Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
File: cnOYybFuqY0iKkwpyvey68mE8oI.mft (raw, json)
Hash identifier: 2bqniyJTYy0atWTqGRtwEJZK+x+T7V/o7Ziq67DG3Gk=
Subject key identifier: 07:E7:14:18:E1:13:6F:FC:12:55:6B:3C:15:C1:D7:B3:B4:34:32:3D
Authority key identifier: 72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82
Certificate issuer: /CN=727398c9b16ea98d222a4c29caf7b2ebc984f282
Certificate serial: 0199FBEB3EE5DEDF224FBC5D883D600DDE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
Manifest number: 027A
Signing time: Sun 19 Oct 2025 10:02:02 +0000
Manifest this update: Sun 19 Oct 2025 10:02:02 +0000
Manifest next update: Mon 20 Oct 2025 10:02:02 +0000
Files and hashes: 1: cnOYybFuqY0iKkwpyvey68mE8oI.crl (hash: NcFJli9m3ikvjcBFYotKzXMPWGWl8kBL4IgxjsDQ6z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3e:e5:de:df:22:4f:bc:5d:88:3d:60:0d:de:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727398c9b16ea98d222a4c29caf7b2ebc984f282
Validity
Not Before: Oct 19 10:02:02 2025 GMT
Not After : Oct 20 10:02:02 2025 GMT
Subject: CN=07e71418e1136ffc12556b3c15c1d7b3b434323d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:31:d9:bd:cc:84:2b:b0:42:6b:8c:de:b4:
92:ee:d2:b6:a1:2b:f7:fe:3b:0a:86:b9:4d:45:c1:
f7:a1:c0:95:96:e7:4f:85:ff:12:4f:94:70:b4:07:
4a:a5:20:06:f6:ca:1b:04:56:ad:30:6a:67:ec:f8:
16:e3:2b:ef:7b:39:3a:b7:2a:8f:38:83:08:d9:5b:
de:d9:6f:30:a2:8d:67:ee:30:aa:77:67:a8:18:5e:
2d:a6:b4:cb:c1:2f:86:8e:b5:f5:97:f6:46:fc:65:
e1:79:7c:79:ae:52:42:7f:8e:a6:b5:8a:1c:a9:d9:
0b:52:38:6b:0c:8e:6c:ed:28:0f:9a:d9:43:5a:fe:
1d:ab:11:ba:41:24:5c:69:c9:6a:7e:9a:43:27:ed:
dc:9e:dd:b2:ef:89:87:37:a2:b8:13:f9:74:ee:4e:
a8:7d:46:15:9c:4f:99:85:ac:98:68:66:4e:9e:e0:
8c:93:ad:97:19:a9:20:e7:9a:0f:9e:b7:e9:af:68:
9a:3f:a0:6e:aa:20:9e:00:2c:26:97:39:b7:11:50:
6a:22:bc:90:36:0e:3c:95:ea:f0:88:ab:18:d9:a0:
bc:5f:9d:05:32:2d:4c:30:ae:f0:c5:0b:d9:7d:bc:
5f:c6:36:05:4d:1a:fb:db:4f:5e:0d:25:a1:b6:93:
ba:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E7:14:18:E1:13:6F:FC:12:55:6B:3C:15:C1:D7:B3:B4:34:32:3D
X509v3 Authority Key Identifier:
keyid:72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5a:16:84:ce:0a:0c:c9:29:6e:fd:bb:fb:a7:c6:4e:ff:67:
ca:89:a4:5f:7a:03:d3:e6:8a:84:a7:67:30:94:47:c0:a7:48:
04:3c:9c:24:5a:b6:c3:55:e5:a8:46:43:34:b8:2f:ae:86:d6:
a4:55:b5:de:09:8f:de:dc:7f:ed:ac:2f:a8:69:f3:b7:07:e4:
ac:c0:81:04:d6:3d:00:96:db:26:0a:91:2e:63:0c:f7:ac:93:
cb:aa:d2:ce:01:a1:90:7e:8d:ef:8e:0d:ac:e1:11:7e:4a:e1:
e5:9f:52:14:ed:19:3e:4c:e9:fb:2d:e0:86:e6:bd:52:ad:f8:
61:1e:ba:50:8a:79:21:a3:bc:a8:ac:d3:2f:4c:eb:05:6c:a7:
c1:56:0b:1a:cb:92:82:47:01:cc:3c:c8:f1:2e:ea:27:f6:26:
4b:2c:0f:29:82:43:47:53:2b:31:a0:5e:b9:3d:36:ca:55:6b:
76:b5:df:d7:67:0d:8f:3b:0e:6c:b1:42:c6:18:e5:27:48:ae:
5d:5f:43:9e:8f:9c:b6:1a:5f:d7:7e:5f:f1:a3:23:8d:b2:9a:
0d:65:cb:d4:02:a9:31:6a:85:27:74:22:5e:dd:58:fa:51:06:
1a:a0:37:b1:25:f2:05:8e:7b:40:64:e0:3a:a2:9c:e9:a8:23:
8f:b4:16:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76z7l3t8iT7xdiD1gDd5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzM5OGM5YjE2ZWE5OGQyMjJhNGMyOWNhZjdiMmViYzk4
NGYyODIwHhcNMjUxMDE5MTAwMjAyWhcNMjUxMDIwMTAwMjAyWjAzMTEwLwYDVQQD
EygwN2U3MTQxOGUxMTM2ZmZjMTI1NTZiM2MxNWMxZDdiM2I0MzQzMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vYx2b3MhCuwQmuM3rSS7tK2oSv3
/jsKhrlNRcH3ocCVludPhf8ST5RwtAdKpSAG9sobBFatMGpn7PgW4yvvezk6tyqP
OIMI2Vve2W8woo1n7jCqd2eoGF4tprTLwS+GjrX1l/ZG/GXheXx5rlJCf46mtYoc
qdkLUjhrDI5s7SgPmtlDWv4dqxG6QSRcaclqfppDJ+3cnt2y74mHN6K4E/l07k6o
fUYVnE+ZhayYaGZOnuCMk62XGakg55oPnrfpr2iaP6BuqiCeACwmlzm3EVBqIryQ
Ng48lerwiKsY2aC8X50FMi1MMK7wxQvZfbxfxjYFTRr7209eDSWhtpO67wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfnFBjhE2/8ElVrPBXB17O0NDI9MB8GA1UdIwQY
MBaAFHJzmMmxbqmNIipMKcr3suvJhPKCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25PWXliRnVxWTBpS2t3cHl2ZXk2OG1FOG9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zYzYwNGUtZTZhOC00ZTRlLWI3Njkt
NWEwN2UyNmZiODIyLzEvY25PWXliRnVxWTBpS2t3cHl2ZXk2OG1FOG9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8zYzYwNGUtZTZhOC00ZTRlLWI3NjktNWEwN2UyNmZiODIy
LzEvY25PWXliRnVxWTBpS2t3cHl2ZXk2OG1FOG9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlloWhM4K
DMkpbv27+6fGTv9nyomkX3oD0+aKhKdnMJRHwKdIBDycJFq2w1XlqEZDNLgvrobW
pFW13gmP3tx/7awvqGnztwfkrMCBBNY9AJbbJgqRLmMM96yTy6rSzgGhkH6N744N
rOERfkrh5Z9SFO0ZPkzp+y3ghua9Uq34YR66UIp5IaO8qKzTL0zrBWynwVYLGsuS
gkcBzDzI8S7qJ/YmSywPKYJDR1MrMaBeuT02ylVrdrXf12cNjzsObLFCxhjlJ0iu
XV9Dno+cthpf135f8aMjjbKaDWXL1AKpMWqFJ3QiXt1Y+lEGGqA3sSXyBY57QGTg
OqKc6agjj7QWKQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:52 2025 by rpki-client