Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: xWPNjKiq00H29YcC9kGP+XWfE30QuvLqsY/4ue5MVjg=
Subject key identifier: BB:6C:D3:27:F3:17:84:C2:96:03:D8:EA:C5:F1:AC:08:9D:07:71:CE
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 019A4D746F7DEEBB337E35A72D29F930F274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 06EA
Signing time: Tue 04 Nov 2025 06:01:07 +0000
Manifest this update: Tue 04 Nov 2025 06:01:07 +0000
Manifest next update: Wed 05 Nov 2025 06:01:07 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: rgAVYvRX1gD+peL9aun6DDYB1i4VPOmruwlYaj2EcAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:6f:7d:ee:bb:33:7e:35:a7:2d:29:f9:30:f2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: Nov 4 06:01:07 2025 GMT
Not After : Nov 5 06:01:07 2025 GMT
Subject: CN=bb6cd327f31784c29603d8eac5f1ac089d0771ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:00:2a:eb:83:9b:11:30:c2:ea:7f:5a:b8:
55:f8:27:80:aa:10:6b:33:c7:da:10:fa:a8:02:98:
b0:62:06:fa:93:2e:b4:a1:1f:6f:32:4b:d3:18:26:
52:08:39:e3:7b:e7:d7:42:c2:47:a2:8a:ba:23:51:
ed:cb:be:0a:3d:71:8b:e2:01:43:bd:24:9c:71:6e:
c6:7e:bd:67:c3:6f:fa:7e:e8:2e:aa:c6:da:32:50:
af:4d:a2:5b:2f:46:5a:5d:d6:be:16:23:2d:92:19:
00:76:92:e9:00:ac:51:d3:57:4b:61:19:92:eb:e5:
fa:2e:46:e5:43:06:b1:b0:38:09:24:f9:7d:d6:ab:
49:e4:83:8d:76:7e:0e:a7:3f:92:ce:9f:a3:c1:76:
31:5c:6b:cc:7a:6d:89:53:61:65:fe:34:7c:07:46:
f9:ed:10:1a:ef:21:be:1f:47:15:90:27:80:31:e4:
50:90:4a:30:0f:96:76:21:69:e6:b4:bd:54:2f:be:
4c:8b:4b:77:07:42:a4:fb:82:29:0a:79:52:d6:28:
ff:e3:27:21:80:d3:f3:0f:41:24:85:68:f3:6e:2f:
e6:4d:c4:6e:c1:24:fe:7c:8a:68:68:5a:87:72:9a:
00:1e:c6:74:5b:9e:80:19:99:42:4e:bd:48:5a:b3:
24:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:D3:27:F3:17:84:C2:96:03:D8:EA:C5:F1:AC:08:9D:07:71:CE
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9e:94:a6:6c:22:39:12:e3:25:c6:4d:b5:39:91:e5:e3:a1:
ee:32:c9:39:7e:e0:ed:2a:66:f5:07:a5:db:af:ee:a0:c8:c9:
ab:87:75:93:2e:e2:9c:d1:e6:a8:7a:27:49:d4:c0:39:66:9e:
50:b1:66:e6:d3:e9:c2:e1:5e:fe:3e:5a:24:ac:cb:6a:3b:96:
2c:eb:39:74:db:95:86:07:38:04:21:95:33:34:b2:d3:1a:8b:
9e:1c:c5:52:6a:79:37:e6:44:e4:b2:56:ea:26:3f:f7:23:74:
34:aa:71:98:be:54:d0:6f:9f:ed:41:47:1c:03:76:f2:2e:58:
e6:10:85:e0:2c:89:6b:79:f0:34:5c:8a:12:3f:c5:49:67:5d:
84:1e:0f:4b:d6:09:fd:b8:d4:5a:07:94:6a:e1:83:25:d2:8b:
31:4c:f1:be:99:a4:f1:8c:fa:3a:f4:c1:c6:42:d5:d4:3f:74:
27:d0:9f:1a:5c:e5:3e:cd:6d:73:17:ff:b6:53:7d:32:45:f2:
89:33:a7:c0:ce:0e:8b:00:0f:2f:a5:cd:67:d4:88:94:80:2e:
46:81:97:31:45:ba:45:89:95:45:9a:5a:e6:36:52:fa:72:c9:
0d:1b:35:ad:34:b3:f0:0b:06:0b:29:28:ce:d0:81:20:02:9f:
74:e4:d4:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdG997rszfjWnLSn5MPJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWE1M2Q5NjJkNjdhMDE0OGU2MzdiNGI0Njg5YmU0ZDA4
NGE5ZTUwHhcNMjUxMTA0MDYwMTA3WhcNMjUxMTA1MDYwMTA3WjAzMTEwLwYDVQQD
EyhiYjZjZDMyN2YzMTc4NGMyOTYwM2Q4ZWFjNWYxYWMwODlkMDc3MWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/cAKuuDmxEwwup/WrhV+CeAqhBr
M8faEPqoApiwYgb6ky60oR9vMkvTGCZSCDnje+fXQsJHooq6I1Hty74KPXGL4gFD
vSSccW7Gfr1nw2/6fuguqsbaMlCvTaJbL0ZaXda+FiMtkhkAdpLpAKxR01dLYRmS
6+X6LkblQwaxsDgJJPl91qtJ5IONdn4Opz+Szp+jwXYxXGvMem2JU2Fl/jR8B0b5
7RAa7yG+H0cVkCeAMeRQkEowD5Z2IWnmtL1UL75Mi0t3B0Kk+4IpCnlS1ij/4ych
gNPzD0EkhWjzbi/mTcRuwST+fIpoaFqHcpoAHsZ0W56AGZlCTr1IWrMkyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLts0yfzF4TClgPY6sXxrAidB3HOMB8GA1UdIwQY
MBaAFGvqU9li1noBSOY3tLRom+TQhKnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEt
ZTIwYjdlNjc5NjIyLzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEtZTIwYjdlNjc5NjIy
LzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJ6Upmwi
ORLjJcZNtTmR5eOh7jLJOX7g7Spm9Qel26/uoMjJq4d1ky7inNHmqHonSdTAOWae
ULFm5tPpwuFe/j5aJKzLajuWLOs5dNuVhgc4BCGVMzSy0xqLnhzFUmp5N+ZE5LJW
6iY/9yN0NKpxmL5U0G+f7UFHHAN28i5Y5hCF4CyJa3nwNFyKEj/FSWddhB4PS9YJ
/bjUWgeUauGDJdKLMUzxvpmk8Yz6OvTBxkLV1D90J9CfGlzlPs1tcxf/tlN9MkXy
iTOnwM4OiwAPL6XNZ9SIlIAuRoGXMUW6RYmVRZpa5jZS+nLJDRs1rTSz8AsGCyko
ztCBIAKfdOTU9w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:22 2025 by rpki-client