Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json)
Hash identifier: A5v2/2OR+Re5hvZFIq61yye7bcC6PFEICAsYSOT8v54=
Subject key identifier: 89:AC:AF:34:11:CA:61:6A:31:EA:BA:AD:4B:FF:4D:D2:9C:F7:BA:5B
Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
Certificate issuer: /CN=21d85d231ad54b8439c2aaed91a577586ac46000
Certificate serial: 019A4E4F4FB82BBBB06D229DBCB3B7B21390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
Manifest number: 120E
Signing time: Tue 04 Nov 2025 10:00:11 +0000
Manifest this update: Tue 04 Nov 2025 10:00:11 +0000
Manifest next update: Wed 05 Nov 2025 10:00:11 +0000
Files and hashes: 1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: 3P4AQYxThNUUtwWg8P/ErE4Qrq2/+2hcVGKIXNmcRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:4f:b8:2b:bb:b0:6d:22:9d:bc:b3:b7:b2:13:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000
Validity
Not Before: Nov 4 10:00:11 2025 GMT
Not After : Nov 5 10:00:11 2025 GMT
Subject: CN=89acaf3411ca616a31eabaad4bff4dd29cf7ba5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c0:64:7b:27:ca:0a:8f:da:7a:d2:7c:43:4b:
67:09:4c:7c:d2:80:83:37:76:fa:ef:fe:75:a8:78:
0d:9f:5e:9f:fb:4a:60:80:a9:ce:b3:9b:9e:ea:12:
c5:bd:1d:eb:ae:6d:5a:cc:29:d9:37:03:6d:79:d1:
f1:fa:0c:80:1a:dc:a9:8f:36:13:ad:4a:37:2f:fb:
bc:c8:5d:37:d3:3a:08:ed:86:2d:aa:91:64:56:cc:
2e:f9:84:44:69:fc:be:68:74:18:ac:97:29:25:86:
cc:87:77:64:ba:45:d6:d0:85:26:7e:9a:90:7b:7e:
59:64:07:bf:d9:ca:cc:fb:20:b5:21:59:6c:23:b5:
3c:ae:3b:6c:99:09:9e:84:5d:56:b0:ab:9e:9e:5e:
b0:ba:83:36:b5:c4:cd:75:40:09:58:a9:cf:7e:75:
1c:9d:e8:67:db:5d:22:1a:35:2d:33:bd:3d:4e:a1:
c7:42:33:b0:c8:53:0c:3b:75:ec:25:21:d4:5b:74:
95:61:49:6c:12:ce:5a:24:a5:65:ea:60:76:aa:29:
65:6a:0c:a6:36:38:fe:f1:d8:56:7b:5b:71:60:76:
35:e8:12:46:ed:e3:9c:af:60:e9:5a:15:da:ee:2c:
23:cd:39:a6:7a:f7:0a:99:e1:a8:fa:44:79:09:07:
ea:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AC:AF:34:11:CA:61:6A:31:EA:BA:AD:4B:FF:4D:D2:9C:F7:BA:5B
X509v3 Authority Key Identifier:
keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a0:5f:59:93:39:c0:cf:f7:55:95:3a:e2:ef:8c:44:96:2a:
1a:ea:63:ba:77:63:2d:02:8f:13:8f:3a:48:65:38:73:07:dd:
0a:af:e2:ea:d5:b7:db:0c:49:c2:99:aa:2c:a0:cd:47:9b:db:
60:6f:6c:3b:37:16:34:3d:9b:90:98:c5:1e:e3:1b:59:22:16:
47:e2:03:1f:c8:77:62:30:95:8a:7e:7c:22:d0:2c:6a:5d:0b:
4d:25:6f:fc:06:5d:28:a6:b2:93:22:06:31:52:a9:06:92:8e:
7a:14:ae:65:60:33:aa:cf:31:34:fb:b5:6a:64:0f:52:3d:d4:
d3:83:ab:86:13:92:dd:45:60:fb:9a:00:68:4d:30:cf:d8:50:
fa:2c:cf:06:9d:7f:91:f5:3f:30:de:4c:cb:8d:0c:03:33:01:
fd:50:ef:26:fb:44:b7:38:a4:5c:14:65:ee:6e:11:da:fd:69:
bd:8d:be:50:eb:d2:5e:13:75:d0:8d:ba:cf:24:81:fc:b0:8f:
63:d6:78:cd:37:56:65:b5:b7:46:2f:e9:9b:94:2e:40:5c:77:
ad:ac:7e:b6:da:82:4e:f2:7d:ac:9f:c8:b6:af:a8:84:0c:83:
cf:9b:ea:80:21:21:a5:b4:d4:dc:1f:8d:f6:27:fd:95:bc:99:
5a:c7:60:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT0+4K7uwbSKdvLO3shOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZDg1ZDIzMWFkNTRiODQzOWMyYWFlZDkxYTU3NzU4NmFj
NDYwMDAwHhcNMjUxMTA0MTAwMDExWhcNMjUxMTA1MTAwMDExWjAzMTEwLwYDVQQD
Eyg4OWFjYWYzNDExY2E2MTZhMzFlYWJhYWQ0YmZmNGRkMjljZjdiYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cBkeyfKCo/aetJ8Q0tnCUx80oCD
N3b67/51qHgNn16f+0pggKnOs5ue6hLFvR3rrm1azCnZNwNtedHx+gyAGtypjzYT
rUo3L/u8yF030zoI7YYtqpFkVswu+YREafy+aHQYrJcpJYbMh3dkukXW0IUmfpqQ
e35ZZAe/2crM+yC1IVlsI7U8rjtsmQmehF1WsKuenl6wuoM2tcTNdUAJWKnPfnUc
nehn210iGjUtM709TqHHQjOwyFMMO3XsJSHUW3SVYUlsEs5aJKVl6mB2qillagym
Njj+8dhWe1txYHY16BJG7eOcr2DpWhXa7iwjzTmmevcKmeGo+kR5CQfqTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImsrzQRymFqMeq6rUv/TdKc97pbMB8GA1UdIwQY
MBaAFCHYXSMa1UuEOcKq7ZGld1hqxGAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWRoZEl4clZTNFE1d3FydGthVjNXR3JFWUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82YTZiNTUtY2EwMi00NThkLThiNWQt
NzRkNzczMDJiMTg0LzEvSWRoZEl4clZTNFE1d3FydGthVjNXR3JFWUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS82YTZiNTUtY2EwMi00NThkLThiNWQtNzRkNzczMDJiMTg0
LzEvSWRoZEl4clZTNFE1d3FydGthVjNXR3JFWUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqBfWZM5
wM/3VZU64u+MRJYqGupjundjLQKPE486SGU4cwfdCq/i6tW32wxJwpmqLKDNR5vb
YG9sOzcWND2bkJjFHuMbWSIWR+IDH8h3YjCVin58ItAsal0LTSVv/AZdKKaykyIG
MVKpBpKOehSuZWAzqs8xNPu1amQPUj3U04OrhhOS3UVg+5oAaE0wz9hQ+izPBp1/
kfU/MN5My40MAzMB/VDvJvtEtzikXBRl7m4R2v1pvY2+UOvSXhN10I26zySB/LCP
Y9Z4zTdWZbW3Ri/pm5QuQFx3rax+ttqCTvJ9rJ/Itq+ohAyDz5vqgCEhpbTU3B+N
9if9lbyZWsdgFw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:34 2025 by rpki-client