Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File: 1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier: Go82fRUe5vazAbvoPNmB7gh9XhEhEvlczD7TnnxFzc8=
Subject key identifier: 47:A9:CC:9E:A1:37:0E:A3:16:8A:02:1D:D1:48:60:00:99:C5:D8:41
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer: /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial: 019A4EF4888B3C12862D3EE8C9838F025A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number: 0C18
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: ZZbo1r66IHeLI8S6tb7+xdFCjwHcxert/OPNTF3sXEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:88:8b:3c:12:86:2d:3e:e8:c9:83:8f:02:5a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=47a9cc9ea1370ea3168a021dd148600099c5d841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:8b:3d:87:dd:45:45:2b:e9:8e:b3:32:1b:
ae:25:dd:b9:21:b0:d5:16:b4:01:e9:d4:f9:e3:52:
93:ec:fa:4a:e3:df:ab:9e:64:7e:b1:cc:67:e0:29:
1b:42:54:03:e7:3b:e8:6f:65:db:fd:da:63:cc:51:
c8:ed:dc:ef:25:a4:02:ac:62:31:49:51:de:73:4e:
78:20:60:b0:63:86:08:d3:62:1d:a6:2a:3b:49:9e:
7c:c3:f9:b5:9b:54:e6:77:f6:80:51:e7:12:74:39:
e2:f0:95:ff:ea:98:ff:0f:25:2b:f5:46:e7:d5:ef:
9c:31:2c:b7:ff:bd:36:31:79:db:3a:58:18:98:c8:
69:0e:fa:49:7e:b7:ae:f6:89:38:7b:1f:e7:20:d2:
6b:a0:88:eb:b5:4f:55:b9:34:cc:ba:e9:a9:ab:99:
2a:e0:27:69:35:77:e9:78:b6:10:1e:ae:99:9f:54:
cd:c2:93:3a:f6:7f:29:5a:8a:dc:94:4b:28:d6:b6:
53:b3:a2:5b:08:af:80:5b:78:f9:38:53:5e:da:b3:
0d:1f:51:ab:30:c9:d9:f7:2c:5f:5c:fb:80:25:3f:
e6:b9:47:df:99:22:6e:f2:2a:9d:ad:9c:ec:ac:85:
0f:09:7f:fb:5a:0a:95:4e:12:6e:d8:ad:50:d2:cf:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A9:CC:9E:A1:37:0E:A3:16:8A:02:1D:D1:48:60:00:99:C5:D8:41
X509v3 Authority Key Identifier:
keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:21:78:70:51:e4:af:1b:4e:3c:a7:f7:42:6e:c8:8b:4b:d9:
85:4e:e8:4b:d9:ab:53:8f:78:7b:a2:29:3f:14:8a:67:23:db:
52:a6:16:2d:23:07:a1:8d:94:b9:bc:f4:e4:65:15:de:08:b9:
a8:5f:1d:a0:bd:a3:ad:b7:21:3f:10:62:78:62:c2:4c:75:f2:
e8:04:37:3e:05:f7:58:02:3b:00:e0:4d:1d:5b:11:74:0a:dd:
fb:17:21:83:8f:07:e9:00:16:18:2c:f2:90:a2:3c:84:94:4e:
19:f0:c0:9f:46:68:c6:dc:9e:7b:1b:75:04:97:01:0d:2a:77:
ef:29:ce:f4:e0:24:36:d9:30:b6:bf:2d:54:c6:14:34:12:ed:
0a:59:72:31:cb:c4:29:0c:1f:0a:ec:c9:1a:18:51:1b:76:d6:
cc:a1:14:15:29:36:5e:29:22:9e:57:ec:74:03:67:d6:3f:bb:
4d:be:99:fa:6f:19:22:4a:48:c8:33:0b:e7:53:53:34:64:11:
80:04:6d:78:cd:51:6b:63:36:42:00:05:f5:19:e9:d2:55:d1:
c8:38:53:6d:6b:a7:8d:89:93:e0:27:99:46:d4:fd:0c:64:65:
21:f3:21:09:fc:06:b5:5d:15:e2:af:b5:e1:2e:de:a7:a8:31:
c2:d4:74:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9IiLPBKGLT7oyYOPAlpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTBkMWNhOGMxOTYxYzBiMTEyOGFhNTViODU3OTZiMTIw
NDBhOTUwHhcNMjUxMTA0MTMwMDM5WhcNMjUxMTA1MTMwMDM5WjAzMTEwLwYDVQQD
Eyg0N2E5Y2M5ZWExMzcwZWEzMTY4YTAyMWRkMTQ4NjAwMDk5YzVkODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2yLPYfdRUUr6Y6zMhuuJd25IbDV
FrQB6dT541KT7PpK49+rnmR+scxn4CkbQlQD5zvob2Xb/dpjzFHI7dzvJaQCrGIx
SVHec054IGCwY4YI02Idpio7SZ58w/m1m1Tmd/aAUecSdDni8JX/6pj/DyUr9Ubn
1e+cMSy3/702MXnbOlgYmMhpDvpJfreu9ok4ex/nINJroIjrtU9VuTTMuumpq5kq
4CdpNXfpeLYQHq6Zn1TNwpM69n8pWorclEso1rZTs6JbCK+AW3j5OFNe2rMNH1Gr
MMnZ9yxfXPuAJT/muUffmSJu8iqdrZzsrIUPCX/7WgqVThJu2K1Q0s/rKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEepzJ6hNw6jFooCHdFIYACZxdhBMB8GA1UdIwQY
MBaAFNbg0cqMGWHAsRKKpVuFeWsSBAqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mZGUyNmItZTJhZi00Y2VmLThkYzkt
NDdjZDQ2NDE5MmU3LzEvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mZGUyNmItZTJhZi00Y2VmLThkYzktNDdjZDQ2NDE5MmU3
LzEvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCF4cFHk
rxtOPKf3Qm7Ii0vZhU7oS9mrU494e6IpPxSKZyPbUqYWLSMHoY2Uubz05GUV3gi5
qF8doL2jrbchPxBieGLCTHXy6AQ3PgX3WAI7AOBNHVsRdArd+xchg48H6QAWGCzy
kKI8hJROGfDAn0Zoxtyeext1BJcBDSp37ynO9OAkNtkwtr8tVMYUNBLtCllyMcvE
KQwfCuzJGhhRG3bWzKEUFSk2XikinlfsdANn1j+7Tb6Z+m8ZIkpIyDML51NTNGQR
gARteM1Ra2M2QgAF9Rnp0lXRyDhTbWunjYmT4CeZRtT9DGRlIfMhCfwGtV0V4q+1
4S7ep6gxwtR0Dg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:37 2025 by rpki-client