Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File: uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier: 1RD4uflUF3g3nfQjDxuMJt2wMkzresVnV2gJVzZWduM=
Subject key identifier: DD:9A:38:AD:16:4D:E0:DC:0D:AE:36:18:DF:27:0F:57:2E:3D:BF:40
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial: 019A4F62C2517BCFC1F9FDB396CD307C923A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 15:01:03 +0000
Manifest this update: Tue 04 Nov 2025 15:01:03 +0000
Manifest next update: Wed 05 Nov 2025 15:01:03 +0000
Files and hashes: 1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: ySIrDcNSHkB58qnBac+XRCDC4tulNsThPQSKAf9knKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c2:51:7b:cf:c1:f9:fd:b3:96:cd:30:7c:92:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Validity
Not Before: Nov 4 15:01:03 2025 GMT
Not After : Nov 5 15:01:03 2025 GMT
Subject: CN=dd9a38ad164de0dc0dae3618df270f572e3dbf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:92:98:6d:f5:31:cd:0a:cc:31:d3:ac:12:
b3:1d:7a:0f:55:6b:15:7f:d3:a4:77:82:d5:8b:90:
b1:92:57:19:ca:71:63:48:10:45:54:84:8d:54:b5:
63:1d:4d:a5:63:d5:8a:dd:f0:57:f6:fd:50:a2:53:
dd:ce:5a:62:96:70:6c:4b:a7:23:97:8c:da:98:8f:
f6:7a:49:46:f2:1e:df:87:50:40:78:5c:c6:0f:fe:
33:d4:34:12:21:08:39:90:20:6a:61:96:4c:8c:d3:
ba:21:20:ae:7f:12:a4:38:66:b8:ac:e8:bd:3a:1a:
01:16:e1:e6:a5:9f:05:2f:cf:6c:d4:a5:7f:b7:1d:
b9:a2:14:ac:c4:4c:60:ca:8f:92:96:62:e1:da:07:
56:e0:06:66:3e:a5:56:cf:93:48:3b:cc:31:23:e7:
b9:b6:89:df:7f:43:9a:92:2a:b5:73:ee:5e:06:15:
41:7d:1e:14:02:9b:ee:31:6b:46:fa:3b:98:89:9e:
6a:5a:41:df:61:a1:1f:5c:1c:45:72:47:5f:77:7b:
1e:5c:26:86:ff:b0:0d:56:db:de:06:57:d3:54:56:
a1:c7:1e:73:55:4e:58:25:b4:33:88:d0:db:4c:6f:
f9:2d:c9:75:af:60:bb:4e:cd:f9:94:5c:dc:6c:11:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:38:AD:16:4D:E0:DC:0D:AE:36:18:DF:27:0F:57:2E:3D:BF:40
X509v3 Authority Key Identifier:
keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:24:34:7c:61:05:bf:cc:11:fe:52:aa:40:6c:65:ae:27:a4:
25:55:fb:2c:83:f6:43:aa:ca:a2:89:1b:96:37:51:da:81:e4:
63:7f:b1:b5:15:1d:e1:d8:38:da:da:33:88:57:32:bf:73:f1:
b6:41:6c:71:c2:20:ee:23:d5:f0:ff:8f:9f:a6:4d:7d:d5:d1:
a0:23:09:1e:83:c9:b0:77:a0:48:90:21:01:a9:5c:9e:4f:88:
b9:79:8d:e2:c3:2d:e6:37:11:72:dc:ad:70:b8:56:f7:8f:c5:
27:f6:54:f1:89:47:c1:8d:67:99:b7:5b:6e:f6:7a:2e:8b:72:
0d:72:04:bf:fa:21:1d:45:63:ad:f4:83:74:9a:82:46:88:42:
fb:6c:c7:cd:11:25:03:f4:08:e8:43:96:76:2c:89:e3:fd:19:
d6:c4:42:fe:a4:80:06:33:f4:b1:58:f1:5c:c9:d0:b6:29:68:
3a:15:47:cf:3e:27:90:6f:91:85:eb:ee:b7:1d:82:84:a5:21:
17:85:3b:c7:f4:c3:9b:6a:47:13:b7:2b:67:76:99:50:69:8e:
79:4e:81:cd:90:73:fd:1a:c9:84:9e:69:c3:28:95:ec:d1:80:
1c:86:80:bd:60:6f:ae:24:91:19:c2:af:cb:0e:ac:43:c3:90:
78:ab:68:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYsJRe8/B+f2zls0wfJI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Nzg1M2RkNTc3M2YyYTZiMDcxODc5ZjViOWViYjBlNmY0
ZTdkYWEwHhcNMjUxMTA0MTUwMTAzWhcNMjUxMTA1MTUwMTAzWjAzMTEwLwYDVQQD
EyhkZDlhMzhhZDE2NGRlMGRjMGRhZTM2MThkZjI3MGY1NzJlM2RiZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DiSmG31Mc0KzDHTrBKzHXoPVWsV
f9Okd4LVi5CxklcZynFjSBBFVISNVLVjHU2lY9WK3fBX9v1QolPdzlpilnBsS6cj
l4zamI/2eklG8h7fh1BAeFzGD/4z1DQSIQg5kCBqYZZMjNO6ISCufxKkOGa4rOi9
OhoBFuHmpZ8FL89s1KV/tx25ohSsxExgyo+SlmLh2gdW4AZmPqVWz5NIO8wxI+e5
tonff0Oakiq1c+5eBhVBfR4UApvuMWtG+juYiZ5qWkHfYaEfXBxFckdfd3seXCaG
/7ANVtveBlfTVFahxx5zVU5YJbQziNDbTG/5Lcl1r2C7Ts35lFzcbBH7JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2aOK0WTeDcDa42GN8nD1cuPb9AMB8GA1UdIwQY
MBaAFLl4U91Xc/KmsHGHn1ueuw5vTn2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgt
N2ZmODQ0M2Q5YzIxLzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgtN2ZmODQ0M2Q5YzIx
LzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyQ0fGEF
v8wR/lKqQGxlriekJVX7LIP2Q6rKookbljdR2oHkY3+xtRUd4dg42toziFcyv3Px
tkFsccIg7iPV8P+Pn6ZNfdXRoCMJHoPJsHegSJAhAalcnk+IuXmN4sMt5jcRctyt
cLhW94/FJ/ZU8YlHwY1nmbdbbvZ6LotyDXIEv/ohHUVjrfSDdJqCRohC+2zHzREl
A/QI6EOWdiyJ4/0Z1sRC/qSABjP0sVjxXMnQtiloOhVHzz4nkG+Rhevutx2ChKUh
F4U7x/TDm2pHE7crZ3aZUGmOeU6BzZBz/RrJhJ5pwyiV7NGAHIaAvWBvriSRGcKv
yw6sQ8OQeKtotw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:51 2025 by rpki-client