Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: 2tfG3bnRbREpRaZJQ1epNu+cqJvEhKpNeiCYFLfOksA=
Subject key identifier: 1B:F5:00:43:91:25:44:4D:51:B4:D1:DF:DA:AB:59:41:39:BC:97:62
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 019A4EF473336D12BACD9C2DF65D0E24E217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 07E9
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: ggmyIoQwywK9QY3bbkDmiKRaabG5odCpsx+dAikdjdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:73:33:6d:12:ba:cd:9c:2d:f6:5d:0e:24:e2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=1bf500439125444d51b4d1dfdaab594139bc9762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:9b:d4:00:34:6e:8a:98:56:f1:b9:1b:d4:
d2:b7:4f:cf:49:7f:05:ba:5a:c5:3c:cc:aa:58:bf:
ab:2a:34:84:0b:1d:09:4a:89:47:1a:d7:9e:ae:8c:
3b:ea:76:66:d4:88:52:2a:12:34:4d:15:7a:7b:44:
d7:26:86:e3:e1:28:40:c5:5b:cc:5e:e8:5d:71:b8:
3a:f7:35:25:72:f7:e2:42:5a:bd:98:d8:6f:51:1c:
e2:0c:9a:a6:15:71:2c:6b:40:d4:fc:67:b2:aa:10:
3f:c1:1c:7b:08:2c:27:76:23:a6:91:43:9c:90:69:
ec:6f:cf:71:ee:25:b5:56:6b:30:25:44:7d:38:25:
9f:84:1a:f1:56:ea:64:09:ce:f8:93:ce:96:88:72:
33:55:bd:d6:bc:1a:46:80:07:1a:98:53:4f:9b:e2:
16:6c:f1:90:5f:1f:a3:68:e7:91:92:90:4c:fc:5f:
b9:02:1a:87:97:0e:5f:06:7e:8d:ca:54:c0:04:b6:
e7:f6:8d:00:2e:3d:64:ae:15:f3:05:b0:12:28:90:
a6:dc:38:75:66:b1:be:ed:06:ea:61:99:56:a0:e4:
d4:1c:8b:7a:1b:04:29:aa:5e:55:9f:59:a4:76:b5:
cc:f4:37:be:53:c1:21:61:75:3b:61:f5:d9:db:bf:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:00:43:91:25:44:4D:51:B4:D1:DF:DA:AB:59:41:39:BC:97:62
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:49:0b:5d:1f:cf:aa:a8:f8:6c:7f:dc:33:58:1a:70:c0:e5:
bf:4f:da:0c:80:2a:a6:af:c2:24:a5:d7:1a:f9:c1:03:26:24:
53:5b:71:51:54:df:fe:9d:b9:34:1c:91:03:97:12:0d:bd:db:
70:6a:e0:a6:8f:61:21:f6:9e:51:30:6d:9d:97:27:fc:94:61:
68:4b:ef:ff:e6:53:ea:91:73:34:79:ad:8e:6a:00:67:de:ea:
d1:72:20:54:a8:00:0e:99:14:c8:da:63:43:0b:ee:63:60:cf:
33:6b:95:c1:c4:22:22:1e:19:e6:ea:bc:0d:ea:8c:76:76:3e:
b0:ef:39:33:64:3b:81:d7:78:76:28:99:53:73:91:6b:e0:5e:
2f:a8:b4:42:24:3f:56:66:b0:fc:a5:28:89:d0:ac:51:ec:a5:
5f:4e:c0:8a:30:97:90:80:68:56:05:ba:3b:98:58:f9:1b:65:
b0:e2:33:f9:c7:c3:fc:d8:5d:73:42:09:68:4d:c7:41:f9:61:
58:dd:3e:c3:ac:ac:fd:4d:59:f4:a9:95:8d:23:c7:d4:2f:fa:
ac:04:5e:1b:05:42:25:61:74:78:8c:0b:24:31:68:6c:c5:44:
81:67:64:75:67:13:01:dd:aa:e8:93:c8:61:02:c7:5e:b4:6a:
d3:0a:e7:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9HMzbRK6zZwt9l0OJOIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwY2M5MjQxMzY2NWJkNmIwZGRlNTFhOWE2YjU2NWU3MmMz
MjFlNTIwHhcNMjUxMTA0MTMwMDM0WhcNMjUxMTA1MTMwMDM0WjAzMTEwLwYDVQQD
EygxYmY1MDA0MzkxMjU0NDRkNTFiNGQxZGZkYWFiNTk0MTM5YmM5NzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMmb1AA0boqYVvG5G9TSt0/PSX8F
ulrFPMyqWL+rKjSECx0JSolHGteerow76nZm1IhSKhI0TRV6e0TXJobj4ShAxVvM
Xuhdcbg69zUlcvfiQlq9mNhvURziDJqmFXEsa0DU/GeyqhA/wRx7CCwndiOmkUOc
kGnsb89x7iW1VmswJUR9OCWfhBrxVupkCc74k86WiHIzVb3WvBpGgAcamFNPm+IW
bPGQXx+jaOeRkpBM/F+5AhqHlw5fBn6NylTABLbn9o0ALj1krhXzBbASKJCm3Dh1
ZrG+7QbqYZlWoOTUHIt6GwQpql5Vn1mkdrXM9De+U8EhYXU7YfXZ27+17QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBv1AEORJURNUbTR39qrWUE5vJdiMB8GA1UdIwQY
MBaAFHDMkkE2Zb1rDd5Rqaa1ZecsMh5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWIt
YmExNzdjMTk3OTY1LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWItYmExNzdjMTk3OTY1
LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEkLXR/P
qqj4bH/cM1gacMDlv0/aDIAqpq/CJKXXGvnBAyYkU1txUVTf/p25NByRA5cSDb3b
cGrgpo9hIfaeUTBtnZcn/JRhaEvv/+ZT6pFzNHmtjmoAZ97q0XIgVKgADpkUyNpj
QwvuY2DPM2uVwcQiIh4Z5uq8DeqMdnY+sO85M2Q7gdd4diiZU3ORa+BeL6i0QiQ/
Vmaw/KUoidCsUeylX07AijCXkIBoVgW6O5hY+RtlsOIz+cfD/Nhdc0IJaE3HQflh
WN0+w6ys/U1Z9KmVjSPH1C/6rAReGwVCJWF0eIwLJDFobMVEgWdkdWcTAd2q6JPI
YQLHXrRq0wrnig==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:14 2025 by rpki-client