Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier: Jkd5oye9y0A2r3jy4ynvXsR+Q+g3FoIR5IU6qwO6CEk=
Subject key identifier: 72:8C:8E:20:E0:48:00:2C:EB:DA:2E:E8:02:29:CF:87:2B:E2:FF:91
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer: /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial: 0199FDD9BE7B3345FADF4780EEDB5EA0C552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number: 0BEF
Signing time: Sun 19 Oct 2025 19:02:09 +0000
Manifest this update: Sun 19 Oct 2025 19:02:09 +0000
Manifest next update: Mon 20 Oct 2025 19:02:09 +0000
Files and hashes: 1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: dJ1shBud6oXx98AwqbaOvM1aSW9ItzfDgiHn0OCLpV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:be:7b:33:45:fa:df:47:80:ee:db:5e:a0:c5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Validity
Not Before: Oct 19 19:02:09 2025 GMT
Not After : Oct 20 19:02:09 2025 GMT
Subject: CN=728c8e20e048002cebda2ee80229cf872be2ff91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:c4:50:a5:5e:6e:84:19:d0:d5:22:fe:81:
59:2a:50:fc:eb:73:be:44:cf:fa:96:1b:cc:98:5c:
a7:f2:2d:0c:83:86:0b:88:5e:c7:dc:88:4c:1e:12:
dc:4c:93:21:e7:86:b3:07:98:f6:6f:aa:86:26:89:
9e:69:d7:d9:2d:1c:14:d0:97:36:d6:8a:3f:1f:a3:
a6:91:30:11:7c:c5:8a:3e:ac:bb:33:d6:c3:33:7a:
7b:25:b9:46:f7:40:ed:c6:c3:63:28:81:10:bf:90:
a4:a6:79:43:09:8a:e8:0b:30:9d:7a:7b:d1:5c:67:
e6:70:e6:6a:fc:69:6f:84:b5:1c:96:a1:59:56:ed:
d6:bb:b2:a3:d2:22:af:41:bd:f5:bc:48:d8:01:a6:
33:cd:e5:02:69:bd:35:43:45:58:1a:78:22:79:ba:
63:8c:c4:00:1d:cf:7d:fa:e0:8a:7d:43:ac:a0:8b:
82:e0:4f:03:cb:b1:2a:2b:1d:d4:a7:40:2b:e1:88:
05:e4:5b:0a:5c:80:cb:3b:c4:8d:e2:92:d8:3f:2c:
13:a9:2e:9d:33:c4:51:e5:67:14:1c:4e:c2:4c:f1:
c3:0e:3c:b8:da:88:9b:f6:23:df:6b:24:c9:ca:3d:
f2:21:a3:60:3d:5a:4d:8d:80:bf:e7:20:12:4c:76:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8C:8E:20:E0:48:00:2C:EB:DA:2E:E8:02:29:CF:87:2B:E2:FF:91
X509v3 Authority Key Identifier:
keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ff:e4:12:52:03:41:4e:33:de:b3:7c:0b:70:54:2e:04:31:
7b:ff:c6:10:73:bf:ef:27:c6:1b:6f:3e:4e:b9:de:a0:e8:ae:
4f:47:fd:7d:cc:9d:97:cb:dd:8c:8e:b9:2c:8a:15:96:8b:fd:
40:9f:ba:44:02:46:ed:a3:d3:34:d3:9c:1e:4a:45:02:9f:a4:
cd:c7:7b:6b:3b:14:df:b7:40:8f:2f:a9:c6:02:71:b0:88:52:
9f:ec:7b:56:da:42:a7:8e:1c:08:21:ae:c9:11:55:f6:0a:97:
12:81:99:17:53:e8:dc:ed:fe:60:63:68:25:72:5a:76:61:b9:
4b:31:f8:33:8d:f5:25:e5:9a:06:17:53:e1:11:32:de:78:59:
04:bc:d6:0f:ae:d1:83:a2:b1:ba:39:bb:bd:65:0d:ed:72:4a:
e8:12:75:40:79:6b:49:14:5a:4d:93:84:fa:1e:56:1a:28:d2:
99:f0:13:21:5d:e9:e9:47:6f:a6:d1:3a:61:d5:ed:1b:38:5d:
97:6a:e2:50:ed:51:e8:7a:5c:f2:6e:e5:3f:06:00:87:92:90:
a5:47:f2:f4:79:bd:42:42:3d:cc:94:44:70:18:cb:92:94:12:
91:dc:6a:4d:0d:60:4f:d0:b4:d2:ce:fe:a0:ca:8e:00:74:20:
59:57:bb:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92b57M0X630eA7tteoMVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMWVkYjI1NTRkMjVkMWMxMGQ4NzE0ZTgxZDM2Y2MyOTVk
OTZiZjkwHhcNMjUxMDE5MTkwMjA5WhcNMjUxMDIwMTkwMjA5WjAzMTEwLwYDVQQD
Eyg3MjhjOGUyMGUwNDgwMDJjZWJkYTJlZTgwMjI5Y2Y4NzJiZTJmZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv3EUKVeboQZ0NUi/oFZKlD863O+
RM/6lhvMmFyn8i0Mg4YLiF7H3IhMHhLcTJMh54azB5j2b6qGJomeadfZLRwU0Jc2
1oo/H6OmkTARfMWKPqy7M9bDM3p7JblG90DtxsNjKIEQv5CkpnlDCYroCzCdenvR
XGfmcOZq/GlvhLUclqFZVu3Wu7Kj0iKvQb31vEjYAaYzzeUCab01Q0VYGngiebpj
jMQAHc99+uCKfUOsoIuC4E8Dy7EqKx3Up0Ar4YgF5FsKXIDLO8SN4pLYPywTqS6d
M8RR5WcUHE7CTPHDDjy42oib9iPfayTJyj3yIaNgPVpNjYC/5yASTHbRiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKMjiDgSAAs69ou6AIpz4cr4v+RMB8GA1UdIwQY
MBaAFFMe2yVU0l0cENhxToHTbMKV2Wv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTkt
Y2EzY2EzZDk5ZTZiLzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTktY2EzY2EzZDk5ZTZi
LzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAP/kElID
QU4z3rN8C3BULgQxe//GEHO/7yfGG28+TrneoOiuT0f9fcydl8vdjI65LIoVlov9
QJ+6RAJG7aPTNNOcHkpFAp+kzcd7azsU37dAjy+pxgJxsIhSn+x7VtpCp44cCCGu
yRFV9gqXEoGZF1Po3O3+YGNoJXJadmG5SzH4M431JeWaBhdT4REy3nhZBLzWD67R
g6Kxujm7vWUN7XJK6BJ1QHlrSRRaTZOE+h5WGijSmfATIV3p6UdvptE6YdXtGzhd
l2riUO1R6Hpc8m7lPwYAh5KQpUfy9Hm9QkI9zJREcBjLkpQSkdxqTQ1gT9C00s7+
oMqOAHQgWVe7yA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:46 2025 by rpki-client