27:8b:
12:a1:f3:8f:49:3a:e7:5a:09:97:50:33:29:16:a2:44:72:be:
5a:a3:62:c8:bf:8c:c5:8f:c0:34:8e:d5:c0:a5:5c:e9:23:45:
f6:e5:b2:ef:56:1a:b3:93:75:a8:da:7f:59:51:69:fa:0a:f5:
de:69:64:32:53:87:b0:ba:39:ed:93:a6:f8:2f:55:fa:1a:a2:
ac:1f:17:aa:18:20:7f:5f:9a:2b:e9:0a:5e:86:c5:d8:2d:ce:
41:8c:97:6f:ca:19:ac:fa:6a:1f:11:e6:67:10:ed:fa:86:b1:
aa:0f:b9:3c:c0:b4:60:82:51:f1:cf:29:1a:66:b8:23:49:f9:
58:38:2c:8b:88:55:fa:fc:ee:a4:2a:9b:b8:28:7d:25:f5:e7:
d9:5d:da:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WIt+kUkgkC3wpaUetY4BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NDBhYmQxOTg4MmNhYzgwYjc2NmQ3MmFkOGZlYzI0YWI5
NTUwYWYwHhcNMjUxMDE5MTIwMTI1WhcNMjUxMDIwMTIwMTI1WjAzMTEwLwYDVQQD
EyhmYzhiM2I0YzI2MTRlMTJlYjc1NWVjOGIwNWZlMTQ0YmFmYjNmMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYZcGp7A9FUox44nAE5VMfzE3+rT
dzJv4NrfJ1vDV4Xsz8/7s+N7KFJXNxH9bX9lU1WEGG6QSqDTMgnyv+5Dya84q+SE
QCLYKVo1DI/UIN5LLuy/5sseapNLUPPxptoNX/jAn+A3cNUZhKEXEGZGoKkoyxXb
InUXHZ4sFRzqKgZIV4JXNHDk3nlhM4Ipz7jszzRPF8mq36VmtQInAMzmfPyIyJ6N
FW01BDrYz9VzbWj5Gj6vC5oatMIS0huobFBOVNizNc0/xaDG/qNrTPawbPfdfci+
j9m0MCpg8KlujOP/GxYEscDU739ltWZN4v8W82CByp482KIzvkDoXSheEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyLO0wmFOEut1XsiwX+FEuvs/MTMB8GA1UdIwQY
MBaAFKVAq9GYgsrIC3Ztcq2P7CSrlVCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVDcjBaaUN5c2dMZG0xeXJZX3NKS3VWVUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83NmMzZGYtYTY5Yi00NWQxLTkxNzIt
ZGViMTM5YzRmMWI2LzEvcFVDcjBaaUN5c2dMZG0xeXJZX3NKS3VWVUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83NmMzZGYtYTY5Yi00NWQxLTkxNzItZGViMTM5YzRmMWI2
LzEvcFVDcjBaaUN5c2dMZG0xeXJZX3NKS3VWVUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIzWRqCP
/VFU1qp1paeRoxLk6v8WhEozWzu865tVk5pO/UOFYxVj2AnQwtt/cCHovuwghZO+
AgjHMSAVUjzEPqPDzW5ia4laSQZNr6FTKq/FIUcUvs8xxu39BNFHuiL2Sf9w2NhC
vrNd1CeLEqHzj0k651oJl1AzKRaiRHK+WqNiyL+MxY/ANI7VwKVc6SNF9uWy71Ya
s5N1qNp/WVFp+gr13mlkMlOHsLo57ZOm+C9V+hqirB8Xqhggf1+aK+kKXobF2C3O
QYyXb8oZrPpqHxHmZxDt+oaxqg+5PMC0YIJR8c8pGma4I0n5WDgsi4hV+vzupCqb
uCh9JfXn2V3a9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:44 2025 by rpki-client