Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
File: clOCbDGl92CXvNwqL2UZiKE2flM.mft (raw, json)
Hash identifier: 9ypQLUw6C38lN0ANzSovnS+jdDrdtW2EZzHNnrKy7Bs=
Subject key identifier: C1:CC:A6:0E:09:21:69:16:BC:21:7E:A4:6B:33:9A:4D:F2:DB:37:89
Authority key identifier: 72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
Certificate issuer: /CN=7253826c31a5f76097bcdc2a2f651988a1367e53
Certificate serial: 0199FC58CC83E7F61AFC001084F152EAC328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
Manifest number: 09BA
Signing time: Sun 19 Oct 2025 12:01:41 +0000
Manifest this update: Sun 19 Oct 2025 12:01:41 +0000
Manifest next update: Mon 20 Oct 2025 12:01:41 +0000
Files and hashes: 1: clOCbDGl92CXvNwqL2UZiKE2flM.crl (hash: wb7o5HMQLvJEy+XA3SRI3vJZcIggznoXveG2MsLoeRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cc:83:e7:f6:1a:fc:00:10:84:f1:52:ea:c3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7253826c31a5f76097bcdc2a2f651988a1367e53
Validity
Not Before: Oct 19 12:01:41 2025 GMT
Not After : Oct 20 12:01:41 2025 GMT
Subject: CN=c1cca60e09216916bc217ea46b339a4df2db3789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:db:e3:ad:1d:49:e3:11:37:a4:94:4f:11:
a0:39:3a:c3:dc:e1:a4:1a:35:f1:e3:80:d5:f9:55:
b9:2b:da:ee:1b:a6:9a:32:42:18:d9:bc:45:f9:d6:
46:de:d9:e3:03:a2:26:58:7e:14:6a:f7:77:f7:79:
1e:5d:89:d1:c1:2b:20:69:60:ed:3a:a2:4a:95:fe:
30:79:97:7c:c5:de:31:e4:d9:8d:c9:63:da:ed:ec:
4c:b0:29:5b:91:df:54:16:c4:21:3f:e4:4f:0a:b9:
1d:39:39:8a:ca:51:76:18:60:ef:bb:7f:38:e0:89:
f7:2f:e3:05:f0:ee:d7:04:ca:20:40:21:f2:8a:1c:
80:34:17:18:c2:c7:96:00:3d:8f:40:15:18:79:dc:
98:6b:8c:e2:b1:61:d8:27:a9:4c:d5:ec:85:e7:ab:
9b:fa:ab:6e:6b:e2:1d:94:a5:df:cb:b3:51:49:2d:
55:56:44:bb:49:d6:df:f1:72:68:a7:36:98:4f:b9:
70:fe:9d:a6:6f:15:10:e9:d1:fb:ac:32:68:e5:8e:
0c:cb:9c:ac:9f:45:3b:56:40:a9:cc:3f:79:8b:67:
41:14:3e:65:7b:fc:c8:8f:9a:18:e1:19:9d:ad:de:
60:96:ff:57:9e:7c:1b:9d:fc:3e:ce:e3:3c:2e:8a:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CC:A6:0E:09:21:69:16:BC:21:7E:A4:6B:33:9A:4D:F2:DB:37:89
X509v3 Authority Key Identifier:
keyid:72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6f:ca:4b:09:5f:47:aa:8f:e4:02:f1:8e:82:17:3e:13:2e:
77:95:fe:95:d0:51:4d:b2:7d:c9:e3:d6:f5:36:2d:e7:a9:ec:
5d:aa:30:91:a0:f3:72:65:d6:8a:c6:68:36:cb:05:43:8e:95:
bd:52:03:4c:84:7b:3e:f0:c3:77:4f:cc:1e:f4:88:1c:1f:e5:
69:49:fa:14:29:42:c6:a8:e6:91:15:1b:ca:76:38:43:76:d0:
85:38:cd:fd:44:b2:88:56:d2:52:f5:aa:c7:b9:dd:7f:ad:16:
32:47:b7:16:a8:06:bf:3c:98:aa:2a:b0:d1:cf:1c:b7:f1:84:
f4:55:6e:59:2e:0e:14:e7:2e:3f:b3:ca:f3:71:20:ba:8e:26:
e0:a1:75:81:96:16:6c:ba:08:9c:be:9d:64:4d:db:90:e3:b9:
3b:fd:4b:27:14:a1:3d:c3:65:11:75:b7:56:2f:c5:03:4b:b3:
48:79:16:ea:21:fb:a8:28:5a:5a:f5:2d:63:8c:26:b2:ab:79:
63:68:4a:18:a1:17:90:d7:09:2f:6a:c0:1e:96:7d:8a:04:e0:
ea:b7:c5:95:ee:ce:ff:49:03:14:10:a9:a6:d0:d9:2b:92:6c:
0e:e2:05:cf:bb:b3:31:57:7a:69:7f:fb:ab:45:df:d8:66:8d:
0a:91:89:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WMyD5/Ya/AAQhPFS6sMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNTM4MjZjMzFhNWY3NjA5N2JjZGMyYTJmNjUxOTg4YTEz
NjdlNTMwHhcNMjUxMDE5MTIwMTQxWhcNMjUxMDIwMTIwMTQxWjAzMTEwLwYDVQQD
EyhjMWNjYTYwZTA5MjE2OTE2YmMyMTdlYTQ2YjMzOWE0ZGYyZGIzNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yXb460dSeMRN6SUTxGgOTrD3OGk
GjXx44DV+VW5K9ruG6aaMkIY2bxF+dZG3tnjA6ImWH4Uavd393keXYnRwSsgaWDt
OqJKlf4weZd8xd4x5NmNyWPa7exMsClbkd9UFsQhP+RPCrkdOTmKylF2GGDvu384
4In3L+MF8O7XBMogQCHyihyANBcYwseWAD2PQBUYedyYa4zisWHYJ6lM1eyF56ub
+qtua+IdlKXfy7NRSS1VVkS7Sdbf8XJopzaYT7lw/p2mbxUQ6dH7rDJo5Y4My5ys
n0U7VkCpzD95i2dBFD5le/zIj5oY4Rmdrd5glv9Xnnwbnfw+zuM8Loq8awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHMpg4JIWkWvCF+pGszmk3y2zeJMB8GA1UdIwQY
MBaAFHJTgmwxpfdgl7zcKi9lGYihNn5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2xPQ2JER2w5MkNYdk53cUwyVVppS0UyZmxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83YTRhNDItN2RjNS00MGMwLTgwNGIt
ZjNmNTFjMTA3MGI5LzEvY2xPQ2JER2w5MkNYdk53cUwyVVppS0UyZmxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83YTRhNDItN2RjNS00MGMwLTgwNGItZjNmNTFjMTA3MGI5
LzEvY2xPQ2JER2w5MkNYdk53cUwyVVppS0UyZmxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2/KSwlf
R6qP5ALxjoIXPhMud5X+ldBRTbJ9yePW9TYt56nsXaowkaDzcmXWisZoNssFQ46V
vVIDTIR7PvDDd0/MHvSIHB/laUn6FClCxqjmkRUbynY4Q3bQhTjN/USyiFbSUvWq
x7ndf60WMke3FqgGvzyYqiqw0c8ct/GE9FVuWS4OFOcuP7PK83Eguo4m4KF1gZYW
bLoInL6dZE3bkOO5O/1LJxShPcNlEXW3Vi/FA0uzSHkW6iH7qChaWvUtY4wmsqt5
Y2hKGKEXkNcJL2rAHpZ9igTg6rfFle7O/0kDFBCpptDZK5JsDuIFz7uzMVd6aX/7
q0Xf2GaNCpGJoA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:40 2025 by rpki-client