Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
File: R7cYcu1kXJZm1VEavHjwfE06uKw.mft (raw, json)
Hash identifier: soa2sEoOGInp2wcpTMAG3C2FGcOPtLpaof3Mg/Zu9bc=
Subject key identifier: 6C:43:02:F9:68:B8:44:0A:1F:10:8B:25:EB:2C:A6:2A:50:4C:02:2E
Authority key identifier: 47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
Certificate issuer: /CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Certificate serial: 0199FB7CCE2098ADCA4130B14F65933425C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
Manifest number: 0386
Signing time: Sun 19 Oct 2025 08:01:24 +0000
Manifest this update: Sun 19 Oct 2025 08:01:24 +0000
Manifest next update: Mon 20 Oct 2025 08:01:24 +0000
Files and hashes: 1: R7cYcu1kXJZm1VEavHjwfE06uKw.crl (hash: u0qH4THlwQCwMFDc8EcoJ4SJ6C+Yae5NFa0vs2x2Oc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ce:20:98:ad:ca:41:30:b1:4f:65:93:34:25:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Validity
Not Before: Oct 19 08:01:24 2025 GMT
Not After : Oct 20 08:01:24 2025 GMT
Subject: CN=6c4302f968b8440a1f108b25eb2ca62a504c022e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:11:e7:6c:3b:ff:4f:56:e6:b8:db:b5:00:
01:ce:75:40:64:0c:0f:40:cc:a4:de:71:8e:0a:85:
3b:72:03:d6:6c:2d:a8:cc:38:5e:a1:61:30:86:24:
15:f6:6f:a5:c6:a8:6c:75:f6:1d:1b:59:46:2e:31:
1a:75:90:1b:ba:26:84:f2:e2:a1:1f:3c:29:86:25:
1f:8f:7f:f9:06:b5:f5:2f:85:0e:f6:20:ae:7c:3e:
ab:58:c8:47:6d:4c:bc:f8:74:d5:37:6d:92:8e:bb:
fd:16:c0:7a:95:98:79:c0:a1:1f:40:39:7f:a1:41:
7e:82:02:9b:4f:6d:0c:46:06:3e:28:12:b1:ba:49:
d1:1f:00:27:d3:22:b9:c1:9b:67:21:24:15:45:20:
77:db:03:a1:88:51:65:ae:0f:d2:a2:80:b8:60:df:
3e:c0:e7:8f:68:db:e1:de:a4:51:41:25:a0:bc:ec:
08:71:56:e8:48:70:93:9d:8f:1b:0e:6b:92:ad:2a:
00:f3:86:ef:26:88:93:9d:84:61:12:4d:95:b2:b8:
88:2e:21:7d:31:16:d2:d7:be:39:d2:79:79:14:b6:
c6:fa:e2:1a:ec:7f:45:18:6a:db:8f:2f:b9:78:90:
da:ae:9b:16:5f:1a:b9:a4:3c:b8:fb:cc:22:0f:a9:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:02:F9:68:B8:44:0A:1F:10:8B:25:EB:2C:A6:2A:50:4C:02:2E
X509v3 Authority Key Identifier:
keyid:47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:47:cb:35:1e:d2:6a:30:ab:f8:bc:be:84:05:9d:85:ef:02:
b1:be:51:a1:5f:5e:c3:5d:1c:d0:86:6f:d0:e4:6f:45:b6:84:
17:36:bd:aa:7d:0d:fb:31:8a:44:5e:bf:19:2b:b4:2a:6a:84:
e5:8e:3d:d9:34:ac:95:3d:cd:00:45:35:ce:c4:ab:af:fd:f3:
95:1f:29:3b:f2:38:32:05:9a:ab:bc:ca:15:6b:23:b4:9a:c9:
12:74:69:25:69:fa:b7:b7:65:aa:68:4c:d3:aa:82:50:27:bc:
52:30:de:0f:7a:e7:96:5c:f6:57:4d:86:8c:e4:9d:ee:e8:80:
0d:b3:df:ca:04:45:5c:56:33:4e:5a:b7:69:ce:05:3f:81:26:
19:59:e8:8b:98:57:84:8a:bd:0b:07:46:98:c6:c5:87:a5:ce:
01:c3:8c:a0:0f:e2:ad:fd:f5:18:15:c3:42:af:ac:cb:ae:1e:
b8:cc:fd:4b:fe:5e:8a:dd:d8:04:85:76:25:65:7d:1b:99:b2:
d9:d9:e2:d4:e2:f7:78:a2:f5:d3:25:29:80:52:75:66:c2:e1:
59:49:3d:c4:40:e8:20:f4:33:60:34:ac:23:59:28:46:e3:82:
0c:2b:ee:ee:d9:e9:ab:4b:ed:2c:40:5f:8e:40:ae:e7:95:f0:
6f:09:79:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fM4gmK3KQTCxT2WTNCXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YjcxODcyZWQ2NDVjOTY2NmQ1NTExYWJjNzhmMDdjNGQz
YWI4YWMwHhcNMjUxMDE5MDgwMTI0WhcNMjUxMDIwMDgwMTI0WjAzMTEwLwYDVQQD
Eyg2YzQzMDJmOTY4Yjg0NDBhMWYxMDhiMjVlYjJjYTYyYTUwNGMwMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphIR52w7/09W5rjbtQABznVAZAwP
QMyk3nGOCoU7cgPWbC2ozDheoWEwhiQV9m+lxqhsdfYdG1lGLjEadZAbuiaE8uKh
HzwphiUfj3/5BrX1L4UO9iCufD6rWMhHbUy8+HTVN22Sjrv9FsB6lZh5wKEfQDl/
oUF+ggKbT20MRgY+KBKxuknRHwAn0yK5wZtnISQVRSB32wOhiFFlrg/SooC4YN8+
wOePaNvh3qRRQSWgvOwIcVboSHCTnY8bDmuSrSoA84bvJoiTnYRhEk2VsriILiF9
MRbS17450nl5FLbG+uIa7H9FGGrbjy+5eJDarpsWXxq5pDy4+8wiD6n0XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxDAvlouEQKHxCLJesspipQTAIuMB8GA1UdIwQY
MBaAFEe3GHLtZFyWZtVRGrx48HxNOrisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjdjWWN1MWtYSlptMVZFYXZIandmRTA2dUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85MDliN2ItZDQxMy00MmUxLWE2MGEt
ZWM4NGRkNWM2OWJmLzEvUjdjWWN1MWtYSlptMVZFYXZIandmRTA2dUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85MDliN2ItZDQxMy00MmUxLWE2MGEtZWM4NGRkNWM2OWJm
LzEvUjdjWWN1MWtYSlptMVZFYXZIandmRTA2dUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEfLNR7S
ajCr+Ly+hAWdhe8Csb5RoV9ew10c0IZv0ORvRbaEFza9qn0N+zGKRF6/GSu0KmqE
5Y492TSslT3NAEU1zsSrr/3zlR8pO/I4MgWaq7zKFWsjtJrJEnRpJWn6t7dlqmhM
06qCUCe8UjDeD3rnllz2V02GjOSd7uiADbPfygRFXFYzTlq3ac4FP4EmGVnoi5hX
hIq9CwdGmMbFh6XOAcOMoA/irf31GBXDQq+sy64euMz9S/5eit3YBIV2JWV9G5my
2dni1OL3eKL10yUpgFJ1ZsLhWUk9xEDoIPQzYDSsI1koRuOCDCvu7tnpq0vtLEBf
jkCu55Xwbwl5kg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:44 2025 by rpki-client