Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
File: urOPSeByR4vlU-z_NjXz3Zd1gQE.mft (raw, json)
Hash identifier: UPhNL6ZjtrLz4yIqtcvmYsGz0EcN0Jt4b5moSO3t/s0=
Subject key identifier: 6D:C2:0D:9A:54:22:14:ED:9E:A9:36:A7:0A:DA:E2:4B:DD:C8:61:DF
Authority key identifier: BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
Certificate issuer: /CN=bab38f49e072478be553ecff3635f3dd97758101
Certificate serial: 0198D54E2D1BBB3B2341DD559ABD66BE54A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
Manifest number: 1038
Signing time: Sat 23 Aug 2025 05:02:06 +0000
Manifest this update: Sat 23 Aug 2025 05:02:06 +0000
Manifest next update: Sun 24 Aug 2025 05:02:06 +0000
Files and hashes: 1: urOPSeByR4vlU-z_NjXz3Zd1gQE.crl (hash: EqG/5fRn1ykviBazGgUvVK7Spjpt5w0ljPe55BuWUWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:2d:1b:bb:3b:23:41:dd:55:9a:bd:66:be:54:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab38f49e072478be553ecff3635f3dd97758101
Validity
Not Before: Aug 23 05:02:06 2025 GMT
Not After : Aug 24 05:02:06 2025 GMT
Subject: CN=6dc20d9a542214ed9ea936a70adae24bddc861df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:b7:a6:99:b6:53:02:b0:2b:a4:41:b8:23:
c7:14:03:d2:bc:d0:77:97:8d:19:97:1d:a8:09:74:
c9:af:b4:53:45:10:17:a0:ee:ae:33:44:88:52:0a:
56:83:2c:ee:d2:6c:35:b9:cc:a8:59:9e:83:fe:4a:
2f:1f:6d:c9:f1:78:67:10:5a:ad:8f:cc:3c:ae:b4:
8c:5e:e8:f8:cd:00:95:1e:cb:c9:88:24:4c:e1:e9:
b6:ee:be:c1:00:26:83:1d:72:fd:12:c3:e6:dc:2d:
5a:b0:26:02:d9:51:d9:16:96:96:a9:62:52:58:57:
73:1a:bb:d4:e5:42:19:92:30:ce:c1:db:b6:5e:0c:
a3:ff:03:00:9c:5e:4c:f3:65:9d:93:a9:7f:94:b5:
01:f0:12:3b:50:1e:18:0f:50:48:c8:50:40:f2:74:
ae:00:32:e0:8e:5a:2f:86:36:ac:d6:3b:2a:59:13:
00:c3:6a:34:99:7d:5f:20:e0:b9:74:63:ec:0c:cc:
c9:63:d8:28:3e:16:a6:3a:0e:4a:f6:c3:b5:1c:1f:
aa:f9:b4:a2:ab:e7:67:99:76:fa:ea:d1:26:07:cb:
76:b7:a6:c7:9d:5e:2d:c7:ec:e9:3a:9a:8f:60:c8:
dc:41:87:53:32:86:44:39:4f:f1:2d:0f:27:72:d6:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C2:0D:9A:54:22:14:ED:9E:A9:36:A7:0A:DA:E2:4B:DD:C8:61:DF
X509v3 Authority Key Identifier:
keyid:BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:22:be:e7:aa:cd:6f:52:70:a9:7a:b8:be:f9:ab:fe:ed:f7:
bc:e2:d0:e5:ba:a1:a8:6d:d8:05:a2:5b:ed:21:83:d3:77:c6:
77:94:06:22:56:cc:ad:43:61:48:e6:eb:d1:fc:5d:9f:e5:e1:
eb:ad:bf:23:d1:d4:6c:a4:b4:4a:74:84:35:e0:00:16:80:c2:
98:59:66:3a:5f:2a:20:25:89:5d:96:23:10:99:94:54:33:d5:
fb:c5:8e:c3:5a:70:7e:52:61:aa:6a:65:ce:c7:ec:88:11:fd:
20:9e:91:41:4a:b3:0a:da:a2:6d:28:7f:ae:f5:74:f9:c4:38:
db:65:3b:5c:43:71:46:ff:96:5a:3a:3c:cc:9f:9d:f2:53:89:
11:99:2c:05:0f:16:e2:1f:a2:09:8f:61:78:38:5d:9b:ce:f6:
cc:97:cb:55:0a:80:f2:52:58:1a:5d:6d:9c:b6:86:04:3d:53:
8e:c5:5f:68:14:58:5a:5a:84:53:3f:d9:e9:0b:9c:af:49:39:
57:f2:57:99:4d:8b:bf:8d:a2:92:51:35:f5:64:34:11:05:f9:
ac:88:77:7c:e9:3a:36:b3:f1:b7:53:4a:39:b1:e0:63:0a:20:
1c:0f:39:0f:74:3b:bc:72:fd:ad:ea:27:cf:ec:89:83:50:96:
e2:60:c0:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTi0buzsjQd1Vmr1mvlSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjM4ZjQ5ZTA3MjQ3OGJlNTUzZWNmZjM2MzVmM2RkOTc3
NTgxMDEwHhcNMjUwODIzMDUwMjA2WhcNMjUwODI0MDUwMjA2WjAzMTEwLwYDVQQD
Eyg2ZGMyMGQ5YTU0MjIxNGVkOWVhOTM2YTcwYWRhZTI0YmRkYzg2MWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAm3ppm2UwKwK6RBuCPHFAPSvNB3
l40Zlx2oCXTJr7RTRRAXoO6uM0SIUgpWgyzu0mw1ucyoWZ6D/kovH23J8XhnEFqt
j8w8rrSMXuj4zQCVHsvJiCRM4em27r7BACaDHXL9EsPm3C1asCYC2VHZFpaWqWJS
WFdzGrvU5UIZkjDOwdu2Xgyj/wMAnF5M82Wdk6l/lLUB8BI7UB4YD1BIyFBA8nSu
ADLgjlovhjas1jsqWRMAw2o0mX1fIOC5dGPsDMzJY9goPhamOg5K9sO1HB+q+bSi
q+dnmXb66tEmB8t2t6bHnV4tx+zpOpqPYMjcQYdTMoZEOU/xLQ8nctZDpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3CDZpUIhTtnqk2pwra4kvdyGHfMB8GA1UdIwQY
MBaAFLqzj0ngckeL5VPs/zY1892XdYEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJPUFNlQnlSNHZsVS16X05qWHozWmQxZ1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zOTJiMjMtYTVlYS00NThiLWJjMzgt
MzQ5YjUyMzM4ZGJkLzEvdXJPUFNlQnlSNHZsVS16X05qWHozWmQxZ1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zOTJiMjMtYTVlYS00NThiLWJjMzgtMzQ5YjUyMzM4ZGJk
LzEvdXJPUFNlQnlSNHZsVS16X05qWHozWmQxZ1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSK+56rN
b1JwqXq4vvmr/u33vOLQ5bqhqG3YBaJb7SGD03fGd5QGIlbMrUNhSObr0fxdn+Xh
662/I9HUbKS0SnSENeAAFoDCmFlmOl8qICWJXZYjEJmUVDPV+8WOw1pwflJhqmpl
zsfsiBH9IJ6RQUqzCtqibSh/rvV0+cQ422U7XENxRv+WWjo8zJ+d8lOJEZksBQ8W
4h+iCY9heDhdm872zJfLVQqA8lJYGl1tnLaGBD1TjsVfaBRYWlqEUz/Z6Qucr0k5
V/JXmU2Lv42iklE19WQ0EQX5rIh3fOk6NrPxt1NKObHgYwogHA85D3Q7vHL9reon
z+yJg1CW4mDAFg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:21 2025 by rpki-client