
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: cWPxsjfRGGlOD/Gj3YtoX/3lxIy98reuXomCWjXJ4pI=
Subject key identifier: 92:38:E9:67:5E:4B:D6:93:6A:F6:D3:8F:81:74:F7:F8:C0:D2:88:67
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 0199FC8FB1E135B487726CC9EAD2348C9BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 08ED
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: RTia1u1Z9RT/fZjPjPqG51nvaCCT6c+LmgTfkp42XfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b1:e1:35:b4:87:72:6c:c9:ea:d2:34:8c:9b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=9238e9675e4bd6936af6d38f8174f7f8c0d28867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:9d:48:c5:40:1c:1c:78:03:d7:50:21:d8:
af:e2:43:93:1a:27:0c:0c:41:14:73:d6:5b:bf:ae:
44:84:5a:32:32:66:4e:94:30:e1:70:e3:d4:c0:78:
de:28:c9:50:96:3c:a9:6c:8e:73:b3:09:07:d4:b2:
6c:09:97:2c:54:75:46:66:a5:14:11:a5:95:db:ce:
91:74:34:6d:db:3d:d9:93:b6:86:f3:11:89:68:0e:
c8:f9:72:78:d0:53:3b:59:d6:8d:b1:0e:93:5b:f8:
e2:56:4a:3e:e2:14:0a:3c:8d:82:02:e9:dd:96:d1:
0b:c2:c9:3b:28:03:67:3a:d6:50:a2:bf:13:3a:b1:
18:57:66:ab:38:2b:3a:4c:98:4a:2f:04:cb:2d:71:
60:0b:d7:e8:10:95:a2:7a:46:88:7f:0d:df:9f:95:
92:10:35:43:96:59:45:8c:8d:24:fa:e4:b4:eb:a6:
2d:83:05:aa:89:c5:18:a9:05:73:56:79:3c:10:56:
14:96:85:c6:e9:8b:ba:e5:bf:8e:43:c7:ea:a1:ba:
3d:41:3e:9f:fa:4b:f5:91:cf:21:fa:86:39:a7:82:
fc:46:54:78:c3:84:56:e4:5c:bc:1e:e3:73:b0:76:
ea:09:ba:61:98:31:f4:6d:22:30:86:41:62:1a:ce:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:38:E9:67:5E:4B:D6:93:6A:F6:D3:8F:81:74:F7:F8:C0:D2:88:67
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2e:51:89:31:6c:06:9e:2f:13:25:0b:e4:ca:0e:02:35:c7:
09:8b:97:a1:3b:e6:9c:fb:dc:78:83:fc:16:f9:0b:7b:78:9d:
cb:65:a1:f7:a4:3c:36:8e:87:2d:45:ea:51:88:54:51:2a:4f:
6a:46:76:e3:9e:0f:a3:7f:83:28:a5:e3:cd:29:5d:50:c1:8d:
dc:72:c2:06:62:80:fc:13:e1:38:55:2f:69:7f:ae:8e:73:89:
ea:e3:3e:13:ce:3f:02:cb:58:af:11:bb:68:f6:de:20:06:74:
a5:71:1b:1a:d5:a9:7b:bc:8f:34:2f:49:9f:93:71:4d:a8:bc:
b4:54:de:08:23:00:b1:08:8c:7e:5e:c5:49:bc:30:80:52:c5:
8c:e5:e3:01:6e:7d:9f:39:e0:e1:fa:79:25:fc:3d:dd:f8:81:
6b:28:74:a9:15:fd:0c:63:d5:ce:0e:54:ac:69:1f:44:3a:23:
36:f4:df:d9:5c:ae:e6:f6:29:9f:c4:99:20:98:79:b4:2f:d6:
90:3d:69:88:9f:94:a7:d0:ff:b6:f2:5d:cd:26:c4:5b:45:b2:
86:8d:5b:c6:c6:59:9f:38:67:d4:78:f2:c2:14:6f:68:91:d6:
6f:07:c4:6d:4f:13:1d:c0:0f:59:cb:75:25:b3:48:d5:f7:cd:
3a:6c:4a:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j7HhNbSHcmzJ6tI0jJvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNGU0ODc3YjQ2NGU0ODllOGUxZTYxYmU1N2I4YmJlOGU1
MGU3OTkwHhcNMjUxMDE5MTMwMTM5WhcNMjUxMDIwMTMwMTM5WjAzMTEwLwYDVQQD
Eyg5MjM4ZTk2NzVlNGJkNjkzNmFmNmQzOGY4MTc0ZjdmOGMwZDI4ODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNGdSMVAHBx4A9dQIdiv4kOTGicM
DEEUc9Zbv65EhFoyMmZOlDDhcOPUwHjeKMlQljypbI5zswkH1LJsCZcsVHVGZqUU
EaWV286RdDRt2z3Zk7aG8xGJaA7I+XJ40FM7WdaNsQ6TW/jiVko+4hQKPI2CAund
ltELwsk7KANnOtZQor8TOrEYV2arOCs6TJhKLwTLLXFgC9foEJWiekaIfw3fn5WS
EDVDlllFjI0k+uS066YtgwWqicUYqQVzVnk8EFYUloXG6Yu65b+OQ8fqobo9QT6f
+kv1kc8h+oY5p4L8RlR4w4RW5Fy8HuNzsHbqCbphmDH0bSIwhkFiGs5E9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI46WdeS9aTavbTj4F09/jA0ohnMB8GA1UdIwQY
MBaAFH5OSHe0ZOSJ6OHmG+V7i76OUOeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYt
MGFmMjZiYzc2NDIxLzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYtMGFmMjZiYzc2NDIx
LzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnS5RiTFs
Bp4vEyUL5MoOAjXHCYuXoTvmnPvceIP8FvkLe3idy2Wh96Q8No6HLUXqUYhUUSpP
akZ2454Po3+DKKXjzSldUMGN3HLCBmKA/BPhOFUvaX+ujnOJ6uM+E84/AstYrxG7
aPbeIAZ0pXEbGtWpe7yPNC9Jn5NxTai8tFTeCCMAsQiMfl7FSbwwgFLFjOXjAW59
nzng4fp5Jfw93fiBayh0qRX9DGPVzg5UrGkfRDojNvTf2Vyu5vYpn8SZIJh5tC/W
kD1piJ+Up9D/tvJdzSbEW0Wyho1bxsZZnzhn1HjywhRvaJHWbwfEbU8THcAPWct1
JbNI1ffNOmxKow==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:37 2025 by rpki-client