Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
File: a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json)
Hash identifier: lCFfS54UiMtv32uKWzXY8FGa2yK/3SPhDyuaoKSIrUc=
Subject key identifier: 9E:3E:11:69:42:B4:90:B7:3D:76:85:36:1F:2C:70:55:D7:19:DC:C7
Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
Certificate issuer: /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Certificate serial: 0199FC2164C085E9856338DE677507EAC505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: kalMRR0F2AyfxcpADHL1xiSrrwDzZWPPtdJtDXl5faA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:64:c0:85:e9:85:63:38:de:67:75:07:ea:c5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=9e3e116942b490b73d7685361f2c7055d719dcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:da:12:66:05:7d:2c:c5:20:42:91:99:ec:
41:e0:94:aa:db:ee:6e:11:94:df:a8:91:6f:e6:a1:
dc:da:5a:d2:fd:5d:6a:e8:12:2b:57:c0:c8:3c:5f:
d0:a3:39:4e:93:ff:46:47:17:bc:45:b5:f3:cf:59:
59:9b:7f:6d:84:9b:df:19:9b:47:7f:94:81:55:cd:
9c:22:a9:12:69:8f:fb:e6:8b:3e:e4:ba:b7:38:6b:
d0:04:21:ea:6c:00:88:59:4f:5a:18:44:66:bf:85:
b6:32:15:9b:2e:40:18:55:f8:fc:f0:24:55:6c:b4:
6d:65:5b:bf:26:8d:15:94:b6:0a:d3:24:34:9e:52:
f0:40:6c:f5:82:50:5d:8f:dd:3c:81:14:28:19:dc:
74:82:b5:64:f0:be:e5:f4:ab:fe:53:1c:cb:22:a4:
07:7b:91:9d:5c:a7:7d:14:4e:9b:7b:3a:cd:bb:ac:
49:78:3c:9a:51:90:99:c1:04:f0:19:93:fa:97:d2:
e2:c0:37:a4:0f:a5:89:8f:04:11:82:cb:63:82:ab:
40:3b:33:01:77:fb:1a:63:a7:62:55:9b:76:70:c0:
8a:88:ba:c2:b8:84:85:cb:81:1b:9b:c4:e4:1b:ef:
72:4f:44:50:27:67:7f:c5:53:38:bb:e2:9a:72:94:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:11:69:42:B4:90:B7:3D:76:85:36:1F:2C:70:55:D7:19:DC:C7
X509v3 Authority Key Identifier:
keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c5:9d:be:07:74:de:08:73:60:5d:91:b0:68:f0:30:4d:7b:
6d:70:61:b4:ad:46:52:71:1c:eb:41:c8:19:5d:81:73:2a:7e:
5a:a8:62:d9:66:23:d9:bb:16:12:a0:aa:38:9d:5d:9a:2b:e6:
7c:30:d4:b9:c0:65:37:b3:97:f3:6c:58:ad:76:1e:06:a9:91:
20:ba:ce:b1:0c:88:41:d5:fc:0c:5b:e9:27:36:6e:07:4b:a2:
18:55:89:d8:d3:cc:d8:01:d6:4b:8f:1f:87:a7:c4:eb:e2:32:
d4:d2:92:3c:c3:64:19:bd:67:52:1e:1d:a6:a3:c1:70:de:00:
5e:b7:06:d5:a8:ba:f1:4f:ce:6e:f7:66:2f:e5:4b:fa:89:6b:
06:89:8f:da:d9:d6:b2:de:bd:55:1a:ea:6f:da:9d:47:bf:6d:
01:50:e3:1a:6b:d6:07:ee:5b:63:e4:82:05:aa:86:65:a6:9b:
86:66:7c:3e:0d:71:23:01:d0:00:e8:e9:1a:e9:3b:a1:57:af:
48:bc:a6:d1:b1:09:f6:05:fa:79:30:59:e2:22:2d:33:f6:db:
99:63:56:a8:ed:20:2d:19:e9:d0:45:fd:c4:4e:f4:0b:d3:5b:
c8:fe:25:46:88:05:67:22:9d:91:48:a3:97:c2:66:b2:06:9a:
4b:7b:56:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWTAhemFYzjeZ3UH6sUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWU0NGMyMTIzNDI1MzYxOGIwZDdiMzZiOTBlM2NiNWM0
MGRlZDEwHhcNMjUxMDE5MTEwMTEwWhcNMjUxMDIwMTEwMTEwWjAzMTEwLwYDVQQD
Eyg5ZTNlMTE2OTQyYjQ5MGI3M2Q3Njg1MzYxZjJjNzA1NWQ3MTlkY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIraEmYFfSzFIEKRmexB4JSq2+5u
EZTfqJFv5qHc2lrS/V1q6BIrV8DIPF/QozlOk/9GRxe8RbXzz1lZm39thJvfGZtH
f5SBVc2cIqkSaY/75os+5Lq3OGvQBCHqbACIWU9aGERmv4W2MhWbLkAYVfj88CRV
bLRtZVu/Jo0VlLYK0yQ0nlLwQGz1glBdj908gRQoGdx0grVk8L7l9Kv+UxzLIqQH
e5GdXKd9FE6bezrNu6xJeDyaUZCZwQTwGZP6l9LiwDekD6WJjwQRgstjgqtAOzMB
d/saY6diVZt2cMCKiLrCuISFy4Ebm8TkG+9yT0RQJ2d/xVM4u+KacpRKGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4+EWlCtJC3PXaFNh8scFXXGdzHMB8GA1UdIwQY
MBaAFGvuRMISNCU2GLDXs2uQ48tcQN7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wYTcxMGEtYzgwMC00ZWFlLWEzNWIt
NzY5YjNmYzI2NjRiLzEvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wYTcxMGEtYzgwMC00ZWFlLWEzNWItNzY5YjNmYzI2NjRi
LzEvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncWdvgd0
3ghzYF2RsGjwME17bXBhtK1GUnEc60HIGV2Bcyp+Wqhi2WYj2bsWEqCqOJ1dmivm
fDDUucBlN7OX82xYrXYeBqmRILrOsQyIQdX8DFvpJzZuB0uiGFWJ2NPM2AHWS48f
h6fE6+Iy1NKSPMNkGb1nUh4dpqPBcN4AXrcG1ai68U/ObvdmL+VL+olrBomP2tnW
st69VRrqb9qdR79tAVDjGmvWB+5bY+SCBaqGZaabhmZ8Pg1xIwHQAOjpGuk7oVev
SLym0bEJ9gX6eTBZ4iItM/bbmWNWqO0gLRnp0EX9xE70C9NbyP4lRogFZyKdkUij
l8JmsgaaS3tW+A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:09 2025 by rpki-client