Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
File: V9wqO2671XpOSCmt0_KgKnbld4k.mft (raw, json)
Hash identifier: Fw1mczdvzit3kMz8eLpZWdkRYYKeLrwKyPOIb7j9s50=
Subject key identifier: 83:F2:6D:2C:72:91:0F:AA:AE:A4:42:B1:4C:44:C8:CA:F3:0A:8C:62
Authority key identifier: 57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
Certificate issuer: /CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Certificate serial: 0199FB0F218DC17AE269AF1E5C519D1B815B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
Manifest number: 03D8
Signing time: Sun 19 Oct 2025 06:01:36 +0000
Manifest this update: Sun 19 Oct 2025 06:01:36 +0000
Manifest next update: Mon 20 Oct 2025 06:01:36 +0000
Files and hashes: 1: V9wqO2671XpOSCmt0_KgKnbld4k.crl (hash: dE43UxtvDQoTNn6/gcnI8wDi1W36UHSPnOI5QIl2STs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:21:8d:c1:7a:e2:69:af:1e:5c:51:9d:1b:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Validity
Not Before: Oct 19 06:01:36 2025 GMT
Not After : Oct 20 06:01:36 2025 GMT
Subject: CN=83f26d2c72910faaaea442b14c44c8caf30a8c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:86:ed:d3:c2:00:f4:15:6a:ec:c9:67:70:
13:c9:15:75:7c:b8:86:6f:fc:a7:47:0f:b3:6f:31:
92:66:ba:9d:ed:b5:ff:8b:37:88:a8:b9:a5:48:d4:
ed:97:8a:04:e0:c5:ef:86:7f:b5:e0:a4:20:68:94:
4c:e4:2e:5f:6c:f8:ee:52:64:7f:82:36:8b:b2:59:
a0:dc:60:81:d0:83:db:45:0b:c6:2b:a3:a1:30:f2:
95:48:10:55:3a:1e:1f:31:b5:d2:aa:61:4b:c8:c9:
c7:36:27:5d:c4:97:88:af:9a:c5:48:1a:d4:08:27:
22:eb:8c:77:43:d6:4f:9a:bf:f1:2c:b2:b0:30:60:
d8:f0:a4:22:b7:9c:d5:4c:a4:99:d5:0d:bb:0d:c1:
37:1b:a8:ea:15:3a:3a:ec:14:46:2e:97:52:ea:23:
2b:6e:e3:11:39:53:28:26:2c:92:96:df:13:82:a1:
8b:4d:c1:4e:42:10:49:c4:17:a4:77:08:ed:77:62:
08:de:d3:6a:20:ac:d5:bc:c0:22:24:f7:3b:1c:3d:
95:bc:bd:7f:9f:46:a4:b5:c1:43:01:68:98:d5:d2:
40:15:2b:18:c1:fa:2c:1d:da:02:92:a6:1b:75:86:
72:25:c5:b0:0d:5f:69:cc:8d:41:40:3d:4e:3a:7f:
af:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F2:6D:2C:72:91:0F:AA:AE:A4:42:B1:4C:44:C8:CA:F3:0A:8C:62
X509v3 Authority Key Identifier:
keyid:57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:25:69:fa:d8:31:53:b6:f5:4f:38:00:b6:b0:39:14:30:ba:
a9:29:a6:78:d0:cd:54:6b:9e:9f:a6:4f:64:d9:fb:d2:bb:fd:
a8:07:d3:2f:6e:d4:fe:93:0d:8a:a6:96:c4:10:eb:c9:d2:31:
9c:47:7d:d0:7a:14:cb:4c:32:35:5f:9b:81:6c:85:9f:e5:8a:
ef:0f:c6:47:ba:33:26:66:3c:a8:82:a7:11:8d:ab:e6:f9:d3:
a9:2a:1d:8f:d1:69:42:be:c9:aa:2b:e0:fe:00:5e:52:01:26:
09:98:40:73:7d:92:29:92:32:6f:2a:e9:2f:05:2d:ec:ad:c4:
b6:13:56:98:2d:43:4b:94:6a:f0:8a:ff:78:d1:de:20:3b:af:
da:82:b8:da:62:92:52:b8:6e:1e:2c:7c:24:1d:61:11:73:02:
24:23:04:e5:eb:e2:8b:10:03:a6:73:8e:be:2c:eb:20:61:52:
c8:5d:62:3b:d1:74:3c:c4:9d:a0:12:98:eb:8b:93:7f:6b:a6:
32:4f:df:e0:9a:7e:e7:b5:10:4a:05:84:6d:28:9b:54:30:29:
5f:d3:0d:d6:ed:1c:88:d5:7d:4b:e7:a8:3c:7b:50:5d:1c:91:
3e:f8:49:a1:f1:c6:34:d6:04:09:18:92:19:0c:7c:a7:3e:19:
32:37:90:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DyGNwXriaa8eXFGdG4FbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZGMyYTNiNmViYmQ1N2E0ZTQ4MjlhZGQzZjJhMDJhNzZl
NTc3ODkwHhcNMjUxMDE5MDYwMTM2WhcNMjUxMDIwMDYwMTM2WjAzMTEwLwYDVQQD
Eyg4M2YyNmQyYzcyOTEwZmFhYWVhNDQyYjE0YzQ0YzhjYWYzMGE4YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H+G7dPCAPQVauzJZ3ATyRV1fLiG
b/ynRw+zbzGSZrqd7bX/izeIqLmlSNTtl4oE4MXvhn+14KQgaJRM5C5fbPjuUmR/
gjaLslmg3GCB0IPbRQvGK6OhMPKVSBBVOh4fMbXSqmFLyMnHNiddxJeIr5rFSBrU
CCci64x3Q9ZPmr/xLLKwMGDY8KQit5zVTKSZ1Q27DcE3G6jqFTo67BRGLpdS6iMr
buMROVMoJiySlt8TgqGLTcFOQhBJxBekdwjtd2II3tNqIKzVvMAiJPc7HD2VvL1/
n0aktcFDAWiY1dJAFSsYwfosHdoCkqYbdYZyJcWwDV9pzI1BQD1OOn+v5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPybSxykQ+qrqRCsUxEyMrzCoxiMB8GA1UdIwQY
MBaAFFfcKjtuu9V6TkgprdPyoCp25XeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82NTQ1MDQtNTRlMS00NTAyLWFiMjIt
NDA0NTlkNjkzNGFlLzEvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS82NTQ1MDQtNTRlMS00NTAyLWFiMjItNDA0NTlkNjkzNGFl
LzEvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiVp+tgx
U7b1TzgAtrA5FDC6qSmmeNDNVGuen6ZPZNn70rv9qAfTL27U/pMNiqaWxBDrydIx
nEd90HoUy0wyNV+bgWyFn+WK7w/GR7ozJmY8qIKnEY2r5vnTqSodj9FpQr7Jqivg
/gBeUgEmCZhAc32SKZIybyrpLwUt7K3EthNWmC1DS5Rq8Ir/eNHeIDuv2oK42mKS
UrhuHix8JB1hEXMCJCME5eviixADpnOOvizrIGFSyF1iO9F0PMSdoBKY64uTf2um
Mk/f4Jp+57UQSgWEbSibVDApX9MN1u0ciNV9S+eoPHtQXRyRPvhJofHGNNYECRiS
GQx8pz4ZMjeQ+g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:13 2025 by rpki-client