Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: sgQFWaKoIVFRQYKXgd0AyG7gRpUmVO5cu2AbNgE+bPE=
Subject key identifier: CC:90:F4:18:7C:49:04:5A:E8:28:1C:5F:5E:DD:F7:90:0E:AB:8C:BD
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 0199FDD9CE672D1F24EE528BA44793304CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:02:13 +0000
Manifest this update: Sun 19 Oct 2025 19:02:13 +0000
Manifest next update: Mon 20 Oct 2025 19:02:13 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: TrWEYnifVJf9asrSjpPfmnY++vDAs9jK6N5zCS8abM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ce:67:2d:1f:24:ee:52:8b:a4:47:93:30:4c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: Oct 19 19:02:13 2025 GMT
Not After : Oct 20 19:02:13 2025 GMT
Subject: CN=cc90f4187c49045ae8281c5f5eddf7900eab8cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:25:7a:3e:c6:94:18:cb:ee:f3:0a:fc:1d:
b7:91:1f:11:ee:02:2b:28:df:5e:70:2e:19:e0:dd:
d8:e5:97:8d:df:f7:9d:d0:98:1b:2a:fa:fc:d9:5b:
b2:70:8c:6c:7c:11:5f:f7:24:74:97:14:73:9c:10:
3e:d6:06:24:5b:fb:a0:b6:f5:2e:da:46:05:8a:ec:
0b:bb:56:12:41:dc:b1:02:05:bd:74:a2:c0:77:93:
54:b0:b4:cc:14:c2:e4:13:56:b8:42:d5:bb:ec:5e:
cf:c4:82:7a:d0:4b:74:ae:f4:9f:98:19:8a:b7:ac:
67:d6:4b:d4:d0:81:97:2f:20:e6:9f:e4:2c:a5:cd:
21:4c:ba:5d:73:1d:72:71:cb:cc:5f:98:6d:f8:79:
c4:21:0f:f7:f8:cd:47:d0:14:29:85:9d:c8:54:cd:
d5:cd:31:9b:22:42:1a:38:df:2a:81:02:1a:77:0e:
2f:24:3d:bb:8d:b0:fd:12:2b:c8:66:69:23:0d:41:
92:c6:44:83:a5:9e:27:f9:ee:39:af:99:7d:e2:5c:
db:21:ca:13:c8:25:10:6b:24:fe:d0:0a:2c:89:3c:
cf:b6:23:44:63:19:9a:ad:5c:0d:ee:d4:20:45:2c:
91:af:79:51:37:a9:50:b8:56:f8:ba:20:71:a2:24:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:90:F4:18:7C:49:04:5A:E8:28:1C:5F:5E:DD:F7:90:0E:AB:8C:BD
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8c:0a:bf:20:02:3c:15:d3:1b:dd:b1:0f:75:6f:b4:be:2f:
69:84:6f:8d:d2:d3:97:6a:18:b4:1d:7f:48:5b:e9:e5:13:af:
ef:92:d9:11:c8:ca:00:84:87:aa:bc:21:18:81:60:c8:14:29:
e4:a3:8c:e8:b2:68:38:cc:bf:98:fb:29:cf:46:cf:ec:71:12:
d5:c3:ac:cf:67:60:52:62:14:6b:b5:f2:2d:5d:4f:95:75:af:
95:dd:b4:ed:11:40:75:9b:0e:44:4b:94:40:6d:bd:bb:1e:5c:
7f:09:c5:41:f5:bb:5d:e0:37:83:47:f9:51:5b:0f:5d:33:f7:
0b:68:01:f7:b1:51:81:94:43:1f:a0:84:28:4b:40:e3:f1:20:
07:72:4e:11:e8:b7:e1:de:36:cc:ce:21:d7:d7:34:0b:9e:5d:
ce:91:8f:bd:76:0a:43:1d:8e:1b:a9:7a:be:8f:24:6c:fb:c4:
78:fc:e1:39:df:f3:c1:04:2a:db:cf:21:d1:48:f4:00:f4:f2:
6e:85:b1:aa:c8:c1:1a:4c:60:55:a3:9d:45:23:34:9d:11:7c:
90:25:b7:bf:8e:9f:4d:96:a8:33:c1:0a:cf:fe:7b:38:b0:19:
4c:15:66:61:1d:33:a2:76:2d:5e:4c:c6:a7:91:95:f9:9d:06:
9a:fb:2b:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92c5nLR8k7lKLpEeTMEz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODRhOWRiZTYzMTBkN2JmYWU4MzhiYTIyZmEwNDcxMjZi
NTU0NTgwHhcNMjUxMDE5MTkwMjEzWhcNMjUxMDIwMTkwMjEzWjAzMTEwLwYDVQQD
EyhjYzkwZjQxODdjNDkwNDVhZTgyODFjNWY1ZWRkZjc5MDBlYWI4Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye4lej7GlBjL7vMK/B23kR8R7gIr
KN9ecC4Z4N3Y5ZeN3/ed0JgbKvr82VuycIxsfBFf9yR0lxRznBA+1gYkW/ugtvUu
2kYFiuwLu1YSQdyxAgW9dKLAd5NUsLTMFMLkE1a4QtW77F7PxIJ60Et0rvSfmBmK
t6xn1kvU0IGXLyDmn+Qspc0hTLpdcx1yccvMX5ht+HnEIQ/3+M1H0BQphZ3IVM3V
zTGbIkIaON8qgQIadw4vJD27jbD9EivIZmkjDUGSxkSDpZ4n+e45r5l94lzbIcoT
yCUQayT+0AosiTzPtiNEYxmarVwN7tQgRSyRr3lRN6lQuFb4uiBxoiQ3cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyQ9Bh8SQRa6CgcX17d95AOq4y9MB8GA1UdIwQY
MBaAFAuEqdvmMQ17+ug4uiL6BHEmtVRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNzYzM2YtMjQxNy00ZTAzLTk0YTkt
YTg1ZGRlMjE0NWVhLzEvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hNzYzM2YtMjQxNy00ZTAzLTk0YTktYTg1ZGRlMjE0NWVh
LzEvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYwKvyAC
PBXTG92xD3VvtL4vaYRvjdLTl2oYtB1/SFvp5ROv75LZEcjKAISHqrwhGIFgyBQp
5KOM6LJoOMy/mPspz0bP7HES1cOsz2dgUmIUa7XyLV1PlXWvld207RFAdZsOREuU
QG29ux5cfwnFQfW7XeA3g0f5UVsPXTP3C2gB97FRgZRDH6CEKEtA4/EgB3JOEei3
4d42zM4h19c0C55dzpGPvXYKQx2OG6l6vo8kbPvEePzhOd/zwQQq288h0Uj0APTy
boWxqsjBGkxgVaOdRSM0nRF8kCW3v46fTZaoM8EKz/57OLAZTBVmYR0zonYtXkzG
p5GV+Z0GmvsrOA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:38 2025 by rpki-client