Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
File: iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json)
Hash identifier: P1Mia0WkBwWjfy1V9XtjzZ8Kb/SA4WhUZzcZ0nzU4dw=
Subject key identifier: 0E:EF:E5:D2:97:33:D5:8B:81:E5:55:64:C3:84:77:27:F3:29:36:D7
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Certificate issuer: /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial: 0199FFC7EA3DB62F3148C3BCA0DF46E22704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
Manifest number: 04CD
Signing time: Mon 20 Oct 2025 04:01:55 +0000
Manifest this update: Mon 20 Oct 2025 04:01:55 +0000
Manifest next update: Tue 21 Oct 2025 04:01:55 +0000
Files and hashes: 1: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: iW1XDbscowj4vJmIbijbssygXL9cI6m21IthYFSLelc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:ea:3d:b6:2f:31:48:c3:bc:a0:df:46:e2:27:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
Validity
Not Before: Oct 20 04:01:55 2025 GMT
Not After : Oct 21 04:01:55 2025 GMT
Subject: CN=0eefe5d29733d58b81e55564c3847727f32936d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:d6:93:5f:90:52:6c:c7:ae:d9:fe:ad:37:
12:fd:c4:09:d8:2d:fa:73:20:99:20:a1:bd:31:3d:
59:e2:27:37:c8:90:d5:c5:93:c8:a1:35:f7:2a:76:
87:50:32:eb:51:3f:e9:57:27:f4:eb:e4:06:99:89:
56:a1:f5:2b:e1:8f:ed:fe:c3:d2:c9:b3:a7:3b:cf:
bb:6f:b7:de:8a:ec:09:7e:6d:a0:50:84:af:9c:df:
63:0f:63:8b:92:1d:94:65:34:5f:dd:4a:2c:b8:97:
99:45:e2:36:99:f4:f6:c3:0a:6c:8f:80:7a:5b:e9:
b9:6a:77:44:bb:da:67:a6:44:e7:8a:7e:ca:7a:51:
a8:5a:b1:be:28:1e:63:88:28:fd:54:46:ee:63:87:
75:dd:4d:23:ee:c1:66:c2:6d:d8:4f:d3:9c:aa:be:
42:0f:c4:fa:52:96:61:c5:fc:d2:a6:b1:b4:58:0f:
21:26:ce:ac:a3:38:3b:7f:bb:36:15:67:9b:e3:1d:
10:9e:4f:98:a6:1e:1c:30:42:1b:01:ce:1c:7e:d5:
4e:05:45:18:f9:96:11:5b:34:53:95:27:a4:0f:31:
b2:96:4b:2f:a8:05:de:de:64:4b:8b:46:7c:cd:df:
e9:6b:5f:f6:30:7d:cc:b5:a9:30:2e:17:14:dc:50:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EF:E5:D2:97:33:D5:8B:81:E5:55:64:C3:84:77:27:F3:29:36:D7
X509v3 Authority Key Identifier:
keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8f:16:5e:84:2f:09:d4:b5:47:64:4f:4d:92:0c:62:9f:e3:
af:16:a5:0d:7a:88:a3:31:0a:33:d0:a5:5b:cf:31:81:30:09:
e5:47:3f:c3:32:78:00:7c:db:97:63:ae:fc:e8:b0:03:b5:9e:
8d:38:fd:a5:3c:2f:04:97:1b:5b:20:28:5b:4f:68:f2:91:22:
71:0d:07:b7:09:e3:66:b6:59:9e:9d:23:82:38:9e:26:58:2e:
3c:42:7d:be:26:16:d3:66:3f:ee:04:b0:e2:fe:60:81:cd:c1:
e8:df:9b:cd:8b:49:bb:44:b7:0f:18:ab:9b:40:3f:4b:13:4e:
39:fd:bd:a5:58:e6:a3:90:eb:1b:0b:ea:03:8d:86:49:42:22:
11:4a:d7:7e:92:9e:b6:e5:a4:9f:08:0e:55:73:98:76:9d:07:
a0:b8:fc:58:0e:04:f2:49:e6:d9:11:7d:df:61:57:17:9d:f3:
58:d5:b5:ab:03:f9:4f:76:2d:ec:20:44:89:15:1e:fc:64:d7:
a9:58:e4:ee:03:84:06:b2:3c:5d:32:28:7d:49:ba:3f:3d:58:
66:68:f7:52:bb:18:a9:a9:d6:5d:f0:63:e7:65:5a:26:ad:6e:
88:60:fc:83:42:d3:8f:0f:5d:04:52:19:b0:7d:43:c7:1f:14:
90:70:9c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x+o9ti8xSMO8oN9G4icEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4M2NhZmY4MDdiMzI5NTJkNjhjNzFhYWYwMWI5MTk4NGFk
MWVhMDgwHhcNMjUxMDIwMDQwMTU1WhcNMjUxMDIxMDQwMTU1WjAzMTEwLwYDVQQD
EygwZWVmZTVkMjk3MzNkNThiODFlNTU1NjRjMzg0NzcyN2YzMjkzNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT7Wk1+QUmzHrtn+rTcS/cQJ2C36
cyCZIKG9MT1Z4ic3yJDVxZPIoTX3KnaHUDLrUT/pVyf06+QGmYlWofUr4Y/t/sPS
ybOnO8+7b7feiuwJfm2gUISvnN9jD2OLkh2UZTRf3UosuJeZReI2mfT2wwpsj4B6
W+m5andEu9pnpkTnin7KelGoWrG+KB5jiCj9VEbuY4d13U0j7sFmwm3YT9Ocqr5C
D8T6UpZhxfzSprG0WA8hJs6sozg7f7s2FWeb4x0Qnk+Yph4cMEIbAc4cftVOBUUY
+ZYRWzRTlSekDzGylksvqAXe3mRLi0Z8zd/pa1/2MH3MtakwLhcU3FCWWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7v5dKXM9WLgeVVZMOEdyfzKTbXMB8GA1UdIwQY
MBaAFIg8r/gHsylS1oxxqvAbkZhK0eoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hOGIzYzItY2FkNS00NWEzLWFmYWEt
OWNlZDVlNWVmZjBmLzEvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9hOGIzYzItY2FkNS00NWEzLWFmYWEtOWNlZDVlNWVmZjBm
LzEvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe48WXoQv
CdS1R2RPTZIMYp/jrxalDXqIozEKM9ClW88xgTAJ5Uc/wzJ4AHzbl2Ou/OiwA7We
jTj9pTwvBJcbWyAoW09o8pEicQ0HtwnjZrZZnp0jgjieJlguPEJ9viYW02Y/7gSw
4v5ggc3B6N+bzYtJu0S3Dxirm0A/SxNOOf29pVjmo5DrGwvqA42GSUIiEUrXfpKe
tuWknwgOVXOYdp0HoLj8WA4E8knm2RF932FXF53zWNW1qwP5T3Yt7CBEiRUe/GTX
qVjk7gOEBrI8XTIofUm6Pz1YZmj3UrsYqanWXfBj52VaJq1uiGD8g0LTjw9dBFIZ
sH1Dxx8UkHCcYQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:41:13 2025 by rpki-client