Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
File: uW476Z3sY7ErK4J3nfz142PTIcE.mft (raw, json)
Hash identifier: GWBC2fYy93Z3WN2LH5GthBFWCBZ1PDY/BV9OsFwfPi8=
Subject key identifier: 53:FC:E5:F5:5E:C6:FE:3F:32:01:65:34:E9:F3:72:9E:66:85:15:88
Authority key identifier: B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
Certificate issuer: /CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Certificate serial: 019A4DE1DE8DC27082256BA7AB5EB553C75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
Manifest number: 0529
Signing time: Tue 04 Nov 2025 08:00:39 +0000
Manifest this update: Tue 04 Nov 2025 08:00:39 +0000
Manifest next update: Wed 05 Nov 2025 08:00:39 +0000
Files and hashes: 1: uW476Z3sY7ErK4J3nfz142PTIcE.crl (hash: UDGy9GT3KEH19ls+Ta8707VPiOM9dduuHR9rA15PN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:de:8d:c2:70:82:25:6b:a7:ab:5e:b5:53:c7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Validity
Not Before: Nov 4 08:00:39 2025 GMT
Not After : Nov 5 08:00:39 2025 GMT
Subject: CN=53fce5f55ec6fe3f32016534e9f3729e66851588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:48:2c:09:8d:51:b4:b1:68:97:be:b3:db:
63:4f:51:e8:87:d9:81:6a:62:1c:97:cc:71:6e:3d:
ed:a0:9e:99:20:9c:b6:e7:5c:de:01:04:0a:b1:81:
54:42:db:6f:3e:2f:1e:87:78:c5:6d:e0:46:ec:3d:
5d:22:3f:ae:54:2c:43:b7:ad:87:d8:77:65:d7:7e:
96:9f:ae:a5:37:44:90:03:1c:71:59:78:9c:96:75:
fb:6b:3b:e6:25:a7:04:ca:18:c2:9f:2c:84:1c:2c:
ea:18:31:df:44:da:bb:53:a9:71:98:73:95:82:20:
df:a4:58:c5:0d:88:7c:1f:60:55:c0:0d:9a:20:3e:
f7:23:44:30:5d:c5:0e:4f:3f:f4:a5:8c:39:2d:33:
e9:40:65:ae:d4:67:67:50:3e:18:17:e0:38:e8:26:
8d:ed:33:95:d3:43:6b:1c:35:01:ac:16:9b:0e:36:
21:62:53:fa:db:df:a5:19:7c:36:40:2b:d0:41:de:
78:97:46:15:ac:07:7a:45:d5:44:13:d8:4d:19:d4:
da:47:4e:17:c5:41:ed:69:3a:12:2f:b0:e4:ec:99:
d3:29:17:ec:e7:ff:46:40:2c:5e:ad:c9:ef:ef:46:
58:a6:42:78:1d:6e:3a:15:0c:4f:08:f5:6a:9b:43:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FC:E5:F5:5E:C6:FE:3F:32:01:65:34:E9:F3:72:9E:66:85:15:88
X509v3 Authority Key Identifier:
keyid:B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8d:00:fc:3f:ea:3a:97:b8:5f:be:e1:97:cc:84:76:6d:b1:
ee:d9:5d:cd:80:4f:fe:c8:4f:bf:49:ab:b1:f0:04:2e:8f:7a:
06:44:3a:69:2c:5b:5a:de:74:ca:2b:77:b9:d7:db:28:49:75:
f9:b8:c8:d4:ab:7d:9e:bc:9e:dc:d8:c0:6a:dd:1e:b6:38:d2:
13:c0:f8:e4:78:09:85:c2:b6:b1:48:c9:69:6a:06:ef:e6:c8:
bb:0a:55:5c:f3:d8:80:1d:cc:f4:13:65:89:f0:e6:d8:68:e5:
51:f4:fa:e3:e9:4f:c5:2c:ed:ea:20:0e:d7:54:cc:97:d1:8d:
16:42:72:75:d0:03:d4:ba:bb:d1:d3:5f:23:15:53:d6:1d:8e:
5b:de:47:47:37:a4:70:a1:44:02:81:f6:13:3a:b9:05:e6:64:
2c:cf:a5:65:f1:0d:bd:c2:5f:18:15:e6:bd:07:0b:50:b9:a7:
b8:3b:06:fe:b7:c6:00:e8:76:8b:b2:19:a0:72:57:38:49:a8:
e3:1b:4f:13:14:e3:19:9d:df:10:cd:21:43:d4:7e:84:98:3d:
ed:90:24:3a:96:64:ad:de:72:fc:ae:62:5f:73:1b:3d:d3:4c:
cc:a3:df:da:7a:b9:dd:32:78:4e:6b:a1:98:3a:c9:72:6a:42:
70:a9:54:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4d6NwnCCJWunq161U8deMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NmUzYmU5OWRlYzYzYjEyYjJiODI3NzlkZmNmNWUzNjNk
MzIxYzEwHhcNMjUxMTA0MDgwMDM5WhcNMjUxMTA1MDgwMDM5WjAzMTEwLwYDVQQD
Eyg1M2ZjZTVmNTVlYzZmZTNmMzIwMTY1MzRlOWYzNzI5ZTY2ODUxNTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT1ILAmNUbSxaJe+s9tjT1Hoh9mB
amIcl8xxbj3toJ6ZIJy251zeAQQKsYFUQttvPi8eh3jFbeBG7D1dIj+uVCxDt62H
2Hdl136Wn66lN0SQAxxxWXiclnX7azvmJacEyhjCnyyEHCzqGDHfRNq7U6lxmHOV
giDfpFjFDYh8H2BVwA2aID73I0QwXcUOTz/0pYw5LTPpQGWu1GdnUD4YF+A46CaN
7TOV00NrHDUBrBabDjYhYlP629+lGXw2QCvQQd54l0YVrAd6RdVEE9hNGdTaR04X
xUHtaToSL7Dk7JnTKRfs5/9GQCxercnv70ZYpkJ4HW46FQxPCPVqm0PlIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFP85fVexv4/MgFlNOnzcp5mhRWIMB8GA1UdIwQY
MBaAFLluO+md7GOxKyuCd5389eNj0yHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xYWFmM2YtOWQzZi00OTMzLTk5ZWUt
MjViMzYwY2Y4YTIxLzEvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xYWFmM2YtOWQzZi00OTMzLTk5ZWUtMjViMzYwY2Y4YTIx
LzEvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGI0A/D/q
Ope4X77hl8yEdm2x7tldzYBP/shPv0mrsfAELo96BkQ6aSxbWt50yit3udfbKEl1
+bjI1Kt9nrye3NjAat0etjjSE8D45HgJhcK2sUjJaWoG7+bIuwpVXPPYgB3M9BNl
ifDm2GjlUfT64+lPxSzt6iAO11TMl9GNFkJyddAD1Lq70dNfIxVT1h2OW95HRzek
cKFEAoH2Ezq5BeZkLM+lZfENvcJfGBXmvQcLULmnuDsG/rfGAOh2i7IZoHJXOEmo
4xtPExTjGZ3fEM0hQ9R+hJg97ZAkOpZkrd5y/K5iX3MbPdNMzKPf2nq53TJ4Tmuh
mDrJcmpCcKlUrA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:15 2025 by rpki-client