Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: YuFjD7qhCucEibFmTibmE1YebhTZGCgrEDDXu0Uz3KU=
Subject key identifier: BE:D3:D4:3A:99:96:A6:71:38:08:BC:EA:6C:04:A0:BB:43:AE:D4:E3
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 019A503E49DB10FA4D67422610F7535EBBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 0C83
Signing time: Tue 04 Nov 2025 19:00:50 +0000
Manifest this update: Tue 04 Nov 2025 19:00:50 +0000
Manifest next update: Wed 05 Nov 2025 19:00:50 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: 9NN2hcyaASYmrU1E72RNffCnGHXeNqsyUf8deHPeDmo=)
2: FiLJrOB6VSbXcUW10ayq5u0-45c.roa (hash: SVzm6u7ARr2O1cZhcAUWJuayXj1RRfV/z3YIwyKiXZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:49:db:10:fa:4d:67:42:26:10:f7:53:5e:bb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Nov 4 19:00:50 2025 GMT
Not After : Nov 5 19:00:50 2025 GMT
Subject: CN=bed3d43a9996a6713808bcea6c04a0bb43aed4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:02:33:da:30:1d:46:ec:1d:ed:5e:ac:87:
4e:a7:0e:60:dd:ee:3c:94:f7:46:62:87:cc:c0:bc:
4e:b4:8a:f6:8f:88:80:70:d7:8b:d0:47:48:b5:36:
4d:a8:d5:5b:69:d2:4c:d4:ed:10:05:88:98:8d:62:
7e:97:4e:ae:9c:9f:9a:09:af:55:02:01:f0:e4:d0:
f7:76:db:16:b6:81:39:a8:5c:fc:86:9a:20:c7:cf:
22:0f:00:2f:b2:93:cf:72:24:f8:48:ea:54:bb:c6:
9d:13:e9:7d:7b:25:04:78:e5:c0:e8:ff:5f:ac:0c:
b2:cf:cf:51:e7:d7:72:22:05:af:a4:88:ad:6c:c5:
b0:10:64:0a:91:3c:92:c5:2c:2e:7e:90:3d:b7:43:
d9:03:7f:e5:5d:b0:c0:10:e0:81:f5:3a:57:85:e1:
5d:6f:00:61:4d:eb:54:67:3c:52:62:e4:db:e0:f7:
a5:e5:cf:38:15:7b:d7:57:f0:8b:97:96:74:2a:9b:
1c:06:3c:4e:47:a1:21:ae:3d:8d:36:35:1a:15:f3:
d7:48:ab:5d:0c:5a:19:22:55:e2:17:4a:0b:8d:4e:
35:02:3c:bf:9a:66:d3:79:4c:01:54:3f:ec:e0:d2:
22:79:93:ad:ba:d4:ce:03:11:22:af:a5:ef:9d:a4:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D3:D4:3A:99:96:A6:71:38:08:BC:EA:6C:04:A0:BB:43:AE:D4:E3
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0e:02:02:ef:e9:5b:64:af:5c:d5:2e:9a:e4:6d:da:9d:08:
44:12:b1:59:ce:ec:3a:a1:e1:a7:f8:e3:01:1b:e3:28:8d:07:
19:84:79:61:c8:f5:cc:b1:8a:7d:89:79:b7:9b:1b:a5:41:19:
21:a1:7b:24:cb:1c:c9:16:79:4c:7d:00:08:17:cd:84:02:d1:
fe:13:24:e2:e3:c6:a4:47:0f:52:d1:1f:06:d6:87:94:52:4b:
ed:2c:e0:c3:01:4f:f2:2a:27:94:12:e9:63:af:60:89:8e:88:
06:28:4e:67:4a:07:e4:b3:37:15:ab:3d:e6:47:1d:63:be:8c:
6e:fe:d9:7b:00:6e:1f:98:bc:f9:ef:36:f0:ff:56:80:26:fe:
70:e5:57:44:2b:f9:74:cf:b4:a8:23:ee:0b:84:70:1b:11:cb:
05:c6:6e:d2:27:7d:37:33:94:46:2f:81:67:25:72:4e:75:90:
0f:af:a9:fe:5f:0e:35:d0:77:0b:3c:b9:5f:86:32:a3:5b:f3:
26:28:7d:de:36:91:2e:96:2f:19:51:ee:76:1f:4f:fd:6b:0d:
0f:c0:f0:6d:2c:e3:4b:0b:89:70:44:b3:39:2e:e3:e6:4e:c2:
a1:71:0e:c4:bb:be:40:db:d1:6d:37:01:3f:ae:16:00:b6:73:
4a:b2:c9:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPknbEPpNZ0ImEPdTXrvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDJhZWQwZTkxYjIzZDBjZGNiZmIyNGFjODM5YjBkYmU2
YWEwNGIwHhcNMjUxMTA0MTkwMDUwWhcNMjUxMTA1MTkwMDUwWjAzMTEwLwYDVQQD
EyhiZWQzZDQzYTk5OTZhNjcxMzgwOGJjZWE2YzA0YTBiYjQzYWVkNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA8CM9owHUbsHe1erIdOpw5g3e48
lPdGYofMwLxOtIr2j4iAcNeL0EdItTZNqNVbadJM1O0QBYiYjWJ+l06unJ+aCa9V
AgHw5ND3dtsWtoE5qFz8hpogx88iDwAvspPPciT4SOpUu8adE+l9eyUEeOXA6P9f
rAyyz89R59dyIgWvpIitbMWwEGQKkTySxSwufpA9t0PZA3/lXbDAEOCB9TpXheFd
bwBhTetUZzxSYuTb4Pel5c84FXvXV/CLl5Z0KpscBjxOR6Ehrj2NNjUaFfPXSKtd
DFoZIlXiF0oLjU41Ajy/mmbTeUwBVD/s4NIieZOtutTOAxEir6XvnaQSDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7T1DqZlqZxOAi86mwEoLtDrtTjMB8GA1UdIwQY
MBaAFO9CrtDpGyPQzcv7JKyDmw2+aqBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBLdTBPa2JJOUROeV9za3JJT2JEYjVxb0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iZDc1YTItZmM2ZS00YTg2LTllZGYt
NjY5OTA5ZTExY2UzLzEvNzBLdTBPa2JJOUROeV9za3JJT2JEYjVxb0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iZDc1YTItZmM2ZS00YTg2LTllZGYtNjY5OTA5ZTExY2Uz
LzEvNzBLdTBPa2JJOUROeV9za3JJT2JEYjVxb0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdA4CAu/p
W2SvXNUumuRt2p0IRBKxWc7sOqHhp/jjARvjKI0HGYR5Ycj1zLGKfYl5t5sbpUEZ
IaF7JMscyRZ5TH0ACBfNhALR/hMk4uPGpEcPUtEfBtaHlFJL7SzgwwFP8ionlBLp
Y69giY6IBihOZ0oH5LM3Fas95kcdY76Mbv7ZewBuH5i8+e828P9WgCb+cOVXRCv5
dM+0qCPuC4RwGxHLBcZu0id9NzOURi+BZyVyTnWQD6+p/l8ONdB3Czy5X4Yyo1vz
Jih93jaRLpYvGVHudh9P/WsND8DwbSzjSwuJcESzOS7j5k7CoXEOxLu+QNvRbTcB
P64WALZzSrLJgA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:41:07 2025 by rpki-client