Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
File: U9L19sohYsiL85oPnekm9CPlMQQ.mft (raw, json)
Hash identifier: fj5MkJB8w3/HLebl+d0TiM8/FhRCL1TE0+y9VTd71Xk=
Subject key identifier: 00:35:A3:5E:9D:88:7A:ED:1D:40:D7:05:BB:C9:0F:50:12:5A:DB:01
Authority key identifier: 53:D2:F5:F6:CA:21:62:C8:8B:F3:9A:0F:9D:E9:26:F4:23:E5:31:04
Certificate issuer: /CN=53d2f5f6ca2162c88bf39a0f9de926f423e53104
Certificate serial: 01988EEC9504628B33817668013BEB1E883B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
Manifest number: 0F8C
Signing time: Sat 09 Aug 2025 13:02:05 +0000
Manifest this update: Sat 09 Aug 2025 13:02:05 +0000
Manifest next update: Sun 10 Aug 2025 13:02:05 +0000
Files and hashes: 1: U9L19sohYsiL85oPnekm9CPlMQQ.crl (hash: mMwRQ0FURZboMPS/xaTfbW4lR0JQGdOgXWQQ3OO+2zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:95:04:62:8b:33:81:76:68:01:3b:eb:1e:88:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d2f5f6ca2162c88bf39a0f9de926f423e53104
Validity
Not Before: Aug 9 13:02:05 2025 GMT
Not After : Aug 10 13:02:05 2025 GMT
Subject: CN=0035a35e9d887aed1d40d705bbc90f50125adb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:78:8e:0c:63:ba:40:87:59:ce:da:d1:44:
80:3d:39:4c:d6:2d:e8:53:6e:b5:65:23:86:82:56:
55:ea:9b:16:e9:3d:a7:1c:0e:23:45:4e:3f:f2:ac:
47:93:c2:a1:df:b3:91:64:d3:de:29:da:d7:db:ce:
22:a2:3f:17:c0:b0:60:a6:b5:1a:16:89:6b:e9:55:
5e:98:0a:1c:3a:df:c4:26:34:81:a5:76:a7:d8:55:
59:d0:24:05:27:f8:25:2a:67:26:86:f4:86:2f:c0:
16:5e:7e:38:3d:67:58:2a:04:94:37:bc:2b:b3:f4:
cf:78:00:23:39:88:e8:f6:74:60:54:d1:9a:1c:ef:
f8:26:62:6c:96:81:49:e0:0d:f9:84:03:45:17:cc:
06:50:93:2d:41:e7:77:9a:4c:af:1d:98:93:c0:d2:
13:78:65:9e:8a:b9:57:c2:fa:3c:dc:59:4d:09:8a:
2a:ba:a5:85:7d:bf:5a:83:02:d1:24:41:f0:32:05:
90:9f:b5:8f:d8:ba:92:60:d8:f3:93:28:c9:b9:7f:
f0:af:b6:ab:cc:68:bf:1d:a7:94:68:2a:8a:2d:02:
dd:b8:40:35:79:fc:8b:0e:52:ba:86:36:86:b1:f8:
da:1f:2b:61:a8:aa:3f:d4:7a:bb:6f:9d:95:4a:06:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:35:A3:5E:9D:88:7A:ED:1D:40:D7:05:BB:C9:0F:50:12:5A:DB:01
X509v3 Authority Key Identifier:
keyid:53:D2:F5:F6:CA:21:62:C8:8B:F3:9A:0F:9D:E9:26:F4:23:E5:31:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ee:e0:8d:4d:3b:1c:96:b9:d7:9b:a9:96:b5:b3:ce:d7:f2:
93:37:7b:82:73:ef:23:47:2a:72:5d:04:eb:89:d4:d2:44:e7:
3c:c0:31:cb:dd:9e:54:9f:2b:d3:5b:86:81:1c:86:72:6c:2e:
09:e9:bd:ca:99:7e:e5:79:ee:27:e0:b0:b4:eb:ee:ef:99:b0:
46:90:93:9f:c3:a0:ba:58:12:2a:db:40:f6:15:89:a0:b5:eb:
72:c1:70:eb:9b:74:67:26:7a:ae:bf:69:7a:a8:ca:a1:1e:4b:
43:9c:e4:b9:ef:66:e5:59:5c:6c:78:9a:80:79:17:97:e1:39:
9a:25:8d:f7:ee:8b:10:93:24:76:91:dd:45:9b:d2:35:9d:ba:
0f:98:02:b7:3f:79:89:13:7f:a9:49:8d:d6:a7:75:7d:ea:15:
8c:65:32:65:59:71:05:7c:72:1b:d4:47:6c:4f:14:ab:0d:b3:
30:0d:01:0f:61:8e:87:c5:db:e8:39:14:c2:0a:8d:05:8a:ac:
d6:4f:ec:76:f4:70:76:a4:b6:8f:06:d4:04:94:2b:01:7a:ba:
d3:d1:17:5e:89:5f:25:06:cc:d2:31:2b:be:8a:15:f8:03:3e:
32:25:80:b1:a5:81:c3:ec:3f:58:e0:5f:79:00:dd:2e:bd:95:
9c:fc:b2:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7JUEYoszgXZoATvrHog7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZDJmNWY2Y2EyMTYyYzg4YmYzOWEwZjlkZTkyNmY0MjNl
NTMxMDQwHhcNMjUwODA5MTMwMjA1WhcNMjUwODEwMTMwMjA1WjAzMTEwLwYDVQQD
EygwMDM1YTM1ZTlkODg3YWVkMWQ0MGQ3MDViYmM5MGY1MDEyNWFkYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnN4jgxjukCHWc7a0USAPTlM1i3o
U261ZSOGglZV6psW6T2nHA4jRU4/8qxHk8Kh37ORZNPeKdrX284ioj8XwLBgprUa
Folr6VVemAocOt/EJjSBpXan2FVZ0CQFJ/glKmcmhvSGL8AWXn44PWdYKgSUN7wr
s/TPeAAjOYjo9nRgVNGaHO/4JmJsloFJ4A35hANFF8wGUJMtQed3mkyvHZiTwNIT
eGWeirlXwvo83FlNCYoquqWFfb9agwLRJEHwMgWQn7WP2LqSYNjzkyjJuX/wr7ar
zGi/HaeUaCqKLQLduEA1efyLDlK6hjaGsfjaHythqKo/1Hq7b52VSgbUxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAA1o16diHrtHUDXBbvJD1ASWtsBMB8GA1UdIwQY
MBaAFFPS9fbKIWLIi/OaD53pJvQj5TEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTlMMTlzb2hZc2lMODVvUG5la205Q1BsTVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hNWNhMGItOTQyNS00YzFlLThlZjYt
YTZmY2FkMTlhZWYyLzEvVTlMMTlzb2hZc2lMODVvUG5la205Q1BsTVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hNWNhMGItOTQyNS00YzFlLThlZjYtYTZmY2FkMTlhZWYy
LzEvVTlMMTlzb2hZc2lMODVvUG5la205Q1BsTVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHO7gjU07
HJa515uplrWzztfykzd7gnPvI0cqcl0E64nU0kTnPMAxy92eVJ8r01uGgRyGcmwu
Cem9ypl+5XnuJ+CwtOvu75mwRpCTn8OgulgSKttA9hWJoLXrcsFw65t0ZyZ6rr9p
eqjKoR5LQ5zkue9m5VlcbHiagHkXl+E5miWN9+6LEJMkdpHdRZvSNZ26D5gCtz95
iRN/qUmN1qd1feoVjGUyZVlxBXxyG9RHbE8Uqw2zMA0BD2GOh8Xb6DkUwgqNBYqs
1k/sdvRwdqS2jwbUBJQrAXq609EXXolfJQbM0jErvooV+AM+MiWAsaWBw+w/WOBf
eQDdLr2VnPyyow==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:33:55 2025 by rpki-client