Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json)
Hash identifier: YFtohthAbyfJ52skEncmjYL5v2HRuFYytR1cJTRRA3I=
Subject key identifier: 13:E5:32:D3:E9:28:89:12:6C:D9:62:C8:0F:F1:AC:86:B4:F0:9F:B5
Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Certificate serial: 0199FBEB40F941A74BFDD3C17EE99C1F6395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
Manifest number: 105D
Signing time: Sun 19 Oct 2025 10:02:02 +0000
Manifest this update: Sun 19 Oct 2025 10:02:02 +0000
Manifest next update: Mon 20 Oct 2025 10:02:02 +0000
Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: 72SQ8YTwbTk2ySVOUt8c3Q579lGaoKd3xnpeDRt+irc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:40:f9:41:a7:4b:fd:d3:c1:7e:e9:9c:1f:63:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Validity
Not Before: Oct 19 10:02:02 2025 GMT
Not After : Oct 20 10:02:02 2025 GMT
Subject: CN=13e532d3e92889126cd962c80ff1ac86b4f09fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:30:e9:5e:ab:bf:61:25:a7:54:1a:d5:ee:
ec:b0:17:2a:e2:86:59:7b:9d:08:27:50:23:b8:2a:
0e:e3:4c:10:d8:ab:ff:26:e0:18:24:9a:96:a3:c6:
1e:dd:5c:71:fc:5b:ce:22:8b:95:23:66:ed:ca:76:
00:1e:da:91:b9:7c:02:9c:0d:f4:c9:ba:0f:55:19:
f7:f4:d4:66:e0:11:4d:a3:28:3b:ee:bf:eb:92:80:
68:d6:bc:aa:7e:84:3c:1a:b8:a2:ac:82:1f:e2:2b:
09:00:0a:17:68:a5:15:71:4d:d3:ae:30:f2:7b:38:
b7:ce:33:f0:6a:24:cc:f8:72:08:32:82:d1:0b:98:
22:d1:52:5f:ea:c7:db:d2:22:6d:12:1b:e4:10:74:
e8:84:a3:0b:fa:69:19:97:f6:08:3f:9b:26:dd:71:
d0:44:5a:dd:4f:fd:2b:c0:66:79:c8:18:13:6d:ec:
9b:8a:0b:ad:0b:58:da:85:81:2c:44:5a:40:43:a3:
9b:31:5f:2e:1c:5f:c3:96:eb:00:e7:b9:2e:82:ff:
61:50:26:2c:53:ab:a2:21:7d:cf:04:67:a7:c3:91:
cb:bb:77:19:4a:dc:98:27:51:1f:95:70:3b:fe:33:
26:f3:5d:90:98:37:8f:7f:67:52:a1:d0:18:0a:53:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E5:32:D3:E9:28:89:12:6C:D9:62:C8:0F:F1:AC:86:B4:F0:9F:B5
X509v3 Authority Key Identifier:
keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:de:36:9a:cd:1d:12:ed:d4:4f:3f:80:34:73:f1:a4:16:b9:
f9:78:5b:56:22:d1:e1:01:0a:a9:76:73:a2:4e:79:bc:f7:13:
2e:dd:93:fd:0f:63:ee:73:b1:34:ad:ae:c8:51:6b:62:54:56:
10:7c:9e:00:fc:ec:ca:2f:5a:43:d3:e3:f8:85:7f:fd:06:e9:
04:1d:2e:5a:68:56:f0:ad:71:cd:89:d7:1c:13:12:84:d4:88:
3a:2f:19:6c:ce:b3:df:5a:8c:fa:63:ce:fa:a6:fe:db:8f:52:
8b:19:1f:88:18:b0:6f:83:32:a6:9f:30:e3:5b:4c:24:78:54:
c2:a2:25:67:88:32:68:8c:d2:b4:c4:d7:bf:a7:e2:e9:3e:8c:
f7:b4:db:99:7c:db:93:ef:8b:ef:c1:f8:d5:9c:38:25:5e:4c:
89:3b:b1:ef:08:f0:0c:5c:9c:f1:19:c6:08:35:c0:29:f5:b0:
93:63:be:65:93:72:de:9a:84:57:5b:d0:19:93:c0:69:f7:eb:
98:15:80:9a:2c:b7:7e:f8:cb:23:eb:31:8f:cc:a4:c6:dd:58:
67:11:37:70:7b:1a:47:15:03:7e:69:c3:c1:5f:5e:d4:fb:7f:
fd:d5:f2:72:c8:d6:12:da:0a:a0:78:66:95:8e:99:ca:41:09:
d8:28:65:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn760D5QadL/dPBfumcH2OVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwM2Y3ODVlMTQzNDBhYzZhODQwNDg2M2Q3YmY3YWY5NGU1
YWI5YjUwHhcNMjUxMDE5MTAwMjAyWhcNMjUxMDIwMTAwMjAyWjAzMTEwLwYDVQQD
EygxM2U1MzJkM2U5Mjg4OTEyNmNkOTYyYzgwZmYxYWM4NmI0ZjA5ZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupIw6V6rv2Elp1Qa1e7ssBcq4oZZ
e50IJ1AjuCoO40wQ2Kv/JuAYJJqWo8Ye3Vxx/FvOIouVI2btynYAHtqRuXwCnA30
yboPVRn39NRm4BFNoyg77r/rkoBo1ryqfoQ8GriirIIf4isJAAoXaKUVcU3TrjDy
ezi3zjPwaiTM+HIIMoLRC5gi0VJf6sfb0iJtEhvkEHTohKML+mkZl/YIP5sm3XHQ
RFrdT/0rwGZ5yBgTbeybigutC1jahYEsRFpAQ6ObMV8uHF/DlusA57kugv9hUCYs
U6uiIX3PBGenw5HLu3cZStyYJ1EflXA7/jMm812QmDePf2dSodAYClOrdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPlMtPpKIkSbNliyA/xrIa08J+1MB8GA1UdIwQY
MBaAFHA/eF4UNArGqEBIY9e/evlOWrm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yZTUwOWEtOTIyYy00ZWI4LTljNzMt
NDc2YmNjNDQxNTRkLzEvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yZTUwOWEtOTIyYy00ZWI4LTljNzMtNDc2YmNjNDQxNTRk
LzEvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs942ms0d
Eu3UTz+ANHPxpBa5+XhbViLR4QEKqXZzok55vPcTLt2T/Q9j7nOxNK2uyFFrYlRW
EHyeAPzsyi9aQ9Pj+IV//QbpBB0uWmhW8K1xzYnXHBMShNSIOi8ZbM6z31qM+mPO
+qb+249SixkfiBiwb4Mypp8w41tMJHhUwqIlZ4gyaIzStMTXv6fi6T6M97TbmXzb
k++L78H41Zw4JV5MiTux7wjwDFyc8RnGCDXAKfWwk2O+ZZNy3pqEV1vQGZPAaffr
mBWAmiy3fvjLI+sxj8ykxt1YZxE3cHsaRxUDfmnDwV9e1Pt//dXycsjWEtoKoHhm
lY6ZykEJ2ChlxA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:49 2025 by rpki-client