Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json)
Hash identifier: 68WLreCSt7YXULp1D5Q+2PQEg9rdQv7xpcVnCAruUtQ=
Subject key identifier: 68:15:8C:57:1D:C7:55:98:B4:3A:62:D8:5F:FB:4C:39:F2:01:E5:C5
Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Certificate serial: 0199FB45935A89810AA0B3F3220BE56DDAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
Manifest number: 033E
Signing time: Sun 19 Oct 2025 07:01:04 +0000
Manifest this update: Sun 19 Oct 2025 07:01:04 +0000
Manifest next update: Mon 20 Oct 2025 07:01:04 +0000
Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: nTWHlaElKwQARC8eCQboess3CsP057EBWCYekh00S78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:93:5a:89:81:0a:a0:b3:f3:22:0b:e5:6d:da:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Validity
Not Before: Oct 19 07:01:04 2025 GMT
Not After : Oct 20 07:01:04 2025 GMT
Subject: CN=68158c571dc75598b43a62d85ffb4c39f201e5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:ff:22:8d:8e:4f:39:5a:2b:2d:22:ed:a6:
7e:05:74:d4:75:d9:59:56:b3:82:ab:79:60:fb:dc:
53:ea:52:e8:64:c1:c0:49:f8:b6:26:4f:7c:90:52:
f4:06:f2:2a:62:a9:25:d4:2d:0a:56:91:f1:ea:ff:
1a:8d:1b:b8:14:4f:be:95:91:af:bc:84:88:f3:47:
63:48:f6:98:0a:c9:74:97:c3:8c:fe:b2:f5:1a:fd:
a8:99:b2:91:55:a2:e4:b5:a5:ff:05:dc:29:2f:8e:
1f:21:dd:67:27:14:d8:fe:31:6d:a4:b2:25:3f:0e:
18:08:4c:96:c6:a8:56:7a:5a:85:96:86:36:97:3e:
26:78:13:c3:16:5b:03:16:88:ec:63:78:e3:3d:31:
8b:ce:08:b8:ac:92:1e:be:ca:52:0e:08:1c:75:5c:
ac:7c:87:a3:97:bb:8f:7d:8e:1a:aa:e2:e0:ca:e0:
34:8e:35:72:48:03:94:2c:b1:cb:bf:07:15:89:36:
32:e4:81:c2:2a:2f:ed:e4:f5:a1:db:7d:bc:d7:bd:
c2:94:bf:1e:3c:9d:29:a8:ee:25:53:5b:d0:46:88:
f1:12:71:a0:3c:93:a5:20:7b:b2:73:a5:e2:14:34:
ac:62:5a:87:36:02:ef:86:f6:75:b8:e2:d3:4c:3e:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:8C:57:1D:C7:55:98:B4:3A:62:D8:5F:FB:4C:39:F2:01:E5:C5
X509v3 Authority Key Identifier:
keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ae:cb:10:e9:6e:a0:e3:c8:9d:30:52:c5:73:cc:42:15:59:
10:00:59:05:5b:24:e0:ed:13:7b:a2:2f:70:cc:cf:70:92:05:
0c:29:d9:ff:04:bc:4a:97:5a:87:63:32:2d:ce:84:43:13:83:
51:62:41:20:80:73:8d:d2:8b:31:82:9a:15:14:7f:c2:19:0a:
62:55:35:99:4f:ea:42:8a:ba:35:39:79:a6:74:8d:92:a2:18:
3b:e2:85:26:ff:5f:99:47:a1:a1:a3:b6:69:b5:04:f1:b2:e6:
e0:cf:d8:a5:d8:88:76:1c:9d:95:80:d9:65:96:23:06:df:e9:
05:3b:c3:2e:a4:3c:b0:fb:8d:46:eb:ed:ff:a1:68:78:41:3f:
e7:25:1c:72:52:45:93:c7:5c:7c:b9:ab:b2:56:90:dc:ab:59:
23:81:4e:7b:ad:ab:d5:8a:56:f1:2b:7c:0a:da:fd:76:dc:4c:
ab:b2:e2:af:7e:08:ee:ac:c6:7c:44:50:2f:6f:8d:39:fa:ee:
e2:ff:b8:05:7d:69:b6:02:68:19:67:d3:97:4c:00:87:1d:7e:
23:ce:62:d6:e8:60:98:e1:be:3b:7c:d3:e9:e4:d9:2f:e4:04:
69:b4:fc:55:6d:8e:20:81:61:0b:5d:33:9d:e0:41:6f:41:6a:
fd:84:27:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RZNaiYEKoLPzIgvlbdrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNTZiZDUwYWY5M2Y0NjM3ZTJjMDdlMmVjNDAzMjZiYzY0
MDA1MjcwHhcNMjUxMDE5MDcwMTA0WhcNMjUxMDIwMDcwMTA0WjAzMTEwLwYDVQQD
Eyg2ODE1OGM1NzFkYzc1NTk4YjQzYTYyZDg1ZmZiNGMzOWYyMDFlNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdf/Io2OTzlaKy0i7aZ+BXTUddlZ
VrOCq3lg+9xT6lLoZMHASfi2Jk98kFL0BvIqYqkl1C0KVpHx6v8ajRu4FE++lZGv
vISI80djSPaYCsl0l8OM/rL1Gv2ombKRVaLktaX/BdwpL44fId1nJxTY/jFtpLIl
Pw4YCEyWxqhWelqFloY2lz4meBPDFlsDFojsY3jjPTGLzgi4rJIevspSDggcdVys
fIejl7uPfY4aquLgyuA0jjVySAOULLHLvwcViTYy5IHCKi/t5PWh2328173ClL8e
PJ0pqO4lU1vQRojxEnGgPJOlIHuyc6XiFDSsYlqHNgLvhvZ1uOLTTD5IfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgVjFcdx1WYtDpi2F/7TDnyAeXFMB8GA1UdIwQY
MBaAFGtWvVCvk/RjfiwH4uxAMmvGQAUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDM0MjktNDUyNC00ZmNmLTk1OTIt
Mjk5NmQ4ZmI2OTdlLzEvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZDM0MjktNDUyNC00ZmNmLTk1OTItMjk5NmQ4ZmI2OTdl
LzEvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG67LEOlu
oOPInTBSxXPMQhVZEABZBVsk4O0Te6IvcMzPcJIFDCnZ/wS8Spdah2MyLc6EQxOD
UWJBIIBzjdKLMYKaFRR/whkKYlU1mU/qQoq6NTl5pnSNkqIYO+KFJv9fmUehoaO2
abUE8bLm4M/YpdiIdhydlYDZZZYjBt/pBTvDLqQ8sPuNRuvt/6FoeEE/5yUcclJF
k8dcfLmrslaQ3KtZI4FOe62r1YpW8St8Ctr9dtxMq7Lir34I7qzGfERQL2+NOfru
4v+4BX1ptgJoGWfTl0wAhx1+I85i1uhgmOG+O3zT6eTZL+QEabT8VW2OIIFhC10z
neBBb0Fq/YQnOA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:12 2025 by rpki-client