Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
File: RrLFRAI1IgBtccF5VhxL0wW6030.mft (raw, json)
Hash identifier: A+OPFGAb0XLjdCMj1Ofw49bQRakTNgtbBe/1+R4gEG4=
Subject key identifier: B8:7C:E1:D4:70:BD:58:75:DE:5F:A3:63:72:4E:99:93:37:7E:4E:A2
Authority key identifier: 46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
Certificate issuer: /CN=46b2c544023522006d71c179561c4bd305bad37d
Certificate serial: 0199FD341380B651041D66AC6F1BB22E86A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
Manifest number: 0865
Signing time: Sun 19 Oct 2025 16:01:12 +0000
Manifest this update: Sun 19 Oct 2025 16:01:12 +0000
Manifest next update: Mon 20 Oct 2025 16:01:12 +0000
Files and hashes: 1: RrLFRAI1IgBtccF5VhxL0wW6030.crl (hash: Wjtz0Lzn4yQWX+jFSj6DxX9U2I1gFyPOhKVABRMYMfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:13:80:b6:51:04:1d:66:ac:6f:1b:b2:2e:86:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46b2c544023522006d71c179561c4bd305bad37d
Validity
Not Before: Oct 19 16:01:12 2025 GMT
Not After : Oct 20 16:01:12 2025 GMT
Subject: CN=b87ce1d470bd5875de5fa363724e9993377e4ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:fa:ea:ff:85:4f:55:28:1e:bd:6a:b3:35:
1d:a4:29:0c:a8:a2:f9:9e:b0:c8:54:00:5f:89:c3:
47:d4:48:9c:69:e1:f2:ac:d5:1d:03:2d:5a:5d:d6:
b7:30:80:8a:54:0c:54:63:b7:02:f6:f6:c6:b4:a2:
8e:97:8b:ae:d7:93:07:33:65:7f:25:c7:fb:70:e1:
75:3a:19:83:af:ab:1a:52:68:ba:f8:6e:0f:59:39:
cf:5b:a0:ca:05:62:8c:6c:86:35:b8:c1:a4:93:73:
99:2a:ad:c3:7e:fc:42:4c:6e:79:4b:c1:e4:f3:6d:
d5:81:ce:e7:f9:73:a4:5a:c3:31:0c:12:aa:63:ae:
ea:0b:68:40:ec:a6:0f:c0:05:58:c0:23:18:e8:81:
5e:51:40:29:09:8d:59:be:d0:12:0b:bf:e5:6a:fd:
20:13:b8:24:fa:42:e2:5a:c9:5d:b2:7a:f0:62:b9:
f9:5b:fe:ba:f3:b7:73:41:cc:9a:e6:87:93:6a:f7:
e3:46:7c:c6:23:15:cc:c7:54:06:30:6f:4d:7f:86:
32:cc:4b:7b:7a:a2:2a:18:a2:d2:b3:fa:03:73:6f:
88:7f:e9:47:cb:7f:97:f2:1c:83:c3:9b:a9:52:eb:
f4:85:71:1e:19:dc:74:1a:96:39:1e:e8:bb:6b:49:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7C:E1:D4:70:BD:58:75:DE:5F:A3:63:72:4E:99:93:37:7E:4E:A2
X509v3 Authority Key Identifier:
keyid:46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4b:e0:a6:61:f7:92:30:69:4b:0e:67:78:01:4f:08:ec:f2:
d0:30:2c:3e:be:a4:b5:ac:4e:69:c2:92:43:a6:95:7b:c8:c2:
19:f4:b2:bc:70:14:a3:0b:7b:6e:d3:b3:2e:dd:92:59:81:de:
e4:e1:05:c2:ff:40:91:2d:2b:3c:15:5d:46:de:ee:a6:6e:60:
a4:d5:70:01:22:1d:db:05:18:76:23:c9:58:cd:b3:d5:70:a7:
39:a6:d4:ef:42:43:2b:a0:09:dd:67:35:33:66:9b:ce:34:b3:
ad:71:27:37:0d:9c:54:cc:41:e9:ec:ed:00:2a:4a:fb:40:5f:
ad:f6:29:83:c0:10:19:5f:5d:51:a8:e9:78:3c:cf:58:99:45:
f3:65:c2:36:a2:bc:7b:7a:14:ce:06:2e:45:d7:8f:65:2b:7a:
67:a0:3e:9f:c5:5b:ff:57:fd:28:98:a1:e8:0a:79:83:19:c7:
52:f9:1a:6c:b8:26:d4:4a:ba:02:82:7a:5c:9e:f9:33:b7:11:
29:a4:c1:d3:57:da:58:1f:d7:c7:5f:43:b0:49:db:2d:5b:19:
4b:49:51:d9:f1:a7:34:cf:ad:b2:b2:38:23:f6:84:ca:c3:7b:
1c:6b:e5:6b:50:35:3c:cf:68:20:7a:ec:88:a4:f9:7e:4e:da:
37:82:e5:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NBOAtlEEHWasbxuyLoaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YjJjNTQ0MDIzNTIyMDA2ZDcxYzE3OTU2MWM0YmQzMDVi
YWQzN2QwHhcNMjUxMDE5MTYwMTEyWhcNMjUxMDIwMTYwMTEyWjAzMTEwLwYDVQQD
EyhiODdjZTFkNDcwYmQ1ODc1ZGU1ZmEzNjM3MjRlOTk5MzM3N2U0ZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseT66v+FT1UoHr1qszUdpCkMqKL5
nrDIVABficNH1EicaeHyrNUdAy1aXda3MICKVAxUY7cC9vbGtKKOl4uu15MHM2V/
Jcf7cOF1OhmDr6saUmi6+G4PWTnPW6DKBWKMbIY1uMGkk3OZKq3DfvxCTG55S8Hk
823Vgc7n+XOkWsMxDBKqY67qC2hA7KYPwAVYwCMY6IFeUUApCY1ZvtASC7/lav0g
E7gk+kLiWsldsnrwYrn5W/6687dzQcya5oeTavfjRnzGIxXMx1QGMG9Nf4YyzEt7
eqIqGKLSs/oDc2+If+lHy3+X8hyDw5upUuv0hXEeGdx0GpY5Hui7a0nbQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLh84dRwvVh13l+jY3JOmZM3fk6iMB8GA1UdIwQY
MBaAFEayxUQCNSIAbXHBeVYcS9MFutN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJMRlJBSTFJZ0J0Y2NGNVZoeEwwd1c2MDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNWI0YWMtNDk1My00MDBmLWI1ZDUt
ZTBhYzdhNGE0ZmVjLzEvUnJMRlJBSTFJZ0J0Y2NGNVZoeEwwd1c2MDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNWI0YWMtNDk1My00MDBmLWI1ZDUtZTBhYzdhNGE0ZmVj
LzEvUnJMRlJBSTFJZ0J0Y2NGNVZoeEwwd1c2MDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUvgpmH3
kjBpSw5neAFPCOzy0DAsPr6ktaxOacKSQ6aVe8jCGfSyvHAUowt7btOzLt2SWYHe
5OEFwv9AkS0rPBVdRt7upm5gpNVwASId2wUYdiPJWM2z1XCnOabU70JDK6AJ3Wc1
M2abzjSzrXEnNw2cVMxB6eztACpK+0BfrfYpg8AQGV9dUajpeDzPWJlF82XCNqK8
e3oUzgYuRdePZSt6Z6A+n8Vb/1f9KJih6Ap5gxnHUvkabLgm1Eq6AoJ6XJ75M7cR
KaTB01faWB/Xx19DsEnbLVsZS0lR2fGnNM+tsrI4I/aEysN7HGvla1A1PM9oIHrs
iKT5fk7aN4LlTQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:30 2025 by rpki-client