Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
File: U-r4Oizdyf0L4onM-vMrMjMEz04.mft (raw, json)
Hash identifier: zhqzd0uTvwZhrIHGYwSitvaTvE58qWFihTBJ7jU8Acg=
Subject key identifier: 4D:77:0A:C8:FE:A1:DB:85:0D:65:67:4B:8C:6A:80:E4:0A:A2:6D:24
Authority key identifier: 53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
Certificate issuer: /CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Certificate serial: 0199FE7DD5B257FD75B9A783EE9B58BF30EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
Manifest number: 0DB1
Signing time: Sun 19 Oct 2025 22:01:23 +0000
Manifest this update: Sun 19 Oct 2025 22:01:23 +0000
Manifest next update: Mon 20 Oct 2025 22:01:23 +0000
Files and hashes: 1: U-r4Oizdyf0L4onM-vMrMjMEz04.crl (hash: cJWZig66xKGPYTiqVEXKDRYK4FcRfyl7CkP7Ea24KZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d5:b2:57:fd:75:b9:a7:83:ee:9b:58:bf:30:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Validity
Not Before: Oct 19 22:01:23 2025 GMT
Not After : Oct 20 22:01:23 2025 GMT
Subject: CN=4d770ac8fea1db850d65674b8c6a80e40aa26d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:71:c6:bc:75:18:62:95:d6:49:93:1e:11:
90:ac:de:4d:a6:0e:6a:81:d9:45:29:73:9e:01:c3:
df:3f:46:9c:f4:7c:e4:fe:9a:13:63:27:17:c7:5a:
29:32:29:c6:4d:8b:2f:52:15:cb:1c:4f:98:6a:64:
e5:f9:88:ff:22:0c:dd:c1:95:3f:28:ab:ca:1e:1a:
33:2b:d2:08:09:35:38:2f:15:8b:0b:fe:ae:58:d2:
1d:0d:8a:d2:48:4a:8e:fc:3e:c3:ef:38:8d:a1:4f:
0b:32:72:70:e3:16:3d:b9:18:2f:c4:73:e9:14:47:
11:63:3a:59:ab:8b:ed:c2:67:44:b4:26:97:37:84:
68:25:c6:50:9e:3f:24:61:16:8f:ab:c1:3b:c4:b4:
e0:b2:f3:fa:a5:83:f4:3c:59:ba:8a:f1:20:fd:1d:
5e:90:d0:cc:93:25:b9:f4:dc:4a:32:50:8e:7d:a5:
f8:23:aa:13:ad:1f:77:3e:97:bc:0b:38:59:10:32:
59:53:da:40:8f:4c:e6:a1:aa:cb:da:e2:b2:91:d0:
de:3b:e5:b5:78:3c:7b:48:67:2e:df:2f:c7:20:9b:
4b:49:45:87:80:6a:2a:e9:86:a6:29:12:76:67:3d:
7c:99:f2:e2:90:d4:7c:67:68:e7:bf:59:01:8a:39:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:77:0A:C8:FE:A1:DB:85:0D:65:67:4B:8C:6A:80:E4:0A:A2:6D:24
X509v3 Authority Key Identifier:
keyid:53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a9:40:0c:5e:5d:b4:3d:a7:9b:4b:71:3c:ca:79:b0:b0:df:
67:70:96:5d:a9:b9:45:99:a7:f2:9a:ba:83:ac:aa:19:e7:0b:
6b:31:93:cd:64:16:11:39:f5:89:e3:f2:53:08:31:bd:cb:05:
a9:d2:b3:81:98:f0:7e:dc:ed:f2:bc:5e:d6:8d:7c:38:64:e5:
ef:a8:14:f5:f7:f5:3c:3d:de:21:4c:ba:45:8a:5b:ff:1d:d2:
b7:20:57:f6:21:38:32:8c:d2:18:c5:f0:aa:a9:52:29:20:ad:
24:37:e6:5a:60:09:f8:54:3a:24:c0:25:ee:8c:6f:e5:24:8c:
da:2d:dc:7f:31:ce:36:03:06:83:78:ab:7c:92:c8:8d:c6:a3:
f6:1b:21:38:8b:9f:6d:6b:d8:59:1a:98:06:97:c4:8e:a5:3d:
fc:d3:1e:f9:f8:60:9f:84:7b:d2:21:42:46:dc:08:c2:0d:28:
02:4f:23:70:a2:12:2d:18:d2:c0:6b:de:92:9c:c3:dd:01:36:
2d:65:93:d6:87:2e:bc:48:ae:12:c0:b4:63:15:0d:61:c7:66:
74:79:df:33:13:e6:08:5b:3f:86:db:79:f2:89:72:69:4d:3f:
03:41:87:23:5d:37:39:6f:23:a1:fa:55:3c:65:97:8a:14:38:
dd:b7:24:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fdWyV/11uaeD7ptYvzDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZWFmODNhMmNkZGM5ZmQwYmUyODljY2ZhZjMyYjMyMzMw
NGNmNGUwHhcNMjUxMDE5MjIwMTIzWhcNMjUxMDIwMjIwMTIzWjAzMTEwLwYDVQQD
Eyg0ZDc3MGFjOGZlYTFkYjg1MGQ2NTY3NGI4YzZhODBlNDBhYTI2ZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVtxxrx1GGKV1kmTHhGQrN5Npg5q
gdlFKXOeAcPfP0ac9Hzk/poTYycXx1opMinGTYsvUhXLHE+YamTl+Yj/IgzdwZU/
KKvKHhozK9IICTU4LxWLC/6uWNIdDYrSSEqO/D7D7ziNoU8LMnJw4xY9uRgvxHPp
FEcRYzpZq4vtwmdEtCaXN4RoJcZQnj8kYRaPq8E7xLTgsvP6pYP0PFm6ivEg/R1e
kNDMkyW59NxKMlCOfaX4I6oTrR93Ppe8CzhZEDJZU9pAj0zmoarL2uKykdDeO+W1
eDx7SGcu3y/HIJtLSUWHgGoq6YamKRJ2Zz18mfLikNR8Z2jnv1kBijkmtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE13Csj+oduFDWVnS4xqgOQKom0kMB8GA1UdIwQY
MBaAFFPq+Dos3cn9C+KJzPrzKzIzBM9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS1yNE9pemR5ZjBMNG9uTS12TXJNak1FejA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yYzMwMzgtOWM0NS00M2U4LWI2OWYt
Yjg0Y2ZmMTg4ZjU1LzEvVS1yNE9pemR5ZjBMNG9uTS12TXJNak1FejA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yYzMwMzgtOWM0NS00M2U4LWI2OWYtYjg0Y2ZmMTg4ZjU1
LzEvVS1yNE9pemR5ZjBMNG9uTS12TXJNak1FejA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqlADF5d
tD2nm0txPMp5sLDfZ3CWXam5RZmn8pq6g6yqGecLazGTzWQWETn1iePyUwgxvcsF
qdKzgZjwftzt8rxe1o18OGTl76gU9ff1PD3eIUy6RYpb/x3StyBX9iE4MozSGMXw
qqlSKSCtJDfmWmAJ+FQ6JMAl7oxv5SSM2i3cfzHONgMGg3irfJLIjcaj9hshOIuf
bWvYWRqYBpfEjqU9/NMe+fhgn4R70iFCRtwIwg0oAk8jcKISLRjSwGvekpzD3QE2
LWWT1ocuvEiuEsC0YxUNYcdmdHnfMxPmCFs/htt58olyaU0/A0GHI103OW8jofpV
PGWXihQ43bckCA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:08 2025 by rpki-client