Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
File: E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json)
Hash identifier: SASqgb4F/TmsNslYWf4iixKCVSf0EP9KJquQ0PFAxXw=
Subject key identifier: 77:13:6C:EB:89:A4:07:4E:F1:01:3C:16:90:24:15:B5:A2:8D:51:3E
Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
Certificate issuer: /CN=13dde69abccc65d08688ca83542633a219293227
Certificate serial: 0199FF2282D34BE21E60D39C0BE623B30591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
Manifest number: 0D10
Signing time: Mon 20 Oct 2025 01:01:15 +0000
Manifest this update: Mon 20 Oct 2025 01:01:15 +0000
Manifest next update: Tue 21 Oct 2025 01:01:15 +0000
Files and hashes: 1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: KaImWVeeah2XIfTuVAYSPA44gf78A8TGqlmDkizPWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:82:d3:4b:e2:1e:60:d3:9c:0b:e6:23:b3:05:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dde69abccc65d08688ca83542633a219293227
Validity
Not Before: Oct 20 01:01:15 2025 GMT
Not After : Oct 21 01:01:15 2025 GMT
Subject: CN=77136ceb89a4074ef1013c16902415b5a28d513e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:1c:6a:b8:1b:e5:f4:8f:65:c3:8c:50:a6:
8c:bf:2f:aa:e8:d5:b6:79:87:33:71:07:dd:78:56:
5c:06:dc:0b:c2:c8:0a:7c:2e:7a:23:60:2b:58:ea:
50:8e:f6:27:eb:9f:98:be:9b:08:02:f1:8e:78:60:
0e:48:ec:67:7d:6f:d9:ca:c1:b2:75:70:84:84:d1:
f9:4a:c2:da:17:89:d3:35:cf:64:20:67:e1:e7:25:
86:76:63:40:9e:f7:a5:b5:63:34:e7:81:a4:ab:50:
07:f1:6c:12:9e:a1:bf:c1:a9:56:84:4b:97:2b:64:
7a:47:a2:d5:7b:2b:32:35:99:a6:1b:26:3f:3d:2d:
7a:28:f3:16:b5:82:2b:ac:9a:1d:f4:cd:76:0a:86:
9d:78:f2:de:2d:4f:a3:b9:2c:d4:a0:5e:94:4e:68:
6a:48:14:92:c9:22:86:28:8e:af:62:1e:d9:f9:88:
44:e6:f2:ae:3c:87:2c:ee:10:dc:21:6d:88:03:23:
0f:3a:fa:7c:17:35:e1:3d:5d:ac:f1:06:42:d2:8f:
86:7a:fc:b1:67:25:9f:0f:fe:8b:90:41:b8:45:70:
00:e4:f1:c0:4e:5d:c8:03:09:06:44:c0:25:cd:13:
cb:f3:8c:47:46:d5:af:49:24:09:ad:ce:41:2d:56:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:13:6C:EB:89:A4:07:4E:F1:01:3C:16:90:24:15:B5:A2:8D:51:3E
X509v3 Authority Key Identifier:
keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c8:f0:25:a5:b7:37:5f:9b:f9:56:a9:62:36:fb:2c:1d:4f:
0e:b3:85:af:ee:7a:76:f1:2c:77:ab:50:fc:56:12:cc:e3:80:
48:9f:5d:0d:b5:97:c9:ce:fd:f7:db:8a:6f:1a:6c:60:7e:c2:
e1:e8:c3:92:aa:87:71:a9:ed:c5:b8:11:46:8f:27:be:b0:05:
35:e6:5f:d6:c5:b5:b6:a9:3e:c7:78:1e:57:bb:ae:22:5c:12:
fa:36:84:41:40:a1:ac:00:2d:21:53:72:ea:b6:a7:37:e5:6d:
0d:dd:72:55:ed:a0:82:5c:43:8d:a6:76:51:e7:d7:97:40:fa:
3d:ae:28:f2:69:c0:6c:66:07:a5:15:95:6f:19:c2:d2:a6:52:
1a:f6:84:13:a0:06:d2:57:8c:95:13:46:d9:72:c4:47:5f:aa:
91:68:b0:3b:c7:da:cc:6b:b7:9c:c0:00:5d:ec:f6:7d:f1:6b:
be:de:78:bf:36:ba:60:46:76:a7:2c:dc:72:a3:43:5a:09:68:
33:b7:81:9a:ed:f0:47:8b:3b:62:f3:89:a8:0f:a4:c4:90:81:
53:cf:ef:b8:5a:3c:55:9d:d0:59:cd:f3:8f:58:84:eb:34:4b:
a7:4a:74:b8:be:4f:20:ea:d6:31:b0:cd:65:c8:55:96:16:db:
40:51:92:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IoLTS+IeYNOcC+YjswWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZGRlNjlhYmNjYzY1ZDA4Njg4Y2E4MzU0MjYzM2EyMTky
OTMyMjcwHhcNMjUxMDIwMDEwMTE1WhcNMjUxMDIxMDEwMTE1WjAzMTEwLwYDVQQD
Eyg3NzEzNmNlYjg5YTQwNzRlZjEwMTNjMTY5MDI0MTViNWEyOGQ1MTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnAcargb5fSPZcOMUKaMvy+q6NW2
eYczcQfdeFZcBtwLwsgKfC56I2ArWOpQjvYn65+YvpsIAvGOeGAOSOxnfW/ZysGy
dXCEhNH5SsLaF4nTNc9kIGfh5yWGdmNAnveltWM054Gkq1AH8WwSnqG/walWhEuX
K2R6R6LVeysyNZmmGyY/PS16KPMWtYIrrJod9M12CoadePLeLU+juSzUoF6UTmhq
SBSSySKGKI6vYh7Z+YhE5vKuPIcs7hDcIW2IAyMPOvp8FzXhPV2s8QZC0o+Gevyx
ZyWfD/6LkEG4RXAA5PHATl3IAwkGRMAlzRPL84xHRtWvSSQJrc5BLVY9OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcTbOuJpAdO8QE8FpAkFbWijVE+MB8GA1UdIwQY
MBaAFBPd5pq8zGXQhojKg1QmM6IZKTInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTkzbW1yek1aZENHaU1xRFZDWXpvaGtwTWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jNjM2Y2MtNDA1YS00ZjFlLTkzNmEt
ODQzN2NjOTIyODJhLzEvRTkzbW1yek1aZENHaU1xRFZDWXpvaGtwTWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jNjM2Y2MtNDA1YS00ZjFlLTkzNmEtODQzN2NjOTIyODJh
LzEvRTkzbW1yek1aZENHaU1xRFZDWXpvaGtwTWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMjwJaW3
N1+b+VapYjb7LB1PDrOFr+56dvEsd6tQ/FYSzOOASJ9dDbWXyc7999uKbxpsYH7C
4ejDkqqHcantxbgRRo8nvrAFNeZf1sW1tqk+x3geV7uuIlwS+jaEQUChrAAtIVNy
6ranN+VtDd1yVe2gglxDjaZ2UefXl0D6Pa4o8mnAbGYHpRWVbxnC0qZSGvaEE6AG
0leMlRNG2XLER1+qkWiwO8fazGu3nMAAXez2ffFrvt54vza6YEZ2pyzccqNDWglo
M7eBmu3wR4s7YvOJqA+kxJCBU8/vuFo8VZ3QWc3zj1iE6zRLp0p0uL5PIOrWMbDN
ZchVlhbbQFGSDw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:06 2025 by rpki-client