Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier: kbYSJUGZt0BLICI9QZDbpHD6uMIm3PuX2+5d2E1PKjU=
Subject key identifier: B6:0A:D1:93:55:79:0F:B2:78:AD:88:F2:D5:21:0E:3A:6D:32:92:14
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial: 0199FCC6101AECB397EBE3994733DAC7394C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number: 09B1
Signing time: Sun 19 Oct 2025 14:01:02 +0000
Manifest this update: Sun 19 Oct 2025 14:01:02 +0000
Manifest next update: Mon 20 Oct 2025 14:01:02 +0000
Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: Z0tVaHp5qnAwatwr5ymp+e55Bd4b0FEXlbooQiL/cxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:10:1a:ec:b3:97:eb:e3:99:47:33:da:c7:39:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Validity
Not Before: Oct 19 14:01:02 2025 GMT
Not After : Oct 20 14:01:02 2025 GMT
Subject: CN=b60ad19355790fb278ad88f2d5210e3a6d329214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:cc:84:77:d7:cb:a5:73:c6:36:46:d0:a5:
5c:18:70:6d:33:66:9c:0e:3b:47:42:4b:46:b7:0a:
44:f6:1b:8a:86:03:46:7b:39:58:a1:87:97:bd:d1:
d8:75:04:c6:8e:fb:5c:5a:40:0e:69:5b:e6:34:8f:
fa:91:e3:6f:ed:6c:b6:35:d6:ff:c0:c0:4f:77:a7:
b0:2a:c8:0f:94:93:b3:ec:9f:a3:f1:f4:0f:f0:59:
4e:af:87:ba:19:83:a4:12:11:e0:de:1a:74:80:6c:
33:e1:45:eb:d9:b7:8c:09:37:b4:2e:6e:4e:92:d0:
23:48:2e:03:57:52:a6:63:b6:21:cb:92:16:2f:31:
fd:27:23:2a:1e:6e:47:0f:a7:01:ce:e1:a1:1f:d0:
7f:ed:c8:3f:20:3a:72:4c:cd:d2:18:fa:bd:ad:27:
ac:dc:97:56:bd:05:bd:44:30:82:cd:01:03:16:f6:
4a:d1:d4:21:6a:c0:f3:2b:be:65:b6:22:4f:c7:2c:
9a:62:25:81:3e:4b:fc:0a:cb:12:a2:f6:3a:6f:a3:
c3:f4:01:c8:12:0e:84:52:3f:91:77:e8:bb:24:de:
86:20:1c:15:14:c7:f8:cc:68:bc:82:c3:0a:17:53:
0f:f8:b9:25:de:20:74:44:2f:4d:6a:d6:9e:c9:39:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0A:D1:93:55:79:0F:B2:78:AD:88:F2:D5:21:0E:3A:6D:32:92:14
X509v3 Authority Key Identifier:
keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b4:ef:eb:ac:29:1f:49:74:e0:ad:a1:b7:55:c0:ad:9a:e5:
d7:c3:c3:01:30:cd:3f:fb:69:11:cd:10:61:f0:6c:22:cc:31:
45:ad:7f:9a:5d:c5:7b:90:88:db:e1:b1:8b:98:c5:49:ba:74:
70:86:61:db:ed:09:34:32:50:fb:18:9d:67:f7:25:dc:e7:55:
56:d6:fc:2b:6f:4b:d6:b4:d6:66:3f:0f:ef:3b:50:35:d1:ae:
85:98:40:72:71:10:c3:7b:f4:86:59:74:e3:d8:ed:bf:45:13:
e8:77:54:e5:0a:81:47:7d:db:1d:b0:a1:59:58:2e:dd:39:0a:
7a:43:f9:71:6d:57:ef:27:8d:63:c5:f2:25:6e:15:d9:f9:a7:
d4:c7:ad:c6:55:18:25:7f:e5:f9:16:35:00:a6:41:37:04:1c:
e0:72:a5:e9:06:a3:40:fe:6b:50:2a:89:26:8c:9a:9f:14:d0:
63:bf:90:de:54:43:26:34:90:84:a3:08:95:da:94:90:10:54:
fb:00:5e:42:48:e5:b8:93:13:aa:31:35:50:04:2d:14:a5:4e:
c3:eb:e8:94:d9:70:f8:54:e9:24:0b:4e:4b:11:86:97:51:ca:
8a:12:fe:93:ea:84:69:79:81:f2:9e:e0:7f:3c:90:8c:57:06:
14:b2:16:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xhAa7LOX6+OZRzPaxzlMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YmNlZjlmYTFmM2IxMzg0MjEzM2FhZDRmN2I0MDFlZGM5
OGUwNDgwHhcNMjUxMDE5MTQwMTAyWhcNMjUxMDIwMTQwMTAyWjAzMTEwLwYDVQQD
EyhiNjBhZDE5MzU1NzkwZmIyNzhhZDg4ZjJkNTIxMGUzYTZkMzI5MjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7TMhHfXy6VzxjZG0KVcGHBtM2ac
DjtHQktGtwpE9huKhgNGezlYoYeXvdHYdQTGjvtcWkAOaVvmNI/6keNv7Wy2Ndb/
wMBPd6ewKsgPlJOz7J+j8fQP8FlOr4e6GYOkEhHg3hp0gGwz4UXr2beMCTe0Lm5O
ktAjSC4DV1KmY7Yhy5IWLzH9JyMqHm5HD6cBzuGhH9B/7cg/IDpyTM3SGPq9rSes
3JdWvQW9RDCCzQEDFvZK0dQhasDzK75ltiJPxyyaYiWBPkv8CssSovY6b6PD9AHI
Eg6EUj+Rd+i7JN6GIBwVFMf4zGi8gsMKF1MP+Lkl3iB0RC9NataeyTnrMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYK0ZNVeQ+yeK2I8tUhDjptMpIUMB8GA1UdIwQY
MBaAFBe875+h87E4QhM6rU97QB7cmOBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iM2Q4YzQtMzdmYi00MGU4LTgyZGUt
Zjg0MTlmZTU4NzJiLzEvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iM2Q4YzQtMzdmYi00MGU4LTgyZGUtZjg0MTlmZTU4NzJi
LzEvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrTv66wp
H0l04K2ht1XArZrl18PDATDNP/tpEc0QYfBsIswxRa1/ml3Fe5CI2+Gxi5jFSbp0
cIZh2+0JNDJQ+xidZ/cl3OdVVtb8K29L1rTWZj8P7ztQNdGuhZhAcnEQw3v0hll0
49jtv0UT6HdU5QqBR33bHbChWVgu3TkKekP5cW1X7yeNY8XyJW4V2fmn1MetxlUY
JX/l+RY1AKZBNwQc4HKl6QajQP5rUCqJJoyanxTQY7+Q3lRDJjSQhKMIldqUkBBU
+wBeQkjluJMTqjE1UAQtFKVOw+volNlw+FTpJAtOSxGGl1HKihL+k+qEaXmB8p7g
fzyQjFcGFLIWfQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:08 2025 by rpki-client