Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: 74095pnVIPwvUMZRnAfgw8i2Gvn5+2cANwzPw7SWtPs=
Subject key identifier: DE:85:A6:C9:D9:6D:2D:56:D2:6F:DA:34:C1:92:58:0A:8D:88:09:C1
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 0199FD345BA2092FEFAAE32B215C2B7EF4C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: B0
Signing time: Sun 19 Oct 2025 16:01:30 +0000
Manifest this update: Sun 19 Oct 2025 16:01:30 +0000
Manifest next update: Mon 20 Oct 2025 16:01:30 +0000
Files and hashes: 1: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: tggOwl4fIB2EO2ZewvRzquR5f6s+mXYxjQZR1exnwAI=)
2: feLtnRMkzU1rqe5DPxi47-2h3dM.roa (hash: x685XsSKo/9+h/ObOY3HT9WaSelNcUDDImrGBWSa8eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5b:a2:09:2f:ef:aa:e3:2b:21:5c:2b:7e:f4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Oct 19 16:01:30 2025 GMT
Not After : Oct 20 16:01:30 2025 GMT
Subject: CN=de85a6c9d96d2d56d26fda34c192580a8d8809c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:a0:d1:fd:a6:68:ea:11:61:7b:b3:3d:37:
34:4a:38:7b:14:fa:fe:8b:5d:ae:3c:1a:ca:5b:5d:
df:c7:86:2d:b6:fc:26:43:8f:96:45:7f:bb:39:0d:
84:82:f3:1e:cb:62:86:da:73:70:7e:cf:d3:ad:a5:
07:14:95:93:73:f2:4a:1f:39:04:d3:ee:5f:7f:49:
c8:32:f2:3e:0a:7e:81:1e:ea:6a:22:af:b2:f9:3a:
6e:17:de:ba:54:a6:f7:74:e1:fb:7d:6f:40:31:38:
08:60:7b:7a:69:39:61:d9:a1:fb:50:4f:e6:5c:ef:
0b:b2:a7:b1:31:22:86:47:7a:da:a4:85:f1:d7:94:
09:45:79:3a:ab:8e:ba:55:5e:c5:fa:23:dc:e2:a9:
a1:91:17:8e:63:c8:7f:c6:80:84:12:2c:c6:05:5d:
9d:38:3c:47:b6:26:3c:30:89:6a:f4:93:09:7c:13:
99:7f:5e:39:b3:81:23:0f:19:7c:e9:89:37:af:85:
5b:04:70:ac:04:e9:f2:8e:c5:64:3e:59:7c:b6:c8:
69:7d:1b:c2:a1:6e:59:77:4c:52:0b:eb:de:66:3a:
94:3d:f6:c1:a9:9e:9d:e6:4d:d5:f0:3b:03:ce:1a:
e3:c9:f8:09:06:a1:92:a4:d1:ec:3a:27:29:2a:33:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:85:A6:C9:D9:6D:2D:56:D2:6F:DA:34:C1:92:58:0A:8D:88:09:C1
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:eb:cd:85:07:e6:8b:4e:e9:b0:f2:94:3c:61:64:52:78:de:
c5:bd:63:1d:4f:d3:e7:6e:62:d2:ce:43:9d:b1:2a:4a:0e:16:
ba:35:d3:1d:22:02:63:e8:99:47:ab:11:ad:e5:b9:07:c3:63:
d7:49:30:d8:f1:a0:1b:d5:39:c2:b5:b6:2f:ab:0f:40:61:3d:
20:92:e6:85:89:3a:7f:ee:f7:2f:fb:4a:c1:10:c1:47:d2:e8:
73:68:23:13:3a:b2:20:b9:46:3a:b3:b0:f6:4e:f8:1c:0a:68:
03:20:a2:67:ea:9d:7b:95:10:cb:12:94:d5:7d:9d:b0:b2:23:
03:8c:97:12:59:41:ed:27:49:ab:8b:62:ba:66:3f:95:18:5a:
a0:c0:d2:05:f0:bc:91:5c:32:3e:0c:0b:11:2a:8f:f6:68:80:
b9:43:8a:e0:b7:ef:dd:3b:d4:d6:d6:cd:48:25:b1:a5:36:02:
4a:3c:7d:6b:49:a8:57:c4:aa:7e:b1:ab:ad:14:d2:7b:a4:74:
78:41:3a:87:df:3a:e5:8d:65:02:82:06:7e:e4:75:a3:5d:a0:
c6:ee:e8:fd:79:50:43:af:af:c0:25:05:2c:1a:7c:38:9f:c0:
ad:65:18:09:5d:94:19:e3:c6:db:f7:df:7c:f0:60:2b:51:69:
82:a8:b4:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFuiCS/vquMrIVwrfvTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MTVmOWUzYzI5MDI0NzVjMjRjZDQ1YzY5Mjk5MWJjNzFm
ZjY2NDMwHhcNMjUxMDE5MTYwMTMwWhcNMjUxMDIwMTYwMTMwWjAzMTEwLwYDVQQD
EyhkZTg1YTZjOWQ5NmQyZDU2ZDI2ZmRhMzRjMTkyNTgwYThkODgwOWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiag0f2maOoRYXuzPTc0Sjh7FPr+
i12uPBrKW13fx4YttvwmQ4+WRX+7OQ2EgvMey2KG2nNwfs/TraUHFJWTc/JKHzkE
0+5ff0nIMvI+Cn6BHupqIq+y+TpuF966VKb3dOH7fW9AMTgIYHt6aTlh2aH7UE/m
XO8LsqexMSKGR3rapIXx15QJRXk6q466VV7F+iPc4qmhkReOY8h/xoCEEizGBV2d
ODxHtiY8MIlq9JMJfBOZf145s4EjDxl86Yk3r4VbBHCsBOnyjsVkPll8tshpfRvC
oW5Zd0xSC+veZjqUPfbBqZ6d5k3V8DsDzhrjyfgJBqGSpNHsOicpKjNT7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6FpsnZbS1W0m/aNMGSWAqNiAnBMB8GA1UdIwQY
MBaAFAkV+ePCkCR1wkzUXGkpkbxx/2ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzct
ZTMzN2JmZTAyNzliLzEvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzctZTMzN2JmZTAyNzli
LzEvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluvNhQfm
i07psPKUPGFkUnjexb1jHU/T525i0s5DnbEqSg4WujXTHSICY+iZR6sRreW5B8Nj
10kw2PGgG9U5wrW2L6sPQGE9IJLmhYk6f+73L/tKwRDBR9Loc2gjEzqyILlGOrOw
9k74HApoAyCiZ+qde5UQyxKU1X2dsLIjA4yXEllB7SdJq4tiumY/lRhaoMDSBfC8
kVwyPgwLESqP9miAuUOK4Lfv3TvU1tbNSCWxpTYCSjx9a0moV8SqfrGrrRTSe6R0
eEE6h9865Y1lAoIGfuR1o12gxu7o/XlQQ6+vwCUFLBp8OJ/ArWUYCV2UGePG2/ff
fPBgK1Fpgqi0rw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:38 2025 by rpki-client