Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
File: _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json)
Hash identifier: Lj2h03pdgVB6uLDalOPczVjHUae6Z0M/V8zAumSqBSM=
Subject key identifier: 2B:7F:51:4A:80:CD:9D:A1:86:81:50:FE:EA:22:E1:4A:6C:DF:0B:5E
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Certificate issuer: /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial: 0199FC8F4E45C79F5395F57537476D8A05B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
Manifest number: 05DA
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: fY7kgR5fYA9cJSGsaJv/sXeb5nzjukKWYkElBYH1Ugo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4e:45:c7:9f:53:95:f5:75:37:47:6d:8a:05:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=2b7f514a80cd9da1868150feea22e14a6cdf0b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:17:6c:ba:22:b4:a5:e8:7d:17:7e:f2:99:
99:36:8b:ab:24:3c:75:d0:2d:33:e2:d6:5f:d3:ac:
81:c0:b7:38:72:b8:4f:ae:9c:8f:c3:66:cf:df:d9:
d5:40:b7:83:a3:af:87:bc:8a:12:6a:ab:e2:e4:16:
cb:e5:33:09:1b:a0:f5:f0:8d:58:fa:af:71:77:57:
01:75:41:79:4b:51:52:4c:30:3e:12:73:16:48:c0:
5f:1f:5a:db:2b:0f:1e:c3:ea:ca:66:82:1f:8a:c5:
5e:8b:e6:36:ea:b9:55:dd:42:6b:57:3c:ee:52:f2:
e4:e1:6b:de:b0:ed:12:88:3a:ea:83:38:23:c8:0d:
e0:4e:4c:bf:5a:27:2d:a0:69:eb:03:2d:fe:c9:8f:
1c:2b:f9:de:08:c6:44:0b:f3:e6:80:12:97:7b:96:
cc:ec:07:fa:1f:8f:7a:7c:87:04:0a:9a:8f:6a:c4:
76:cf:38:e9:04:f2:63:48:c5:ab:bc:b0:2d:0d:6a:
6a:de:d5:91:8a:f8:8c:f1:dd:d4:6d:05:ff:b7:2c:
f0:24:9b:df:a4:ca:91:70:c0:0b:0d:48:a4:2c:1f:
8a:4e:21:ad:80:76:61:4a:69:30:50:a5:26:bb:0a:
46:b0:29:d0:98:e4:e3:ab:d2:20:7a:00:a6:f6:e4:
af:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7F:51:4A:80:CD:9D:A1:86:81:50:FE:EA:22:E1:4A:6C:DF:0B:5E
X509v3 Authority Key Identifier:
keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:38:99:e6:9e:f0:ca:58:e0:bb:bd:e9:ba:67:7b:66:39:97:
51:44:0a:7b:e3:b7:8e:46:a3:08:42:7e:9d:c1:06:14:2d:a6:
e0:76:92:0b:3e:23:f3:76:16:4e:46:87:85:07:91:83:41:9f:
28:8c:f6:a3:31:30:1a:79:10:85:1c:17:6b:84:e6:a9:71:96:
73:d8:c5:52:c3:48:7a:30:69:a3:4d:d9:70:16:97:28:03:8b:
60:3a:fb:d8:9c:81:d1:f6:96:01:59:21:ab:b9:8d:a1:7d:ce:
e0:91:53:ea:f7:e5:bc:32:d7:5d:d0:44:c9:c7:d3:97:9b:cf:
96:88:83:5b:e2:51:fe:2c:5d:7e:a4:1b:a1:60:07:27:f1:ea:
36:94:ad:88:78:09:5a:ee:60:ec:a9:de:1f:7c:27:25:ce:7b:
2f:76:33:eb:18:25:c1:27:cd:12:96:45:c9:36:a0:09:c8:f7:
9a:4a:04:c8:bf:c6:05:12:47:c0:88:72:78:b0:6e:b7:b4:79:
8c:15:b3:54:53:0c:ba:d5:17:88:61:2b:f2:55:d1:e3:32:60:
3b:d8:2f:df:96:37:82:46:fa:08:c8:5e:7f:a0:52:4e:04:03:
c1:56:90:ae:f3:0d:94:e9:b2:45:46:06:d6:b0:bd:9a:23:2b:
17:ca:de:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j05Fx59TlfV1N0dtigW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzk3ZDBjMWJiY2NjM2Q4NjcxMjJhMTE3MTBmNTVmNzAy
MzAwOGUwHhcNMjUxMDE5MTMwMTE0WhcNMjUxMDIwMTMwMTE0WjAzMTEwLwYDVQQD
EygyYjdmNTE0YTgwY2Q5ZGExODY4MTUwZmVlYTIyZTE0YTZjZGYwYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEoXbLoitKXofRd+8pmZNourJDx1
0C0z4tZf06yBwLc4crhPrpyPw2bP39nVQLeDo6+HvIoSaqvi5BbL5TMJG6D18I1Y
+q9xd1cBdUF5S1FSTDA+EnMWSMBfH1rbKw8ew+rKZoIfisVei+Y26rlV3UJrVzzu
UvLk4WvesO0SiDrqgzgjyA3gTky/WictoGnrAy3+yY8cK/neCMZEC/PmgBKXe5bM
7Af6H496fIcECpqPasR2zzjpBPJjSMWrvLAtDWpq3tWRiviM8d3UbQX/tyzwJJvf
pMqRcMALDUikLB+KTiGtgHZhSmkwUKUmuwpGsCnQmOTjq9IgegCm9uSvbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCt/UUqAzZ2hhoFQ/uoi4Ups3wteMB8GA1UdIwQY
MBaAFP7JfQwbvMw9hnEioRcQ9V9wIwCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzkt
OTM5Zjg3YTMxYmYwLzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzktOTM5Zjg3YTMxYmYw
LzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFziZ5p7w
yljgu73pumd7ZjmXUUQKe+O3jkajCEJ+ncEGFC2m4HaSCz4j83YWTkaHhQeRg0Gf
KIz2ozEwGnkQhRwXa4TmqXGWc9jFUsNIejBpo03ZcBaXKAOLYDr72JyB0faWAVkh
q7mNoX3O4JFT6vflvDLXXdBEycfTl5vPloiDW+JR/ixdfqQboWAHJ/HqNpStiHgJ
Wu5g7KneH3wnJc57L3Yz6xglwSfNEpZFyTagCcj3mkoEyL/GBRJHwIhyeLBut7R5
jBWzVFMMutUXiGEr8lXR4zJgO9gv35Y3gkb6CMhef6BSTgQDwVaQrvMNlOmyRUYG
1rC9miMrF8rebA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:35:13 2025 by rpki-client