Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
File: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft (raw, json)
Hash identifier: 4BXXXIaFG/aiV19C4IvVGP8gViKvIvyP549ELq+rQ6k=
Subject key identifier: 41:D1:7B:3F:30:8E:48:97:56:7C:14:B1:69:65:96:29:0E:EE:D5:EF
Authority key identifier: A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
Certificate issuer: /CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Certificate serial: 019896A5C3C34CA7C4E74A89D5F42394B365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
Manifest number: 0F46
Signing time: Mon 11 Aug 2025 01:01:42 +0000
Manifest this update: Mon 11 Aug 2025 01:01:42 +0000
Manifest next update: Tue 12 Aug 2025 01:01:42 +0000
Files and hashes: 1: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl (hash: d6dbnsNKHspmqOkwJ7jaOSIME1YImKo6gCdWJzrPFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:c3:c3:4c:a7:c4:e7:4a:89:d5:f4:23:94:b3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Validity
Not Before: Aug 11 01:01:42 2025 GMT
Not After : Aug 12 01:01:42 2025 GMT
Subject: CN=41d17b3f308e4897567c14b1696596290eeed5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:20:5c:55:b4:4b:b9:fe:48:68:db:68:c9:
48:e2:16:91:e9:d4:66:ec:44:a1:27:4c:5c:76:60:
49:e4:c0:e6:c1:ab:b3:59:a2:9e:b6:c5:51:4d:db:
52:01:f3:78:37:13:52:de:be:fc:ee:08:57:3b:31:
b6:25:8f:cb:9a:4a:3a:5a:cd:5c:4f:e3:05:cf:42:
96:e7:ba:9c:27:76:4a:69:0e:8a:82:bf:ed:5a:44:
14:47:cf:30:0f:f1:49:4d:6b:55:06:9c:db:14:2a:
9f:59:f2:68:ff:f1:be:6e:53:1a:c6:23:2f:bb:9e:
8b:95:56:36:a4:e3:76:ac:03:f0:77:63:31:76:20:
f7:da:0a:59:d5:47:6c:69:36:11:ec:69:03:e1:20:
b8:61:b2:a1:ff:b3:ee:46:13:7d:b5:75:b3:76:c2:
8d:fe:2e:1c:03:ee:97:19:16:fe:2a:1b:31:81:10:
02:d9:85:d2:30:7b:13:d1:9a:77:b1:3f:ea:86:94:
23:49:a7:06:fb:3b:ef:42:97:87:c7:81:83:0b:75:
26:8c:67:aa:84:e2:e7:51:da:28:21:aa:c4:d1:db:
d9:f6:bd:d7:bc:ed:8f:62:fc:33:da:c5:08:fe:1c:
fd:79:78:0e:3c:f0:33:40:4f:ab:fb:4a:b4:18:60:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D1:7B:3F:30:8E:48:97:56:7C:14:B1:69:65:96:29:0E:EE:D5:EF
X509v3 Authority Key Identifier:
keyid:A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cb:71:c4:03:af:df:66:05:05:1e:44:23:50:ef:ce:83:dd:
3b:27:88:2e:c1:6d:c8:71:58:a0:87:25:bb:2f:b0:b5:44:27:
45:17:95:60:46:1a:45:43:5f:2d:ff:56:da:62:86:77:17:31:
8d:98:05:cd:97:7a:29:6f:57:19:c6:3a:be:57:0c:28:58:c6:
4d:1f:b8:44:ac:e5:37:e7:72:1d:f0:50:6e:10:2a:e1:e5:25:
5a:64:fb:91:f8:71:c6:3a:d4:38:08:4d:69:18:88:6e:9b:3d:
62:52:73:d1:7a:84:f6:6b:4d:ee:02:18:21:51:dc:14:a9:83:
b8:8e:74:33:48:9b:43:c1:4e:ca:fe:3a:c9:e3:61:55:b0:bd:
23:1d:a0:9b:f5:ee:88:3f:e1:26:15:48:cf:fe:f3:a7:82:7a:
49:47:8e:21:33:96:52:3a:a7:66:8e:51:e9:76:b7:aa:7d:36:
ab:f8:95:27:bd:29:2b:7e:23:e4:79:60:18:1b:05:47:d1:ca:
7b:03:81:9d:d2:a4:e9:29:5e:11:eb:fb:b0:3f:ce:ea:63:ad:
b7:e4:04:bd:22:d8:a8:32:2d:ce:31:2c:53:50:26:e3:f6:13:
1f:01:2f:95:ec:37:05:1a:fa:ee:e6:80:41:53:36:c6:f1:ab:
08:ed:99:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpcPDTKfE50qJ1fQjlLNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NGE5ZTI3NWM1YzE3ODA5YjhmY2Y4YzBmZTBiNWY2MzI5
Y2VlZWYwHhcNMjUwODExMDEwMTQyWhcNMjUwODEyMDEwMTQyWjAzMTEwLwYDVQQD
Eyg0MWQxN2IzZjMwOGU0ODk3NTY3YzE0YjE2OTY1OTYyOTBlZWVkNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneUgXFW0S7n+SGjbaMlI4haR6dRm
7EShJ0xcdmBJ5MDmwauzWaKetsVRTdtSAfN4NxNS3r787ghXOzG2JY/Lmko6Ws1c
T+MFz0KW57qcJ3ZKaQ6Kgr/tWkQUR88wD/FJTWtVBpzbFCqfWfJo//G+blMaxiMv
u56LlVY2pON2rAPwd2MxdiD32gpZ1UdsaTYR7GkD4SC4YbKh/7PuRhN9tXWzdsKN
/i4cA+6XGRb+KhsxgRAC2YXSMHsT0Zp3sT/qhpQjSacG+zvvQpeHx4GDC3UmjGeq
hOLnUdooIarE0dvZ9r3XvO2PYvwz2sUI/hz9eXgOPPAzQE+r+0q0GGBSNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHRez8wjkiXVnwUsWlllikO7tXvMB8GA1UdIwQY
MBaAFKVKnidcXBeAm4/PjA/gtfYynO7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC80NzA3ZWMtZDNkZi00NDcwLTkyYTkt
Njk5ODBlZWJjMjBjLzEvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC80NzA3ZWMtZDNkZi00NDcwLTkyYTktNjk5ODBlZWJjMjBj
LzEvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHstxxAOv
32YFBR5EI1DvzoPdOyeILsFtyHFYoIcluy+wtUQnRReVYEYaRUNfLf9W2mKGdxcx
jZgFzZd6KW9XGcY6vlcMKFjGTR+4RKzlN+dyHfBQbhAq4eUlWmT7kfhxxjrUOAhN
aRiIbps9YlJz0XqE9mtN7gIYIVHcFKmDuI50M0ibQ8FOyv46yeNhVbC9Ix2gm/Xu
iD/hJhVIz/7zp4J6SUeOITOWUjqnZo5R6Xa3qn02q/iVJ70pK34j5HlgGBsFR9HK
ewOBndKk6SleEev7sD/O6mOtt+QEvSLYqDItzjEsU1Am4/YTHwEvlew3BRr67uaA
QVM2xvGrCO2Z1Q==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:13 2025 by rpki-client