Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
File: Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json)
Hash identifier: vdKfjnIeJGr8Z1NKLyfU1/9QDBGc2MZ6YyWPGKDXC+M=
Subject key identifier: 35:B9:B3:18:BF:51:9C:8E:00:9E:44:B9:E6:01:53:E4:59:C9:3E:AF
Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
Certificate issuer: /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Certificate serial: 019A4DE2109494F9BB9AD027627BE38388A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
Manifest number: 0C13
Signing time: Tue 04 Nov 2025 08:00:52 +0000
Manifest this update: Tue 04 Nov 2025 08:00:52 +0000
Manifest next update: Wed 05 Nov 2025 08:00:52 +0000
Files and hashes: 1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: emH5/dFhbsube2u2cB+BpYG1xsOwc0npIlacc5YdC1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:10:94:94:f9:bb:9a:d0:27:62:7b:e3:83:88:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Validity
Not Before: Nov 4 08:00:52 2025 GMT
Not After : Nov 5 08:00:52 2025 GMT
Subject: CN=35b9b318bf519c8e009e44b9e60153e459c93eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:33:8c:69:28:c8:ac:08:ea:fe:25:e0:9f:
e9:59:12:38:1a:71:02:55:f6:66:e1:a8:5f:27:1e:
28:d9:da:26:6e:73:4d:a1:96:63:79:25:14:42:f3:
6f:99:b5:d3:ff:31:2d:4f:87:d4:8b:c0:48:2b:1f:
55:86:01:db:ce:b0:3a:cb:70:d0:db:57:af:b6:9d:
f3:bc:19:c8:ed:9b:7e:d2:91:d5:94:7e:9b:33:0f:
f0:68:d7:75:a8:91:f5:7b:59:0e:bf:3b:53:83:a0:
1c:e6:a1:54:f8:b3:fa:c4:fc:cd:ce:16:49:b1:d7:
85:53:d6:5a:8b:53:aa:5e:71:f6:af:a1:6c:b8:54:
f5:dc:6c:a0:d8:d0:d3:0e:ea:5c:5e:62:23:a5:a7:
ba:4a:70:db:31:d6:5d:22:5f:1b:b6:bb:78:c9:ff:
33:25:1a:43:6c:09:ec:63:43:52:aa:6e:ca:08:b8:
44:07:6e:23:d0:b1:75:2e:d4:23:e8:cc:db:1b:fe:
06:df:4c:76:37:b4:f9:f2:85:f2:c4:18:d7:92:97:
04:ad:05:6f:04:c6:d1:de:f3:7e:89:f3:e0:d8:89:
30:b6:fb:dc:62:fc:0e:03:9a:9e:83:47:e6:45:c1:
65:18:5c:48:17:6a:32:f6:44:93:ec:50:9c:b6:2e:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B9:B3:18:BF:51:9C:8E:00:9E:44:B9:E6:01:53:E4:59:C9:3E:AF
X509v3 Authority Key Identifier:
keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:37:4d:52:6c:6c:05:07:63:40:ff:e3:a2:a1:10:18:66:bc:
f8:a5:97:ce:28:5f:30:41:28:71:36:b1:63:df:4e:b9:4a:cf:
d9:91:3d:eb:49:51:34:f1:81:4a:1b:23:d7:92:e4:17:2a:27:
82:22:4c:b8:7f:30:a4:ef:16:7a:e3:0c:0e:e9:d2:d7:68:e8:
b0:85:7e:14:fe:86:ef:2d:4d:79:e0:58:51:5c:f6:94:5f:2c:
9b:f4:63:09:89:70:1e:ab:42:5f:69:12:c3:ff:08:a7:7a:8b:
6c:1b:cb:52:db:da:44:5a:61:15:a5:61:48:dc:6b:30:f7:51:
2e:d2:d5:db:7f:8b:6e:46:29:9a:bd:62:b3:2c:bb:71:d3:d5:
bf:b2:49:50:1f:c7:02:af:c6:32:7e:c7:d3:4b:e3:2c:86:fe:
06:7b:11:6d:9c:fe:f6:b7:d8:59:dd:5f:a6:e5:49:ff:8b:9b:
c9:d4:90:86:10:61:a6:db:d9:15:4f:95:36:aa:47:40:8e:8c:
7a:49:1c:f1:88:57:21:37:45:78:0a:7d:44:52:ca:4d:2e:e5:
87:71:a4:f6:ed:c9:8a:4e:94:b2:ac:0c:8f:08:c4:99:98:95:
8a:44:a5:54:3c:32:44:5f:cb:03:69:48:6d:19:77:96:df:2b:
4c:73:69:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4hCUlPm7mtAnYnvjg4imMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MGVmZjFiYTJkMmY3NTkyYTQ0ZDIxMzNkMjA3YjI5M2Uy
NDFhYzIwHhcNMjUxMTA0MDgwMDUyWhcNMjUxMTA1MDgwMDUyWjAzMTEwLwYDVQQD
EygzNWI5YjMxOGJmNTE5YzhlMDA5ZTQ0YjllNjAxNTNlNDU5YzkzZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4YzjGkoyKwI6v4l4J/pWRI4GnEC
VfZm4ahfJx4o2dombnNNoZZjeSUUQvNvmbXT/zEtT4fUi8BIKx9VhgHbzrA6y3DQ
21evtp3zvBnI7Zt+0pHVlH6bMw/waNd1qJH1e1kOvztTg6Ac5qFU+LP6xPzNzhZJ
sdeFU9Zai1OqXnH2r6FsuFT13Gyg2NDTDupcXmIjpae6SnDbMdZdIl8btrt4yf8z
JRpDbAnsY0NSqm7KCLhEB24j0LF1LtQj6MzbG/4G30x2N7T58oXyxBjXkpcErQVv
BMbR3vN+ifPg2IkwtvvcYvwOA5qeg0fmRcFlGFxIF2oy9kST7FCcti4sIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDW5sxi/UZyOAJ5EueYBU+RZyT6vMB8GA1UdIwQY
MBaAFEYO/xui0vdZKkTSEz0geyk+JBrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yZWY3N2UtOTE5Zi00ODZjLTgxMjQt
YTNiMTc5OGU0MTMxLzEvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yZWY3N2UtOTE5Zi00ODZjLTgxMjQtYTNiMTc5OGU0MTMx
LzEvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazdNUmxs
BQdjQP/joqEQGGa8+KWXzihfMEEocTaxY99OuUrP2ZE960lRNPGBShsj15LkFyon
giJMuH8wpO8WeuMMDunS12josIV+FP6G7y1NeeBYUVz2lF8sm/RjCYlwHqtCX2kS
w/8Ip3qLbBvLUtvaRFphFaVhSNxrMPdRLtLV23+LbkYpmr1isyy7cdPVv7JJUB/H
Aq/GMn7H00vjLIb+BnsRbZz+9rfYWd1fpuVJ/4ubydSQhhBhptvZFU+VNqpHQI6M
ekkc8YhXITdFeAp9RFLKTS7lh3Gk9u3Jik6UsqwMjwjEmZiVikSlVDwyRF/LA2lI
bRl3lt8rTHNpmA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:46 2025 by rpki-client