Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
File: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft (raw, json)
Hash identifier: eQ7kfVI/yyxbnq/VRyP4Ss85VhSTi8ZQq65DA8A9duA=
Subject key identifier: 65:E3:70:B6:85:38:6A:C5:97:FE:DC:5D:A7:46:7D:D8:F4:10:44:20
Authority key identifier: ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
Certificate issuer: /CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Certificate serial: 0199FBEB5C511AD8523F59CDD8DBE93AF6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
Manifest number: 151D
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl (hash: A/UEU5r1K+Qb4p5kNKnfT+6wfOgAIulpvlpiJAFLVdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5c:51:1a:d8:52:3f:59:cd:d8:db:e9:3a:f6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=65e370b685386ac597fedc5da7467dd8f4104420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:24:25:d2:f5:9b:91:66:37:32:a4:2d:48:
6f:12:35:2f:11:19:3a:57:13:29:70:3b:24:65:ca:
d1:aa:2d:d9:2c:10:42:3a:6a:13:d8:fe:23:2b:b1:
ff:b3:1f:6d:74:5d:36:8e:bf:b5:47:bf:81:71:b6:
33:94:73:fa:78:2a:3e:7a:be:24:1e:91:e0:6a:7f:
75:ad:43:58:b7:ae:cb:3f:5e:7a:8b:57:cf:e2:05:
97:7b:2e:86:b6:ef:d6:39:1f:57:47:8e:09:da:eb:
61:b4:bf:23:25:a9:62:93:dc:e7:f1:84:f1:34:56:
c6:77:45:a5:6c:ec:b1:a7:cf:2a:5d:9e:cc:d5:4c:
3b:73:0e:8d:64:ad:87:41:60:43:27:ed:2a:21:0c:
41:7a:87:93:15:ad:11:ec:3e:61:2a:87:0c:d4:80:
5e:de:b4:dd:39:d1:73:ac:32:41:2f:29:c1:c2:a6:
dd:57:2b:31:48:20:9c:9b:8c:92:34:a3:da:c6:d1:
71:ac:78:aa:b8:d1:07:64:e2:83:81:76:6e:58:53:
0f:e3:84:44:44:8f:ec:4c:57:85:06:4b:0b:98:9b:
fa:67:2a:5b:99:38:61:52:7e:be:d8:db:26:aa:af:
be:47:df:e6:5d:c9:55:c0:08:5b:e8:69:f7:2a:51:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E3:70:B6:85:38:6A:C5:97:FE:DC:5D:A7:46:7D:D8:F4:10:44:20
X509v3 Authority Key Identifier:
keyid:ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:82:9b:4d:2f:32:09:1f:6c:84:04:16:7f:25:6f:db:0a:ef:
77:96:e2:9f:c9:ad:9f:4e:9d:1e:8b:2b:0c:90:f9:c0:72:a4:
a1:9d:92:ce:bc:97:d8:1a:cb:66:fd:2b:95:f9:73:98:0f:fa:
18:fb:b1:69:7a:1c:75:ae:d8:22:fe:21:70:6b:1d:ca:21:fb:
a0:9c:81:14:40:c4:8e:2c:24:93:cf:20:bb:fc:68:8f:21:f1:
3b:57:a2:25:08:e2:4a:45:e0:01:18:04:17:86:9c:2b:4a:6b:
67:8f:ce:87:9c:12:30:14:05:62:fa:c4:45:ce:db:ed:3c:59:
8c:12:02:c0:8c:ae:2a:88:b9:71:2c:7e:4f:29:26:de:0c:54:
b2:84:2c:06:22:19:af:d2:0a:c6:08:17:ab:48:71:26:20:42:
10:6a:94:2b:5a:b7:98:bc:62:c4:66:b4:c8:5a:3a:77:f6:da:
73:b2:c0:09:8b:5a:6c:01:0a:36:13:48:a2:b3:f8:e0:9d:36:
50:4a:46:7b:7a:62:b4:e0:03:99:c1:19:0c:84:5e:15:46:e7:
40:bc:d7:b0:b3:52:db:2f:86:43:ac:a0:85:d5:f8:31:53:4f:
04:b7:84:9a:62:11:0b:f5:09:14:85:b5:0e:94:8d:2e:2b:7c:
1f:52:4c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn761xRGthSP1nN2NvpOvbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmYzM2U4YTNiYWFlMmQ4ZDg1NjAwMTBjOTdjNzZmM2Ix
OWZhYzkwHhcNMjUxMDE5MTAwMjA5WhcNMjUxMDIwMTAwMjA5WjAzMTEwLwYDVQQD
Eyg2NWUzNzBiNjg1Mzg2YWM1OTdmZWRjNWRhNzQ2N2RkOGY0MTA0NDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRYkJdL1m5FmNzKkLUhvEjUvERk6
VxMpcDskZcrRqi3ZLBBCOmoT2P4jK7H/sx9tdF02jr+1R7+BcbYzlHP6eCo+er4k
HpHgan91rUNYt67LP156i1fP4gWXey6Gtu/WOR9XR44J2uthtL8jJalik9zn8YTx
NFbGd0WlbOyxp88qXZ7M1Uw7cw6NZK2HQWBDJ+0qIQxBeoeTFa0R7D5hKocM1IBe
3rTdOdFzrDJBLynBwqbdVysxSCCcm4ySNKPaxtFxrHiquNEHZOKDgXZuWFMP44RE
RI/sTFeFBksLmJv6ZypbmThhUn6+2Nsmqq++R9/mXclVwAhb6Gn3KlGLlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXjcLaFOGrFl/7cXadGfdj0EEQgMB8GA1UdIwQY
MBaAFO3/M+ijuq4tjYVgAQyXx287GfrJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Y4ejZLTzZyaTJOaFdBQkRKZkhienNaLXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMDUzMzItYmVlZi00ZjQyLTg4Zjgt
MGRjZTI3MWY3ZTYxLzEvN2Y4ejZLTzZyaTJOaFdBQkRKZkhienNaLXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mMDUzMzItYmVlZi00ZjQyLTg4ZjgtMGRjZTI3MWY3ZTYx
LzEvN2Y4ejZLTzZyaTJOaFdBQkRKZkhienNaLXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYKbTS8y
CR9shAQWfyVv2wrvd5bin8mtn06dHosrDJD5wHKkoZ2SzryX2BrLZv0rlflzmA/6
GPuxaXocda7YIv4hcGsdyiH7oJyBFEDEjiwkk88gu/xojyHxO1eiJQjiSkXgARgE
F4acK0prZ4/Oh5wSMBQFYvrERc7b7TxZjBICwIyuKoi5cSx+Tykm3gxUsoQsBiIZ
r9IKxggXq0hxJiBCEGqUK1q3mLxixGa0yFo6d/bac7LACYtabAEKNhNIorP44J02
UEpGe3pitOADmcEZDIReFUbnQLzXsLNS2y+GQ6yghdX4MVNPBLeEmmIRC/UJFIW1
DpSNLit8H1JMAw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:14 2025 by rpki-client