Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
File: v74mhOFXoAYDw7KrDcUlKF6_64k.mft (raw, json)
Hash identifier: IF69VTmL0uiPeNutzsfcdp2OVssJBoa1qWtZaU3k8Ug=
Subject key identifier: 0E:17:88:D3:16:BC:0C:EB:00:7C:69:58:F0:7E:98:FB:7D:8E:21:9B
Authority key identifier: BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
Certificate issuer: /CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Certificate serial: 0199FDDA2747EEFA08C4A1AB4EEA39DA4403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
Manifest number: 03BC
Signing time: Sun 19 Oct 2025 19:02:36 +0000
Manifest this update: Sun 19 Oct 2025 19:02:36 +0000
Manifest next update: Mon 20 Oct 2025 19:02:36 +0000
Files and hashes: 1: v74mhOFXoAYDw7KrDcUlKF6_64k.crl (hash: 0m0RgqNtPZkPMnt5+/fr61Bdgz9odyZunXgsLWfh+Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:27:47:ee:fa:08:c4:a1:ab:4e:ea:39:da:44:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Validity
Not Before: Oct 19 19:02:36 2025 GMT
Not After : Oct 20 19:02:36 2025 GMT
Subject: CN=0e1788d316bc0ceb007c6958f07e98fb7d8e219b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:00:0a:28:dd:a9:17:7e:12:f8:0e:f8:21:6f:
dd:48:4b:5b:30:77:b1:f4:34:39:5e:21:a8:7b:4d:
77:25:fa:95:6c:e1:09:6a:83:7f:9b:27:6b:e2:99:
a9:12:e6:3c:60:a2:48:c8:e4:78:fc:0b:1f:aa:7f:
f1:56:65:9e:33:e6:a8:df:28:42:a6:b9:f1:b7:7e:
41:b1:04:94:86:0b:0c:7c:e3:c6:12:28:da:34:5d:
ea:82:87:c0:e6:09:49:a5:8e:17:d1:09:f1:f4:a3:
44:c0:9d:dd:4b:5e:69:0c:2a:d1:6b:29:4c:0b:30:
83:e2:ac:9a:26:78:2f:52:f3:19:89:f8:dc:c4:28:
8a:41:72:55:e7:30:22:41:dc:0c:99:60:9b:5b:cc:
f1:bc:ae:e9:e6:54:bb:c3:6f:3f:09:7c:b6:5e:56:
fa:6a:66:92:29:cb:55:5d:2d:2b:5c:46:90:3a:89:
f8:29:bb:24:bf:e9:9d:24:16:0a:71:88:de:93:a0:
1c:45:4a:34:c5:30:41:bb:0e:5c:f6:1c:c8:2d:79:
53:29:f2:b7:22:05:f8:90:cf:f2:73:f8:ab:95:90:
ef:b3:82:2b:2a:49:20:74:27:64:b3:8f:09:2c:d8:
63:78:94:20:ec:2d:6e:e3:b4:31:e3:94:28:c4:d6:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:17:88:D3:16:BC:0C:EB:00:7C:69:58:F0:7E:98:FB:7D:8E:21:9B
X509v3 Authority Key Identifier:
keyid:BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:84:14:4f:2d:dc:20:a5:df:3e:1d:5f:eb:3a:06:2f:d7:c8:
dd:0b:0a:b1:0c:ae:f9:63:99:6b:3a:41:27:c7:5e:6b:a7:ac:
1f:7e:c4:42:ab:81:a0:93:5c:c6:e4:df:0c:76:ea:74:7d:f3:
3f:3d:b9:7d:e0:51:9c:d4:c2:90:5d:ca:4f:16:3e:e7:0d:b4:
02:21:45:11:f3:fb:a1:5d:2c:67:53:8f:85:05:83:0e:16:b7:
20:be:2a:8d:3b:03:a4:19:8f:2d:df:c2:81:2b:58:13:2e:b7:
ee:99:de:4d:a1:aa:8a:3c:b0:22:3c:09:58:cb:d2:8b:8b:a2:
39:d6:02:a9:ab:9f:02:1e:dd:78:fa:9f:51:8e:45:2a:eb:b1:
18:8d:74:a3:c2:b4:3a:95:e9:91:6d:27:8f:19:76:1e:4f:61:
82:44:b1:da:9b:82:51:93:4a:26:3e:20:cb:db:4a:26:52:15:
16:9a:1b:4f:83:d8:db:77:e2:91:86:c8:3c:8b:d0:63:c5:26:
b2:04:ff:99:2c:29:fc:5e:e6:76:44:91:7a:e5:a5:9f:43:a4:
c2:be:4c:8a:b6:09:cc:b4:2e:81:10:9d:43:2a:56:ac:d9:38:
43:b1:8d:b6:75:88:d9:be:05:e1:09:57:25:9f:b7:1f:ae:d0:
eb:ff:37:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92idH7voIxKGrTuo52kQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYmUyNjg0ZTE1N2EwMDYwM2MzYjJhYjBkYzUyNTI4NWVi
ZmViODkwHhcNMjUxMDE5MTkwMjM2WhcNMjUxMDIwMTkwMjM2WjAzMTEwLwYDVQQD
EygwZTE3ODhkMzE2YmMwY2ViMDA3YzY5NThmMDdlOThmYjdkOGUyMTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wAKKN2pF34S+A74IW/dSEtbMHex
9DQ5XiGoe013JfqVbOEJaoN/mydr4pmpEuY8YKJIyOR4/Asfqn/xVmWeM+ao3yhC
prnxt35BsQSUhgsMfOPGEijaNF3qgofA5glJpY4X0Qnx9KNEwJ3dS15pDCrRaylM
CzCD4qyaJngvUvMZifjcxCiKQXJV5zAiQdwMmWCbW8zxvK7p5lS7w28/CXy2Xlb6
amaSKctVXS0rXEaQOon4Kbskv+mdJBYKcYjek6AcRUo0xTBBuw5c9hzILXlTKfK3
IgX4kM/yc/irlZDvs4IrKkkgdCdks48JLNhjeJQg7C1u47Qx45QoxNbhTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4XiNMWvAzrAHxpWPB+mPt9jiGbMB8GA1UdIwQY
MBaAFL++JoThV6AGA8Oyqw3FJShev+uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjc0bWhPRlhvQVlEdzdLckRjVWxLRjZfNjRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZDM2MDQtMWI5NC00MjAwLWFlYTQt
ZDhkNDJiOGIzYmEyLzEvdjc0bWhPRlhvQVlEdzdLckRjVWxLRjZfNjRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80ZDM2MDQtMWI5NC00MjAwLWFlYTQtZDhkNDJiOGIzYmEy
LzEvdjc0bWhPRlhvQVlEdzdLckRjVWxLRjZfNjRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYQUTy3c
IKXfPh1f6zoGL9fI3QsKsQyu+WOZazpBJ8dea6esH37EQquBoJNcxuTfDHbqdH3z
Pz25feBRnNTCkF3KTxY+5w20AiFFEfP7oV0sZ1OPhQWDDha3IL4qjTsDpBmPLd/C
gStYEy637pneTaGqijywIjwJWMvSi4uiOdYCqaufAh7dePqfUY5FKuuxGI10o8K0
OpXpkW0njxl2Hk9hgkSx2puCUZNKJj4gy9tKJlIVFpobT4PY23fikYbIPIvQY8Um
sgT/mSwp/F7mdkSReuWln0Okwr5MirYJzLQugRCdQypWrNk4Q7GNtnWI2b4F4QlX
JZ+3H67Q6/83uQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:58 2025 by rpki-client