Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File: dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier: Xg5riEWiVJzPDnAfIcLpkeBcQOyNeJBOIFuD2snqqEg=
Subject key identifier: B8:41:48:D3:1A:92:80:B9:06:D4:90:06:D1:09:EF:01:CD:75:21:B4
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer: /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial: 019A0035A81C2A67DC7D987C0CBD600D087F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 06:01:47 +0000
Manifest this update: Mon 20 Oct 2025 06:01:47 +0000
Manifest next update: Tue 21 Oct 2025 06:01:47 +0000
Files and hashes: 1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: 6KGuruvvuKGnuot7vJvLHXCViS6LYS9RIvOG2BrPrI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:a8:1c:2a:67:dc:7d:98:7c:0c:bd:60:0d:08:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Validity
Not Before: Oct 20 06:01:47 2025 GMT
Not After : Oct 21 06:01:47 2025 GMT
Subject: CN=b84148d31a9280b906d49006d109ef01cd7521b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:99:9b:79:d0:81:06:8d:f5:68:c1:56:cd:47:
51:18:71:2c:12:18:18:1c:70:09:eb:47:1c:cf:d5:
a6:b3:e3:96:af:55:c9:33:42:f8:89:3d:df:04:2f:
3c:d9:2a:91:68:c9:0f:34:a5:b8:9e:15:d2:f5:bb:
e7:79:58:05:0b:e1:56:3e:32:f7:d0:e4:92:15:d1:
ea:bc:ec:79:32:cf:41:56:d5:06:d1:59:1a:58:db:
29:4c:e1:40:cd:c5:f2:d6:f3:b0:6a:3b:79:50:ff:
c8:72:60:d4:da:8c:7b:c9:3d:07:54:ad:90:fd:2a:
a0:70:50:05:2b:fe:8e:97:32:3d:7b:f3:eb:15:ec:
9c:ae:2d:43:6d:83:cc:47:b7:ee:87:93:9e:a2:ae:
c7:7e:80:70:b8:b1:a5:c9:c6:bf:38:3a:b3:d5:c4:
29:e5:73:1e:8c:e3:5f:4b:16:9d:de:a7:a3:bf:53:
26:bd:99:fd:b2:a4:d1:c1:0e:0f:b1:00:e9:d3:bf:
a9:8c:c3:84:2a:9c:2f:91:50:d6:bc:8f:fa:12:0f:
5d:57:d6:89:5f:2e:11:63:24:b4:40:fa:68:8d:59:
ce:54:9f:a9:2e:66:77:62:8b:64:02:26:cd:80:c2:
f9:cc:d6:dc:f0:02:5c:b3:95:b7:70:de:41:3c:dd:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:41:48:D3:1A:92:80:B9:06:D4:90:06:D1:09:EF:01:CD:75:21:B4
X509v3 Authority Key Identifier:
keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:99:3b:d5:10:57:0d:e8:45:5a:24:c4:6e:8d:50:52:c3:d0:
27:9e:31:b3:7c:37:83:94:cb:35:65:2b:ac:76:7b:4e:30:a0:
e7:38:84:10:33:03:70:2c:e8:7b:45:8e:0d:5c:ec:0e:41:95:
c0:28:78:9d:43:85:a1:a9:20:2a:0c:1b:48:49:e5:bd:00:9a:
ff:d4:29:53:09:98:98:95:14:f0:ef:3c:76:d2:ef:a1:b7:cf:
b0:24:f5:de:7b:d6:29:2e:26:bd:97:60:7a:9c:81:76:ab:b5:
bd:5b:bd:39:8b:8d:59:5f:85:d3:7d:7f:5a:f5:86:2c:86:2d:
09:1e:15:b0:5b:ec:1e:d4:14:53:d2:7e:99:35:21:3e:a1:67:
6d:26:dc:4e:0c:00:c7:73:5e:fc:6c:1f:51:05:57:4e:6b:f7:
da:01:a6:ca:94:d1:e1:08:e4:25:e4:78:cf:0c:a7:0d:f1:68:
95:47:4a:4d:c9:c7:ba:e5:22:e1:c5:f6:48:8a:59:f7:49:55:
a7:f0:e0:c4:9d:8c:f0:b6:ab:f6:d6:45:44:27:15:58:3a:f8:
5b:62:59:27:96:96:5c:ee:8f:18:9f:1c:57:b9:8d:ae:d4:e4:
8d:e4:a5:53:23:03:c2:84:28:92:f1:33:8f:66:15:9a:92:9d:
26:d2:35:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANagcKmfcfZh8DL1gDQh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODNiMTUxYjc0YmIyZWRiMGY1Y2U2YjZlOWJiMWUwYzNk
MGFkMWIwHhcNMjUxMDIwMDYwMTQ3WhcNMjUxMDIxMDYwMTQ3WjAzMTEwLwYDVQQD
EyhiODQxNDhkMzFhOTI4MGI5MDZkNDkwMDZkMTA5ZWYwMWNkNzUyMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pmbedCBBo31aMFWzUdRGHEsEhgY
HHAJ60ccz9Wms+OWr1XJM0L4iT3fBC882SqRaMkPNKW4nhXS9bvneVgFC+FWPjL3
0OSSFdHqvOx5Ms9BVtUG0VkaWNspTOFAzcXy1vOwajt5UP/IcmDU2ox7yT0HVK2Q
/SqgcFAFK/6OlzI9e/PrFeycri1DbYPMR7fuh5Oeoq7HfoBwuLGlyca/ODqz1cQp
5XMejONfSxad3qejv1MmvZn9sqTRwQ4PsQDp07+pjMOEKpwvkVDWvI/6Eg9dV9aJ
Xy4RYyS0QPpojVnOVJ+pLmZ3YotkAibNgML5zNbc8AJcs5W3cN5BPN3nKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhBSNMakoC5BtSQBtEJ7wHNdSG0MB8GA1UdIwQY
MBaAFHWDsVG3S7LtsPXOa26bseDD0K0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFlPeFViZExzdTJ3OWM1cmJwdXg0TVBRclJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wNDY3ZGMtY2NmMy00MzMxLTk1N2Mt
MTU4NjA2MzE4NTI1LzEvZFlPeFViZExzdTJ3OWM1cmJwdXg0TVBRclJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wNDY3ZGMtY2NmMy00MzMxLTk1N2MtMTU4NjA2MzE4NTI1
LzEvZFlPeFViZExzdTJ3OWM1cmJwdXg0TVBRclJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5k71RBX
DehFWiTEbo1QUsPQJ54xs3w3g5TLNWUrrHZ7TjCg5ziEEDMDcCzoe0WODVzsDkGV
wCh4nUOFoakgKgwbSEnlvQCa/9QpUwmYmJUU8O88dtLvobfPsCT13nvWKS4mvZdg
epyBdqu1vVu9OYuNWV+F031/WvWGLIYtCR4VsFvsHtQUU9J+mTUhPqFnbSbcTgwA
x3Ne/GwfUQVXTmv32gGmypTR4QjkJeR4zwynDfFolUdKTcnHuuUi4cX2SIpZ90lV
p/DgxJ2M8Lar9tZFRCcVWDr4W2JZJ5aWXO6PGJ8cV7mNrtTkjeSlUyMDwoQokvEz
j2YVmpKdJtI1kw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:13 2025 by rpki-client