Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
File: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft (raw, json)
Hash identifier: yoAPt6oV8tTrBsDMa9Sr7iucrhumAdNn61TWvcfJIzs=
Subject key identifier: 3B:12:6F:19:DE:B8:49:C6:53:E8:80:56:4B:C3:E9:2F:9F:55:3A:98
Authority key identifier: 98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50
Certificate issuer: /CN=98ae843e7bc8748d015bc47f635b17561be72850
Certificate serial: 0199FBEB4FC37E1987066D92E6DCA186B15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl (hash: luvolwxd2yzVXaSY7FJFqnvQNnkjuF2MzshV3shF8ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4f:c3:7e:19:87:06:6d:92:e6:dc:a1:86:b1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ae843e7bc8748d015bc47f635b17561be72850
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=3b126f19deb849c653e880564bc3e92f9f553a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:f4:fc:c9:c7:99:8f:12:0c:02:ef:7b:2a:
d9:ad:c8:a1:c2:e9:3a:41:a9:d5:98:0a:73:23:b9:
95:d1:76:56:19:22:7d:3c:a0:14:ae:c6:09:cc:60:
33:92:f6:c3:ae:69:51:fd:8d:c4:30:cd:fe:fe:5a:
e7:55:c1:d5:86:b6:5b:e3:87:07:aa:a6:ac:62:13:
cc:a1:f1:ae:6f:a6:22:19:22:66:95:d0:76:68:f4:
98:27:86:8c:3f:0c:9c:28:5a:1f:64:36:20:9f:6d:
bc:0c:af:8e:3b:e5:eb:44:45:1a:a2:26:f0:19:96:
94:f5:42:b5:c4:83:cb:0d:32:e9:38:6b:5e:c7:0e:
16:6a:45:38:04:db:b0:30:4a:73:e4:79:2e:75:2a:
f5:5c:ba:9a:4d:33:0d:c4:a7:b2:c6:c7:9a:52:b1:
14:b3:22:80:ea:4c:25:cc:19:d8:53:32:8e:14:60:
6f:32:0d:da:65:8e:bd:f5:85:de:55:54:36:58:a6:
15:0f:8c:c8:b9:f8:de:d5:f8:07:6e:88:b6:23:be:
04:2f:65:c4:e0:bb:41:bf:50:5c:ab:7f:f2:09:97:
5c:a2:a4:46:f7:41:79:b7:a0:eb:74:41:a1:37:73:
bb:dc:55:38:ac:ff:47:0f:a0:2f:08:0b:dc:15:48:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:6F:19:DE:B8:49:C6:53:E8:80:56:4B:C3:E9:2F:9F:55:3A:98
X509v3 Authority Key Identifier:
keyid:98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bc:60:ac:14:10:87:04:0f:48:e3:40:d8:da:97:4e:c1:65:
15:c0:a7:3b:fe:d0:44:47:36:0d:05:94:7b:e2:11:6a:8f:0a:
ac:7c:a1:68:6a:25:23:5d:aa:fe:f1:ec:23:e6:7b:73:8a:33:
95:ca:18:2e:99:a2:9e:99:f4:7f:c8:98:03:a7:da:7c:d1:31:
6c:be:d0:74:e5:9d:34:77:bf:4b:05:5b:c9:ec:7b:b5:30:a8:
11:63:8e:1c:99:4a:e9:35:a6:17:53:ac:76:66:35:3b:9b:80:
32:32:3c:21:2f:53:20:2d:44:84:85:56:ea:6c:2e:4c:e2:0f:
21:a5:c0:05:8c:f7:57:33:46:2f:c4:03:67:aa:e0:4a:61:2c:
f3:9d:3f:d7:4f:ff:22:8c:c0:44:f0:5f:7d:eb:6f:4d:82:3d:
c0:c1:47:62:50:c7:c8:5d:27:c0:c4:92:b3:18:3f:02:c0:14:
c8:9c:70:6e:f2:9f:21:59:7f:36:62:4e:85:58:e1:6f:0a:eb:
85:42:25:3b:9b:e9:d6:01:ae:ae:33:ba:50:cf:77:66:c3:42:
aa:3f:19:1f:1b:b6:d8:a2:34:ce:82:e3:b2:b4:07:2e:fb:ea:
f2:22:c4:a7:bc:9b:be:ba:c7:61:55:61:96:91:9c:bb:7c:82:
1f:58:42:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn760/DfhmHBm2S5tyhhrFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YWU4NDNlN2JjODc0OGQwMTViYzQ3ZjYzNWIxNzU2MWJl
NzI4NTAwHhcNMjUxMDE5MTAwMjA2WhcNMjUxMDIwMTAwMjA2WjAzMTEwLwYDVQQD
EygzYjEyNmYxOWRlYjg0OWM2NTNlODgwNTY0YmMzZTkyZjlmNTUzYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8r0/MnHmY8SDALveyrZrcihwuk6
QanVmApzI7mV0XZWGSJ9PKAUrsYJzGAzkvbDrmlR/Y3EMM3+/lrnVcHVhrZb44cH
qqasYhPMofGub6YiGSJmldB2aPSYJ4aMPwycKFofZDYgn228DK+OO+XrREUaoibw
GZaU9UK1xIPLDTLpOGtexw4WakU4BNuwMEpz5HkudSr1XLqaTTMNxKeyxseaUrEU
syKA6kwlzBnYUzKOFGBvMg3aZY699YXeVVQ2WKYVD4zIufje1fgHboi2I74EL2XE
4LtBv1Bcq3/yCZdcoqRG90F5t6DrdEGhN3O73FU4rP9HD6AvCAvcFUi6BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsSbxneuEnGU+iAVkvD6S+fVTqYMB8GA1UdIwQY
MBaAFJiuhD57yHSNAVvEf2NbF1Yb5yhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUs2RVBudklkSTBCVzhSX1kxc1hWaHZuS0ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wNGU1ZDMtYjkyMS00Mjc0LThjZDEt
ZWQwNzY3NjcxOGJhLzEvbUs2RVBudklkSTBCVzhSX1kxc1hWaHZuS0ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wNGU1ZDMtYjkyMS00Mjc0LThjZDEtZWQwNzY3NjcxOGJh
LzEvbUs2RVBudklkSTBCVzhSX1kxc1hWaHZuS0ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLxgrBQQ
hwQPSONA2NqXTsFlFcCnO/7QREc2DQWUe+IRao8KrHyhaGolI12q/vHsI+Z7c4oz
lcoYLpminpn0f8iYA6fafNExbL7QdOWdNHe/SwVbyex7tTCoEWOOHJlK6TWmF1Os
dmY1O5uAMjI8IS9TIC1EhIVW6mwuTOIPIaXABYz3VzNGL8QDZ6rgSmEs850/10//
IozARPBffetvTYI9wMFHYlDHyF0nwMSSsxg/AsAUyJxwbvKfIVl/NmJOhVjhbwrr
hUIlO5vp1gGurjO6UM93ZsNCqj8ZHxu22KI0zoLjsrQHLvvq8iLEp7ybvrrHYVVh
lpGcu3yCH1hCyA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:12 2025 by rpki-client