Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json)
Hash identifier: JRctKAidphugXcCakcfDSP2npovktnH1ggKaqVP06dw=
Subject key identifier: BF:7C:8A:86:E4:98:37:44:F5:31:D9:14:9E:54:1D:F3:FA:04:37:1B
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial: 019A4E86BC2CE80DF4F6C57DDE4B7E775101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
Manifest number: 1137
Signing time: Tue 04 Nov 2025 11:00:43 +0000
Manifest this update: Tue 04 Nov 2025 11:00:43 +0000
Manifest next update: Wed 05 Nov 2025 11:00:43 +0000
Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: f80YqMRITNIvy8qChZCqNJR3Yy7PmkAd1bV7O2k6j1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:bc:2c:e8:0d:f4:f6:c5:7d:de:4b:7e:77:51:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Validity
Not Before: Nov 4 11:00:43 2025 GMT
Not After : Nov 5 11:00:43 2025 GMT
Subject: CN=bf7c8a86e4983744f531d9149e541df3fa04371b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:6e:33:2a:1d:99:43:c8:59:c0:ba:ae:dd:
bc:d3:08:5c:f3:55:cc:66:25:6e:47:06:c1:55:5a:
44:fc:fa:9a:5b:33:e4:03:19:b5:f5:88:59:ed:5e:
3d:11:32:ea:5e:a2:be:4a:a5:bb:c9:c6:b4:f3:b2:
fb:50:01:45:3d:e8:2e:26:26:56:04:bd:95:fa:cc:
0b:05:b7:d6:5b:a5:a6:ec:d8:22:91:e9:45:2f:c8:
f7:3b:83:2e:4d:a1:29:5e:74:7a:be:d3:40:f2:19:
2a:9c:93:92:b6:bf:42:ea:0c:bb:80:c6:07:a5:57:
8f:ed:6e:92:14:9f:45:63:07:ee:dc:f1:bd:8c:f2:
51:0f:a2:8b:b2:b3:bc:26:31:2e:a8:85:8e:1f:18:
8d:f6:57:fa:72:e5:0b:43:30:13:d0:0d:a9:3a:88:
f7:41:6a:8d:e3:0a:c8:b4:c9:3b:61:a8:d4:c0:d1:
10:4a:69:a5:6e:41:87:66:06:4f:be:73:e2:ed:39:
37:0a:28:3b:1a:83:6c:57:e7:15:fe:80:32:52:8c:
8f:2b:5e:0c:65:fa:e2:04:a7:76:a5:0b:d8:0d:ca:
00:b3:cb:71:41:dc:68:09:e6:39:63:24:6e:1a:51:
9f:4b:8e:5a:f7:3f:22:51:16:3f:62:28:11:cc:f9:
d1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7C:8A:86:E4:98:37:44:F5:31:D9:14:9E:54:1D:F3:FA:04:37:1B
X509v3 Authority Key Identifier:
keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f8:f2:be:a1:3e:34:3c:b5:d9:77:ec:45:46:c0:9c:e1:22:
0c:67:fa:56:80:74:60:ab:e3:e7:31:41:34:94:9a:42:82:d2:
f9:2d:05:4f:58:3f:ef:60:e5:16:6e:04:14:2a:20:9c:13:31:
66:aa:80:b2:4b:1d:aa:ba:f3:71:26:bb:d5:af:62:c5:7a:f6:
41:0e:54:92:c2:e0:40:d6:2e:19:05:a5:58:d3:ec:2b:0e:2a:
21:78:bc:c1:32:e6:62:d6:eb:40:da:fb:dd:b1:c7:85:02:58:
68:f5:2e:69:a6:97:8c:17:85:af:92:56:e8:25:91:5a:4e:16:
82:55:00:63:fc:29:33:23:1e:3c:73:64:2e:b5:e7:b1:96:d4:
bd:6f:91:cf:f3:69:9f:a7:f5:5e:7c:b3:22:2d:93:4c:5b:7d:
95:4a:95:f1:8e:f4:26:29:8a:d2:91:46:ca:a1:4f:67:5b:88:
6c:7e:28:e4:0b:d0:07:4e:a6:96:41:32:45:54:d0:b8:ce:fa:
f2:88:67:e0:8e:ca:7d:32:f0:9f:80:a5:28:ac:f2:9b:db:cc:
2c:42:0e:e5:b2:de:35:89:98:15:9d:c2:e1:e1:66:e4:21:7a:
f6:03:58:8d:eb:5a:b4:a6:69:47:d0:bb:fa:5e:38:70:e5:71:
66:4e:cb:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhrws6A309sV93kt+d1EBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNDZhM2NhZDgwOTY1YWY4NmNiYjAwODNkZmI0MGFiMmZm
MWJhY2YwHhcNMjUxMTA0MTEwMDQzWhcNMjUxMTA1MTEwMDQzWjAzMTEwLwYDVQQD
EyhiZjdjOGE4NmU0OTgzNzQ0ZjUzMWQ5MTQ5ZTU0MWRmM2ZhMDQzNzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl1uMyodmUPIWcC6rt280whc81XM
ZiVuRwbBVVpE/PqaWzPkAxm19YhZ7V49ETLqXqK+SqW7yca087L7UAFFPeguJiZW
BL2V+swLBbfWW6Wm7NgikelFL8j3O4MuTaEpXnR6vtNA8hkqnJOStr9C6gy7gMYH
pVeP7W6SFJ9FYwfu3PG9jPJRD6KLsrO8JjEuqIWOHxiN9lf6cuULQzAT0A2pOoj3
QWqN4wrItMk7YajUwNEQSmmlbkGHZgZPvnPi7Tk3Cig7GoNsV+cV/oAyUoyPK14M
ZfriBKd2pQvYDcoAs8txQdxoCeY5YyRuGlGfS45a9z8iURY/YigRzPnRrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL98iobkmDdE9THZFJ5UHfP6BDcbMB8GA1UdIwQY
MBaAFHxGo8rYCWWvhsuwCD37QKsv8brPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAt
ZDhjOTY0NTkxYWZhLzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAtZDhjOTY0NTkxYWZh
LzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvjyvqE+
NDy12XfsRUbAnOEiDGf6VoB0YKvj5zFBNJSaQoLS+S0FT1g/72DlFm4EFCognBMx
ZqqAsksdqrrzcSa71a9ixXr2QQ5UksLgQNYuGQWlWNPsKw4qIXi8wTLmYtbrQNr7
3bHHhQJYaPUuaaaXjBeFr5JW6CWRWk4WglUAY/wpMyMePHNkLrXnsZbUvW+Rz/Np
n6f1XnyzIi2TTFt9lUqV8Y70JimK0pFGyqFPZ1uIbH4o5AvQB06mlkEyRVTQuM76
8ohn4I7KfTLwn4ClKKzym9vMLEIO5bLeNYmYFZ3C4eFm5CF69gNYjetatKZpR9C7
+l44cOVxZk7LeQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:40 2025 by rpki-client