Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: eqaqDJwT64DGPHwbaAb5Mp5ijHfsQGtbgWOLJXI0w80=
Subject key identifier: 8A:F9:FD:B4:CB:F0:ED:7E:AA:DE:D6:3D:F1:F6:69:E3:8A:2A:2C:40
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 019A5119E0BEB2BAFA7994DFEEF83065E4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 087F
Signing time: Tue 04 Nov 2025 23:00:41 +0000
Manifest this update: Tue 04 Nov 2025 23:00:41 +0000
Manifest next update: Wed 05 Nov 2025 23:00:41 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: QaDsa/94tXS5pVwQp/JOvFeH3OS//JT46kB/Y9gT208=)
2: UrDlMe0qpvsS_4c6z9IjME9U_ys.roa (hash: /PhhJk4agPsHh1xc3D32x5yCUJu5RdhwQAjI1byTCj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:e0:be:b2:ba:fa:79:94:df:ee:f8:30:65:e4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Nov 4 23:00:41 2025 GMT
Not After : Nov 5 23:00:41 2025 GMT
Subject: CN=8af9fdb4cbf0ed7eaaded63df1f669e38a2a2c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:2b:84:a4:bf:d5:7c:c9:88:bb:d6:d3:e9:
46:7e:83:91:82:96:cb:16:c8:2c:6b:c9:18:ae:0e:
27:93:82:8a:55:07:90:10:1f:64:29:99:22:80:e5:
0f:08:a4:b8:06:f4:7b:d1:1d:05:01:78:b9:cc:e6:
6a:b1:e9:17:c6:f9:ea:01:7d:50:23:28:71:3e:9c:
b3:3f:c8:af:70:36:db:05:94:a0:82:40:75:28:be:
29:24:aa:b4:57:24:0b:b7:b7:6a:05:ec:3f:a3:65:
d2:03:1a:d6:dc:0d:3e:ab:33:9b:9e:74:08:bd:8e:
df:cf:dd:55:8b:36:bb:eb:f7:ac:c3:79:20:8b:4e:
bf:ca:95:d9:a2:3c:01:24:95:06:19:8d:b2:ed:9c:
a8:72:06:f1:22:46:eb:57:84:eb:f6:25:ba:2b:f2:
9f:08:d0:bf:c5:a7:5c:8d:f5:ef:2b:7a:b0:c9:b7:
46:62:14:dc:3e:99:9a:94:25:ab:d3:e2:ac:3a:ee:
27:e7:99:31:b9:f2:2a:ec:9e:fb:80:64:41:e9:1a:
e0:30:74:9a:bb:c0:81:63:09:55:63:28:9e:d7:da:
4f:c6:61:d2:0d:3c:e9:c0:a1:5b:0e:85:b3:e9:6d:
6b:9b:1c:14:bd:a1:80:07:9e:14:a8:23:09:fa:a6:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F9:FD:B4:CB:F0:ED:7E:AA:DE:D6:3D:F1:F6:69:E3:8A:2A:2C:40
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:95:42:ae:74:95:b3:08:6f:b7:46:ae:88:94:8d:c7:30:d9:
cc:bc:5c:e2:ae:a1:13:08:47:a6:93:d5:d1:46:26:f6:f3:9e:
eb:aa:fb:8b:ff:66:10:f9:69:ed:3b:19:95:aa:29:dd:a8:1e:
f8:86:28:d4:a5:6e:52:f1:e7:f6:a7:4c:5b:74:37:18:2f:f6:
40:17:b9:65:28:51:1e:dc:d7:0f:48:48:2a:20:63:78:6f:05:
8b:1b:36:95:ac:18:36:a4:6a:df:c4:35:06:e7:a2:02:fb:3d:
b4:c1:bb:a0:da:83:5b:c1:d8:a2:83:a4:20:ee:e7:22:1e:46:
d5:b6:c8:2b:16:ce:95:63:74:df:3f:4f:21:b1:44:d6:12:a0:
f6:96:f6:2d:19:36:0b:ce:16:83:77:22:82:21:2b:46:b4:99:
c9:5b:4d:1a:0b:0d:99:45:17:d9:fd:4b:e6:80:4e:cc:ea:93:
fb:6d:31:e6:b2:86:90:b8:35:cf:6c:e0:b5:31:58:d0:07:aa:
f7:77:e5:83:11:27:b9:b7:e8:a1:c7:ed:9d:ea:04:2e:28:a1:
40:db:68:97:c6:11:f2:98:65:41:47:26:69:cb:ce:9f:3f:3f:
40:67:d3:47:29:d6:c8:84:10:09:15:31:cc:f2:ca:fd:e7:ed:
b5:16:de:37
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpRGeC+srr6eZTf7vgwZeTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi
ZTFhYjUwHhcNMjUxMTA0MjMwMDQxWhcNMjUxMTA1MjMwMDQxWjAzMTEwLwYDVQQD
Eyg4YWY5ZmRiNGNiZjBlZDdlYWFkZWQ2M2RmMWY2NjllMzhhMmEyYzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBsrhKS/1XzJiLvW0+lGfoORgpbL
Fsgsa8kYrg4nk4KKVQeQEB9kKZkigOUPCKS4BvR70R0FAXi5zOZqsekXxvnqAX1Q
IyhxPpyzP8ivcDbbBZSggkB1KL4pJKq0VyQLt7dqBew/o2XSAxrW3A0+qzObnnQI
vY7fz91Viza76/esw3kgi06/ypXZojwBJJUGGY2y7ZyocgbxIkbrV4Tr9iW6K/Kf
CNC/xadcjfXvK3qwybdGYhTcPpmalCWr0+KsOu4n55kxufIq7J77gGRB6RrgMHSa
u8CBYwlVYyie19pPxmHSDTzpwKFbDoWz6W1rmxwUvaGAB54UqCMJ+qbZwQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIr5/bTL8O1+qt7WPfH2aeOKKixAMB8GA1UdIwQY
MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4
LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3
ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5VC
rnSVswhvt0auiJSNxzDZzLxc4q6hEwhHppPV0UYm9vOe66r7i/9mEPlp7TsZlaop
3age+IYo1KVuUvHn9qdMW3Q3GC/2QBe5ZShRHtzXD0hIKiBjeG8Fixs2lawYNqRq
38Q1BueiAvs9tMG7oNqDW8HYooOkIO7nIh5G1bbIKxbOlWN03z9PIbFE1hKg9pb2
LRk2C84Wg3cigiErRrSZyVtNGgsNmUUX2f1L5oBOzOqT+20x5rKGkLg1z2zgtTFY
0Aeq93flgxEnubfoocftneoELiihQNtol8YR8phlQUcmacvOnz8/QGfTRynWyIQQ
CRUxzPLK/efttRbeNw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:33:53 2025 by rpki-client