Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
File: RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json)
Hash identifier: GmUaWVHej63pgLEdQBfo1vs/ZBbgFQMiO56ziWG6pz4=
Subject key identifier: 96:06:B8:9D:37:AD:31:7B:1E:05:D8:EE:8A:72:03:0C:D2:1C:2E:76
Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Certificate issuer: /CN=4541f55c16590424fb34c65e0e2eac22882470db
Certificate serial: 019A4EF5C2D415BB81A0D67ED0B5539EDB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
Manifest number: 074D
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: 0jMYPF/FqpLjHVw8ISxUJaTsblKzUuvEOGZfmZ4gafg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c2:d4:15:bb:81:a0:d6:7e:d0:b5:53:9e:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=9606b89d37ad317b1e05d8ee8a72030cd21c2e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:01:d2:0b:a7:f3:7c:be:47:9a:7d:9b:d0:
cf:bf:e5:c8:0b:3b:e0:dc:46:23:56:bb:1d:43:42:
b9:40:76:e3:b1:b1:6b:51:59:c5:30:c7:28:c5:50:
3c:db:e4:ff:c5:32:3c:99:45:ba:81:9c:4a:23:b6:
c9:da:c2:93:e1:26:ab:36:fb:37:f3:ec:62:8d:e4:
88:f5:4c:59:82:cf:dc:f6:6d:13:ce:91:eb:d0:d6:
8d:a6:c3:f2:2c:88:62:39:fd:de:24:53:c8:70:85:
04:65:5c:f3:c8:53:10:47:c7:84:3a:26:5c:47:5a:
5a:3e:b2:03:28:e3:17:fb:45:8d:1c:19:3d:bc:d0:
19:7b:22:43:20:e7:ce:d2:43:e0:32:52:24:ba:ba:
4c:e7:9b:99:3d:14:73:e9:72:c8:80:d0:e4:33:98:
6f:ad:72:f9:ea:54:97:69:5a:94:bb:b1:0a:1e:b2:
8e:46:e9:c3:0e:38:25:dc:b4:51:24:f3:27:5d:ed:
c5:ef:be:da:dc:b2:a2:44:b4:ae:af:1f:c9:ae:d9:
76:6b:aa:bd:74:8b:c3:40:27:e7:c1:86:9d:b3:13:
71:ee:c2:ad:16:74:2b:ea:85:83:e6:f8:b4:6c:b7:
fb:61:e4:cc:ad:1c:f2:38:d7:20:37:c7:8e:8e:11:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:06:B8:9D:37:AD:31:7B:1E:05:D8:EE:8A:72:03:0C:D2:1C:2E:76
X509v3 Authority Key Identifier:
keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:06:02:73:f2:54:f2:e5:bf:85:97:c5:37:7e:5d:a8:fa:b8:
3e:f4:1c:00:4d:09:52:b9:c1:c2:fc:ee:62:3e:78:90:64:f7:
05:93:0d:36:b5:da:2b:0b:c3:c8:59:26:0b:86:d3:e5:28:dc:
cd:f1:08:15:89:3f:c5:cd:cd:fd:dc:25:34:2f:24:0c:8a:92:
28:fe:50:ee:1f:29:89:16:ff:dc:4d:17:ab:58:20:2e:5f:fd:
eb:9f:87:82:e6:66:d2:17:3c:5b:3d:ad:64:53:8d:eb:ab:42:
53:a5:0b:08:77:64:ba:34:4c:c7:78:2b:25:2a:e6:52:bf:96:
6b:d7:b6:84:84:9e:42:86:9b:ad:63:ce:e7:87:ce:c5:b7:14:
1f:26:19:bd:1f:52:b6:73:d0:fb:c0:ab:2f:45:6d:2c:96:74:
8e:29:b0:d5:dc:e5:42:e0:a8:96:66:00:4b:9b:e2:8f:68:51:
57:e9:8b:b0:c5:55:6e:32:fe:da:fd:b3:a6:19:8b:16:33:bb:
e4:e3:63:df:68:81:61:40:63:f7:80:05:5d:99:f2:f1:b2:7e:
f3:ab:4c:d6:58:24:31:8c:21:2c:26:4f:17:1b:ff:7e:eb:e2:
cb:65:79:7b:b6:c8:47:a5:d9:1f:67:74:b5:0d:88:56:8a:1b:
3c:8a:95:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9cLUFbuBoNZ+0LVTntt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NDFmNTVjMTY1OTA0MjRmYjM0YzY1ZTBlMmVhYzIyODgy
NDcwZGIwHhcNMjUxMTA0MTMwMjAwWhcNMjUxMTA1MTMwMjAwWjAzMTEwLwYDVQQD
Eyg5NjA2Yjg5ZDM3YWQzMTdiMWUwNWQ4ZWU4YTcyMDMwY2QyMWMyZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjwB0gun83y+R5p9m9DPv+XICzvg
3EYjVrsdQ0K5QHbjsbFrUVnFMMcoxVA82+T/xTI8mUW6gZxKI7bJ2sKT4SarNvs3
8+xijeSI9UxZgs/c9m0TzpHr0NaNpsPyLIhiOf3eJFPIcIUEZVzzyFMQR8eEOiZc
R1paPrIDKOMX+0WNHBk9vNAZeyJDIOfO0kPgMlIkurpM55uZPRRz6XLIgNDkM5hv
rXL56lSXaVqUu7EKHrKORunDDjgl3LRRJPMnXe3F777a3LKiRLSurx/Jrtl2a6q9
dIvDQCfnwYadsxNx7sKtFnQr6oWD5vi0bLf7YeTMrRzyONcgN8eOjhENlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYGuJ03rTF7HgXY7opyAwzSHC52MB8GA1UdIwQY
MBaAFEVB9VwWWQQk+zTGXg4urCKIJHDbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlVIMVhCWlpCQ1Q3Tk1aZURpNnNJb2drY05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMzg4NWMtNmI3NC00M2M0LThmZGQt
Nzg5ZDA3YzE5ODA4LzEvUlVIMVhCWlpCQ1Q3Tk1aZURpNnNJb2drY05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kMzg4NWMtNmI3NC00M2M0LThmZGQtNzg5ZDA3YzE5ODA4
LzEvUlVIMVhCWlpCQ1Q3Tk1aZURpNnNJb2drY05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQYCc/JU
8uW/hZfFN35dqPq4PvQcAE0JUrnBwvzuYj54kGT3BZMNNrXaKwvDyFkmC4bT5Sjc
zfEIFYk/xc3N/dwlNC8kDIqSKP5Q7h8piRb/3E0Xq1ggLl/965+HguZm0hc8Wz2t
ZFON66tCU6ULCHdkujRMx3grJSrmUr+Wa9e2hISeQoabrWPO54fOxbcUHyYZvR9S
tnPQ+8CrL0VtLJZ0jimw1dzlQuColmYAS5vij2hRV+mLsMVVbjL+2v2zphmLFjO7
5ONj32iBYUBj94AFXZny8bJ+86tM1lgkMYwhLCZPFxv/fuviy2V5e7bIR6XZH2d0
tQ2IVoobPIqV2g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:55 2025 by rpki-client