Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
File: CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json)
Hash identifier: BHvn+mKNm7+2Dcc0wXc90SWsLXE81SYICV7rW4wIQtU=
Subject key identifier: 5B:D3:F3:5F:28:84:C7:63:CC:52:35:A7:DE:B7:E6:C9:39:3E:33:09
Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
Certificate issuer: /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Certificate serial: 0199FE46B786B7A33EC2D613F138878FBD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
Manifest number: 0471
Signing time: Sun 19 Oct 2025 21:01:11 +0000
Manifest this update: Sun 19 Oct 2025 21:01:11 +0000
Manifest next update: Mon 20 Oct 2025 21:01:11 +0000
Files and hashes: 1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: qNBUjNHdDR5H9vSjHNNL01gcvvoM2HMCDjr4qd0moms=)
2: eHRO21DmqwNpVgTB2vD5a-Ys0dI.roa (hash: aBKp2xE7MsTi71gMh8o9d5bU6XkJQ/dv6sIkU9dHe34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:b7:86:b7:a3:3e:c2:d6:13:f1:38:87:8f:bd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Validity
Not Before: Oct 19 21:01:11 2025 GMT
Not After : Oct 20 21:01:11 2025 GMT
Subject: CN=5bd3f35f2884c763cc5235a7deb7e6c9393e3309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:c8:b8:44:b8:d7:bf:d8:12:7d:94:b0:03:
dc:6b:e1:41:7a:61:0b:ee:c6:2d:79:0d:82:4d:53:
dc:f0:07:c0:fe:51:e6:f8:32:7f:0e:8e:f8:01:7c:
7e:50:7c:55:cf:98:9c:a3:88:fe:6d:f3:af:b2:ff:
5e:f1:32:67:00:49:f0:71:f2:54:29:8b:bc:4e:00:
59:67:76:be:77:cc:29:fb:e5:42:b8:65:c2:ec:b5:
27:57:b9:fc:56:2d:a1:a2:a8:bb:30:bc:54:1e:73:
dd:e1:e0:e9:23:4b:b0:5b:25:8a:b9:6d:ec:7f:21:
79:64:42:11:41:9f:d5:d2:b4:98:c4:bd:47:ba:74:
63:20:97:38:9f:aa:d9:d8:6a:ea:36:ed:e9:b9:4f:
6b:b1:a8:86:19:47:27:b7:fb:f3:21:f5:b7:c7:5e:
3d:e8:49:70:b6:04:a7:61:21:25:fc:68:b8:75:60:
34:c1:36:0f:b0:6f:d7:87:db:1b:9b:0a:34:11:6e:
52:0e:18:51:98:3c:60:78:16:2b:e6:04:ad:ef:25:
44:64:62:db:0a:2e:6d:06:1e:ee:95:5c:a5:e3:9b:
8e:cc:03:c5:99:98:dd:e0:15:88:f7:e6:84:43:5a:
b9:f9:c9:8e:0b:89:ef:70:07:27:4e:be:a7:97:21:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D3:F3:5F:28:84:C7:63:CC:52:35:A7:DE:B7:E6:C9:39:3E:33:09
X509v3 Authority Key Identifier:
keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3a:9d:e8:a5:2c:b5:c2:fd:23:d6:68:0b:f8:4b:b0:de:d6:
ff:14:3f:59:a3:5e:08:6b:db:ce:99:51:91:be:a9:b2:49:45:
8a:9c:46:8a:2a:25:eb:7a:49:c9:06:b0:45:60:5e:64:70:82:
fc:db:d1:9f:f8:42:78:2f:7b:38:7d:73:aa:b7:3d:53:42:ab:
0f:e0:6b:4e:e4:dc:80:81:ca:5d:65:b1:bf:98:49:55:6e:9b:
4e:ae:9b:f2:54:8c:10:51:98:8f:19:e3:3c:c8:49:1a:fb:49:
8e:31:9e:fc:2f:e2:08:8c:bc:cd:c3:f3:18:5e:ab:86:56:7f:
a3:f4:0a:79:cc:0e:bc:5b:99:32:32:25:43:e2:36:33:71:19:
9f:b5:09:90:19:ea:45:01:1d:f0:4e:a2:3c:2e:ea:29:9e:83:
78:27:10:ab:76:7a:c7:47:de:e5:6d:80:71:68:53:cb:11:69:
d7:eb:4c:f3:f1:9d:d3:2c:19:68:52:15:60:3b:c8:fa:ad:cc:
71:09:62:9c:fb:b1:df:05:2c:b2:cc:3e:c4:a3:68:3c:b3:e6:
a7:8c:4e:db:d2:e1:07:b3:2b:a3:62:34:ba:05:07:e4:47:e3:
ab:67:4c:fd:93:c5:6d:3e:1c:d1:8c:97:90:8c:50:33:69:31:
53:0d:72:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RreGt6M+wtYT8TiHj702MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YjNmYjQwMTk2N2IwNmY4NDFiYzZhMWU5ZDQ5MmE5YTc1
ZjkyNjgwHhcNMjUxMDE5MjEwMTExWhcNMjUxMDIwMjEwMTExWjAzMTEwLwYDVQQD
Eyg1YmQzZjM1ZjI4ODRjNzYzY2M1MjM1YTdkZWI3ZTZjOTM5M2UzMzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvXIuES417/YEn2UsAPca+FBemEL
7sYteQ2CTVPc8AfA/lHm+DJ/Do74AXx+UHxVz5ico4j+bfOvsv9e8TJnAEnwcfJU
KYu8TgBZZ3a+d8wp++VCuGXC7LUnV7n8Vi2hoqi7MLxUHnPd4eDpI0uwWyWKuW3s
fyF5ZEIRQZ/V0rSYxL1HunRjIJc4n6rZ2GrqNu3puU9rsaiGGUcnt/vzIfW3x149
6ElwtgSnYSEl/Gi4dWA0wTYPsG/Xh9sbmwo0EW5SDhhRmDxgeBYr5gSt7yVEZGLb
Ci5tBh7ulVyl45uOzAPFmZjd4BWI9+aEQ1q5+cmOC4nvcAcnTr6nlyGtywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvT818ohMdjzFI1p9635sk5PjMJMB8GA1UdIwQY
MBaAFAiz+0AZZ7BvhBvGoenUkqmnX5JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQt
ZjZjMTZhY2ExNzVlLzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQtZjZjMTZhY2ExNzVl
LzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTqd6KUs
tcL9I9ZoC/hLsN7W/xQ/WaNeCGvbzplRkb6psklFipxGiiol63pJyQawRWBeZHCC
/NvRn/hCeC97OH1zqrc9U0KrD+BrTuTcgIHKXWWxv5hJVW6bTq6b8lSMEFGYjxnj
PMhJGvtJjjGe/C/iCIy8zcPzGF6rhlZ/o/QKecwOvFuZMjIlQ+I2M3EZn7UJkBnq
RQEd8E6iPC7qKZ6DeCcQq3Z6x0fe5W2AcWhTyxFp1+tM8/Gd0ywZaFIVYDvI+q3M
cQlinPux3wUsssw+xKNoPLPmp4xO29LhB7Mro2I0ugUH5Efjq2dM/ZPFbT4c0YyX
kIxQM2kxUw1yag==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:08 2025 by rpki-client