Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
File: d11030Q8uAUXzkFQ3OImYpQPHXw.mft (raw, json)
Hash identifier: jrdEJQQu7xz04mjLnGe2CfAPJ2LvSJrAlTQpLUKHMss=
Subject key identifier: 4E:30:9C:55:2E:C9:2F:35:54:A3:01:6F:A2:D0:D2:E5:DE:67:99:AE
Authority key identifier: 77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
Certificate issuer: /CN=775d74df443cb80517ce4150dce22662940f1d7c
Certificate serial: 019A003522198E5E53AD691996FA66E9628A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
Manifest number: 0B1F
Signing time: Mon 20 Oct 2025 06:01:13 +0000
Manifest this update: Mon 20 Oct 2025 06:01:13 +0000
Manifest next update: Tue 21 Oct 2025 06:01:13 +0000
Files and hashes: 1: d11030Q8uAUXzkFQ3OImYpQPHXw.crl (hash: YMP/2lLXuqV30kwv1TaxAMjQc+t+T9WibyhjxhKJwfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:22:19:8e:5e:53:ad:69:19:96:fa:66:e9:62:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775d74df443cb80517ce4150dce22662940f1d7c
Validity
Not Before: Oct 20 06:01:13 2025 GMT
Not After : Oct 21 06:01:13 2025 GMT
Subject: CN=4e309c552ec92f3554a3016fa2d0d2e5de6799ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:ae:ad:6a:b4:65:a1:b5:3b:14:1a:c8:45:
02:e5:b6:ed:84:0f:b4:41:0b:2d:89:13:2f:80:e1:
36:51:d1:82:dc:d5:b0:00:89:13:45:34:da:44:68:
7d:15:63:93:c0:ff:8c:a3:7f:50:c2:35:98:92:2b:
c7:66:bb:b1:59:dc:f0:db:9d:50:0f:ed:c1:52:af:
89:4d:2a:05:42:f5:46:a7:e1:9e:0f:6c:83:5e:8f:
d2:3b:84:ef:86:f9:22:4f:2f:99:ae:e9:17:53:b6:
c5:19:6e:92:30:ac:55:d3:f2:69:75:2b:b3:12:0c:
4e:7d:b5:7b:fe:43:b3:4d:97:36:80:23:1c:72:a6:
ae:8c:e5:d4:4b:06:d6:89:c2:87:22:93:fe:7a:01:
ff:75:45:ae:f8:48:cb:da:56:1c:61:a2:72:1a:65:
74:26:48:19:9e:d3:16:6f:fa:77:e1:c4:5f:25:f4:
c8:6f:54:7a:7d:b7:a8:74:5b:81:9b:70:9a:98:cc:
9c:d3:e4:ca:27:3d:96:d5:ff:41:10:92:dd:8f:40:
c6:5a:db:74:f6:95:18:44:cc:f4:1c:c5:c9:05:9b:
4e:70:26:ec:34:50:ff:9e:e0:b5:5a:28:a1:aa:94:
f4:6d:22:d2:df:52:b6:4b:f1:79:0f:37:b4:07:35:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:9C:55:2E:C9:2F:35:54:A3:01:6F:A2:D0:D2:E5:DE:67:99:AE
X509v3 Authority Key Identifier:
keyid:77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:04:eb:d1:1e:db:14:0b:66:43:03:52:cd:2d:e1:a8:05:a9:
86:8e:36:90:1d:5d:54:89:98:9b:86:cd:41:ea:be:be:ab:e5:
21:28:7d:80:60:a0:08:42:cb:00:91:4a:c2:64:bb:ce:99:52:
11:e0:b5:10:08:c9:c4:a3:61:d2:0a:75:39:3f:97:a5:1e:ec:
fc:42:61:53:8e:5f:33:f8:c8:ad:3e:82:60:42:25:43:ce:66:
8a:e5:3c:93:a6:ac:4e:ba:61:12:36:b1:a9:73:a3:42:14:9c:
29:4d:47:d0:53:dc:39:5e:b3:9c:57:6c:79:50:dc:8d:4e:71:
92:cc:09:38:29:f5:6c:8d:89:97:17:85:95:79:91:95:12:93:
0b:e7:84:47:ba:f9:7d:30:fa:1f:69:a4:46:fd:e2:c1:66:7a:
6a:f3:6a:5b:04:10:58:dd:fb:47:be:76:9a:5f:eb:c3:a3:14:
79:b0:be:62:6d:f6:7e:d0:b8:34:ab:9d:26:a0:05:34:d2:a0:
30:0c:73:4e:f6:72:ca:ff:8a:82:97:3e:41:f2:9a:a2:b8:3c:
0e:6b:bf:f5:be:e8:30:46:c9:99:16:11:3d:25:9c:48:ef:89:
25:fa:d9:f1:6f:86:cf:fa:53:d8:47:90:fa:d9:fa:ae:f0:6b:
ce:41:88:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANSIZjl5TrWkZlvpm6WKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NWQ3NGRmNDQzY2I4MDUxN2NlNDE1MGRjZTIyNjYyOTQw
ZjFkN2MwHhcNMjUxMDIwMDYwMTEzWhcNMjUxMDIxMDYwMTEzWjAzMTEwLwYDVQQD
Eyg0ZTMwOWM1NTJlYzkyZjM1NTRhMzAxNmZhMmQwZDJlNWRlNjc5OWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmaurWq0ZaG1OxQayEUC5bbthA+0
QQstiRMvgOE2UdGC3NWwAIkTRTTaRGh9FWOTwP+Mo39QwjWYkivHZruxWdzw251Q
D+3BUq+JTSoFQvVGp+GeD2yDXo/SO4TvhvkiTy+ZrukXU7bFGW6SMKxV0/JpdSuz
EgxOfbV7/kOzTZc2gCMccqaujOXUSwbWicKHIpP+egH/dUWu+EjL2lYcYaJyGmV0
JkgZntMWb/p34cRfJfTIb1R6fbeodFuBm3CamMyc0+TKJz2W1f9BEJLdj0DGWtt0
9pUYRMz0HMXJBZtOcCbsNFD/nuC1WiihqpT0bSLS31K2S/F5Dze0BzWqcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4wnFUuyS81VKMBb6LQ0uXeZ5muMB8GA1UdIwQY
MBaAFHdddN9EPLgFF85BUNziJmKUDx18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xYzc3YjctYjgyYS00ZGZkLWI2YjUt
NmY3NTg2MTk4MzdmLzEvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xYzc3YjctYjgyYS00ZGZkLWI2YjUtNmY3NTg2MTk4Mzdm
LzEvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiATr0R7b
FAtmQwNSzS3hqAWpho42kB1dVImYm4bNQeq+vqvlISh9gGCgCELLAJFKwmS7zplS
EeC1EAjJxKNh0gp1OT+XpR7s/EJhU45fM/jIrT6CYEIlQ85miuU8k6asTrphEjax
qXOjQhScKU1H0FPcOV6znFdseVDcjU5xkswJOCn1bI2JlxeFlXmRlRKTC+eER7r5
fTD6H2mkRv3iwWZ6avNqWwQQWN37R752ml/rw6MUebC+Ym32ftC4NKudJqAFNNKg
MAxzTvZyyv+Kgpc+QfKaorg8Dmu/9b7oMEbJmRYRPSWcSO+JJfrZ8W+Gz/pT2EeQ
+tn6rvBrzkGIsA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:18:49 2025 by rpki-client