Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: q8Gw1/DUTLJHCc7Lo/Po/2x4Auk/7ZWpeE51e68vAhU=
Subject key identifier: 24:83:23:9F:A1:88:07:84:AF:4F:CF:33:87:D9:42:06:AF:67:1D:25
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 019A522C74B650C6ADB9F669B54FDF6B507D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 1461
Signing time: Wed 05 Nov 2025 04:00:36 +0000
Manifest this update: Wed 05 Nov 2025 04:00:36 +0000
Manifest next update: Thu 06 Nov 2025 04:00:36 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: N9XHfJ1fWFr/0CW8x5PLj9tcE3xh3RKqnO8GZfDxcLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:74:b6:50:c6:ad:b9:f6:69:b5:4f:df:6b:50:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: Nov 5 04:00:36 2025 GMT
Not After : Nov 6 04:00:36 2025 GMT
Subject: CN=2483239fa1880784af4fcf3387d94206af671d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:f0:4b:0b:5d:cb:d1:6d:d9:38:61:03:54:
0e:8a:ea:cc:f9:2a:71:35:8c:ad:d7:d9:43:fd:3e:
54:0b:54:31:7b:2a:cf:4a:b6:8b:6c:61:5f:2f:4b:
28:f7:53:85:16:4e:9a:45:2e:5b:ca:79:23:46:7e:
90:78:b7:26:a2:22:75:54:1f:be:23:76:af:2c:d2:
8c:67:a3:4e:34:e5:05:72:5c:18:13:47:10:1e:d7:
b8:10:2f:37:fa:18:40:cf:e0:63:3c:e7:e5:27:d4:
be:c2:46:5b:19:26:ad:e5:ee:d1:95:c7:9d:48:ea:
a2:c1:4f:ba:36:1b:04:31:ee:0c:e1:b2:49:85:73:
5f:b8:e3:28:91:58:7a:27:8f:0f:35:c9:f9:c8:91:
61:f7:3f:83:bc:d0:70:f5:42:07:9d:5f:47:b5:1c:
24:25:62:06:d6:7d:5e:28:8e:72:8c:c2:7f:6c:5c:
2f:74:83:ed:91:0a:a2:b8:56:df:0c:f6:b3:b2:7c:
0e:b5:21:31:88:d3:2f:c3:d0:04:8d:a8:91:7e:da:
44:19:6b:8b:5d:78:d1:49:bc:c2:99:43:ef:9f:3d:
e0:73:6b:f4:82:47:68:4e:c6:36:5e:4a:6f:ab:1d:
bb:e5:69:8b:a2:ef:e6:3a:1e:3d:46:9a:b0:d6:aa:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:83:23:9F:A1:88:07:84:AF:4F:CF:33:87:D9:42:06:AF:67:1D:25
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1a:d7:0b:9a:74:7d:6e:1c:2d:9e:77:17:ea:37:22:ec:d5:
5a:4f:db:d9:65:6c:c0:9d:e4:7f:b1:6e:d9:d7:d4:68:68:df:
fd:ac:5d:e3:08:79:77:76:15:ec:e6:15:d5:cb:27:a3:4f:33:
00:bc:96:ab:31:7b:bb:08:95:79:94:9e:ae:fd:79:f7:42:34:
b0:3e:2a:06:59:16:e0:e3:14:e8:42:0b:35:64:4f:71:09:14:
14:96:29:8a:1a:70:f3:ae:40:9a:3a:d3:95:b8:92:5f:ca:b0:
a2:62:a2:0b:84:f2:f9:5c:95:96:83:71:58:60:13:11:f5:9e:
28:f9:65:f8:f5:9c:0d:ff:18:82:70:3d:a3:54:11:bd:ec:ed:
0d:df:b3:21:c8:0e:30:e8:a1:8d:33:c6:a7:fa:f3:e0:75:8d:
0a:89:58:b1:9a:f1:59:34:28:bb:73:f7:d0:7b:e0:24:26:64:
2c:db:9f:ce:d6:f3:66:89:4d:b9:36:5d:71:33:fa:59:4b:aa:
28:03:9c:0d:23:07:97:72:27:0c:56:5a:6d:f7:1f:6a:89:c3:
c4:44:2b:6c:48:40:40:e1:17:92:2b:de:bc:8a:7b:d6:d6:e0:
ed:4d:ac:b5:b6:a0:71:59:33:a1:25:1c:48:6c:d8:56:54:3b:
d8:df:f9:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLHS2UMatufZptU/fa1B9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMWI1MjAyYTBlZDQ2ZjY0MTFlMWVkYTdjN2I1OWRkOGNj
NmNkODcwHhcNMjUxMTA1MDQwMDM2WhcNMjUxMTA2MDQwMDM2WjAzMTEwLwYDVQQD
EygyNDgzMjM5ZmExODgwNzg0YWY0ZmNmMzM4N2Q5NDIwNmFmNjcxZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSnwSwtdy9Ft2ThhA1QOiurM+Spx
NYyt19lD/T5UC1QxeyrPSraLbGFfL0so91OFFk6aRS5bynkjRn6QeLcmoiJ1VB++
I3avLNKMZ6NONOUFclwYE0cQHte4EC83+hhAz+BjPOflJ9S+wkZbGSat5e7Rlced
SOqiwU+6NhsEMe4M4bJJhXNfuOMokVh6J48PNcn5yJFh9z+DvNBw9UIHnV9HtRwk
JWIG1n1eKI5yjMJ/bFwvdIPtkQqiuFbfDPazsnwOtSExiNMvw9AEjaiRftpEGWuL
XXjRSbzCmUPvnz3gc2v0gkdoTsY2Xkpvqx275WmLou/mOh49Rpqw1qqsvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSDI5+hiAeEr0/PM4fZQgavZx0lMB8GA1UdIwQY
MBaAFFAbUgKg7Ub2QR4e2nx7Wd2Mxs2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJ0U0FxRHRSdlpCSGg3YWZIdFozWXpHelljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zNmIxZjMtNmM5Zi00MjQ5LWEwYzct
YjE3NmQ2YmI1N2RiLzEvVUJ0U0FxRHRSdlpCSGg3YWZIdFozWXpHelljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zNmIxZjMtNmM5Zi00MjQ5LWEwYzctYjE3NmQ2YmI1N2Ri
LzEvVUJ0U0FxRHRSdlpCSGg3YWZIdFozWXpHelljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRrXC5p0
fW4cLZ53F+o3IuzVWk/b2WVswJ3kf7Fu2dfUaGjf/axd4wh5d3YV7OYV1csno08z
ALyWqzF7uwiVeZServ1590I0sD4qBlkW4OMU6EILNWRPcQkUFJYpihpw865AmjrT
lbiSX8qwomKiC4Ty+VyVloNxWGATEfWeKPll+PWcDf8YgnA9o1QRveztDd+zIcgO
MOihjTPGp/rz4HWNColYsZrxWTQou3P30HvgJCZkLNufztbzZolNuTZdcTP6WUuq
KAOcDSMHl3InDFZabfcfaonDxEQrbEhAQOEXkivevIp71tbg7U2stbagcVkzoSUc
SGzYVlQ72N/5YA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:51:11 2025 by rpki-client