Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
File: s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json)
Hash identifier: XWZ4uxdlIbv0eQ++AahzFovPwXCAoCVjJzCPEELEsyk=
Subject key identifier: F6:13:98:8A:49:85:ED:56:C1:FE:15:12:47:4C:04:7F:09:D8:FA:B9
Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
Certificate issuer: /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Certificate serial: 0199FC8F662420EF707B7B4F233AC3660E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
Manifest number: 0D00
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: hDpfuWk7I2T5TaujsbGeRy0Ms+a7BdxzUTLq/1tnT/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:66:24:20:ef:70:7b:7b:4f:23:3a:c3:66:0e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=f613988a4985ed56c1fe1512474c047f09d8fab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:0d:d0:ab:59:02:12:da:15:9f:4b:0c:59:
96:a4:43:04:4f:35:f3:f3:64:94:42:6d:39:ce:c2:
13:76:13:b9:88:a2:e7:9d:07:32:e3:0e:e4:be:d9:
49:4f:59:2b:16:3d:df:ae:f3:56:9f:c3:60:15:59:
8a:0f:af:f3:cf:6f:1c:45:c6:ef:be:28:69:f6:ed:
bc:fa:95:43:68:c8:dc:e9:d0:f7:ce:ca:51:bf:c9:
ee:a9:6d:d0:59:0a:63:d7:c8:b7:9c:16:cd:47:d7:
33:40:7b:e2:cd:13:35:4e:48:e6:59:3d:ed:e6:64:
8a:e4:d1:aa:1a:ac:f7:11:71:cc:5b:08:e2:3d:a5:
5d:a8:db:b0:c6:78:4d:4c:da:0f:3c:e1:1c:c7:be:
91:2f:61:29:a7:2b:55:98:22:7f:9d:6e:e3:30:ab:
a5:d6:af:88:4b:89:bb:47:49:0c:b2:be:47:c4:c0:
6b:c3:b3:d2:70:9e:83:69:90:44:29:c9:ba:8b:96:
bd:c3:ef:0d:da:33:4f:45:56:9d:14:38:c9:fe:a4:
e9:3d:1a:3f:0d:76:70:73:47:71:17:83:8a:29:54:
1c:29:e7:31:8c:bc:6b:15:35:b7:b1:06:6d:b6:1c:
c5:0f:5c:a3:8f:0a:5f:fe:8f:a8:31:ef:ed:29:14:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:13:98:8A:49:85:ED:56:C1:FE:15:12:47:4C:04:7F:09:D8:FA:B9
X509v3 Authority Key Identifier:
keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9e:9a:e2:1c:2f:9f:d4:61:36:ee:27:17:95:81:c5:a5:ba:
7c:e4:cd:a4:15:cc:59:2d:45:35:1f:a3:56:3b:bb:22:46:9e:
32:90:de:78:b4:b1:fe:1c:e0:4a:60:9b:5d:4f:1d:32:be:ce:
ef:17:2c:e4:32:2d:eb:9a:12:1e:e0:3b:12:87:0f:f7:29:05:
14:ca:0a:89:d1:1d:59:4c:a8:03:cf:88:39:f2:2d:a2:88:dd:
02:31:82:c0:93:6c:e9:a8:24:4d:90:68:b3:42:fd:f7:2f:9f:
ef:5e:96:9e:db:7f:06:f3:98:75:26:da:df:c1:6a:13:20:0f:
ea:87:7c:f9:0e:58:e9:e2:dc:f7:7d:ab:35:5c:33:fe:24:9e:
3f:0b:06:c2:07:0a:33:38:19:20:11:68:c9:69:c8:09:ee:8b:
4f:16:d3:40:7f:ea:6a:94:dd:5c:ad:69:df:f4:06:9a:fb:e3:
76:2b:6b:38:07:69:a7:64:9b:3c:52:b7:ea:64:99:e8:33:eb:
0d:eb:ce:a9:87:3b:68:4d:a2:25:f6:f8:50:24:92:5b:84:f4:
93:cf:c6:3e:29:13:55:41:63:47:c9:79:47:b5:b0:a5:70:8f:
86:aa:b1:80:40:9c:cd:9b:51:f8:bc:a1:66:82:ff:22:d0:46:
a5:cc:90:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j2YkIO9we3tPIzrDZg6NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOWU1ZjM4OGRjMzQ5MWE0Yzk1NDdiYjU3ODhlMmZlNGY1
MGQwMzYwHhcNMjUxMDE5MTMwMTIwWhcNMjUxMDIwMTMwMTIwWjAzMTEwLwYDVQQD
EyhmNjEzOTg4YTQ5ODVlZDU2YzFmZTE1MTI0NzRjMDQ3ZjA5ZDhmYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JsN0KtZAhLaFZ9LDFmWpEMETzXz
82SUQm05zsITdhO5iKLnnQcy4w7kvtlJT1krFj3frvNWn8NgFVmKD6/zz28cRcbv
vihp9u28+pVDaMjc6dD3zspRv8nuqW3QWQpj18i3nBbNR9czQHvizRM1TkjmWT3t
5mSK5NGqGqz3EXHMWwjiPaVdqNuwxnhNTNoPPOEcx76RL2EppytVmCJ/nW7jMKul
1q+IS4m7R0kMsr5HxMBrw7PScJ6DaZBEKcm6i5a9w+8N2jNPRVadFDjJ/qTpPRo/
DXZwc0dxF4OKKVQcKecxjLxrFTW3sQZtthzFD1yjjwpf/o+oMe/tKRRtYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYTmIpJhe1Wwf4VEkdMBH8J2Pq5MB8GA1UdIwQY
MBaAFLOeXziNw0kaTJVHu1eI4v5PUNA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczU1Zk9JM0RTUnBNbFVlN1Y0amlfazlRMERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMGNlMGItNDQxMy00NThiLWI3MWYt
NWRjZWI5ZWNjMmI3LzEvczU1Zk9JM0RTUnBNbFVlN1Y0amlfazlRMERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMGNlMGItNDQxMy00NThiLWI3MWYtNWRjZWI5ZWNjMmI3
LzEvczU1Zk9JM0RTUnBNbFVlN1Y0amlfazlRMERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZ6a4hwv
n9RhNu4nF5WBxaW6fOTNpBXMWS1FNR+jVju7IkaeMpDeeLSx/hzgSmCbXU8dMr7O
7xcs5DIt65oSHuA7EocP9ykFFMoKidEdWUyoA8+IOfItoojdAjGCwJNs6agkTZBo
s0L99y+f716Wntt/BvOYdSba38FqEyAP6od8+Q5Y6eLc932rNVwz/iSePwsGwgcK
MzgZIBFoyWnICe6LTxbTQH/qapTdXK1p3/QGmvvjditrOAdpp2SbPFK36mSZ6DPr
DevOqYc7aE2iJfb4UCSSW4T0k8/GPikTVUFjR8l5R7WwpXCPhqqxgECczZtR+Lyh
ZoL/ItBGpcyQsg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:48 2025 by rpki-client