Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier: oDY3+VL4Ef0Oj+k+GxZlJgGU6n6+03i4MTApI74OcWs=
Subject key identifier: 89:D1:5F:2D:BE:B6:CD:9C:3B:FF:05:26:28:CA:92:85:6E:07:F6:40
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial: 0199FCC672284E264BBBFA0C4A4B68A6B5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number: 0C5F
Signing time: Sun 19 Oct 2025 14:01:27 +0000
Manifest this update: Sun 19 Oct 2025 14:01:27 +0000
Manifest next update: Mon 20 Oct 2025 14:01:27 +0000
Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: 8m9flI2vkwvGJ5CsVh3YnIhhEi+UyADLC2psrdvzq+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:72:28:4e:26:4b:bb:fa:0c:4a:4b:68:a6:b5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Validity
Not Before: Oct 19 14:01:27 2025 GMT
Not After : Oct 20 14:01:27 2025 GMT
Subject: CN=89d15f2dbeb6cd9c3bff052628ca92856e07f640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:01:77:12:ed:0b:09:8b:4d:e2:cf:1a:a9:
f4:4a:94:1b:ea:b4:ff:3c:72:ab:b7:5d:d8:48:10:
fe:8d:6c:e6:57:21:86:d7:8c:ac:47:2a:8c:92:33:
e9:95:10:ec:3f:6d:89:f9:51:e5:37:23:79:43:f9:
31:84:84:e1:51:29:d3:59:09:b9:ae:b6:32:fc:dd:
66:7b:32:13:1a:66:25:35:a1:c9:6d:4f:cf:4a:c7:
7d:22:12:57:dc:e5:5f:07:72:8e:74:5b:7f:86:24:
c7:cc:35:a8:7a:29:e0:31:a7:fe:fd:d7:9a:64:89:
84:28:bc:4b:af:2a:ea:c5:87:75:79:65:b2:d0:94:
67:f6:fe:ba:94:6f:99:eb:5e:b7:72:a8:ce:26:ee:
3d:be:e0:31:31:03:bb:f6:2b:23:74:81:2e:fe:8a:
28:4c:95:f2:80:1f:4a:e9:e6:08:40:96:75:1b:64:
91:f8:d2:b6:9d:0e:f3:46:c1:7b:b5:b2:6b:fe:6d:
ef:27:75:4f:9f:4f:d9:fc:da:db:3e:03:ef:fa:f9:
24:d9:bc:e3:98:0c:9a:05:41:d3:99:0d:42:c4:54:
3a:b1:14:74:96:9b:65:34:5c:59:88:9b:a9:ab:9f:
cb:c3:3c:ad:14:94:9e:84:35:a0:d5:a0:df:d5:4c:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D1:5F:2D:BE:B6:CD:9C:3B:FF:05:26:28:CA:92:85:6E:07:F6:40
X509v3 Authority Key Identifier:
keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:97:94:31:68:a7:34:21:ce:4d:0e:7c:da:0c:73:83:4c:06:
57:79:84:f2:a4:2b:df:6d:af:e2:be:fa:98:ca:61:7e:af:b3:
94:30:96:86:a5:dc:c7:11:f5:d5:2f:3d:4a:78:1d:50:54:02:
f5:2b:5d:ba:29:23:5e:b1:c2:ae:7c:e2:17:a9:28:45:06:fb:
b6:9c:aa:59:9b:fe:57:a2:6c:8f:ab:77:7e:28:85:11:fe:f0:
92:0b:0e:9d:62:8b:24:ab:86:10:62:2b:96:2a:61:3a:82:d3:
6b:cc:2e:38:85:92:36:53:01:1a:21:6c:e0:0f:58:b8:87:0a:
9d:44:12:cd:86:df:8b:8a:6e:66:fd:e6:fa:69:bd:f3:9c:ea:
4b:6b:93:9e:4b:fe:60:75:48:7d:51:4a:5e:78:a6:8d:c2:87:
4f:c1:65:fd:e5:74:67:bc:64:7f:f6:d0:2e:30:fa:51:31:f0:
7f:eb:ae:01:4a:96:24:9a:b1:f7:68:dc:3a:23:a7:ab:30:d0:
98:22:6c:a8:6b:10:04:43:6e:2f:29:50:a6:50:51:db:95:4c:
e0:b5:cc:6b:0a:fc:2b:07:5a:f8:c7:5d:b8:35:b8:54:57:82:
9e:3b:03:3b:25:c9:42:cf:df:f9:42:83:9a:bc:e7:19:29:0e:
bf:1e:96:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnIoTiZLu/oMSktoprXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOGZiYjI0YzI4YmEyMTE3MjEyZjBkMzI3M2EzYzJhNGMy
N2NjMTIwHhcNMjUxMDE5MTQwMTI3WhcNMjUxMDIwMTQwMTI3WjAzMTEwLwYDVQQD
Eyg4OWQxNWYyZGJlYjZjZDljM2JmZjA1MjYyOGNhOTI4NTZlMDdmNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKcBdxLtCwmLTeLPGqn0SpQb6rT/
PHKrt13YSBD+jWzmVyGG14ysRyqMkjPplRDsP22J+VHlNyN5Q/kxhIThUSnTWQm5
rrYy/N1mezITGmYlNaHJbU/PSsd9IhJX3OVfB3KOdFt/hiTHzDWoeingMaf+/dea
ZImEKLxLryrqxYd1eWWy0JRn9v66lG+Z6163cqjOJu49vuAxMQO79isjdIEu/ooo
TJXygB9K6eYIQJZ1G2SR+NK2nQ7zRsF7tbJr/m3vJ3VPn0/Z/NrbPgPv+vkk2bzj
mAyaBUHTmQ1CxFQ6sRR0lptlNFxZiJupq5/LwzytFJSehDWg1aDf1UzZ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInRXy2+ts2cO/8FJijKkoVuB/ZAMB8GA1UdIwQY
MBaAFIuPuyTCi6IRchLw0yc6PCpMJ8wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTQtN0pNS0xvaEZ5RXZEVEp6bzhLa3duekJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZjIxNjctNmE1ZC00ZDQxLTgyOTct
YzJlOWQxN2Q4ZDRhLzEvaTQtN0pNS0xvaEZ5RXZEVEp6bzhLa3duekJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZjIxNjctNmE1ZC00ZDQxLTgyOTctYzJlOWQxN2Q4ZDRh
LzEvaTQtN0pNS0xvaEZ5RXZEVEp6bzhLa3duekJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZeUMWin
NCHOTQ582gxzg0wGV3mE8qQr322v4r76mMphfq+zlDCWhqXcxxH11S89SngdUFQC
9StduikjXrHCrnziF6koRQb7tpyqWZv+V6Jsj6t3fiiFEf7wkgsOnWKLJKuGEGIr
liphOoLTa8wuOIWSNlMBGiFs4A9YuIcKnUQSzYbfi4puZv3m+mm985zqS2uTnkv+
YHVIfVFKXnimjcKHT8Fl/eV0Z7xkf/bQLjD6UTHwf+uuAUqWJJqx92jcOiOnqzDQ
mCJsqGsQBENuLylQplBR25VM4LXMawr8Kwda+MdduDW4VFeCnjsDOyXJQs/f+UKD
mrznGSkOvx6WhA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:21 2025 by rpki-client