Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File: 1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier: KlHmC5mEI2ODmem8oi6tguaLEMSwMQpv4rGqWdVIUK8=
Subject key identifier: 01:7F:A3:A3:90:2B:B0:E8:65:19:33:51:8A:67:CF:A0:63:1F:48:24
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer: /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial: 0198D4725D115FFA6F0785FC82100B5D0507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number: 0B54
Signing time: Sat 23 Aug 2025 01:02:01 +0000
Manifest this update: Sat 23 Aug 2025 01:02:01 +0000
Manifest next update: Sun 24 Aug 2025 01:02:01 +0000
Files and hashes: 1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: sPIYz15U23nluVfiyqP3NpP2WKXmHcaKnPN/+XfAOWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:5d:11:5f:fa:6f:07:85:fc:82:10:0b:5d:05:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Validity
Not Before: Aug 23 01:02:01 2025 GMT
Not After : Aug 24 01:02:01 2025 GMT
Subject: CN=017fa3a3902bb0e8651933518a67cfa0631f4824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:d6:4f:1b:37:17:a8:5c:2a:1f:9e:ba:b0:
0c:48:f8:9a:db:9a:7a:2d:24:36:a3:99:38:2d:91:
d2:6a:38:96:e4:cb:af:2d:9e:69:1f:c4:d9:bf:69:
36:73:c4:f9:6a:a7:20:36:c1:f5:51:9f:db:03:84:
89:cd:fe:67:44:57:ae:72:ba:55:db:54:f4:78:62:
e7:a5:d4:77:73:ec:33:a6:b0:85:68:9a:d7:04:94:
e1:b5:94:d3:e7:f9:65:12:ff:ec:51:a5:da:ca:37:
41:84:1b:2b:72:05:06:be:ca:ea:80:ff:3e:8c:09:
17:d1:84:db:ed:e0:2c:39:7e:cf:95:14:ec:2b:63:
30:61:00:72:e8:96:59:ab:95:ee:f5:f9:6f:58:ba:
8f:d3:9a:38:f2:da:b6:57:d4:1e:a6:64:12:f8:26:
28:2b:03:41:be:43:1d:db:de:ff:1c:9d:48:27:c4:
28:e9:84:66:4f:e2:d7:da:f6:04:3a:b1:98:34:e0:
b3:4c:e5:a5:61:40:a2:42:91:cd:e0:f9:39:da:33:
2c:60:d4:db:56:d8:41:60:bd:bc:4d:19:b8:d1:9c:
3b:47:5c:b8:9c:75:42:6f:bf:9a:91:84:0c:a7:57:
99:c3:33:7b:f4:11:1d:61:e3:cb:5b:f7:a3:dc:47:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7F:A3:A3:90:2B:B0:E8:65:19:33:51:8A:67:CF:A0:63:1F:48:24
X509v3 Authority Key Identifier:
keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bc:2b:c4:ba:8c:d5:7e:57:cb:61:b4:a8:e7:09:ab:10:4e:
5a:c2:d3:d1:6c:78:aa:42:28:9b:9b:29:f8:ff:5d:1a:88:03:
db:94:09:3f:a6:f7:6c:5b:7a:33:c1:87:5c:c2:8f:7a:22:6c:
81:d6:63:2c:61:af:2b:da:a7:bc:17:8e:b8:0f:3f:35:97:ad:
b1:6b:b5:b3:bd:4a:00:04:99:47:0f:b5:57:74:62:e3:84:a9:
86:60:2a:02:ea:bb:de:f7:87:39:73:ff:5b:dc:26:34:90:ec:
4c:0d:01:54:60:f6:cc:6f:6e:aa:2f:d4:c8:73:1c:70:0e:3e:
f5:7a:b7:9c:32:65:2d:7b:22:4c:4e:55:79:e0:22:31:59:ee:
f7:33:b5:ee:7e:6f:5a:c3:bd:8e:97:ae:cc:36:19:74:39:5c:
6a:11:23:a0:91:2e:d1:99:32:aa:45:bb:1c:a4:86:d6:a8:ba:
da:ff:b3:1b:cc:7b:94:cc:42:d4:1a:14:bb:32:64:ba:03:12:
07:e9:9c:de:ca:35:07:18:38:be:85:da:b9:10:d1:8a:9f:e5:
e9:70:27:07:38:d2:fd:82:d1:13:a0:b5:17:e1:fa:03:8b:ac:
77:c8:17:c5:49:ba:32:10:21:4f:fe:6a:3d:94:14:46:9c:c5:
e3:41:b9:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcl0RX/pvB4X8ghALXQUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTBkMWNhOGMxOTYxYzBiMTEyOGFhNTViODU3OTZiMTIw
NDBhOTUwHhcNMjUwODIzMDEwMjAxWhcNMjUwODI0MDEwMjAxWjAzMTEwLwYDVQQD
EygwMTdmYTNhMzkwMmJiMGU4NjUxOTMzNTE4YTY3Y2ZhMDYzMWY0ODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA3WTxs3F6hcKh+eurAMSPia25p6
LSQ2o5k4LZHSajiW5MuvLZ5pH8TZv2k2c8T5aqcgNsH1UZ/bA4SJzf5nRFeucrpV
21T0eGLnpdR3c+wzprCFaJrXBJThtZTT5/llEv/sUaXayjdBhBsrcgUGvsrqgP8+
jAkX0YTb7eAsOX7PlRTsK2MwYQBy6JZZq5Xu9flvWLqP05o48tq2V9QepmQS+CYo
KwNBvkMd297/HJ1IJ8Qo6YRmT+LX2vYEOrGYNOCzTOWlYUCiQpHN4Pk52jMsYNTb
VthBYL28TRm40Zw7R1y4nHVCb7+akYQMp1eZwzN79BEdYePLW/ej3Efj8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAF/o6OQK7DoZRkzUYpnz6BjH0gkMB8GA1UdIwQY
MBaAFNbg0cqMGWHAsRKKpVuFeWsSBAqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mZGUyNmItZTJhZi00Y2VmLThkYzkt
NDdjZDQ2NDE5MmU3LzEvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mZGUyNmItZTJhZi00Y2VmLThkYzktNDdjZDQ2NDE5MmU3
LzEvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrwrxLqM
1X5Xy2G0qOcJqxBOWsLT0Wx4qkIom5sp+P9dGogD25QJP6b3bFt6M8GHXMKPeiJs
gdZjLGGvK9qnvBeOuA8/NZetsWu1s71KAASZRw+1V3Ri44SphmAqAuq73veHOXP/
W9wmNJDsTA0BVGD2zG9uqi/UyHMccA4+9Xq3nDJlLXsiTE5VeeAiMVnu9zO17n5v
WsO9jpeuzDYZdDlcahEjoJEu0ZkyqkW7HKSG1qi62v+zG8x7lMxC1BoUuzJkugMS
B+mc3so1Bxg4voXauRDRip/l6XAnBzjS/YLRE6C1F+H6A4usd8gXxUm6MhAhT/5q
PZQURpzF40G5gQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:19 2025 by rpki-client