Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: g9T7d7ofIx4JeUco+2WRR5/cRCEfMAoMPX19DgyEsTo=
Subject key identifier: 6B:9B:EC:1D:DD:2C:78:F2:B5:4D:D2:D0:54:F5:DE:78:2A:9E:A6:0A
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 0199FBEAEC1151BEBFE050EC9C300785AADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 05B8
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: rXPbG6qxWgdKwH3X129sIo4tRsp4tLwDH8xGOoTvdwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ec:11:51:be:bf:e0:50:ec:9c:30:07:85:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=6b9bec1ddd2c78f2b54dd2d054f5de782a9ea60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:06:da:f1:ef:02:c3:74:e9:f6:cd:94:29:
84:2f:0a:52:a9:ca:37:8a:2e:26:82:f4:4d:fa:bf:
97:3a:37:4b:84:79:58:93:26:10:b1:7f:0f:08:f5:
01:37:30:41:f2:29:76:f7:33:b0:b0:d9:ca:89:d3:
88:80:a9:73:42:6e:24:d9:35:a1:bb:a1:a1:11:84:
69:93:ea:40:5a:69:2a:43:ca:31:87:38:74:2e:fa:
73:16:b9:46:c1:df:58:41:5d:67:10:53:be:9a:61:
84:2e:32:bd:0f:1f:c2:f2:70:80:f4:b2:38:16:e0:
a2:5e:97:ac:09:05:fe:23:e6:b1:62:86:a2:cb:da:
64:3f:2e:5a:74:c8:4d:6a:f9:1d:3d:69:41:fc:24:
74:9d:0e:19:e3:b5:1f:67:b0:4a:b4:e3:29:7a:0d:
6b:d5:c1:c6:c8:dd:99:ed:2a:03:ee:54:4c:b2:bc:
7e:4a:fb:b8:09:1d:c0:6a:3a:62:e9:e2:7c:e5:4e:
f1:43:61:c4:0b:e5:60:6b:82:c5:2c:a5:55:a1:b5:
9a:c6:58:f0:10:9d:89:83:13:a6:2e:60:9a:eb:0f:
a7:9a:e2:f3:a0:2b:a4:f9:b6:73:4a:a8:ac:9b:b0:
10:5e:31:87:96:33:bd:d8:c8:bc:f4:8b:a1:31:cb:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9B:EC:1D:DD:2C:78:F2:B5:4D:D2:D0:54:F5:DE:78:2A:9E:A6:0A
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bf:a8:ca:2c:79:bb:d0:a7:82:e0:a1:ff:d8:3b:e5:77:9f:
17:fd:82:f5:57:7b:c6:b6:fe:1e:e6:d3:da:a0:74:5a:c2:4b:
31:f7:c1:86:61:6d:d8:9e:fa:df:03:7e:14:74:d8:a7:7e:82:
e1:23:e2:35:c1:74:39:37:2e:39:27:25:ad:5a:30:78:a4:4d:
f2:31:10:58:01:cf:0e:b8:6b:0c:d9:a0:c9:18:2e:bb:af:3a:
74:d9:ea:af:9b:e7:b6:a9:93:74:93:ae:33:cb:2b:46:da:5f:
0c:c0:d4:42:7d:1f:fd:1e:3b:32:80:26:d5:cc:69:e4:a0:1e:
09:e1:1f:33:1d:a1:f7:a3:94:2d:2b:f2:a8:65:b1:de:0a:09:
04:8b:ca:79:84:a3:68:00:72:56:2e:cc:38:cc:42:1c:56:da:
85:87:f1:81:cb:9f:b7:6f:35:80:f2:aa:24:40:13:fb:97:90:
e1:b7:d5:e4:a7:9a:29:d5:9e:fb:31:37:c8:b5:08:4d:1a:e7:
70:cc:73:cd:54:be:42:80:ec:37:11:63:96:a0:73:52:40:b7:
32:d3:3a:82:4f:53:ab:67:0a:6e:ea:b6:ee:63:02:58:92:11:
23:8b:f1:d9:8e:5e:ec:3c:a7:19:8a:a7:93:94:8a:82:62:3c:
9b:66:58:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76uwRUb6/4FDsnDAHharfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODg4NTE5ODFjZmIzYzE1NjI0YjZlOTdmNjBhM2Q5OTFk
NmQ5NjkwHhcNMjUxMDE5MTAwMTQwWhcNMjUxMDIwMTAwMTQwWjAzMTEwLwYDVQQD
Eyg2YjliZWMxZGRkMmM3OGYyYjU0ZGQyZDA1NGY1ZGU3ODJhOWVhNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q8G2vHvAsN06fbNlCmELwpSqco3
ii4mgvRN+r+XOjdLhHlYkyYQsX8PCPUBNzBB8il29zOwsNnKidOIgKlzQm4k2TWh
u6GhEYRpk+pAWmkqQ8oxhzh0LvpzFrlGwd9YQV1nEFO+mmGELjK9Dx/C8nCA9LI4
FuCiXpesCQX+I+axYoaiy9pkPy5adMhNavkdPWlB/CR0nQ4Z47UfZ7BKtOMpeg1r
1cHGyN2Z7SoD7lRMsrx+Svu4CR3Aajpi6eJ85U7xQ2HEC+Vga4LFLKVVobWaxljw
EJ2JgxOmLmCa6w+nmuLzoCuk+bZzSqism7AQXjGHljO92Mi89IuhMcvBIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGub7B3dLHjytU3S0FT13ngqnqYKMB8GA1UdIwQY
MBaAFNeIhRmBz7PBViS26X9go9mR1tlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgt
ZDA4MDA0NDkzZDE0LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgtZDA4MDA0NDkzZDE0
LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHb+oyix5
u9CnguCh/9g75XefF/2C9Vd7xrb+HubT2qB0WsJLMffBhmFt2J763wN+FHTYp36C
4SPiNcF0OTcuOSclrVoweKRN8jEQWAHPDrhrDNmgyRguu686dNnqr5vntqmTdJOu
M8srRtpfDMDUQn0f/R47MoAm1cxp5KAeCeEfMx2h96OULSvyqGWx3goJBIvKeYSj
aAByVi7MOMxCHFbahYfxgcuft281gPKqJEAT+5eQ4bfV5KeaKdWe+zE3yLUITRrn
cMxzzVS+QoDsNxFjlqBzUkC3MtM6gk9Tq2cKbuq27mMCWJIRI4vx2Y5e7DynGYqn
k5SKgmI8m2ZYHw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:06 2025 by rpki-client