Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
File: urOPSeByR4vlU-z_NjXz3Zd1gQE.mft (raw, json)
Hash identifier: yJz3LIo+D7iM7DxQd72yIT+2TFKLaaTAEmAAMEy485Y=
Subject key identifier: 31:11:08:A2:1B:04:A8:B9:C0:B9:E3:2A:E9:1C:1C:2A:8E:93:A9:A7
Authority key identifier: BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
Certificate issuer: /CN=bab38f49e072478be553ecff3635f3dd97758101
Certificate serial: 0199FCC6A2592DDCD1B7A1CC16993EA0D659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
Manifest number: 10D1
Signing time: Sun 19 Oct 2025 14:01:40 +0000
Manifest this update: Sun 19 Oct 2025 14:01:40 +0000
Manifest next update: Mon 20 Oct 2025 14:01:40 +0000
Files and hashes: 1: urOPSeByR4vlU-z_NjXz3Zd1gQE.crl (hash: ffVfI24hG2FseO7eaUTtXNbQlLIqlIocPqrhgynrrJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a2:59:2d:dc:d1:b7:a1:cc:16:99:3e:a0:d6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab38f49e072478be553ecff3635f3dd97758101
Validity
Not Before: Oct 19 14:01:40 2025 GMT
Not After : Oct 20 14:01:40 2025 GMT
Subject: CN=311108a21b04a8b9c0b9e32ae91c1c2a8e93a9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:27:d1:c1:5e:cf:cf:e5:99:1b:cc:24:0d:
3f:a8:34:0d:7e:45:64:0e:e8:1e:b4:bc:39:05:ef:
40:d0:af:bd:cd:e0:36:d7:c6:0a:5a:de:8d:a0:1b:
01:ab:29:ec:2c:95:c9:fb:02:e1:2f:ca:8d:33:b7:
80:7c:4f:1a:1a:a9:4a:3f:93:ee:6e:8a:9a:0f:e5:
62:cf:fa:2f:0d:99:53:78:a8:21:92:01:cb:50:ff:
e4:d1:a0:35:5f:43:f6:76:15:12:d0:0b:6e:ec:3a:
fb:e4:55:70:12:41:cd:e6:7d:09:7b:09:37:3f:29:
8a:8e:cb:68:de:b8:fa:fb:7f:71:b1:bc:4b:96:d4:
d6:72:ba:58:2c:8d:e9:a9:e0:db:1d:38:ba:a1:5f:
8b:c7:a6:60:09:e4:50:0a:39:1e:22:1a:a1:06:ed:
fa:51:1d:26:c3:10:12:02:83:a4:33:36:7d:68:a0:
c9:82:fb:10:be:13:12:11:f2:6b:a1:f0:81:32:86:
7b:93:cd:31:1e:75:f2:1d:66:63:95:c0:a1:4c:4b:
04:2b:bc:27:7d:79:e1:5f:e5:1e:4e:88:a3:6e:fc:
7f:11:59:0b:50:b2:e2:e7:c9:61:a7:12:91:55:f5:
0d:18:3a:45:50:25:53:14:24:ed:95:a1:2a:9a:98:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:11:08:A2:1B:04:A8:B9:C0:B9:E3:2A:E9:1C:1C:2A:8E:93:A9:A7
X509v3 Authority Key Identifier:
keyid:BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ef:d8:ec:ce:6c:8c:ca:0f:e9:23:98:6b:d0:81:b2:42:06:
0d:f6:b8:9b:ed:89:ce:af:b1:22:25:04:d2:92:60:a9:35:62:
98:85:df:e9:84:c5:5a:c6:7e:90:74:8a:94:fa:25:14:00:ea:
f6:49:cd:1c:42:b8:6b:ec:f2:76:32:9c:26:b8:d0:23:fb:e9:
7e:06:ee:19:94:c0:e8:45:32:0c:5c:72:d2:d8:9b:e1:30:84:
a0:f1:94:8b:f4:cb:44:5e:c5:92:88:26:cc:92:a2:ba:6b:dc:
bc:d0:bf:1b:9f:d5:70:ef:70:14:08:9d:3e:27:56:e5:bd:48:
7f:0a:bf:e2:33:12:5b:79:63:09:0f:b2:08:6a:70:5a:6a:7f:
42:81:72:77:b1:22:4a:50:8a:16:c6:bd:f0:10:b3:ef:04:da:
2e:ea:49:e1:99:13:a0:eb:82:3d:d7:1b:47:c3:cc:bb:9b:f5:
98:c3:bb:38:e6:37:1d:14:33:a7:54:48:31:c7:23:76:be:81:
1d:ee:f7:18:f7:69:6d:42:5d:33:15:0b:ac:b9:58:0e:70:1f:
f4:7c:bb:07:c4:3d:fe:b6:b7:38:ac:26:18:e6:bd:af:78:a4:
31:f9:3a:1e:a5:59:42:87:45:cc:ed:c5:b7:1e:4e:5a:8b:3f:
af:8d:3f:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xqJZLdzRt6HMFpk+oNZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjM4ZjQ5ZTA3MjQ3OGJlNTUzZWNmZjM2MzVmM2RkOTc3
NTgxMDEwHhcNMjUxMDE5MTQwMTQwWhcNMjUxMDIwMTQwMTQwWjAzMTEwLwYDVQQD
EygzMTExMDhhMjFiMDRhOGI5YzBiOWUzMmFlOTFjMWMyYThlOTNhOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulMn0cFez8/lmRvMJA0/qDQNfkVk
DugetLw5Be9A0K+9zeA218YKWt6NoBsBqynsLJXJ+wLhL8qNM7eAfE8aGqlKP5Pu
boqaD+Viz/ovDZlTeKghkgHLUP/k0aA1X0P2dhUS0Atu7Dr75FVwEkHN5n0Jewk3
PymKjsto3rj6+39xsbxLltTWcrpYLI3pqeDbHTi6oV+Lx6ZgCeRQCjkeIhqhBu36
UR0mwxASAoOkMzZ9aKDJgvsQvhMSEfJrofCBMoZ7k80xHnXyHWZjlcChTEsEK7wn
fXnhX+UeToijbvx/EVkLULLi58lhpxKRVfUNGDpFUCVTFCTtlaEqmpj3hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDERCKIbBKi5wLnjKukcHCqOk6mnMB8GA1UdIwQY
MBaAFLqzj0ngckeL5VPs/zY1892XdYEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJPUFNlQnlSNHZsVS16X05qWHozWmQxZ1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zOTJiMjMtYTVlYS00NThiLWJjMzgt
MzQ5YjUyMzM4ZGJkLzEvdXJPUFNlQnlSNHZsVS16X05qWHozWmQxZ1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zOTJiMjMtYTVlYS00NThiLWJjMzgtMzQ5YjUyMzM4ZGJk
LzEvdXJPUFNlQnlSNHZsVS16X05qWHozWmQxZ1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUO/Y7M5s
jMoP6SOYa9CBskIGDfa4m+2Jzq+xIiUE0pJgqTVimIXf6YTFWsZ+kHSKlPolFADq
9knNHEK4a+zydjKcJrjQI/vpfgbuGZTA6EUyDFxy0tib4TCEoPGUi/TLRF7Fkogm
zJKiumvcvNC/G5/VcO9wFAidPidW5b1Ifwq/4jMSW3ljCQ+yCGpwWmp/QoFyd7Ei
SlCKFsa98BCz7wTaLupJ4ZkToOuCPdcbR8PMu5v1mMO7OOY3HRQzp1RIMccjdr6B
He73GPdpbUJdMxULrLlYDnAf9Hy7B8Q9/ra3OKwmGOa9r3ikMfk6HqVZQodFzO3F
tx5OWos/r40/RA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:29 2025 by rpki-client