Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: 7fnb/K3JBdQ+rMFTC+KEt+BLBC25ci871YodYhrpnaA=
Subject key identifier: D3:C9:5D:53:DA:94:00:F0:12:B4:B6:CF:40:46:29:03:1C:FF:B5:D2
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 019A4DAA8494358AB783A2CBD99A71D1710D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 0A7C
Signing time: Tue 04 Nov 2025 07:00:11 +0000
Manifest this update: Tue 04 Nov 2025 07:00:11 +0000
Manifest next update: Wed 05 Nov 2025 07:00:11 +0000
Files and hashes: 1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: q4v+uuk/tuD4GG/z0wu7955TXSuhBYaScOvOv5HNDjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:84:94:35:8a:b7:83:a2:cb:d9:9a:71:d1:71:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Nov 4 07:00:11 2025 GMT
Not After : Nov 5 07:00:11 2025 GMT
Subject: CN=d3c95d53da9400f012b4b6cf404629031cffb5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:5b:7a:27:13:63:c3:42:48:a9:14:74:77:
b2:69:bf:38:c0:d4:14:50:77:f0:2a:c9:d6:70:a6:
9c:0a:92:01:14:6e:f2:7d:48:e9:14:41:4d:67:3f:
e9:7f:df:14:82:8f:48:c6:45:fd:97:3e:f3:91:cb:
9a:d0:30:26:3b:25:49:1b:b4:e9:2d:26:5f:bf:5e:
67:be:14:d5:48:00:fa:14:01:b3:cb:9d:d4:50:3d:
03:65:7c:8f:87:47:5a:b9:66:55:be:d8:31:e9:91:
e4:38:0d:20:52:b7:cc:4f:3b:a6:ae:6e:ab:26:ae:
51:71:2f:54:5f:c7:cf:0a:cc:7b:90:18:33:0b:65:
51:d5:52:58:4c:cf:e4:4a:af:ed:a8:1d:be:8a:33:
f9:e6:d9:9a:f5:3c:7a:09:b0:4e:26:78:f0:16:15:
8c:b9:be:a4:50:cc:e4:93:9c:e5:9b:03:6e:86:1f:
28:51:cb:3c:56:a0:a6:bd:7e:50:0d:0c:13:7d:44:
ca:65:40:17:5b:20:fa:60:ea:66:13:55:9c:58:e9:
35:23:01:b5:29:c6:60:f8:12:f5:9a:6a:1a:f2:52:
dc:03:3d:c2:85:81:ac:96:60:68:4c:48:85:c3:c5:
cd:ae:03:99:b4:46:f0:e1:12:20:78:a3:05:fa:07:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C9:5D:53:DA:94:00:F0:12:B4:B6:CF:40:46:29:03:1C:FF:B5:D2
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:97:85:8d:35:31:74:41:4b:93:5e:b9:45:be:01:c9:1e:51:
aa:94:d2:8c:ed:14:68:91:49:60:ef:e1:ba:fc:52:86:2d:c9:
06:6c:c3:fa:59:ad:46:68:8f:a9:2d:85:8d:9c:d1:3b:35:1b:
9a:b2:3b:d2:54:f5:8c:48:09:db:24:b6:30:ec:9c:5b:d1:e2:
79:64:c6:eb:c4:6d:73:9a:e2:64:1c:d4:98:b4:22:92:49:9b:
30:2f:b3:af:59:1b:cd:f8:fc:ca:85:1a:af:32:75:f5:5b:df:
36:5b:72:b5:d6:61:d5:c5:93:69:55:c7:5d:bf:17:de:41:00:
af:67:38:90:5f:b6:56:d5:e7:28:dc:7a:9d:d2:39:6d:17:29:
91:3d:13:8c:8f:ee:c7:67:d5:89:74:24:54:96:50:d3:b6:30:
37:85:d1:14:02:72:1c:f5:4f:06:e8:15:05:61:34:b7:47:19:
d9:6a:24:f9:69:1c:35:88:c0:a2:6f:77:ae:11:ed:03:ae:14:
bb:f9:78:b1:df:87:78:91:99:41:6b:cf:46:e0:e0:c9:00:87:
27:93:ba:ff:6d:2f:f2:3f:02:b7:91:84:76:c5:ab:38:17:d9:
eb:08:5b:8c:e6:89:9f:0a:b9:69:28:4c:d1:ae:ce:fe:ce:aa:
16:b5:5e:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqoSUNYq3g6LL2Zpx0XENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTI3YTFjZTc3YmNkNGM2NDk3ZTI4NWJmMmJhNmYzMjQ0
MzllYjgwHhcNMjUxMTA0MDcwMDExWhcNMjUxMTA1MDcwMDExWjAzMTEwLwYDVQQD
EyhkM2M5NWQ1M2RhOTQwMGYwMTJiNGI2Y2Y0MDQ2MjkwMzFjZmZiNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTZbeicTY8NCSKkUdHeyab84wNQU
UHfwKsnWcKacCpIBFG7yfUjpFEFNZz/pf98Ugo9IxkX9lz7zkcua0DAmOyVJG7Tp
LSZfv15nvhTVSAD6FAGzy53UUD0DZXyPh0dauWZVvtgx6ZHkOA0gUrfMTzumrm6r
Jq5RcS9UX8fPCsx7kBgzC2VR1VJYTM/kSq/tqB2+ijP55tma9Tx6CbBOJnjwFhWM
ub6kUMzkk5zlmwNuhh8oUcs8VqCmvX5QDQwTfUTKZUAXWyD6YOpmE1WcWOk1IwG1
KcZg+BL1mmoa8lLcAz3ChYGslmBoTEiFw8XNrgOZtEbw4RIgeKMF+gcXfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPJXVPalADwErS2z0BGKQMc/7XSMB8GA1UdIwQY
MBaAFHDiehzne81MZJfihb8rpvMkQ564MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2Mt
MGJlYzk2Nzg3OTM3LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2MtMGJlYzk2Nzg3OTM3
LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZeFjTUx
dEFLk165Rb4ByR5RqpTSjO0UaJFJYO/huvxShi3JBmzD+lmtRmiPqS2FjZzROzUb
mrI70lT1jEgJ2yS2MOycW9HieWTG68Rtc5riZBzUmLQikkmbMC+zr1kbzfj8yoUa
rzJ19VvfNltytdZh1cWTaVXHXb8X3kEAr2c4kF+2VtXnKNx6ndI5bRcpkT0TjI/u
x2fViXQkVJZQ07YwN4XRFAJyHPVPBugVBWE0t0cZ2Wok+WkcNYjAom93rhHtA64U
u/l4sd+HeJGZQWvPRuDgyQCHJ5O6/20v8j8Ct5GEdsWrOBfZ6whbjOaJnwq5aShM
0a7O/s6qFrVezA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:50 2025 by rpki-client