Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
File: ClCzt81M47FFt1O_cXmpVczSkl0.mft (raw, json)
Hash identifier: TFHAp2wQ2KgfFxQSipaLaApzf44zG5SKNhndfd7v5FU=
Subject key identifier: 0A:B9:FC:BE:1A:99:72:B6:F8:8C:0D:87:07:F3:CC:B7:D0:94:04:62
Authority key identifier: 0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
Certificate issuer: /CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Certificate serial: 0199FB0F374B0DF9D4DE8B2EB8B48FD5096F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
Manifest number: 0730
Signing time: Sun 19 Oct 2025 06:01:42 +0000
Manifest this update: Sun 19 Oct 2025 06:01:42 +0000
Manifest next update: Mon 20 Oct 2025 06:01:42 +0000
Files and hashes: 1: ClCzt81M47FFt1O_cXmpVczSkl0.crl (hash: NEgDImwyy8o2bL9p70FHFkT17kPIsDOXbthOZT7/A6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:37:4b:0d:f9:d4:de:8b:2e:b8:b4:8f:d5:09:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Validity
Not Before: Oct 19 06:01:42 2025 GMT
Not After : Oct 20 06:01:42 2025 GMT
Subject: CN=0ab9fcbe1a9972b6f88c0d8707f3ccb7d0940462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:fa:8e:0a:ed:49:59:9f:13:83:13:24:6b:
6f:a2:f1:9f:a9:fe:78:ba:ba:53:7d:95:68:c8:44:
cc:5c:56:74:d8:e4:13:65:a4:40:3a:03:ca:03:cf:
8d:f9:78:ef:7d:dd:44:32:31:73:0e:df:fc:6b:ea:
6b:62:79:fe:00:3c:9c:64:b2:9b:0b:67:49:0f:c2:
04:c5:18:eb:88:41:31:b7:ab:94:9e:ea:3f:f0:7a:
6a:6b:ad:3f:15:ea:2b:06:f5:71:7c:75:be:98:5a:
01:de:36:23:24:2e:98:dd:67:82:98:27:3a:15:3c:
fc:b7:eb:ac:ae:56:44:7a:84:70:d5:16:e5:84:0d:
4c:c3:b7:63:f9:9d:a4:c8:da:9f:b9:b7:6c:c7:ef:
17:38:04:ec:1e:d2:52:24:9b:2d:72:61:21:1a:4c:
65:44:ec:af:7d:ba:c9:fb:44:1e:c0:41:a3:fb:dd:
68:a4:d8:47:2f:7a:14:1b:83:6f:6e:24:41:07:8b:
53:dc:85:df:fc:97:5e:e5:50:dd:f5:96:3b:ff:02:
63:2c:36:5e:78:65:71:4c:22:b9:25:07:aa:10:b7:
57:f0:8a:f0:03:89:f7:eb:bb:e9:15:7e:d0:24:76:
2b:28:d9:1f:d0:a2:c7:bb:8e:7b:76:c5:35:10:3a:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B9:FC:BE:1A:99:72:B6:F8:8C:0D:87:07:F3:CC:B7:D0:94:04:62
X509v3 Authority Key Identifier:
keyid:0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:97:5a:15:c7:e9:52:36:75:2d:ed:3c:3a:c4:f5:18:87:aa:
f6:af:02:97:b0:f8:ed:22:d2:f3:0e:6d:35:52:2e:13:0a:14:
b7:27:66:82:93:58:92:23:e3:b2:b8:d4:29:ce:4f:4b:ac:5c:
a4:6a:55:e9:01:42:eb:a7:bd:fb:c4:20:d4:10:bf:2e:13:ca:
b2:af:52:f7:92:28:03:c8:07:df:78:2e:6b:73:9c:7e:4b:54:
d2:d9:fb:8c:b8:27:00:ee:d1:1e:ff:ab:e6:85:d7:7f:5d:1c:
d4:a1:09:33:96:ce:00:c2:a8:0d:45:3d:ea:e0:7e:11:05:ac:
a3:18:f9:75:51:db:b0:0c:a3:91:e8:f7:06:f3:6f:e3:ab:8b:
cb:49:1d:a7:27:f5:46:81:c2:79:10:88:f1:4d:29:eb:14:88:
cb:95:e9:d0:b1:69:eb:bc:42:f8:41:2c:9e:e4:cf:dd:0e:fe:
34:f1:ae:5c:cd:26:4d:7c:df:be:1a:3f:7a:54:a6:ea:4e:a0:
c9:7f:d4:59:99:9d:c5:80:ab:d9:50:e6:14:23:59:95:e3:91:
30:73:54:11:6d:a1:82:4e:10:af:20:ab:f5:c6:90:e1:7c:7e:
5d:b1:f4:f7:3d:7b:ca:d3:3a:ca:76:4b:03:94:dd:91:c9:ad:
50:dc:5b:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DzdLDfnU3osuuLSP1QlvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNTBiM2I3Y2Q0Y2UzYjE0NWI3NTNiZjcxNzlhOTU1Y2Nk
MjkyNWQwHhcNMjUxMDE5MDYwMTQyWhcNMjUxMDIwMDYwMTQyWjAzMTEwLwYDVQQD
EygwYWI5ZmNiZTFhOTk3MmI2Zjg4YzBkODcwN2YzY2NiN2QwOTQwNDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHP6jgrtSVmfE4MTJGtvovGfqf54
urpTfZVoyETMXFZ02OQTZaRAOgPKA8+N+Xjvfd1EMjFzDt/8a+prYnn+ADycZLKb
C2dJD8IExRjriEExt6uUnuo/8Hpqa60/FeorBvVxfHW+mFoB3jYjJC6Y3WeCmCc6
FTz8t+usrlZEeoRw1RblhA1Mw7dj+Z2kyNqfubdsx+8XOATsHtJSJJstcmEhGkxl
ROyvfbrJ+0QewEGj+91opNhHL3oUG4NvbiRBB4tT3IXf/Jde5VDd9ZY7/wJjLDZe
eGVxTCK5JQeqELdX8IrwA4n367vpFX7QJHYrKNkf0KLHu457dsU1EDruMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAq5/L4amXK2+IwNhwfzzLfQlARiMB8GA1UdIwQY
MBaAFApQs7fNTOOxRbdTv3F5qVXM0pJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mZWMwOGYtOTJjYi00ZTRmLTk2Y2Mt
MTcwZWQyMzBkNWY4LzEvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9mZWMwOGYtOTJjYi00ZTRmLTk2Y2MtMTcwZWQyMzBkNWY4
LzEvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJdaFcfp
UjZ1Le08OsT1GIeq9q8Cl7D47SLS8w5tNVIuEwoUtydmgpNYkiPjsrjUKc5PS6xc
pGpV6QFC66e9+8Qg1BC/LhPKsq9S95IoA8gH33gua3OcfktU0tn7jLgnAO7RHv+r
5oXXf10c1KEJM5bOAMKoDUU96uB+EQWsoxj5dVHbsAyjkej3BvNv46uLy0kdpyf1
RoHCeRCI8U0p6xSIy5Xp0LFp67xC+EEsnuTP3Q7+NPGuXM0mTXzfvho/elSm6k6g
yX/UWZmdxYCr2VDmFCNZleORMHNUEW2hgk4QryCr9caQ4Xx+XbH09z17ytM6ynZL
A5TdkcmtUNxb4Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:17 2025 by rpki-client