Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
File: rAsK5lTCnX8fDU4tNRarfe8Msp0.mft (raw, json)
Hash identifier: 1y9oItDvth7IZjgiAaAe10/3tEjVkrslMvTBUK+eDM4=
Subject key identifier: 16:BD:64:C5:98:4D:2B:11:AA:2E:1F:FE:E9:3D:50:85:51:43:30:C7
Authority key identifier: AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
Certificate issuer: /CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Certificate serial: 019A4D74666B0534035FFD6779B3E47018CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
Manifest number: 062B
Signing time: Tue 04 Nov 2025 06:01:05 +0000
Manifest this update: Tue 04 Nov 2025 06:01:05 +0000
Manifest next update: Wed 05 Nov 2025 06:01:05 +0000
Files and hashes: 1: rAsK5lTCnX8fDU4tNRarfe8Msp0.crl (hash: yE99QBPCxBBTks0ECVT6LOrWnO7ueyl6z/puQiNxKDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:66:6b:05:34:03:5f:fd:67:79:b3:e4:70:18:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Validity
Not Before: Nov 4 06:01:05 2025 GMT
Not After : Nov 5 06:01:05 2025 GMT
Subject: CN=16bd64c5984d2b11aa2e1ffee93d5085514330c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:05:60:71:83:03:a7:a6:ef:65:21:e2:76:
63:10:d2:0f:13:7c:71:a3:c4:ba:6b:7a:d9:02:92:
b5:1c:16:9c:80:14:19:62:9a:c9:5a:50:7e:9e:ac:
bf:f9:d0:09:60:72:de:87:19:8a:44:ff:9b:de:5f:
fa:1b:9d:73:f3:60:7e:d3:35:e7:53:b1:c7:df:eb:
21:36:51:27:5c:41:a9:f2:97:c7:70:6b:5c:04:b0:
00:da:a8:1d:94:10:7b:4a:45:6c:93:24:ba:9c:31:
56:20:72:1c:c3:50:b1:b3:73:ef:47:9f:d8:32:dd:
a3:cf:7c:91:d5:90:a1:c4:77:48:ff:73:30:9d:f5:
d6:63:d0:2f:41:d6:11:ea:a7:a9:82:d0:c3:1b:42:
18:5c:c1:f2:37:0c:fb:cb:cc:d1:a0:9e:51:74:01:
55:05:29:fc:3e:a3:36:14:76:52:bd:78:34:3a:94:
74:f0:f9:47:fa:83:f1:c1:c3:b7:b2:28:62:da:73:
bc:e5:90:a7:66:69:93:55:7b:b4:38:f3:08:88:0d:
6f:be:bb:77:f8:c8:25:6e:9d:51:48:d8:44:43:06:
58:83:28:9a:e1:ac:ed:5e:b5:11:12:a6:fe:da:34:
88:49:e6:5e:56:2c:72:98:25:9f:ca:3a:fe:1b:b5:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BD:64:C5:98:4D:2B:11:AA:2E:1F:FE:E9:3D:50:85:51:43:30:C7
X509v3 Authority Key Identifier:
keyid:AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:54:24:bc:b4:99:5b:48:23:69:15:fe:46:63:6e:c9:1e:9a:
fb:ce:1f:98:7c:e9:b9:f4:22:d4:b8:80:0d:0b:f8:6d:f2:ac:
36:c9:9a:38:66:17:98:b8:17:55:76:24:dc:16:58:0d:1d:51:
ce:85:03:68:27:d5:10:a9:7b:72:ca:c5:8e:eb:bb:06:73:e3:
c5:50:24:4b:8a:81:5b:c7:a1:0f:88:ce:42:6d:0d:d4:4d:fa:
5c:ab:20:94:45:19:a7:e5:0e:89:6e:47:b6:c3:9e:8f:bb:ea:
b1:77:9c:10:03:51:f5:cf:31:6e:a4:be:67:e2:c9:1e:b1:fb:
ae:89:fe:9e:88:92:43:4e:8e:ec:e7:d8:3e:26:de:c9:ff:a3:
f9:ef:d8:bb:bf:e9:d2:c2:a1:e7:34:8f:2c:04:bf:74:0e:e0:
86:ee:69:70:74:f2:57:c7:7b:39:f3:b3:df:27:96:15:bf:da:
d3:e4:18:cb:b9:07:01:07:9d:a1:1d:bc:7c:3f:ff:0c:28:db:
18:b2:70:c8:dd:fb:d6:75:b8:04:27:3b:a2:b6:37:0d:00:e8:
f7:3b:1d:c8:72:62:31:93:1a:e2:1c:ba:52:3e:65:dc:95:0e:
74:be:ac:3a:63:9f:bd:16:0f:d0:0e:85:72:92:e9:fe:e0:58:
f7:eb:24:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdGZrBTQDX/1nebPkcBjMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMGIwYWU2NTRjMjlkN2YxZjBkNGUyZDM1MTZhYjdkZWYw
Y2IyOWQwHhcNMjUxMTA0MDYwMTA1WhcNMjUxMTA1MDYwMTA1WjAzMTEwLwYDVQQD
EygxNmJkNjRjNTk4NGQyYjExYWEyZTFmZmVlOTNkNTA4NTUxNDMzMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+cFYHGDA6em72Uh4nZjENIPE3xx
o8S6a3rZApK1HBacgBQZYprJWlB+nqy/+dAJYHLehxmKRP+b3l/6G51z82B+0zXn
U7HH3+shNlEnXEGp8pfHcGtcBLAA2qgdlBB7SkVskyS6nDFWIHIcw1Cxs3PvR5/Y
Mt2jz3yR1ZChxHdI/3MwnfXWY9AvQdYR6qepgtDDG0IYXMHyNwz7y8zRoJ5RdAFV
BSn8PqM2FHZSvXg0OpR08PlH+oPxwcO3sihi2nO85ZCnZmmTVXu0OPMIiA1vvrt3
+Mglbp1RSNhEQwZYgyia4aztXrUREqb+2jSISeZeVixymCWfyjr+G7UN5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa9ZMWYTSsRqi4f/uk9UIVRQzDHMB8GA1UdIwQY
MBaAFKwLCuZUwp1/Hw1OLTUWq33vDLKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFzSzVsVENuWDhmRFU0dE5SYXJmZThNc3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MzVkNDUtYmVlMi00OTFhLWIyODct
NjVmNDJlZmU1OWRlLzEvckFzSzVsVENuWDhmRFU0dE5SYXJmZThNc3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80MzVkNDUtYmVlMi00OTFhLWIyODctNjVmNDJlZmU1OWRl
LzEvckFzSzVsVENuWDhmRFU0dE5SYXJmZThNc3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlQkvLSZ
W0gjaRX+RmNuyR6a+84fmHzpufQi1LiADQv4bfKsNsmaOGYXmLgXVXYk3BZYDR1R
zoUDaCfVEKl7csrFjuu7BnPjxVAkS4qBW8ehD4jOQm0N1E36XKsglEUZp+UOiW5H
tsOej7vqsXecEANR9c8xbqS+Z+LJHrH7ron+noiSQ06O7OfYPibeyf+j+e/Yu7/p
0sKh5zSPLAS/dA7ghu5pcHTyV8d7OfOz3yeWFb/a0+QYy7kHAQedoR28fD//DCjb
GLJwyN371nW4BCc7orY3DQDo9zsdyHJiMZMa4hy6Uj5l3JUOdL6sOmOfvRYP0A6F
cpLp/uBY9+skdg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:18 2025 by rpki-client