Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
File: _s7aKggEQpcq6nJV-LM6dg7LMcs.mft (raw, json)
Hash identifier: 0zj2I+/NSgQirnbAbUEez8TaGq5NEQFoMYqmRhYU8XI=
Subject key identifier: C3:C6:B7:6D:63:99:51:C5:A0:B9:EB:4D:49:FF:7A:5E:0A:C3:84:A4
Authority key identifier: FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB
Certificate issuer: /CN=feceda2a080442972aea7255f8b33a760ecb31cb
Certificate serial: 0199FBEBF2726B9B77DFFCDDA7F9A8985DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
Manifest number: 0CEB
Signing time: Sun 19 Oct 2025 10:02:48 +0000
Manifest this update: Sun 19 Oct 2025 10:02:48 +0000
Manifest next update: Mon 20 Oct 2025 10:02:48 +0000
Files and hashes: 1: _s7aKggEQpcq6nJV-LM6dg7LMcs.crl (hash: opkm1mYIsuawUSyLw7dxUQqne3kL2zC5GEB2c5NnOx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f2:72:6b:9b:77:df:fc:dd:a7:f9:a8:98:5d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feceda2a080442972aea7255f8b33a760ecb31cb
Validity
Not Before: Oct 19 10:02:48 2025 GMT
Not After : Oct 20 10:02:48 2025 GMT
Subject: CN=c3c6b76d639951c5a0b9eb4d49ff7a5e0ac384a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:39:4b:f7:f9:39:db:4f:df:3f:12:b4:82:
eb:a3:89:5e:65:89:db:b7:be:b7:9f:30:18:4c:97:
31:33:ce:79:08:47:48:79:73:c2:33:5f:5d:3b:8e:
23:56:39:c6:b6:25:a0:7b:6b:cf:f6:c3:0c:cb:73:
7e:68:df:d5:42:be:8f:96:59:9c:bb:34:32:40:20:
da:65:56:26:21:a7:bd:80:9e:c5:a8:1a:62:01:ea:
2e:dd:7d:f4:bf:22:a7:2e:4b:cf:d7:3c:be:24:6b:
13:d4:d5:e9:0c:1d:bd:4b:19:ef:79:a4:fb:c9:8b:
73:4b:47:dd:1d:d4:82:0e:ec:cf:2d:af:8b:6c:12:
cb:b3:e1:59:9e:24:10:61:70:f1:4b:68:2d:d5:d3:
5c:74:41:30:f7:e4:21:eb:e7:54:52:1e:18:c6:a9:
88:94:99:e4:77:eb:2c:38:fb:09:c5:f1:c6:7a:d8:
90:84:eb:cf:4d:e2:b2:2c:3a:ab:fc:bb:a3:2d:a8:
03:f0:2b:56:11:ad:1c:7c:d0:9c:d0:12:75:11:fd:
6b:66:89:12:fa:2b:d0:7a:dd:e3:3e:7c:9f:56:ed:
db:31:54:83:0e:0c:f6:25:ac:4d:02:41:21:ff:38:
0c:1d:9d:ed:1b:f8:df:f4:9f:09:4e:7d:07:4d:67:
23:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:B7:6D:63:99:51:C5:A0:B9:EB:4D:49:FF:7A:5E:0A:C3:84:A4
X509v3 Authority Key Identifier:
keyid:FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c4:5f:d3:52:90:5b:6e:26:43:f9:12:c9:24:82:20:70:8f:
1e:35:e5:ed:1a:22:6a:a6:c1:a4:30:7c:de:95:4f:a7:fe:90:
2f:b1:1a:ff:4b:71:72:22:74:bc:c5:ae:84:e9:85:14:95:50:
ac:2a:12:65:99:7e:58:55:3e:da:8f:bc:88:35:73:df:85:16:
d2:03:d9:76:0a:6e:53:b7:44:97:67:a5:0f:30:fc:8c:c6:91:
e4:09:d7:1f:c8:ac:1f:b6:f7:7e:80:3f:10:cc:89:5a:a4:a7:
43:4d:79:55:0a:bb:db:68:d4:8c:ac:71:93:dc:52:8d:20:aa:
97:1a:ba:a0:b9:7e:46:e6:84:05:50:31:84:a5:99:bf:aa:e7:
94:92:84:4c:15:c0:bf:70:60:be:5a:8e:45:80:bb:ab:74:4a:
3f:b3:00:bb:6c:02:ad:ae:bc:fb:85:9c:6c:fe:79:f1:61:f4:
c3:59:07:f9:e6:7a:9e:44:ca:fc:db:f6:e0:be:ef:ad:91:b7:
25:f4:a9:bd:61:e1:bd:1e:09:dd:53:33:a1:c9:c3:f8:6b:5a:
39:7c:8a:ab:ec:aa:7b:18:39:83:32:71:ef:c4:9d:a8:22:79:
a1:0b:c0:6b:d4:fa:52:16:a5:7f:98:11:e8:c2:2d:39:94:85:
0d:a5:c9:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/Jya5t33/zdp/momF3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2VkYTJhMDgwNDQyOTcyYWVhNzI1NWY4YjMzYTc2MGVj
YjMxY2IwHhcNMjUxMDE5MTAwMjQ4WhcNMjUxMDIwMTAwMjQ4WjAzMTEwLwYDVQQD
EyhjM2M2Yjc2ZDYzOTk1MWM1YTBiOWViNGQ0OWZmN2E1ZTBhYzM4NGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooU5S/f5OdtP3z8StILro4leZYnb
t763nzAYTJcxM855CEdIeXPCM19dO44jVjnGtiWge2vP9sMMy3N+aN/VQr6Pllmc
uzQyQCDaZVYmIae9gJ7FqBpiAeou3X30vyKnLkvP1zy+JGsT1NXpDB29SxnveaT7
yYtzS0fdHdSCDuzPLa+LbBLLs+FZniQQYXDxS2gt1dNcdEEw9+Qh6+dUUh4YxqmI
lJnkd+ssOPsJxfHGetiQhOvPTeKyLDqr/LujLagD8CtWEa0cfNCc0BJ1Ef1rZokS
+ivQet3jPnyfVu3bMVSDDgz2JaxNAkEh/zgMHZ3tG/jf9J8JTn0HTWcjIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPGt21jmVHFoLnrTUn/el4Kw4SkMB8GA1UdIwQY
MBaAFP7O2ioIBEKXKupyVfizOnYOyzHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3M3YUtnZ0VRcGNxNm5KVi1MTTZkZzdMTWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy82MjNhZWItMGZjOS00MDNhLThkMzUt
YjA0Y2Q4YTczYWZjLzEvX3M3YUtnZ0VRcGNxNm5KVi1MTTZkZzdMTWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy82MjNhZWItMGZjOS00MDNhLThkMzUtYjA0Y2Q4YTczYWZj
LzEvX3M3YUtnZ0VRcGNxNm5KVi1MTTZkZzdMTWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcRf01KQ
W24mQ/kSySSCIHCPHjXl7RoiaqbBpDB83pVPp/6QL7Ea/0txciJ0vMWuhOmFFJVQ
rCoSZZl+WFU+2o+8iDVz34UW0gPZdgpuU7dEl2elDzD8jMaR5AnXH8isH7b3foA/
EMyJWqSnQ015VQq722jUjKxxk9xSjSCqlxq6oLl+RuaEBVAxhKWZv6rnlJKETBXA
v3BgvlqORYC7q3RKP7MAu2wCra68+4WcbP558WH0w1kH+eZ6nkTK/Nv24L7vrZG3
JfSpvWHhvR4J3VMzocnD+GtaOXyKq+yqexg5gzJx78SdqCJ5oQvAa9T6Uhalf5gR
6MItOZSFDaXJIw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:38 2025 by rpki-client