Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File: N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier: L2OMVwj7ukRyyeA9krmtIVdN5HbpqI+88dbnPRYSdmc=
Subject key identifier: E8:97:60:53:65:BE:0E:5E:28:04:CF:EC:91:D2:8A:88:AD:60:DE:6A
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer: /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial: 0199FF22D0AABD0CC3F60DA0451F90BED30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 01:01:35 +0000
Manifest this update: Mon 20 Oct 2025 01:01:35 +0000
Manifest next update: Tue 21 Oct 2025 01:01:35 +0000
Files and hashes: 1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: rUISnkDpIgueS2t6l7rVKYh5urQgfDM00dVCVdcjr/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d0:aa:bd:0c:c3:f6:0d:a0:45:1f:90:be:d3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Validity
Not Before: Oct 20 01:01:35 2025 GMT
Not After : Oct 21 01:01:35 2025 GMT
Subject: CN=e897605365be0e5e2804cfec91d28a88ad60de6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:5e:21:74:a7:a5:77:e3:b2:4c:13:9b:dc:
95:57:2c:7e:70:5c:98:e4:32:ea:76:85:d4:d8:46:
82:f6:bf:0a:95:59:df:9e:f3:45:19:73:d2:3d:56:
56:59:2d:2f:49:6b:55:e2:74:d1:c7:c6:46:9c:94:
1c:4b:df:e0:01:4f:ed:64:aa:82:8c:fc:61:25:0c:
c5:4c:bf:a8:35:97:da:f9:e1:e9:31:3f:25:3d:0d:
aa:26:97:a7:8f:92:4e:f5:e7:09:cf:bd:e4:1d:45:
44:5b:1b:53:ae:be:21:7b:96:9f:9f:d1:51:d4:85:
0f:e3:e8:4f:be:97:ad:ad:d8:5d:6b:d8:33:37:b9:
a2:9e:b5:c3:ea:ff:72:b7:fa:6a:0c:e5:f8:7b:20:
05:5b:14:cd:b3:6e:21:f7:21:32:44:21:dd:df:58:
81:66:20:1d:6d:02:43:bd:93:4d:f3:3e:32:e6:12:
20:6d:5d:16:f1:64:ec:c3:93:6d:c4:94:2d:7f:e0:
84:b5:ca:e5:f3:20:fc:d0:47:74:97:5e:ac:55:13:
c5:70:50:dd:88:b8:16:d0:7b:65:13:e2:12:f4:ff:
41:4a:4f:f1:32:aa:83:6e:53:c6:b0:27:d6:a8:0f:
07:cf:14:24:fe:69:6a:46:e3:c1:8a:2b:1c:7a:da:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:97:60:53:65:BE:0E:5E:28:04:CF:EC:91:D2:8A:88:AD:60:DE:6A
X509v3 Authority Key Identifier:
keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ca:b4:a7:98:f4:12:fc:b0:b6:ad:fe:c1:29:7c:4d:58:27:
6e:9e:87:74:ac:cd:6f:bd:de:b9:66:c1:ce:31:56:5a:f3:cf:
55:db:77:d5:cf:3f:b3:71:9a:1b:54:d8:a5:86:3c:a8:9a:84:
84:54:ad:ba:e1:bb:d7:4c:d2:01:a5:1f:08:50:76:71:02:24:
ec:3d:17:05:3c:64:9e:9c:4f:79:de:85:77:b6:e8:33:e1:14:
a1:ba:6f:7b:1c:2d:bf:4b:4e:9a:ca:9c:0f:ad:14:7d:63:04:
d4:1d:03:f0:6e:f1:e4:33:33:3f:29:2e:0d:88:09:6b:7d:2e:
2d:e4:9a:00:8e:9a:b4:4b:7a:b2:45:12:a1:3a:72:c1:d3:dd:
f9:a8:af:9d:6e:d9:d3:e9:ec:7d:38:aa:17:fa:f2:d1:23:3c:
37:c7:57:14:66:b1:be:aa:fc:76:e0:df:aa:76:7d:a2:42:b1:
a5:c6:68:1b:a9:70:cc:26:52:05:74:57:23:c2:ce:29:b7:02:
e0:08:65:57:f6:6e:5d:18:33:7b:e3:14:15:dd:8c:5e:65:95:
5d:96:7b:a7:68:14:d6:8c:65:77:e5:0e:d7:1e:af:90:ba:2d:
c6:1c:62:26:63:f9:96:bb:a6:53:79:cb:f0:49:e8:64:2a:05:
1c:68:74:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/ItCqvQzD9g2gRR+QvtMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGYzYWQ5YmYxNDZjMDY5YjhkODNkNmQ1YWQ1NDgyMDQ1
ZWI3MGQwHhcNMjUxMDIwMDEwMTM1WhcNMjUxMDIxMDEwMTM1WjAzMTEwLwYDVQQD
EyhlODk3NjA1MzY1YmUwZTVlMjgwNGNmZWM5MWQyOGE4OGFkNjBkZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH1eIXSnpXfjskwTm9yVVyx+cFyY
5DLqdoXU2EaC9r8KlVnfnvNFGXPSPVZWWS0vSWtV4nTRx8ZGnJQcS9/gAU/tZKqC
jPxhJQzFTL+oNZfa+eHpMT8lPQ2qJpenj5JO9ecJz73kHUVEWxtTrr4he5afn9FR
1IUP4+hPvpetrdhda9gzN7minrXD6v9yt/pqDOX4eyAFWxTNs24h9yEyRCHd31iB
ZiAdbQJDvZNN8z4y5hIgbV0W8WTsw5NtxJQtf+CEtcrl8yD80Ed0l16sVRPFcFDd
iLgW0HtlE+IS9P9BSk/xMqqDblPGsCfWqA8HzxQk/mlqRuPBiiscetqMmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiXYFNlvg5eKATP7JHSioitYN5qMB8GA1UdIwQY
MBaAFDdPOtm/FGwGm42D1tWtVIIEXrcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjA4NjJiOFViQWFiallQVzFhMVVnZ1JldHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83M2JmYjItMDI4NS00ZjUzLTkyZjAt
ZmY4NzEzYThlMzE2LzEvTjA4NjJiOFViQWFiallQVzFhMVVnZ1JldHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83M2JmYjItMDI4NS00ZjUzLTkyZjAtZmY4NzEzYThlMzE2
LzEvTjA4NjJiOFViQWFiallQVzFhMVVnZ1JldHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMq0p5j0
Evywtq3+wSl8TVgnbp6HdKzNb73euWbBzjFWWvPPVdt31c8/s3GaG1TYpYY8qJqE
hFStuuG710zSAaUfCFB2cQIk7D0XBTxknpxPed6Fd7boM+EUobpvexwtv0tOmsqc
D60UfWME1B0D8G7x5DMzPykuDYgJa30uLeSaAI6atEt6skUSoTpywdPd+aivnW7Z
0+nsfTiqF/ry0SM8N8dXFGaxvqr8duDfqnZ9okKxpcZoG6lwzCZSBXRXI8LOKbcC
4AhlV/ZuXRgze+MUFd2MXmWVXZZ7p2gU1oxld+UO1x6vkLotxhxiJmP5lrumU3nL
8EnoZCoFHGh0qA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:34 2025 by rpki-client