Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier: wbwxCvhx10wovBojbsLb1spBC97uOzZesS4B9Zzi4dM=
Subject key identifier: BF:D0:32:80:98:FA:81:6F:5C:1C:A3:81:94:C7:DD:1E:D4:71:EC:FB
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial: 0199FBEB4B2A254A71653883378946F305CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number: 0DB2
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: N9hUeAy2NpluQGtXlJrVt3AGHJKPnbcQ6WvEx7mbv0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4b:2a:25:4a:71:65:38:83:37:89:46:f3:05:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=bfd0328098fa816f5c1ca38194c7dd1ed471ecfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:89:4d:2f:c9:b9:6f:68:3f:68:d3:d1:6e:
7e:a5:de:f8:67:c6:32:36:b8:26:bd:4c:a0:87:c2:
45:03:21:fa:00:63:45:2b:8d:18:29:97:a9:83:9a:
13:45:09:bd:a1:76:e6:60:64:d6:b8:89:f2:5e:15:
63:f6:64:81:26:59:57:67:59:d4:3e:62:6a:9a:d2:
e5:2e:e8:4a:cb:17:d6:d3:69:b9:23:9c:06:fc:5e:
5d:14:11:ff:e8:53:0d:1f:6c:28:c3:a8:72:3b:94:
d7:8a:39:3c:79:c3:ea:d8:3a:c8:84:dd:69:ca:4b:
bb:d4:3e:9a:a5:aa:00:e6:9a:60:6a:b9:de:7d:5d:
17:4f:0e:06:e3:69:eb:95:f3:e0:a5:99:c9:5d:2d:
a4:af:8a:5c:1c:96:69:6b:2f:40:57:c9:b2:f7:84:
0d:3e:9b:6c:49:88:2a:1d:cb:73:8e:17:bf:5e:21:
86:70:0b:1d:65:b8:b6:a6:ec:78:3a:9e:e9:f2:9e:
aa:16:b6:3b:e3:e8:34:78:71:cb:54:f5:37:6f:ed:
03:c3:26:42:88:53:5c:66:cf:d8:de:8b:19:bd:b1:
bd:b1:1f:83:f6:be:7e:89:5b:70:bc:14:2e:2c:28:
2a:e2:19:95:1e:3d:39:af:49:eb:f7:dd:d9:d1:e7:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D0:32:80:98:FA:81:6F:5C:1C:A3:81:94:C7:DD:1E:D4:71:EC:FB
X509v3 Authority Key Identifier:
keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:20:06:f5:49:6f:c7:57:03:a6:6e:17:4d:71:e4:4c:34:58:
28:6d:9a:f3:ed:fd:9a:d1:2d:9f:c7:35:4f:a9:56:fd:67:47:
56:98:01:77:8c:f7:78:43:e1:27:e6:eb:f5:45:8d:55:6a:45:
40:04:e1:c6:e2:42:a7:14:97:fa:5e:ca:ed:8b:7b:bd:cd:f2:
03:49:9c:e3:4b:cc:1e:8d:fe:83:08:9a:ff:14:c8:f9:f2:3d:
3a:94:8c:a5:6b:15:e3:2e:5d:16:31:e7:7b:64:de:5c:8f:9a:
e4:f3:19:bd:d0:3d:f7:f8:c5:6f:f1:29:7c:6f:07:6a:2a:0b:
9d:6b:d3:40:d3:3b:97:d2:52:4c:05:06:9a:c4:ab:8f:a8:57:
ee:66:a2:1c:9d:bd:d6:54:5f:87:67:85:4e:6d:37:f2:91:bc:
4a:eb:16:05:c5:1e:1e:e0:58:b2:5a:bb:d5:0c:4b:ab:d9:50:
a0:96:25:3e:81:38:f2:59:56:92:fa:c7:3e:20:fe:a4:6f:2b:
68:bb:b3:de:e9:73:75:f7:d5:7d:94:ac:9a:8c:53:85:06:96:
a3:29:6d:0e:37:7e:e8:eb:72:eb:34:4a:7c:32:38:99:27:f8:
5c:1e:d0:fb:c1:ff:e0:0d:09:a1:50:fa:73:24:5f:fd:1d:52:
b5:6b:77:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn760sqJUpxZTiDN4lG8wXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODhjZGFlZDI5NmIzMzBmM2RkZWQ0MDY4ZDU1MzI0YjM1
MDNlMTEwHhcNMjUxMDE5MTAwMjA1WhcNMjUxMDIwMTAwMjA1WjAzMTEwLwYDVQQD
EyhiZmQwMzI4MDk4ZmE4MTZmNWMxY2EzODE5NGM3ZGQxZWQ0NzFlY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr2JTS/JuW9oP2jT0W5+pd74Z8Yy
NrgmvUygh8JFAyH6AGNFK40YKZepg5oTRQm9oXbmYGTWuInyXhVj9mSBJllXZ1nU
PmJqmtLlLuhKyxfW02m5I5wG/F5dFBH/6FMNH2wow6hyO5TXijk8ecPq2DrIhN1p
yku71D6apaoA5ppgarnefV0XTw4G42nrlfPgpZnJXS2kr4pcHJZpay9AV8my94QN
PptsSYgqHctzjhe/XiGGcAsdZbi2pux4Op7p8p6qFrY74+g0eHHLVPU3b+0DwyZC
iFNcZs/Y3osZvbG9sR+D9r5+iVtwvBQuLCgq4hmVHj05r0nr993Z0efGuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/QMoCY+oFvXByjgZTH3R7Ucez7MB8GA1UdIwQY
MBaAFHuIza7SlrMw893tQGjVUySzUD4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83Yzk5ZGUtMDJiMS00NmVmLWI5YjEt
ODlhNWYxMmZhMDE5LzEvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy83Yzk5ZGUtMDJiMS00NmVmLWI5YjEtODlhNWYxMmZhMDE5
LzEvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSAG9Ulv
x1cDpm4XTXHkTDRYKG2a8+39mtEtn8c1T6lW/WdHVpgBd4z3eEPhJ+br9UWNVWpF
QAThxuJCpxSX+l7K7Yt7vc3yA0mc40vMHo3+gwia/xTI+fI9OpSMpWsV4y5dFjHn
e2TeXI+a5PMZvdA99/jFb/EpfG8HaioLnWvTQNM7l9JSTAUGmsSrj6hX7maiHJ29
1lRfh2eFTm038pG8SusWBcUeHuBYslq71QxLq9lQoJYlPoE48llWkvrHPiD+pG8r
aLuz3ulzdffVfZSsmoxThQaWoyltDjd+6Oty6zRKfDI4mSf4XB7Q+8H/4A0JoVD6
cyRf/R1StWt33g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:33 2025 by rpki-client