Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
File: cIKkpfKWFe2f7k9nURSF40z3EuA.mft (raw, json)
Hash identifier: 9jrzZMU/vcUZ+6NV/jfiCiqKb2GbZrwvAtBYbb70Wno=
Subject key identifier: 0B:D9:C8:06:98:10:0C:C3:55:F0:CA:A2:28:19:4B:09:C7:BE:66:EB
Authority key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
Certificate issuer: /CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Certificate serial: 0199FB7C88E72C25FC4E183A5FDAC9D77F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
Manifest number: 017D
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: cIKkpfKWFe2f7k9nURSF40z3EuA.crl (hash: 2+n8NiidyLfXinXjrmbYHVPfsHmE1qJSy6hcktTnsXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:88:e7:2c:25:fc:4e:18:3a:5f:da:c9:d7:7f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=0bd9c80698100cc355f0caa228194b09c7be66eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b0:11:15:c3:e5:21:bc:26:ba:1c:6b:36:22:
0f:d0:c8:f3:1e:6f:e2:32:06:02:95:2f:68:15:22:
c4:1b:05:4c:9a:f9:5b:1a:a4:71:31:97:5d:0a:8f:
a9:7d:a5:7d:33:74:52:de:d4:28:b2:b2:a9:4c:38:
a3:c3:a3:17:04:0b:77:7a:08:52:52:f7:26:82:65:
d2:95:62:0d:d6:3d:13:e9:91:90:27:80:e9:e4:5f:
26:d9:de:d1:36:b1:1c:66:bf:a9:12:25:d2:8f:22:
c3:5d:de:a4:0b:22:83:3b:2f:56:74:13:db:ef:13:
63:ce:3e:44:1d:24:cb:1c:4f:c2:cb:67:48:af:b7:
92:51:cb:8c:77:43:93:a5:93:74:9d:ed:0f:a6:ec:
7a:12:01:f6:fb:67:48:42:38:a8:0e:d7:3f:2c:7f:
50:1d:70:7e:bc:ff:61:d2:26:6f:2c:88:de:c1:5b:
2f:e3:fc:26:8a:f7:4d:1a:44:87:06:ec:78:23:1c:
66:cc:99:e2:5c:58:d4:ee:34:e9:dc:3c:4e:e5:99:
78:e8:ee:b1:04:5f:68:c0:50:52:79:8e:64:b5:2a:
3b:cd:24:c8:f6:93:bc:bc:2a:63:99:40:29:14:44:
94:b5:4b:70:8d:41:43:ab:83:5a:7e:43:15:bc:76:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D9:C8:06:98:10:0C:C3:55:F0:CA:A2:28:19:4B:09:C7:BE:66:EB
X509v3 Authority Key Identifier:
keyid:70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4b:5e:f1:61:5a:64:bd:3a:a0:4d:67:c2:02:24:0e:46:14:
74:f3:e8:53:a1:f6:1c:e1:c1:ca:08:73:ae:b7:1c:64:eb:7d:
a1:a7:33:77:0b:c4:e2:cc:fb:b9:ca:7c:ae:ad:ad:78:68:a3:
dc:da:aa:15:3f:30:26:e6:95:b6:32:9c:a9:78:1f:72:dd:5e:
89:38:9a:2d:52:93:c3:56:d8:20:9e:83:3e:55:ba:a6:c9:6f:
9e:4d:c6:e1:2a:b5:7b:25:83:0e:4b:18:cf:02:8e:c0:08:59:
6c:23:e8:07:d9:2c:8f:25:84:a3:99:3b:02:4a:62:e0:05:c2:
84:80:e2:38:43:24:b4:d7:62:08:6b:b3:f8:64:64:c5:90:26:
f6:fa:70:11:8d:93:0b:7b:90:06:31:a9:e0:07:80:da:f6:1b:
8f:83:b3:c5:0f:8d:ae:42:b7:2c:5d:ea:39:87:b3:d7:1c:af:
10:83:40:85:e5:71:00:1c:ca:c1:d4:6d:ca:c8:9d:e3:9f:1b:
4e:10:fb:16:0a:b5:4c:6c:7a:be:2d:f3:ff:6b:ed:9d:41:87:
24:18:5d:3f:c1:51:f0:6e:91:03:02:2f:3b:0a:ec:cc:5c:d0:
7e:b4:3e:cd:99:ce:b6:f2:43:c0:94:75:60:cd:cb:11:a5:bc:
24:b9:b2:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fIjnLCX8Thg6X9rJ1394MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODJhNGE1ZjI5NjE1ZWQ5ZmVlNGY2NzUxMTQ4NWUzNGNm
NzEyZTAwHhcNMjUxMDE5MDgwMTA2WhcNMjUxMDIwMDgwMTA2WjAzMTEwLwYDVQQD
EygwYmQ5YzgwNjk4MTAwY2MzNTVmMGNhYTIyODE5NGIwOWM3YmU2NmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bARFcPlIbwmuhxrNiIP0MjzHm/i
MgYClS9oFSLEGwVMmvlbGqRxMZddCo+pfaV9M3RS3tQosrKpTDijw6MXBAt3eghS
UvcmgmXSlWIN1j0T6ZGQJ4Dp5F8m2d7RNrEcZr+pEiXSjyLDXd6kCyKDOy9WdBPb
7xNjzj5EHSTLHE/Cy2dIr7eSUcuMd0OTpZN0ne0Ppux6EgH2+2dIQjioDtc/LH9Q
HXB+vP9h0iZvLIjewVsv4/wmivdNGkSHBux4IxxmzJniXFjU7jTp3DxO5Zl46O6x
BF9owFBSeY5ktSo7zSTI9pO8vCpjmUApFESUtUtwjUFDq4NafkMVvHaTfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvZyAaYEAzDVfDKoigZSwnHvmbrMB8GA1UdIwQY
MBaAFHCCpKXylhXtn+5PZ1EUheNM9xLgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lLa3BmS1dGZTJmN2s5blVSU0Y0MHozRXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83YjI4ODUtM2NmMy00MzY3LWI2NGEt
OTllMzVjNzA5NDg2LzEvY0lLa3BmS1dGZTJmN2s5blVSU0Y0MHozRXVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83YjI4ODUtM2NmMy00MzY3LWI2NGEtOTllMzVjNzA5NDg2
LzEvY0lLa3BmS1dGZTJmN2s5blVSU0Y0MHozRXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkte8WFa
ZL06oE1nwgIkDkYUdPPoU6H2HOHByghzrrccZOt9oaczdwvE4sz7ucp8rq2teGij
3NqqFT8wJuaVtjKcqXgfct1eiTiaLVKTw1bYIJ6DPlW6pslvnk3G4Sq1eyWDDksY
zwKOwAhZbCPoB9ksjyWEo5k7Akpi4AXChIDiOEMktNdiCGuz+GRkxZAm9vpwEY2T
C3uQBjGp4AeA2vYbj4OzxQ+NrkK3LF3qOYez1xyvEINAheVxABzKwdRtysid458b
ThD7Fgq1TGx6vi3z/2vtnUGHJBhdP8FR8G6RAwIvOwrszFzQfrQ+zZnOtvJDwJR1
YM3LEaW8JLmyPw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:10 2025 by rpki-client