Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
File: ucN059N57ajbliAKTu_lvBwok58.mft (raw, json)
Hash identifier: cnLet5wJ2VIm1xXIsGkuj4mKRrwMKbKVFt/wX1d1b7g=
Subject key identifier: 76:B7:97:9B:26:4B:16:67:50:B3:70:4F:F0:D9:A5:96:C3:59:EE:64
Authority key identifier: B9:C3:74:E7:D3:79:ED:A8:DB:96:20:0A:4E:EF:E5:BC:1C:28:93:9F
Certificate issuer: /CN=b9c374e7d379eda8db96200a4eefe5bc1c28939f
Certificate serial: 019A4EF42EE95861C6A43598D3B0A5D63C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
Manifest number: 0DC4
Signing time: Tue 04 Nov 2025 13:00:16 +0000
Manifest this update: Tue 04 Nov 2025 13:00:16 +0000
Manifest next update: Wed 05 Nov 2025 13:00:16 +0000
Files and hashes: 1: ucN059N57ajbliAKTu_lvBwok58.crl (hash: I+tR7LRNeiZaHq30CHQhz+vwaO07eFPjxDVsPmCqfH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2e:e9:58:61:c6:a4:35:98:d3:b0:a5:d6:3c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c374e7d379eda8db96200a4eefe5bc1c28939f
Validity
Not Before: Nov 4 13:00:16 2025 GMT
Not After : Nov 5 13:00:16 2025 GMT
Subject: CN=76b7979b264b166750b3704ff0d9a596c359ee64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:df:39:02:e2:71:5e:a0:69:0e:25:74:fa:
a2:cc:6d:de:86:1e:c2:3d:4a:52:b6:de:89:67:22:
f0:2e:88:17:db:26:c0:c5:02:c8:2f:ae:bb:a0:08:
4b:53:d9:a9:c4:38:66:d6:c5:6c:05:2e:c7:4a:bc:
94:ba:37:a2:1d:f8:27:7f:2a:d9:de:22:14:f1:e4:
74:95:82:ff:d3:ca:68:17:22:d6:b4:d6:b9:bc:2b:
5e:28:5d:f6:b7:d7:9d:b7:d8:75:de:f9:e0:56:0f:
57:67:89:11:e2:39:16:4b:18:19:6e:df:0f:3d:4b:
4c:7f:d9:8b:fc:50:ec:83:c8:3b:43:95:ce:40:5c:
48:c3:13:a6:1c:1e:00:15:6a:a1:55:cb:8e:8b:57:
ce:43:44:ee:cb:a5:57:63:83:07:c5:52:2b:c1:18:
0d:e3:39:53:0a:9b:44:de:fb:89:08:b7:da:ab:f6:
7f:76:75:a6:05:b5:87:ec:af:6e:67:26:aa:ac:7b:
a9:47:35:75:67:9e:49:e2:d3:f4:04:b6:d8:31:f3:
8e:75:03:bc:d9:06:6b:b5:9f:04:66:07:c2:2a:47:
c3:7a:07:f5:6c:fb:00:f0:2b:ef:f8:14:20:1d:f4:
c8:8e:b8:87:fb:b4:cf:75:75:b5:f1:ef:a4:84:05:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B7:97:9B:26:4B:16:67:50:B3:70:4F:F0:D9:A5:96:C3:59:EE:64
X509v3 Authority Key Identifier:
keyid:B9:C3:74:E7:D3:79:ED:A8:DB:96:20:0A:4E:EF:E5:BC:1C:28:93:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0a:8a:e4:df:5c:8c:72:1b:bc:c5:cc:5f:76:56:b3:af:a2:
40:df:d3:24:af:8b:bc:1d:4d:59:b0:f9:6a:4c:4d:a7:9a:bf:
0d:94:f9:d6:e6:a2:53:0d:bd:f3:d6:4a:aa:c1:f8:2b:5f:0a:
cc:06:dc:f1:80:c0:af:18:88:fb:3c:27:f5:d2:d6:0d:7a:f3:
4d:9c:35:ed:f9:37:ea:7f:c8:2f:e8:af:f8:0e:8d:37:7c:32:
69:4e:85:31:d6:20:97:aa:75:06:fb:a2:9c:6a:fa:9e:24:7f:
6e:d3:cc:ff:74:8a:9e:c3:10:e0:c0:b4:50:47:23:cd:d0:13:
90:b3:15:6a:29:ea:10:54:e7:5b:56:e8:8b:27:59:0a:45:85:
0b:bb:30:7b:16:72:1a:d0:cc:29:23:2b:26:12:14:fe:be:28:
a4:fb:aa:09:5e:c7:d7:a1:a8:c2:bb:78:cd:26:42:95:c4:3b:
80:d0:69:e4:18:a8:a4:08:4e:ab:46:e3:db:25:b1:cf:92:50:
ac:20:60:69:82:ed:53:5b:34:eb:fe:25:50:2d:e0:a6:3f:24:
98:ba:ba:d4:be:5c:96:1a:70:7d:cc:2e:d3:74:8a:36:3b:0f:
66:3f:c3:1e:3a:3f:82:58:71:fb:74:b0:bb:31:60:c9:f8:ba:
b8:ae:2c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9C7pWGHGpDWY07Cl1jyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YzM3NGU3ZDM3OWVkYThkYjk2MjAwYTRlZWZlNWJjMWMy
ODkzOWYwHhcNMjUxMTA0MTMwMDE2WhcNMjUxMTA1MTMwMDE2WjAzMTEwLwYDVQQD
Eyg3NmI3OTc5YjI2NGIxNjY3NTBiMzcwNGZmMGQ5YTU5NmMzNTllZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyunfOQLicV6gaQ4ldPqizG3ehh7C
PUpStt6JZyLwLogX2ybAxQLIL667oAhLU9mpxDhm1sVsBS7HSryUujeiHfgnfyrZ
3iIU8eR0lYL/08poFyLWtNa5vCteKF32t9edt9h13vngVg9XZ4kR4jkWSxgZbt8P
PUtMf9mL/FDsg8g7Q5XOQFxIwxOmHB4AFWqhVcuOi1fOQ0Tuy6VXY4MHxVIrwRgN
4zlTCptE3vuJCLfaq/Z/dnWmBbWH7K9uZyaqrHupRzV1Z55J4tP0BLbYMfOOdQO8
2QZrtZ8EZgfCKkfDegf1bPsA8Cvv+BQgHfTIjriH+7TPdXW18e+khAV0xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHa3l5smSxZnULNwT/DZpZbDWe5kMB8GA1UdIwQY
MBaAFLnDdOfTee2o25YgCk7v5bwcKJOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWNOMDU5TjU3YWpibGlBS1R1X2x2QndvazU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83YTUzZWMtNTZkNy00NWNkLWJhYjgt
YjMyYWRmNjFhYjQ3LzEvdWNOMDU5TjU3YWpibGlBS1R1X2x2QndvazU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83YTUzZWMtNTZkNy00NWNkLWJhYjgtYjMyYWRmNjFhYjQ3
LzEvdWNOMDU5TjU3YWpibGlBS1R1X2x2QndvazU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQqK5N9c
jHIbvMXMX3ZWs6+iQN/TJK+LvB1NWbD5akxNp5q/DZT51uaiUw2989ZKqsH4K18K
zAbc8YDArxiI+zwn9dLWDXrzTZw17fk36n/IL+iv+A6NN3wyaU6FMdYgl6p1Bvui
nGr6niR/btPM/3SKnsMQ4MC0UEcjzdATkLMVainqEFTnW1boiydZCkWFC7swexZy
GtDMKSMrJhIU/r4opPuqCV7H16Gowrt4zSZClcQ7gNBp5BiopAhOq0bj2yWxz5JQ
rCBgaYLtU1s06/4lUC3gpj8kmLq61L5clhpwfcwu03SKNjsPZj/DHjo/glhx+3Sw
uzFgyfi6uK4sdQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:27 2025 by rpki-client