Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
File: ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json)
Hash identifier: vwE/2kBHisbsy955X81yyPOOfLNjqNyPGO7kgB0IplY=
Subject key identifier: E6:D0:50:A6:14:65:D7:BE:B8:7F:03:20:FE:77:95:9B:8D:59:1D:FC
Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Certificate issuer: /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Certificate serial: 0199FCC6615E00EB60A0EA842C66E9BA6583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
Manifest number: 0424
Signing time: Sun 19 Oct 2025 14:01:23 +0000
Manifest this update: Sun 19 Oct 2025 14:01:23 +0000
Manifest next update: Mon 20 Oct 2025 14:01:23 +0000
Files and hashes: 1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: dCpjw8JwMmKmWx/SQkjfhrLnrr1GIMAwSya7mJe3fBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:61:5e:00:eb:60:a0:ea:84:2c:66:e9:ba:65:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Validity
Not Before: Oct 19 14:01:23 2025 GMT
Not After : Oct 20 14:01:23 2025 GMT
Subject: CN=e6d050a61465d7beb87f0320fe77959b8d591dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:41:82:6b:c4:71:39:61:0f:0a:ed:a4:d3:
f0:d9:90:a6:a7:40:8b:da:fb:71:f2:a0:39:0a:80:
87:d4:3b:a7:45:5e:66:8e:27:b4:b6:39:c2:f5:e2:
de:78:02:dd:50:6d:3b:2f:7d:1d:7d:41:c8:d3:9a:
91:90:97:0a:6c:12:bd:bd:cb:39:c7:8b:6d:49:1f:
05:01:1c:72:61:5b:d9:f6:5c:43:97:04:6e:9c:69:
69:12:f2:64:55:fa:87:5b:32:72:ff:d6:f1:75:53:
5f:3b:a7:45:27:ca:b7:21:1a:39:bb:89:4f:a8:ac:
65:8b:64:4b:96:0c:80:63:ba:6f:b1:dd:b7:6a:76:
02:a3:8f:f8:6e:66:8f:1e:ad:12:9d:68:58:0a:ac:
9b:d7:7a:11:b3:25:3f:d3:1a:3e:ad:89:36:10:55:
dc:a3:b2:2c:b6:0b:e8:18:63:e6:e3:b8:e6:b7:88:
b3:f9:18:13:5c:6e:16:58:93:f7:36:5f:e4:1a:a2:
7c:ce:8f:71:0d:36:d8:5b:89:d9:82:b0:7e:36:96:
44:7e:a8:cf:8d:5a:3a:90:ac:ff:76:4c:c6:9a:32:
02:24:8e:a0:fd:63:d7:73:50:d6:8b:73:01:82:df:
5b:92:e0:c8:88:53:c6:ce:69:a1:36:b4:c5:79:e4:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D0:50:A6:14:65:D7:BE:B8:7F:03:20:FE:77:95:9B:8D:59:1D:FC
X509v3 Authority Key Identifier:
keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:db:1a:05:95:97:35:dd:c9:a2:af:dd:7e:35:ba:d3:1e:19:
7b:2b:e6:f6:00:4d:93:3a:77:e6:bc:ed:a3:e2:4f:c5:78:15:
a0:68:52:8e:75:fe:7f:b9:db:71:42:97:44:9f:bb:3e:b3:a7:
aa:09:bd:56:71:23:e9:e8:df:be:41:86:31:35:fb:d2:33:08:
3d:cf:d7:a9:93:2b:76:29:ce:13:69:09:61:20:6a:e3:cd:83:
ee:0c:10:c2:b9:49:9a:c7:eb:cd:b4:30:6b:b4:97:53:e3:c1:
64:08:68:e9:13:d9:62:3d:24:68:60:84:2d:c9:18:bc:f4:07:
4d:54:fd:e5:98:ca:d1:00:8a:a9:b9:7e:cb:74:a4:b8:a8:e7:
1e:b7:bf:0b:ae:a3:13:d9:12:91:ba:00:f1:5b:be:7b:14:16:
12:93:9a:0a:10:f1:c7:9a:af:47:e4:9a:c5:67:71:bd:62:6b:
c1:9c:eb:5b:8a:37:23:86:e8:ae:77:33:31:54:13:2f:f2:7c:
6c:26:9e:d5:6b:0d:db:17:13:3a:93:b6:f3:b8:3b:57:12:7f:
bc:9c:0c:ee:8e:60:65:ef:78:18:a4:70:74:4f:5b:a4:55:91:
c0:3e:ce:44:73:04:ad:b8:72:9d:97:ce:a8:6d:98:f9:e0:29:
14:16:b4:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xmFeAOtgoOqELGbpumWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMWQ0ZmViMzExZTZjMmRiYzczZDUwNGZjODQ5MGNjMjE1
NDYzODkwHhcNMjUxMDE5MTQwMTIzWhcNMjUxMDIwMTQwMTIzWjAzMTEwLwYDVQQD
EyhlNmQwNTBhNjE0NjVkN2JlYjg3ZjAzMjBmZTc3OTU5YjhkNTkxZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VdBgmvEcTlhDwrtpNPw2ZCmp0CL
2vtx8qA5CoCH1DunRV5mjie0tjnC9eLeeALdUG07L30dfUHI05qRkJcKbBK9vcs5
x4ttSR8FARxyYVvZ9lxDlwRunGlpEvJkVfqHWzJy/9bxdVNfO6dFJ8q3IRo5u4lP
qKxli2RLlgyAY7pvsd23anYCo4/4bmaPHq0SnWhYCqyb13oRsyU/0xo+rYk2EFXc
o7IstgvoGGPm47jmt4iz+RgTXG4WWJP3Nl/kGqJ8zo9xDTbYW4nZgrB+NpZEfqjP
jVo6kKz/dkzGmjICJI6g/WPXc1DWi3MBgt9bkuDIiFPGzmmhNrTFeeRMqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObQUKYUZde+uH8DIP53lZuNWR38MB8GA1UdIwQY
MBaAFLsdT+sxHmwtvHPVBPyEkMwhVGOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXgxUDZ6RWViQzI4YzlVRV9JU1F6Q0ZVWTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZTJmMTMtNTI1MC00OWYyLWE0NzIt
NzcxYWI5ZmFkZjdmLzEvdXgxUDZ6RWViQzI4YzlVRV9JU1F6Q0ZVWTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zZTJmMTMtNTI1MC00OWYyLWE0NzItNzcxYWI5ZmFkZjdm
LzEvdXgxUDZ6RWViQzI4YzlVRV9JU1F6Q0ZVWTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9saBZWX
Nd3Joq/dfjW60x4Zeyvm9gBNkzp35rzto+JPxXgVoGhSjnX+f7nbcUKXRJ+7PrOn
qgm9VnEj6ejfvkGGMTX70jMIPc/XqZMrdinOE2kJYSBq482D7gwQwrlJmsfrzbQw
a7SXU+PBZAho6RPZYj0kaGCELckYvPQHTVT95ZjK0QCKqbl+y3SkuKjnHre/C66j
E9kSkboA8Vu+exQWEpOaChDxx5qvR+SaxWdxvWJrwZzrW4o3I4bornczMVQTL/J8
bCae1WsN2xcTOpO287g7VxJ/vJwM7o5gZe94GKRwdE9bpFWRwD7ORHMErbhynZfO
qG2Y+eApFBa0Bg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:30 2025 by rpki-client