Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: cdS05Og/g6WQLjNIK3Sqo4YxbQDCJGjH9DMtlxgFlGM=
Subject key identifier: CF:21:E5:47:1D:CF:50:6B:66:13:E3:28:29:BC:31:10:06:00:D8:E5
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 0199FC8FA84BE524BEDA93B4F83E8CC88BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 02EA
Signing time: Sun 19 Oct 2025 13:01:37 +0000
Manifest this update: Sun 19 Oct 2025 13:01:37 +0000
Manifest next update: Mon 20 Oct 2025 13:01:37 +0000
Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: cjfCjCrKZMHKZWBOwHNF2JK0SQTo18aZx04V/m/xuSo=)
2: tCQKTUl91gUF9YCakBjVvOmahA8.roa (hash: +o4wlq7VWOUaSft8SFBzstGqOiur0Xr8ur6qt9Ob1Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a8:4b:e5:24:be:da:93:b4:f8:3e:8c:c8:8b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Oct 19 13:01:37 2025 GMT
Not After : Oct 20 13:01:37 2025 GMT
Subject: CN=cf21e5471dcf506b6613e32829bc31100600d8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:b5:99:60:5e:41:0f:2c:2c:b7:71:98:42:
15:8e:c4:7c:af:a7:e6:87:ee:2d:9d:11:42:0d:d4:
ab:c4:12:a5:60:13:94:e4:f6:1c:98:a0:9e:5e:63:
97:48:24:83:d7:57:cd:17:03:a5:e7:32:5a:a8:04:
65:39:13:a6:29:dd:12:eb:b2:f7:9e:df:05:11:aa:
e1:52:71:03:0b:c1:a9:f4:de:c0:1c:e6:65:be:2e:
d6:30:82:68:76:f4:1d:4f:01:a6:f6:5a:0c:78:28:
3d:0a:d9:11:27:a3:5c:2b:c9:e2:82:c3:f1:31:6b:
47:b7:8d:ed:c8:24:19:bb:44:8f:5e:8d:f2:90:51:
d5:d8:75:07:e5:67:83:02:70:01:89:7d:d8:6b:af:
c7:0f:7b:a5:e9:f6:2b:41:9a:1a:c3:67:be:e5:49:
4e:cc:79:a7:45:b5:10:17:49:fa:e9:2d:02:5e:97:
40:11:ec:30:6d:c2:ac:d6:0e:89:d5:03:d8:70:82:
85:75:5d:a6:ce:43:55:b5:96:a4:10:85:72:c7:b1:
50:c5:80:62:3e:cd:72:04:4c:8f:a4:81:f2:54:4b:
1f:7e:d4:d6:84:a5:3b:02:d5:46:ba:19:28:2b:6b:
84:76:37:35:e0:a8:77:e6:9a:25:09:f0:87:7d:a3:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:21:E5:47:1D:CF:50:6B:66:13:E3:28:29:BC:31:10:06:00:D8:E5
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b5:58:64:d3:6b:d9:db:9c:00:36:f8:51:bf:a8:42:04:73:
71:7c:db:db:b2:a2:15:2e:1c:dc:80:99:5a:6d:18:d3:c0:9e:
82:bf:c4:53:f0:9c:a0:c6:f1:f6:0d:41:23:7d:ed:b1:d0:8a:
21:d9:b5:ed:f3:15:48:8d:c4:74:ce:53:4a:cc:df:57:09:44:
55:4d:c4:21:b5:c2:56:51:98:86:59:3e:62:51:aa:80:be:36:
8d:e1:6f:67:65:dc:b2:b2:47:eb:8b:c7:27:32:0a:92:44:90:
9d:f9:c3:52:40:e4:30:e7:52:ac:8c:e1:c5:1a:59:14:50:83:
6a:a3:8d:68:5a:ec:49:60:83:57:92:c3:29:a9:c5:8f:a8:c7:
53:b5:84:db:c0:6c:89:09:60:cc:2b:8f:8d:ea:f4:77:5a:20:
d1:41:2c:19:b8:50:19:7a:b1:bf:02:06:99:0b:5c:e6:18:f3:
47:44:6b:bd:8a:20:64:aa:0c:c8:cf:2a:80:01:92:c7:45:4a:
54:6c:60:a6:29:4e:58:25:b3:0e:39:cf:5a:c1:df:5f:49:59:
46:cd:01:0e:f6:a4:51:8d:74:af:33:f5:26:76:f1:dc:d0:ae:
9c:e8:5a:83:f2:d9:fe:24:74:74:82:dd:01:7f:20:85:c6:47:
e4:e7:9a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j6hL5SS+2pO0+D6MyIvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmY2Q2NGVhZjI1OTQ4MjJmM2Y5YTJlYmNkMTlkYjliN2Zh
NzBkOWEwHhcNMjUxMDE5MTMwMTM3WhcNMjUxMDIwMTMwMTM3WjAzMTEwLwYDVQQD
EyhjZjIxZTU0NzFkY2Y1MDZiNjYxM2UzMjgyOWJjMzExMDA2MDBkOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8m1mWBeQQ8sLLdxmEIVjsR8r6fm
h+4tnRFCDdSrxBKlYBOU5PYcmKCeXmOXSCSD11fNFwOl5zJaqARlOROmKd0S67L3
nt8FEarhUnEDC8Gp9N7AHOZlvi7WMIJodvQdTwGm9loMeCg9CtkRJ6NcK8nigsPx
MWtHt43tyCQZu0SPXo3ykFHV2HUH5WeDAnABiX3Ya6/HD3ul6fYrQZoaw2e+5UlO
zHmnRbUQF0n66S0CXpdAEewwbcKs1g6J1QPYcIKFdV2mzkNVtZakEIVyx7FQxYBi
Ps1yBEyPpIHyVEsfftTWhKU7AtVGuhkoK2uEdjc14Kh35polCfCHfaPdeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8h5Ucdz1BrZhPjKCm8MRAGANjlMB8GA1UdIwQY
MBaAFA/NZOryWUgi8/mi680Z25t/pw2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4Mzgt
MWEzN2YxMDc2NTU3LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4MzgtMWEzN2YxMDc2NTU3
LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrVYZNNr
2ducADb4Ub+oQgRzcXzb27KiFS4c3ICZWm0Y08Cegr/EU/CcoMbx9g1BI33tsdCK
Idm17fMVSI3EdM5TSszfVwlEVU3EIbXCVlGYhlk+YlGqgL42jeFvZ2XcsrJH64vH
JzIKkkSQnfnDUkDkMOdSrIzhxRpZFFCDaqONaFrsSWCDV5LDKanFj6jHU7WE28Bs
iQlgzCuPjer0d1og0UEsGbhQGXqxvwIGmQtc5hjzR0RrvYogZKoMyM8qgAGSx0VK
VGxgpilOWCWzDjnPWsHfX0lZRs0BDvakUY10rzP1Jnbx3NCunOhag/LZ/iR0dILd
AX8ghcZH5OeaDg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:35 2025 by rpki-client