Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: VhT//piRYXn+VKXYW4GiC/CcBquJuy5TFST49EPjqgk=
Subject key identifier: 60:20:B8:DF:36:D7:97:1C:DC:6D:30:DC:A3:6B:C1:81:83:EF:73:3D
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 0199FC8F307BCDCE81D281D75CEA8428C04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: VLO4rUrto7vwoyW9NGeQnvhOI06MK0Y+evcer6MWNBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:30:7b:cd:ce:81:d2:81:d7:5c:ea:84:28:c0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=6020b8df36d7971cdc6d30dca36bc18183ef733d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:21:fd:73:8f:ab:b3:92:7c:4c:13:fb:3a:
3e:22:bd:3d:bb:2f:20:3d:cc:9e:f9:25:15:c8:7a:
85:35:bf:fc:d9:12:bd:94:60:dd:10:e1:62:32:29:
56:1e:7f:01:f6:91:4c:45:b5:62:86:01:ff:37:a7:
37:13:55:e9:8b:d2:d9:e5:81:13:b9:04:3e:d5:94:
bf:95:64:a5:18:dd:a0:a2:5b:5c:68:d8:2c:90:c4:
5b:fa:7d:9e:e7:ab:f4:34:fc:fb:4b:bb:41:ac:90:
42:b4:b6:41:b5:2f:43:f7:c7:cf:28:9f:7c:f2:be:
fa:90:f6:99:8b:80:d8:af:21:ee:9b:15:49:f9:32:
77:47:76:55:bc:28:1b:6d:94:2d:83:e8:24:d2:22:
dd:7d:d2:c5:3a:e3:ab:a3:87:c4:df:d0:06:e4:49:
51:bc:f6:f7:df:3e:56:42:ff:7d:fb:ac:d0:89:a3:
7a:7a:85:29:82:1c:0a:e2:94:03:73:71:4a:e0:47:
8c:d4:80:72:3b:8b:33:4a:03:51:cf:6d:8a:a2:73:
1d:37:29:7a:7e:46:c2:48:69:ae:0c:77:c5:c2:30:
83:68:2f:c5:a3:b2:ba:08:8e:c0:db:e9:ff:0f:c4:
59:95:f8:f8:7b:93:30:10:b8:65:88:b9:84:b3:0e:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:20:B8:DF:36:D7:97:1C:DC:6D:30:DC:A3:6B:C1:81:83:EF:73:3D
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a9:4c:b8:16:07:ee:5a:f4:37:34:ac:d5:5d:90:57:f0:4f:
6f:38:07:2d:48:fe:64:6b:b4:73:18:6a:7a:9a:80:94:de:c7:
c7:04:87:86:05:5a:f4:47:4f:cb:e7:53:24:2a:31:a4:ef:15:
86:0c:27:08:f2:2f:8c:02:9d:80:57:96:c2:f0:8d:13:61:ff:
42:ed:17:68:fb:be:c4:2f:50:98:bb:4c:bb:bb:6a:de:e3:ab:
63:57:82:aa:1d:d9:14:73:05:34:dd:bb:d5:f6:7f:88:78:94:
47:c5:ec:af:0e:e4:25:e5:46:ce:be:ad:7c:e4:13:56:6c:14:
28:26:5e:b3:3f:e8:5c:ee:4b:e5:1d:8d:3e:91:62:ed:8a:a9:
44:24:c1:ef:c3:33:a7:f3:42:27:a6:f4:58:c1:ce:51:d3:ed:
61:41:3f:aa:f4:e3:36:d5:94:7f:79:08:da:78:7e:b2:3a:fd:
be:51:2e:08:be:11:8c:aa:de:c8:12:ee:0c:9d:4c:7e:be:e3:
bb:2d:68:bc:c7:73:83:37:b7:0c:7f:a0:5e:3b:c9:3e:45:c3:
52:12:4b:ca:a7:76:1e:6e:8f:e1:9c:3e:25:d1:3e:b5:1c:af:
da:ea:dc:95:9e:39:29:b3:3b:47:14:0f:fd:e0:b8:0d:7a:b1:
3c:98:2f:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jzB7zc6B0oHXXOqEKMBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2YzOGM4ZTdiMTkyMmY2ZWJmM2ZkMzQwNzM1Y2RiMDQy
MzE0MTgwHhcNMjUxMDE5MTMwMTA2WhcNMjUxMDIwMTMwMTA2WjAzMTEwLwYDVQQD
Eyg2MDIwYjhkZjM2ZDc5NzFjZGM2ZDMwZGNhMzZiYzE4MTgzZWY3MzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf8h/XOPq7OSfEwT+zo+Ir09uy8g
Pcye+SUVyHqFNb/82RK9lGDdEOFiMilWHn8B9pFMRbVihgH/N6c3E1Xpi9LZ5YET
uQQ+1ZS/lWSlGN2goltcaNgskMRb+n2e56v0NPz7S7tBrJBCtLZBtS9D98fPKJ98
8r76kPaZi4DYryHumxVJ+TJ3R3ZVvCgbbZQtg+gk0iLdfdLFOuOro4fE39AG5ElR
vPb33z5WQv99+6zQiaN6eoUpghwK4pQDc3FK4EeM1IByO4szSgNRz22KonMdNyl6
fkbCSGmuDHfFwjCDaC/Fo7K6CI7A2+n/D8RZlfj4e5MwELhliLmEsw7bwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAguN8215cc3G0w3KNrwYGD73M9MB8GA1UdIwQY
MBaAFBLPOMjnsZIvbr8/00BzXNsEIxQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2Mt
YmUwYmFmYjc4MmVlLzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2MtYmUwYmFmYjc4MmVl
LzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKlMuBYH
7lr0NzSs1V2QV/BPbzgHLUj+ZGu0cxhqepqAlN7HxwSHhgVa9EdPy+dTJCoxpO8V
hgwnCPIvjAKdgFeWwvCNE2H/Qu0XaPu+xC9QmLtMu7tq3uOrY1eCqh3ZFHMFNN27
1fZ/iHiUR8Xsrw7kJeVGzr6tfOQTVmwUKCZesz/oXO5L5R2NPpFi7YqpRCTB78Mz
p/NCJ6b0WMHOUdPtYUE/qvTjNtWUf3kI2nh+sjr9vlEuCL4RjKreyBLuDJ1Mfr7j
uy1ovMdzgze3DH+gXjvJPkXDUhJLyqd2Hm6P4Zw+JdE+tRyv2urclZ45KbM7RxQP
/eC4DXqxPJgvBw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:00 2025 by rpki-client