Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
File: SO3JpU4ccjtWqu330BVAxbNr2rY.mft (raw, json)
Hash identifier: VQUTbyvpQ1aa6QCJQkvuc9AlDh5wfWL/YjqoP52tiaw=
Subject key identifier: D1:D1:EC:36:62:E2:27:DF:BB:14:55:74:4E:38:94:C6:D6:32:F7:24
Authority key identifier: 48:ED:C9:A5:4E:1C:72:3B:56:AA:ED:F7:D0:15:40:C5:B3:6B:DA:B6
Certificate issuer: /CN=48edc9a54e1c723b56aaedf7d01540c5b36bdab6
Certificate serial: 019A0259B430A6F2BA31389F720E90FD5DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
Manifest number: D9
Signing time: Mon 20 Oct 2025 16:00:24 +0000
Manifest this update: Mon 20 Oct 2025 16:00:24 +0000
Manifest next update: Tue 21 Oct 2025 16:00:24 +0000
Files and hashes: 1: SO3JpU4ccjtWqu330BVAxbNr2rY.crl (hash: jYQhn97JTB9tYacegWpRZMoKBxciqmyc1r1MIY2Ab3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:b4:30:a6:f2:ba:31:38:9f:72:0e:90:fd:5d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48edc9a54e1c723b56aaedf7d01540c5b36bdab6
Validity
Not Before: Oct 20 16:00:24 2025 GMT
Not After : Oct 21 16:00:24 2025 GMT
Subject: CN=d1d1ec3662e227dfbb1455744e3894c6d632f724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:e9:27:8c:a9:16:9f:bf:8a:01:6e:b1:30:
72:c6:6a:4d:84:cb:04:8e:6c:b3:98:a0:d0:f4:ce:
c6:10:8e:ea:b7:ca:6c:ae:f2:a3:9b:bd:ad:c2:98:
91:f9:7f:e7:81:61:02:6f:5d:d7:36:3c:f6:38:73:
f2:2c:02:e9:59:5f:6a:5b:d2:6e:3f:11:d6:a8:2f:
2b:23:f0:df:16:9b:a9:0e:f6:e5:11:8b:12:b2:63:
0b:ce:22:10:19:56:2b:b3:7b:f8:32:1f:99:3c:92:
d7:1c:a2:fb:e0:e9:bc:3f:b9:b5:9a:7a:5d:04:19:
1e:06:bd:2f:d6:48:48:68:2e:1d:b3:c4:57:a4:26:
a5:78:7f:fa:e1:ba:49:0f:e2:de:ab:e3:a9:4c:b7:
38:12:01:e3:5b:ac:f4:47:46:27:a7:56:af:cc:ff:
93:f8:d8:61:94:aa:c0:dd:a9:b3:84:e2:8d:95:28:
59:bb:29:27:81:26:1d:fa:07:3c:ec:41:1f:41:9c:
23:71:50:55:c8:9d:68:88:96:47:4d:a3:17:ed:e8:
db:6c:2f:ca:a2:06:cf:11:db:89:ea:61:2a:e0:82:
45:26:cc:87:19:c4:d3:ae:05:84:cc:a3:45:c7:7f:
ca:2f:9c:8f:c3:30:36:fc:a5:73:57:32:83:ce:81:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D1:EC:36:62:E2:27:DF:BB:14:55:74:4E:38:94:C6:D6:32:F7:24
X509v3 Authority Key Identifier:
keyid:48:ED:C9:A5:4E:1C:72:3B:56:AA:ED:F7:D0:15:40:C5:B3:6B:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8d:b6:f4:79:15:04:99:eb:80:d7:5a:a5:49:69:d9:cc:5a:
0a:c1:8f:0e:a7:81:39:57:d8:c7:0b:a0:da:06:c3:f6:9b:00:
af:b3:e5:ef:a2:dd:69:04:de:30:7a:ad:79:1f:8b:1c:5e:6e:
d3:ce:d6:bc:cf:3f:61:54:1e:a5:bd:9c:b2:86:a1:56:ca:ec:
5c:21:38:18:d6:89:53:0a:b7:78:be:7a:7e:c1:5f:b5:e0:7f:
db:d7:d9:c2:2e:7d:b7:5c:ac:9f:11:06:99:10:70:8c:d2:a6:
ef:1e:3e:e1:b2:9b:14:59:a9:80:6c:8d:f0:92:ae:ba:57:fd:
2d:ba:ce:e5:58:4b:fd:14:aa:51:84:cb:53:38:10:09:a5:cc:
0a:13:59:76:14:92:7a:8d:e0:29:66:7e:d7:04:5e:57:86:f2:
f8:02:76:22:e1:dd:bb:9f:23:6a:08:dd:cd:0a:d9:04:b5:8e:
8c:f1:16:14:f3:d4:1a:d9:7d:b4:ac:d8:3b:67:b0:55:b1:75:
ed:f7:f9:5b:5a:50:e9:77:1f:c9:d4:35:37:60:d9:8d:5a:be:
04:59:74:f1:d0:65:1c:3f:20:46:8e:dd:15:9a:8b:e2:dd:52:
8a:30:25:3f:8c:f5:b5:8d:48:c8:94:e3:25:99:b1:ca:63:7d:
05:5c:37:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCWbQwpvK6MTifcg6Q/V3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZWRjOWE1NGUxYzcyM2I1NmFhZWRmN2QwMTU0MGM1YjM2
YmRhYjYwHhcNMjUxMDIwMTYwMDI0WhcNMjUxMDIxMTYwMDI0WjAzMTEwLwYDVQQD
EyhkMWQxZWMzNjYyZTIyN2RmYmIxNDU1NzQ0ZTM4OTRjNmQ2MzJmNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoLpJ4ypFp+/igFusTByxmpNhMsE
jmyzmKDQ9M7GEI7qt8psrvKjm72twpiR+X/ngWECb13XNjz2OHPyLALpWV9qW9Ju
PxHWqC8rI/DfFpupDvblEYsSsmMLziIQGVYrs3v4Mh+ZPJLXHKL74Om8P7m1mnpd
BBkeBr0v1khIaC4ds8RXpCaleH/64bpJD+Leq+OpTLc4EgHjW6z0R0Ynp1avzP+T
+NhhlKrA3amzhOKNlShZuykngSYd+gc87EEfQZwjcVBVyJ1oiJZHTaMX7ejbbC/K
ogbPEduJ6mEq4IJFJsyHGcTTrgWEzKNFx3/KL5yPwzA2/KVzVzKDzoGeDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHR7DZi4iffuxRVdE44lMbWMvckMB8GA1UdIwQY
MBaAFEjtyaVOHHI7Vqrt99AVQMWza9q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU08zSnBVNGNjanRXcXUzMzBCVkF4Yk5yMnJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83ODBlZjYtNTNkOC00NzU0LWE4ZTMt
YzJhNmFlMGJmNmJlLzEvU08zSnBVNGNjanRXcXUzMzBCVkF4Yk5yMnJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS83ODBlZjYtNTNkOC00NzU0LWE4ZTMtYzJhNmFlMGJmNmJl
LzEvU08zSnBVNGNjanRXcXUzMzBCVkF4Yk5yMnJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJo229HkV
BJnrgNdapUlp2cxaCsGPDqeBOVfYxwug2gbD9psAr7Pl76LdaQTeMHqteR+LHF5u
087WvM8/YVQepb2csoahVsrsXCE4GNaJUwq3eL56fsFfteB/29fZwi59t1ysnxEG
mRBwjNKm7x4+4bKbFFmpgGyN8JKuulf9LbrO5VhL/RSqUYTLUzgQCaXMChNZdhSS
eo3gKWZ+1wReV4by+AJ2IuHdu58jagjdzQrZBLWOjPEWFPPUGtl9tKzYO2ewVbF1
7ff5W1pQ6XcfydQ1N2DZjVq+BFl08dBlHD8gRo7dFZqL4t1SijAlP4z1tY1IyJTj
JZmxymN9BVw3WQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:33 2025 by rpki-client