Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: o00TGuBkABOEuggQ5Bi5Su5SdiFr42VDIHrE0KG1Ygg=
Subject key identifier: EC:62:A2:98:BA:BE:46:97:C7:2E:27:50:66:7D:01:75:DF:08:5C:F0
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 019A00DA125F095CED4E3D5CEF9FE3390481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 0793
Signing time: Mon 20 Oct 2025 09:01:22 +0000
Manifest this update: Mon 20 Oct 2025 09:01:22 +0000
Manifest next update: Tue 21 Oct 2025 09:01:22 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: TahGtRZ/uzaQEIzYFN41NM6fMl5ruHXh6VNO82HPIN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:12:5f:09:5c:ed:4e:3d:5c:ef:9f:e3:39:04:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Oct 20 09:01:22 2025 GMT
Not After : Oct 21 09:01:22 2025 GMT
Subject: CN=ec62a298babe4697c72e2750667d0175df085cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:34:2b:87:c1:14:23:b6:99:7e:91:9c:45:e8:
5b:fb:ab:e4:a3:c0:7a:58:c1:f1:dc:3d:dc:72:99:
a4:a4:af:b0:c8:44:f2:dd:08:86:69:f7:c2:13:4a:
83:7b:84:9d:e4:62:05:e4:c7:23:a8:e3:b0:ae:d9:
b7:44:65:97:b8:ef:79:10:54:0b:ea:84:8e:ad:f4:
d8:a2:3f:3e:9e:c3:0d:69:5a:b7:63:0d:bc:8c:4d:
b7:e2:36:eb:07:12:e9:31:27:49:c3:f1:29:24:49:
53:6e:85:50:08:31:b3:c5:35:22:9c:2a:9d:e6:fc:
85:63:d0:45:9e:bf:a3:77:69:5a:0d:70:19:5c:d9:
a4:a4:86:7e:5d:f4:3d:03:5c:b9:59:dc:40:b8:f6:
5f:7c:d8:05:ee:dc:a7:b1:fb:e9:4e:23:d5:8b:55:
39:23:9e:be:13:6e:b8:8a:18:e8:ec:10:4b:a8:61:
c2:b7:1c:1a:17:50:b1:bb:bd:a3:31:92:fa:4f:f4:
c8:ef:c0:6a:07:34:c8:70:09:37:c2:d9:84:3d:b8:
33:26:c4:4c:87:00:5f:b8:72:00:1a:59:b8:80:b1:
34:2a:2a:b0:8d:cc:31:98:eb:14:f4:fd:19:b3:bc:
79:da:11:66:98:41:f0:f2:75:ad:9d:85:ed:a9:76:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:62:A2:98:BA:BE:46:97:C7:2E:27:50:66:7D:01:75:DF:08:5C:F0
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:50:52:3a:fc:f1:c0:c0:2a:cc:90:fa:b6:36:32:de:6f:af:
82:03:9d:97:07:f4:da:88:dd:71:ab:d2:7d:37:4c:ab:48:35:
65:a4:85:fe:33:6e:88:5f:bd:74:0c:ce:e7:83:fa:52:be:dc:
e7:7a:b9:7c:14:98:5b:d7:1d:7f:65:63:d1:d7:3e:30:35:6f:
f6:fd:27:5b:9f:ac:d4:d8:ae:97:3d:bf:da:d9:d4:e9:73:43:
0e:fb:d3:38:9e:7a:28:48:66:b9:4f:93:2a:3a:62:29:ee:1e:
4c:9c:3d:35:b1:e2:c7:c0:7b:1e:98:8e:9d:3c:b0:d4:ea:fc:
3f:15:f5:80:5d:85:1f:14:a0:87:c7:8a:87:2f:ad:58:1e:5a:
32:a6:ff:f2:fa:52:ac:48:0e:4b:05:5b:de:87:b1:32:e8:f3:
9b:19:fb:69:e6:bf:0a:22:a4:43:9d:67:82:e8:a4:de:26:d1:
72:3a:5a:cc:1e:f9:fd:b5:57:55:cf:49:d0:98:50:06:8d:a3:
b7:40:5a:6d:ec:7b:6f:6a:cd:cc:37:40:d3:74:ad:d2:69:74:
81:cd:b8:41:b4:18:8d:e9:a0:2a:04:4a:1e:fa:18:87:8d:28:
08:25:de:a1:f8:b6:60:d7:e4:cd:5a:ce:9f:4c:5c:f5:b6:21:
59:5d:b8:49
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZoA2hJfCVztTj1c75/jOQSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTY5ZjBhMjllZjhkOGMyMmQ5ZDZlY2RlM2EzMDdkODk0
ZDVjMTkwHhcNMjUxMDIwMDkwMTIyWhcNMjUxMDIxMDkwMTIyWjAzMTEwLwYDVQQD
EyhlYzYyYTI5OGJhYmU0Njk3YzcyZTI3NTA2NjdkMDE3NWRmMDg1Y2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jQrh8EUI7aZfpGcRehb+6vko8B6
WMHx3D3ccpmkpK+wyETy3QiGaffCE0qDe4Sd5GIF5McjqOOwrtm3RGWXuO95EFQL
6oSOrfTYoj8+nsMNaVq3Yw28jE234jbrBxLpMSdJw/EpJElTboVQCDGzxTUinCqd
5vyFY9BFnr+jd2laDXAZXNmkpIZ+XfQ9A1y5WdxAuPZffNgF7tynsfvpTiPVi1U5
I56+E264ihjo7BBLqGHCtxwaF1Cxu72jMZL6T/TI78BqBzTIcAk3wtmEPbgzJsRM
hwBfuHIAGlm4gLE0KiqwjcwxmOsU9P0Zs7x52hFmmEHw8nWtnYXtqXaWPwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOxiopi6vkaXxy4nUGZ9AXXfCFzwMB8GA1UdIwQY
MBaAFPrmnwop742MItnW7N46MH2JTVwZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11YWZDaW52all3aTJkYnMzam93ZllsTlhCay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvZDEzNTlmLTM1NGUtNDU2OC04NDBj
LWFmNTBhNWJlMjgwZS8xLzEtdWFmQ2ludmpZd2kyZGJzM2pvd2ZZbE5YQmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Q0L2QxMzU5Zi0zNTRlLTQ1NjgtODQwYy1hZjUwYTViZTI4
MGUvMS8xLXVhZkNpbnZqWXdpMmRiczNqb3dmWWxOWEJrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFBS
OvzxwMAqzJD6tjYy3m+vggOdlwf02ojdcavSfTdMq0g1ZaSF/jNuiF+9dAzO54P6
Ur7c53q5fBSYW9cdf2Vj0dc+MDVv9v0nW5+s1Niulz2/2tnU6XNDDvvTOJ56KEhm
uU+TKjpiKe4eTJw9NbHix8B7HpiOnTyw1Or8PxX1gF2FHxSgh8eKhy+tWB5aMqb/
8vpSrEgOSwVb3oexMujzmxn7aea/CiKkQ51nguik3ibRcjpazB75/bVXVc9J0JhQ
Bo2jt0Babex7b2rNzDdA03St0ml0gc24QbQYjemgKgRKHvoYh40oCCXeofi2YNfk
zVrOn0xc9bYhWV24SQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:06 2025 by rpki-client