Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
File: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json)
Hash identifier: 4/I4INo2n1yDDOhgVkLNwigipOIl2yaxq0dPccrQ/vo=
Subject key identifier: DD:7C:54:EC:D1:A4:1A:81:2E:F7:E8:02:3C:1D:D0:6E:F9:99:07:77
Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
Certificate issuer: /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Certificate serial: 019A4F62650F6BC3ED86D209BF4365161EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
Manifest number: 128C
Signing time: Tue 04 Nov 2025 15:00:39 +0000
Manifest this update: Tue 04 Nov 2025 15:00:39 +0000
Manifest next update: Wed 05 Nov 2025 15:00:39 +0000
Files and hashes: 1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: eo0hlolslMS1wHVm1iKiEM/9RHJqtE9lfMproBDqnME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:65:0f:6b:c3:ed:86:d2:09:bf:43:65:16:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Validity
Not Before: Nov 4 15:00:39 2025 GMT
Not After : Nov 5 15:00:39 2025 GMT
Subject: CN=dd7c54ecd1a41a812ef7e8023c1dd06ef9990777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:56:66:ed:fa:57:f4:fa:18:a9:8f:5d:e8:
d2:c1:be:f5:ac:e5:e4:43:2d:1e:b1:92:e6:53:b1:
22:c7:51:47:39:4b:e2:64:1f:42:09:e7:b5:04:44:
ab:f1:90:f9:0f:b0:ca:10:33:e3:6d:46:77:28:6d:
4d:97:35:35:3b:d9:84:35:84:7e:27:39:49:3d:c8:
0d:32:ef:5c:d5:85:91:17:9d:ab:2e:e8:57:af:00:
e3:03:42:11:26:a7:b6:37:d4:b3:eb:50:91:f5:69:
5b:53:7e:75:df:57:3e:ac:b8:46:8e:7e:f0:e1:f0:
70:cb:ec:c4:6a:97:05:2f:18:ec:96:ca:52:8c:41:
b0:65:9e:d0:73:da:40:85:4a:ef:52:ea:73:04:e2:
a8:ae:46:0b:d3:12:7a:62:0d:84:9f:63:c9:ef:f3:
72:1e:fa:39:03:52:3b:1d:17:7a:a3:ea:0d:ab:f0:
6c:7d:3e:df:b3:67:73:f1:da:51:4d:8d:76:b8:be:
a5:72:60:69:8b:c8:bf:92:44:da:0a:5b:de:c3:4a:
28:e7:40:32:3c:eb:ea:b1:a1:17:1d:01:b4:9c:ed:
ae:3b:17:5b:a5:1e:b2:a3:a5:70:c2:9f:c6:e3:ae:
5a:87:a0:38:7e:10:4e:17:ad:55:fe:68:5f:09:ff:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7C:54:EC:D1:A4:1A:81:2E:F7:E8:02:3C:1D:D0:6E:F9:99:07:77
X509v3 Authority Key Identifier:
keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9a:d7:c8:4b:03:ef:08:d5:ec:40:0b:fc:98:9f:bc:da:4a:
c2:70:bb:ac:e5:f4:f2:88:86:f3:d0:b5:f2:cb:90:14:36:d8:
f6:39:0e:de:d1:6a:25:0f:ef:f3:d9:f9:2a:7f:c3:b6:66:12:
e9:41:18:75:75:23:60:cf:d3:7f:ab:ce:97:17:5e:5a:bf:64:
48:46:9f:74:98:36:6f:4b:35:28:5e:ca:22:7e:c2:05:14:91:
8c:4c:52:87:16:cd:60:17:d1:1a:a9:c5:c4:8f:8f:09:4f:34:
e9:d3:67:2d:7b:8b:7d:4b:2b:63:b2:a7:a3:e3:f8:e7:ba:81:
ec:29:e9:82:34:cb:00:87:60:b1:2a:13:7d:cc:26:be:80:ef:
98:7f:bf:89:c7:4d:17:12:23:36:3b:2f:36:f7:e3:4f:2b:40:
ed:3b:bf:bc:e3:8a:0c:47:3a:73:5f:f9:c1:11:22:8d:03:96:
c2:9b:63:8c:8a:3e:51:21:03:03:19:93:3c:09:45:46:e7:93:
43:da:5a:f4:e7:5a:86:ea:c6:d6:19:14:ca:10:4c:f0:f3:9d:
71:43:46:b6:ce:0b:68:17:47:0d:59:40:90:00:09:03:c9:66:
dc:73:e0:5d:9e:ce:f7:1b:d3:6e:5f:23:22:ce:ea:77:ab:3f:
b2:bd:95:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYmUPa8PthtIJv0NlFh7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMmEwOTA0NDVmYTM5Y2Q2ZmZlMGZjZjQ0YTE0NDA3OTI0
OTg5NzYwHhcNMjUxMTA0MTUwMDM5WhcNMjUxMTA1MTUwMDM5WjAzMTEwLwYDVQQD
EyhkZDdjNTRlY2QxYTQxYTgxMmVmN2U4MDIzYzFkZDA2ZWY5OTkwNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r5WZu36V/T6GKmPXejSwb71rOXk
Qy0esZLmU7Eix1FHOUviZB9CCee1BESr8ZD5D7DKEDPjbUZ3KG1NlzU1O9mENYR+
JzlJPcgNMu9c1YWRF52rLuhXrwDjA0IRJqe2N9Sz61CR9WlbU35131c+rLhGjn7w
4fBwy+zEapcFLxjslspSjEGwZZ7Qc9pAhUrvUupzBOKorkYL0xJ6Yg2En2PJ7/Ny
Hvo5A1I7HRd6o+oNq/BsfT7fs2dz8dpRTY12uL6lcmBpi8i/kkTaClvew0oo50Ay
POvqsaEXHQG0nO2uOxdbpR6yo6Vwwp/G465ah6A4fhBOF61V/mhfCf8aWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN18VOzRpBqBLvfoAjwd0G75mQd3MB8GA1UdIwQY
MBaAFPwqCQRF+jnNb/4Pz0ShRAeSSYl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83YmY4YTktNzA5Ni00ZmMzLTkyMWIt
MzU4OGQ3OTBiYTA3LzEvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83YmY4YTktNzA5Ni00ZmMzLTkyMWItMzU4OGQ3OTBiYTA3
LzEvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJrXyEsD
7wjV7EAL/JifvNpKwnC7rOX08oiG89C18suQFDbY9jkO3tFqJQ/v89n5Kn/DtmYS
6UEYdXUjYM/Tf6vOlxdeWr9kSEafdJg2b0s1KF7KIn7CBRSRjExShxbNYBfRGqnF
xI+PCU806dNnLXuLfUsrY7Kno+P457qB7CnpgjTLAIdgsSoTfcwmvoDvmH+/icdN
FxIjNjsvNvfjTytA7Tu/vOOKDEc6c1/5wREijQOWwptjjIo+USEDAxmTPAlFRueT
Q9pa9OdahurG1hkUyhBM8POdcUNGts4LaBdHDVlAkAAJA8lm3HPgXZ7O9xvTbl8j
Is7qd6s/sr2V6g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:57 2025 by rpki-client