
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
File: u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json)
Hash identifier: oNx+8ZZx4t6b8Y+DyKzEkPMjqQCh8L13M2XP1d5IS94=
Subject key identifier: AB:5F:C8:11:59:1F:A9:24:11:47:E7:D0:D6:34:98:DF:9E:D2:10:6B
Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
Certificate issuer: /CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Certificate serial: 0198733D1CDA340E3B6F5C3092F6B3D5A9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
Manifest number: 0FBE
Signing time: Mon 04 Aug 2025 04:00:41 +0000
Manifest this update: Mon 04 Aug 2025 04:00:41 +0000
Manifest next update: Tue 05 Aug 2025 04:00:41 +0000
Files and hashes: 1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: DlX9vfGj4BHk44xGSjYyD697yaZ1Raa5ZeeAFjTsYkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:1c:da:34:0e:3b:6f:5c:30:92:f6:b3:d5:a9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Validity
Not Before: Aug 4 04:00:41 2025 GMT
Not After : Aug 5 04:00:41 2025 GMT
Subject: CN=ab5fc811591fa9241147e7d0d63498df9ed2106b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:56:b8:12:bb:45:cc:7b:09:bb:de:df:08:
e8:7d:8c:5f:dd:41:94:00:00:fb:09:b2:e2:ab:68:
48:16:cf:88:ad:4f:f2:05:e6:12:7a:9c:cd:f3:79:
08:ed:81:23:53:36:e0:3f:e9:9e:ab:b6:e7:a3:a8:
32:05:04:a5:8a:67:6c:8b:ba:0d:f2:e3:0b:60:86:
8d:09:90:5a:38:11:76:17:05:2f:ce:1f:97:04:13:
00:98:cc:0f:16:47:36:2f:82:84:95:12:c6:69:6c:
66:d6:41:3c:bb:4b:bb:ab:3c:e7:7d:0b:19:9b:ad:
24:44:45:45:ef:31:14:ec:56:e4:05:b1:35:bc:a1:
79:69:d0:5e:f8:c3:f0:47:85:5d:3c:35:26:76:91:
56:81:a0:6b:67:8e:29:6e:cc:55:96:cd:93:f7:cb:
49:87:0c:a6:5c:e1:2b:6e:43:92:11:ee:db:a7:99:
b9:9a:35:cd:b3:cc:91:3e:36:ae:2b:27:df:6b:93:
34:e7:76:12:a9:6b:a0:68:ea:b8:6d:60:1f:6d:ac:
ca:7a:8b:94:d7:6e:05:41:01:e6:d4:18:25:a1:35:
80:e9:fc:c4:85:9e:00:bf:df:ee:0e:59:a4:66:5d:
e1:2e:bc:16:ec:c6:b9:21:8b:cb:89:9b:5e:4f:8c:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:C8:11:59:1F:A9:24:11:47:E7:D0:D6:34:98:DF:9E:D2:10:6B
X509v3 Authority Key Identifier:
keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c6:80:60:8b:77:a0:a8:30:72:d9:86:04:d6:bf:a0:bd:b4:
43:9c:e3:4b:9b:f2:a1:67:6a:e5:a4:40:25:e7:ce:62:c0:31:
59:fe:d5:43:66:5c:3b:a7:56:b8:52:f5:84:8d:7d:bd:df:6e:
17:12:33:ff:fc:ec:7c:bd:5e:87:03:f8:d9:36:66:ef:1f:7d:
5a:5b:b5:37:51:14:89:7a:a1:78:b4:fb:23:7c:58:86:07:f8:
ec:07:6c:ce:37:74:a3:a9:64:b8:af:26:68:f8:3e:ad:e2:fd:
15:4b:75:67:49:6e:42:75:9d:6e:3b:3c:0c:ef:6f:e6:b3:35:
09:bf:a7:e5:28:1c:cf:c4:7c:80:fa:31:56:5c:b8:82:c4:98:
fa:04:39:a6:7c:20:ec:c6:c4:0c:58:8a:c3:f8:c5:be:95:74:
7f:fe:30:90:a1:c5:66:56:2c:24:92:24:0b:f1:08:d1:6c:0b:
9a:c5:30:10:da:80:9e:cf:ae:1d:fd:de:15:d2:80:2f:f0:69:
7d:f2:f3:f5:95:08:ba:63:ee:e0:3f:6f:f9:e7:0a:be:a8:e0:
74:0e:45:2d:0f:b1:31:1a:7e:ee:87:ed:be:76:57:2a:97:92:
8a:d3:f0:db:0a:31:e2:03:dc:89:de:03:59:2c:3b:51:3d:bd:
1b:b0:cf:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPRzaNA47b1wwkvaz1ansMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOTNiNzRhNDY4NWMxYzE0YWI5ZTE5MjE3YWFiMTQxNjM0
MTExZDYwHhcNMjUwODA0MDQwMDQxWhcNMjUwODA1MDQwMDQxWjAzMTEwLwYDVQQD
EyhhYjVmYzgxMTU5MWZhOTI0MTE0N2U3ZDBkNjM0OThkZjllZDIxMDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnblWuBK7Rcx7Cbve3wjofYxf3UGU
AAD7CbLiq2hIFs+IrU/yBeYSepzN83kI7YEjUzbgP+meq7bno6gyBQSlimdsi7oN
8uMLYIaNCZBaOBF2FwUvzh+XBBMAmMwPFkc2L4KElRLGaWxm1kE8u0u7qzznfQsZ
m60kREVF7zEU7FbkBbE1vKF5adBe+MPwR4VdPDUmdpFWgaBrZ44pbsxVls2T98tJ
hwymXOErbkOSEe7bp5m5mjXNs8yRPjauKyffa5M053YSqWugaOq4bWAfbazKeouU
124FQQHm1BgloTWA6fzEhZ4Av9/uDlmkZl3hLrwW7Ma5IYvLiZteT4zxLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtfyBFZH6kkEUfn0NY0mN+e0hBrMB8GA1UdIwQY
MBaAFLuTt0pGhcHBSrnhkheqsUFjQRHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZTkwODEtZjY1MS00MWY1LWIzYTIt
MzcwNmIxZmNkNmNiLzEvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZTkwODEtZjY1MS00MWY1LWIzYTItMzcwNmIxZmNkNmNi
LzEvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsaAYIt3
oKgwctmGBNa/oL20Q5zjS5vyoWdq5aRAJefOYsAxWf7VQ2ZcO6dWuFL1hI19vd9u
FxIz//zsfL1ehwP42TZm7x99Wlu1N1EUiXqheLT7I3xYhgf47Adszjd0o6lkuK8m
aPg+reL9FUt1Z0luQnWdbjs8DO9v5rM1Cb+n5Sgcz8R8gPoxVly4gsSY+gQ5pnwg
7MbEDFiKw/jFvpV0f/4wkKHFZlYsJJIkC/EI0WwLmsUwENqAns+uHf3eFdKAL/Bp
ffLz9ZUIumPu4D9v+ecKvqjgdA5FLQ+xMRp+7oftvnZXKpeSitPw2wox4gPcid4D
WSw7UT29G7DPQw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:06 2025 by rpki-client