Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
File: mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft (raw, json)
Hash identifier: GiMfrX3Q757FIKDcdYGN8xi9064nwYzz6GWf5vkFU90=
Subject key identifier: A3:04:5F:DC:D4:CC:D2:39:88:72:08:92:A8:E4:74:44:FD:46:DC:FC
Authority key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Certificate issuer: /CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Certificate serial: 0199FD6B06C03B93CCF4943BC5E5BDD45ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
Manifest number: C4
Signing time: Sun 19 Oct 2025 17:01:13 +0000
Manifest this update: Sun 19 Oct 2025 17:01:13 +0000
Manifest next update: Mon 20 Oct 2025 17:01:13 +0000
Files and hashes: 1: mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl (hash: CBlEyfq5O18HMgT+GUjdDXsvsisS3xaKIxtbxGnjxiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:06:c0:3b:93:cc:f4:94:3b:c5:e5:bd:d4:5e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Validity
Not Before: Oct 19 17:01:13 2025 GMT
Not After : Oct 20 17:01:13 2025 GMT
Subject: CN=a3045fdcd4ccd23988720892a8e47444fd46dcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:cb:9e:ec:0c:0d:8a:d3:15:95:2d:fb:c0:
f5:48:45:db:b3:c8:01:6e:60:5c:e0:ef:e0:a0:3e:
28:fc:e1:00:06:bf:2e:d5:b1:48:ed:1f:c1:9b:34:
98:08:6e:e9:eb:48:e8:31:24:b5:f3:d5:f8:e0:d8:
46:d4:4a:b5:65:1b:68:6a:47:e8:21:1a:b4:d6:1a:
fe:5c:8d:2e:d5:f9:38:6f:84:83:2f:06:25:7d:d5:
69:a8:5b:73:49:22:41:c5:6e:b1:19:bc:28:e5:bb:
88:a0:77:58:b8:c3:aa:10:77:9b:6c:29:0c:6d:c4:
0b:27:da:0c:77:58:3a:2a:a9:d0:9f:48:8d:74:d8:
ff:56:22:bf:f0:94:be:5b:76:9c:ca:be:d4:3b:fd:
2f:fa:0a:77:63:8f:91:da:fd:bc:0f:14:d5:66:3f:
5f:80:53:9e:42:9a:f2:df:87:f5:e3:87:c1:a1:fb:
e4:6b:98:e6:02:c1:ad:70:fa:af:2b:24:5f:e1:11:
97:06:e9:c7:d3:d3:20:cd:3a:35:06:7e:b3:87:47:
19:8b:e4:27:8e:76:e3:1e:3b:e1:ef:49:2b:ea:cc:
bb:63:ef:cd:92:2c:33:ad:b9:a2:5b:a6:c0:66:d6:
ce:04:7d:98:7a:a4:2c:29:e5:4f:01:ae:02:1c:fb:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:5F:DC:D4:CC:D2:39:88:72:08:92:A8:E4:74:44:FD:46:DC:FC
X509v3 Authority Key Identifier:
keyid:98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a4:bc:65:3e:76:4b:bd:f1:95:20:10:da:39:02:6c:d0:46:
45:17:25:1e:ec:9b:37:07:bd:1a:38:d0:63:c1:b3:48:70:3d:
60:b0:c4:3b:f5:30:35:e0:2e:11:3d:f9:97:3c:ba:72:39:96:
d7:57:e7:68:81:a4:2d:f6:0a:8e:a0:9e:d3:13:ac:ab:86:1f:
3f:f6:72:5c:cd:ad:52:9c:ab:3e:67:96:3a:6d:ba:11:25:7a:
b0:f3:d0:71:08:1f:6f:97:53:85:81:ff:60:a7:ac:da:1f:be:
65:43:b6:5e:79:f2:6f:f9:ae:cc:27:8d:d6:f4:6a:0f:01:2a:
0d:42:9d:70:06:f2:be:69:2d:bf:8b:59:f5:d5:b9:5c:92:ae:
a8:9f:08:15:74:3d:f8:33:f2:6f:a2:44:72:41:be:e0:61:ec:
dd:f0:42:f0:15:5e:6f:fa:e2:f4:fb:b9:16:5c:7c:94:fc:73:
d0:40:89:b1:d7:32:5f:5b:32:44:f0:bb:a9:ee:03:7a:a9:88:
59:a1:81:3d:29:ec:22:bf:1b:1d:8a:cf:56:66:36:ed:4e:4a:
3b:61:ae:ff:d2:a1:78:a3:48:cc:45:fb:46:53:bd:25:93:ff:
15:fd:88:5e:44:2d:fe:bc:fe:17:b8:f0:8e:7a:1b:b9:6c:fb:
b8:16:b9:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9awbAO5PM9JQ7xeW91F7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NDY2YWVjNzUyOTI4YjZkNDg2NWI5OWU4NjA4YzRhZWM0
Yjc4YWMwHhcNMjUxMDE5MTcwMTEzWhcNMjUxMDIwMTcwMTEzWjAzMTEwLwYDVQQD
EyhhMzA0NWZkY2Q0Y2NkMjM5ODg3MjA4OTJhOGU0NzQ0NGZkNDZkY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhTLnuwMDYrTFZUt+8D1SEXbs8gB
bmBc4O/goD4o/OEABr8u1bFI7R/BmzSYCG7p60joMSS189X44NhG1Eq1ZRtoakfo
IRq01hr+XI0u1fk4b4SDLwYlfdVpqFtzSSJBxW6xGbwo5buIoHdYuMOqEHebbCkM
bcQLJ9oMd1g6KqnQn0iNdNj/ViK/8JS+W3acyr7UO/0v+gp3Y4+R2v28DxTVZj9f
gFOeQpry34f144fBofvka5jmAsGtcPqvKyRf4RGXBunH09MgzTo1Bn6zh0cZi+Qn
jnbjHjvh70kr6sy7Y+/NkiwzrbmiW6bAZtbOBH2YeqQsKeVPAa4CHPv6RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMEX9zUzNI5iHIIkqjkdET9Rtz8MB8GA1UdIwQY
MBaAFJhGaux1KSi21IZbmehgjErsS3isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUVacTdIVXBLTGJVaGx1WjZHQ01TdXhMZUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hYmYwZjUtM2IwMy00MmE0LWFkZWQt
ZmQwYzI3ZmMxMTNhLzEvbUVacTdIVXBLTGJVaGx1WjZHQ01TdXhMZUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hYmYwZjUtM2IwMy00MmE0LWFkZWQtZmQwYzI3ZmMxMTNh
LzEvbUVacTdIVXBLTGJVaGx1WjZHQ01TdXhMZUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaS8ZT52
S73xlSAQ2jkCbNBGRRclHuybNwe9GjjQY8GzSHA9YLDEO/UwNeAuET35lzy6cjmW
11fnaIGkLfYKjqCe0xOsq4YfP/ZyXM2tUpyrPmeWOm26ESV6sPPQcQgfb5dThYH/
YKes2h++ZUO2Xnnyb/muzCeN1vRqDwEqDUKdcAbyvmktv4tZ9dW5XJKuqJ8IFXQ9
+DPyb6JEckG+4GHs3fBC8BVeb/ri9Pu5Flx8lPxz0ECJsdcyX1syRPC7qe4DeqmI
WaGBPSnsIr8bHYrPVmY27U5KO2Gu/9KheKNIzEX7RlO9JZP/Ff2IXkQt/rz+F7jw
jnobuWz7uBa5Ng==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:49 2025 by rpki-client