Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier: Ieqsd2UXc/S0O2jQ+yLcAo0Ez2moeKF0rSDoX27FYIA=
Subject key identifier: 86:63:15:07:EC:B0:41:9F:6F:33:AD:E5:84:81:2F:7C:9B:14:04:56
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial: 019A500785348EFF9A39D8E6FDD39EF9CB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number: 03C9
Signing time: Tue 04 Nov 2025 18:01:01 +0000
Manifest this update: Tue 04 Nov 2025 18:01:01 +0000
Manifest next update: Wed 05 Nov 2025 18:01:01 +0000
Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: SP5KHQEbMZYqJnPICqxNZBCkM/GU6m4jKDfIw9e/rTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:85:34:8e:ff:9a:39:d8:e6:fd:d3:9e:f9:cb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Validity
Not Before: Nov 4 18:01:01 2025 GMT
Not After : Nov 5 18:01:01 2025 GMT
Subject: CN=86631507ecb0419f6f33ade584812f7c9b140456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:2a:ac:dd:f5:5e:3d:05:e2:d4:d2:0a:e5:
99:4c:61:a0:e8:75:9b:25:5b:0d:05:d2:bd:cd:a3:
3e:d3:47:0e:98:12:71:a2:34:ed:63:c3:d8:95:b3:
a4:4f:34:ce:3b:ee:88:36:67:01:0d:12:4b:00:b0:
b9:52:84:1a:6d:fd:54:c8:0c:a6:97:cf:d2:e4:e3:
ef:b6:f4:98:7c:8d:c8:67:95:52:73:fa:ed:a9:c2:
3c:3d:7a:bd:e7:55:1e:33:fb:bc:cb:c4:50:a4:d3:
e2:69:b5:6e:65:28:87:d7:f6:5c:b7:2b:43:b0:b7:
d9:b9:2d:3e:6d:ab:36:bf:35:53:6d:da:08:ba:ab:
3d:bb:2d:97:f7:d9:9c:03:f8:f5:b7:6b:fa:ca:85:
a2:c0:2d:58:90:e1:b5:af:b8:e1:7e:63:b4:bb:4d:
b9:4d:7f:06:db:b7:1c:7c:ce:28:fd:03:0c:4f:2e:
5e:cc:0b:d7:b5:68:29:8a:ec:b0:61:a5:af:58:65:
82:dd:b7:f2:ae:98:1f:9c:c1:c7:7a:37:19:6a:41:
17:9a:ef:6d:66:b9:1d:00:b8:e3:f2:40:db:95:23:
65:31:d5:33:03:04:16:52:47:6a:7e:5a:e4:d2:72:
d5:5e:02:ce:6a:93:28:47:9e:b4:24:4b:16:84:0f:
d4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:63:15:07:EC:B0:41:9F:6F:33:AD:E5:84:81:2F:7C:9B:14:04:56
X509v3 Authority Key Identifier:
keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3e:e2:8d:9d:81:c0:a2:54:2b:33:93:89:23:89:fd:11:8a:
5c:66:47:18:9b:48:2b:77:da:2f:d1:ba:50:90:fc:8b:af:2c:
ce:dd:51:c8:e8:b1:b3:1d:5c:a3:4a:b1:f4:f2:f4:4c:46:3e:
7c:db:92:40:67:17:27:30:c5:d1:cf:6f:b5:0a:ee:65:00:64:
11:b4:69:9f:a4:0c:13:c7:1a:91:5f:6a:f1:d7:04:b9:40:33:
37:2f:5f:c5:57:a2:4d:dd:21:8e:07:49:a2:cc:7a:d1:40:0d:
23:94:a2:76:6b:bf:67:c6:ee:14:a2:c1:1b:7c:60:8c:0f:a1:
15:02:dc:34:13:1a:67:db:6d:c3:bf:c1:1a:51:3e:13:71:8d:
63:09:fa:54:af:2b:36:81:da:be:63:16:4c:cb:7d:9d:f2:40:
b6:27:18:af:6a:9b:7c:1a:34:17:89:e7:20:75:f4:4b:ce:c8:
43:61:2e:df:70:f8:7c:26:fe:41:da:c5:b7:ed:ae:56:a3:0a:
e5:57:b5:82:e8:b9:28:0a:1c:15:c8:55:9e:05:35:29:b0:f6:
c4:38:ab:a1:7d:5c:ad:b5:c7:b3:05:74:2b:7e:8d:43:c6:ca:
4f:52:53:09:a9:0f:7d:69:71:45:46:79:2b:ca:76:8b:0b:e4:
95:ce:52:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB4U0jv+aOdjm/dOe+ctmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGE2M2Q0ZmUxMGEzNDZiODEyZmJmMzU5YzliMzM3Nzhj
ZDQzMTEwHhcNMjUxMTA0MTgwMTAxWhcNMjUxMTA1MTgwMTAxWjAzMTEwLwYDVQQD
Eyg4NjYzMTUwN2VjYjA0MTlmNmYzM2FkZTU4NDgxMmY3YzliMTQwNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSkqrN31Xj0F4tTSCuWZTGGg6HWb
JVsNBdK9zaM+00cOmBJxojTtY8PYlbOkTzTOO+6INmcBDRJLALC5UoQabf1UyAym
l8/S5OPvtvSYfI3IZ5VSc/rtqcI8PXq951UeM/u8y8RQpNPiabVuZSiH1/ZctytD
sLfZuS0+bas2vzVTbdoIuqs9uy2X99mcA/j1t2v6yoWiwC1YkOG1r7jhfmO0u025
TX8G27ccfM4o/QMMTy5ezAvXtWgpiuywYaWvWGWC3bfyrpgfnMHHejcZakEXmu9t
ZrkdALjj8kDblSNlMdUzAwQWUkdqflrk0nLVXgLOapMoR560JEsWhA/UPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZjFQfssEGfbzOt5YSBL3ybFARWMB8GA1UdIwQY
MBaAFEdKY9T+EKNGuBL781nJszd4zUMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEt
N2I3ZmM3YWFiMTQ0LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEtN2I3ZmM3YWFiMTQ0
LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhD7ijZ2B
wKJUKzOTiSOJ/RGKXGZHGJtIK3faL9G6UJD8i68szt1RyOixsx1co0qx9PL0TEY+
fNuSQGcXJzDF0c9vtQruZQBkEbRpn6QME8cakV9q8dcEuUAzNy9fxVeiTd0hjgdJ
osx60UANI5Sidmu/Z8buFKLBG3xgjA+hFQLcNBMaZ9ttw7/BGlE+E3GNYwn6VK8r
NoHavmMWTMt9nfJAticYr2qbfBo0F4nnIHX0S87IQ2Eu33D4fCb+QdrFt+2uVqMK
5Ve1gui5KAocFchVngU1KbD2xDiroX1crbXHswV0K36NQ8bKT1JTCakPfWlxRUZ5
K8p2iwvklc5SjA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:39 2025 by rpki-client