Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
File: b_eJEzFFDchig6CJvZRw5pw37RI.mft (raw, json)
Hash identifier: 9eLyg6a7hIdXNA5UsCULuvVOhUnEjdtw9Kudbo/9cW0=
Subject key identifier: CE:B5:8E:37:96:E0:8F:A0:9B:CA:3E:87:D9:3A:6D:B0:DF:9C:7A:E2
Authority key identifier: 6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12
Certificate issuer: /CN=6ff7891331450dc86283a089bd9470e69c37ed12
Certificate serial: 0199FDD98F26E7645A379ED6850A5703EE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
Manifest number: 02B2
Signing time: Sun 19 Oct 2025 19:01:57 +0000
Manifest this update: Sun 19 Oct 2025 19:01:57 +0000
Manifest next update: Mon 20 Oct 2025 19:01:57 +0000
Files and hashes: 1: b_eJEzFFDchig6CJvZRw5pw37RI.crl (hash: FUdeMIY1wWmptc3V2PJ6g12Hu+d5uHjWgpfpwUaGups=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:8f:26:e7:64:5a:37:9e:d6:85:0a:57:03:ee:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff7891331450dc86283a089bd9470e69c37ed12
Validity
Not Before: Oct 19 19:01:57 2025 GMT
Not After : Oct 20 19:01:57 2025 GMT
Subject: CN=ceb58e3796e08fa09bca3e87d93a6db0df9c7ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6f:e1:92:3e:75:65:22:dc:53:93:98:f4:38:
5e:a5:3c:f7:45:e1:b7:5b:8d:0c:db:87:8e:d2:f9:
bb:24:85:2f:2f:f0:dd:2d:a6:75:cb:ec:cd:19:03:
6e:23:0f:22:2d:62:e0:45:71:69:19:ba:00:8b:ab:
9e:f4:a0:f9:d9:f4:d9:a1:20:a7:fc:1b:90:20:50:
ca:e2:fc:60:bd:52:33:25:b4:49:ed:ad:4b:59:2c:
0f:64:db:38:4e:2d:29:53:da:b6:30:26:23:4d:e8:
5a:68:41:6a:48:da:43:1d:6a:95:1e:d7:0f:ed:5c:
d8:47:9f:fa:44:16:49:ab:9f:95:f3:b1:02:25:73:
0b:4b:04:50:5d:d4:2d:ee:8c:76:07:b5:fa:77:c3:
8a:c1:61:c5:9a:16:56:b6:01:3e:29:cf:98:c6:d7:
9b:4f:33:33:45:74:83:f0:89:cb:41:62:2b:7a:a5:
54:4e:d7:f9:58:3b:bb:34:cb:1b:74:d6:a1:e0:02:
49:b8:8e:52:c9:fa:b8:cc:9e:9c:1e:98:44:10:79:
1e:92:cc:5b:e7:f5:8f:81:dc:20:8c:34:f1:fa:e4:
22:70:74:4a:17:99:be:59:04:b1:56:09:da:58:87:
d0:3d:5f:96:26:4b:45:35:1b:27:bc:d7:b3:b9:52:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B5:8E:37:96:E0:8F:A0:9B:CA:3E:87:D9:3A:6D:B0:DF:9C:7A:E2
X509v3 Authority Key Identifier:
keyid:6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:02:bb:c7:89:1e:e7:61:80:e0:33:20:d2:b1:84:94:ed:90:
02:2b:53:c7:ad:67:91:41:ef:47:78:b7:bb:a9:e9:68:b9:1a:
1d:6c:7a:f8:27:76:f3:cf:16:ce:16:d5:3e:d2:ed:a2:91:f0:
ed:ee:cb:fc:cb:f3:bd:6d:b4:23:81:10:78:7b:9e:a9:1a:4e:
b8:25:ac:97:b2:d4:7f:f0:f2:70:6d:24:ce:5a:2d:90:65:1f:
5d:c1:68:b6:56:a4:d7:e9:96:f6:ee:60:9a:8a:b3:ef:21:a0:
b9:8c:0d:cd:18:02:ae:a2:47:60:3a:4a:86:62:87:fd:7d:94:
eb:56:b1:30:87:e1:36:c5:dd:17:28:4f:db:89:59:d1:8d:99:
4c:27:eb:07:27:33:df:49:ba:40:b3:51:04:6f:2c:9f:83:cb:
20:cd:4c:d4:b0:02:2d:58:f8:c8:91:f2:5f:d6:f7:9b:04:4c:
86:3d:98:a9:98:bd:e1:72:ea:cc:01:cc:57:98:58:4f:02:5e:
db:9d:2f:b3:8e:8b:51:1e:52:4e:7b:9d:b7:2d:78:11:99:8c:
50:1d:1a:5d:d4:5d:54:63:e7:8e:de:68:04:b1:67:2a:35:08:
f0:23:29:86:d5:fe:41:d5:91:25:17:4a:36:f2:2b:b1:97:b0:
85:c6:a3:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Y8m52RaN57WhQpXA+49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZjc4OTEzMzE0NTBkYzg2MjgzYTA4OWJkOTQ3MGU2OWMz
N2VkMTIwHhcNMjUxMDE5MTkwMTU3WhcNMjUxMDIwMTkwMTU3WjAzMTEwLwYDVQQD
EyhjZWI1OGUzNzk2ZTA4ZmEwOWJjYTNlODdkOTNhNmRiMGRmOWM3YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2/hkj51ZSLcU5OY9DhepTz3ReG3
W40M24eO0vm7JIUvL/DdLaZ1y+zNGQNuIw8iLWLgRXFpGboAi6ue9KD52fTZoSCn
/BuQIFDK4vxgvVIzJbRJ7a1LWSwPZNs4Ti0pU9q2MCYjTehaaEFqSNpDHWqVHtcP
7VzYR5/6RBZJq5+V87ECJXMLSwRQXdQt7ox2B7X6d8OKwWHFmhZWtgE+Kc+Yxteb
TzMzRXSD8InLQWIreqVUTtf5WDu7NMsbdNah4AJJuI5Syfq4zJ6cHphEEHkeksxb
5/WPgdwgjDTx+uQicHRKF5m+WQSxVgnaWIfQPV+WJktFNRsnvNezuVJ2OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM61jjeW4I+gm8o+h9k6bbDfnHriMB8GA1UdIwQY
MBaAFG/3iRMxRQ3IYoOgib2UcOacN+0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDkyNmUtZjBlNS00M2Q2LThlM2Mt
ZDU3NWI5NjI0ZGU3LzEvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MDkyNmUtZjBlNS00M2Q2LThlM2MtZDU3NWI5NjI0ZGU3
LzEvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAK7x4ke
52GA4DMg0rGElO2QAitTx61nkUHvR3i3u6npaLkaHWx6+Cd2888WzhbVPtLtopHw
7e7L/MvzvW20I4EQeHueqRpOuCWsl7LUf/DycG0kzlotkGUfXcFotlak1+mW9u5g
moqz7yGguYwNzRgCrqJHYDpKhmKH/X2U61axMIfhNsXdFyhP24lZ0Y2ZTCfrBycz
30m6QLNRBG8sn4PLIM1M1LACLVj4yJHyX9b3mwRMhj2YqZi94XLqzAHMV5hYTwJe
250vs46LUR5STnudty14EZmMUB0aXdRdVGPnjt5oBLFnKjUI8CMphtX+QdWRJRdK
NvIrsZewhcajOQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:40 2025 by rpki-client