Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: 6e4dceFA2NNyYh7TSoREmRY6IIH9CimXO0kftc33MXo=
Subject key identifier: DC:BA:07:D9:2C:8A:E7:85:39:D8:F3:2F:F7:2E:FA:03:C9:A1:FF:2A
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 019A4EF4E55C226058861D67ABB46FD847D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:01:03 +0000
Manifest this update: Tue 04 Nov 2025 13:01:03 +0000
Manifest next update: Wed 05 Nov 2025 13:01:03 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: 0RZG/B/ThubFIUKEaAclxT8ukyehKF1CpcURtdtiQbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e5:5c:22:60:58:86:1d:67:ab:b4:6f:d8:47:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: Nov 4 13:01:03 2025 GMT
Not After : Nov 5 13:01:03 2025 GMT
Subject: CN=dcba07d92c8ae78539d8f32ff72efa03c9a1ff2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:55:8c:03:a8:42:de:0e:b2:42:d2:e3:22:
49:f8:2b:7d:39:1f:20:47:03:ca:48:72:23:c6:71:
bb:60:d2:3a:9a:bd:a2:44:bd:93:26:56:5f:d0:1c:
f6:67:6f:c4:6f:1d:b1:9c:2f:8f:bc:25:83:be:a3:
64:a6:3d:2c:ce:48:f4:e7:3b:b7:09:93:db:e5:fb:
e3:30:f0:56:dc:1f:e8:f3:2f:30:ec:d0:1c:ca:12:
2f:45:a2:dd:9b:4c:b4:33:c5:73:59:f4:9c:27:4e:
11:f2:19:ab:eb:29:bc:bc:ea:4e:00:01:ea:53:15:
8b:2a:99:9f:b0:31:bf:fb:28:a5:69:fa:4e:f5:3c:
9e:26:c0:32:47:2f:21:b4:09:60:0f:e7:c2:0f:16:
11:fa:18:ba:f0:47:e3:85:f4:53:e6:fe:70:b2:c9:
df:1f:32:8c:4a:0d:53:92:18:91:ae:32:52:8b:38:
28:64:8d:8c:c0:34:50:da:95:15:21:5e:88:28:33:
74:21:6c:52:a1:39:77:9b:4f:31:09:4b:50:d3:6e:
61:e8:66:8e:5e:c4:2f:12:90:8a:21:02:2d:0a:47:
c6:73:c9:6a:d4:68:76:a1:82:14:b6:63:88:1d:46:
0c:ce:6f:04:a7:1d:17:6f:f5:e9:a3:cd:64:b2:eb:
fc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BA:07:D9:2C:8A:E7:85:39:D8:F3:2F:F7:2E:FA:03:C9:A1:FF:2A
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:74:35:0e:7d:19:44:5e:20:3a:42:36:d1:7f:05:ec:07:08:
13:b4:76:c6:81:9b:34:08:5a:e1:91:0d:5a:f3:3f:65:46:02:
ab:fb:01:33:2e:73:03:05:bd:30:f4:41:58:3b:2a:91:bf:a0:
b0:1e:41:d2:c2:b2:15:58:61:12:9d:b6:52:e2:54:94:db:32:
5b:ff:4c:76:9b:f7:81:72:e1:6b:d1:b3:f0:d0:a1:d0:9b:b7:
06:d0:77:65:f8:c4:1b:47:47:99:3e:43:d7:64:8e:42:3b:5b:
4d:d7:6a:63:2d:9d:01:1a:86:2e:e9:f9:5d:c0:ed:b0:66:70:
ab:b5:f4:60:37:fa:4d:03:f1:46:aa:05:c2:69:92:ef:20:cc:
ea:cc:4e:66:3d:2d:86:d6:9a:2d:79:de:20:07:f8:ed:1c:c0:
ef:4a:41:13:0f:69:d6:64:c5:46:5d:27:93:e8:1a:9b:68:43:
73:0a:4f:66:3c:05:f1:8b:b7:bc:a5:f7:7e:44:51:ab:5f:3c:
6d:32:4d:0c:da:06:a0:13:09:2e:fa:ad:5d:b9:94:89:59:35:
5d:8d:79:ed:ea:65:6c:d2:a7:4d:c3:f4:65:8c:ed:6b:51:ec:
ba:bc:4d:77:f1:c6:a0:a6:97:5c:6b:b0:8b:f4:fb:92:81:b0:
bd:06:5e:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9OVcImBYhh1nq7Rv2EfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MmI2ZDZlNWJkYTA1MjY1ZmMwY2U5NzE5YTYzM2JlMDRh
NmU5NzkwHhcNMjUxMTA0MTMwMTAzWhcNMjUxMTA1MTMwMTAzWjAzMTEwLwYDVQQD
EyhkY2JhMDdkOTJjOGFlNzg1MzlkOGYzMmZmNzJlZmEwM2M5YTFmZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRtVjAOoQt4OskLS4yJJ+Ct9OR8g
RwPKSHIjxnG7YNI6mr2iRL2TJlZf0Bz2Z2/Ebx2xnC+PvCWDvqNkpj0szkj05zu3
CZPb5fvjMPBW3B/o8y8w7NAcyhIvRaLdm0y0M8VzWfScJ04R8hmr6ym8vOpOAAHq
UxWLKpmfsDG/+yilafpO9TyeJsAyRy8htAlgD+fCDxYR+hi68EfjhfRT5v5wssnf
HzKMSg1TkhiRrjJSizgoZI2MwDRQ2pUVIV6IKDN0IWxSoTl3m08xCUtQ025h6GaO
XsQvEpCKIQItCkfGc8lq1Gh2oYIUtmOIHUYMzm8Epx0Xb/Xpo81ksuv82wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNy6B9ksiueFOdjzL/cu+gPJof8qMB8GA1UdIwQY
MBaAFHkrbW5b2gUmX8DOlxmmM74Epul5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYt
MjEzZGMzOTliZTZmLzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYtMjEzZGMzOTliZTZm
LzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXQ1Dn0Z
RF4gOkI20X8F7AcIE7R2xoGbNAha4ZENWvM/ZUYCq/sBMy5zAwW9MPRBWDsqkb+g
sB5B0sKyFVhhEp22UuJUlNsyW/9Mdpv3gXLha9Gz8NCh0Ju3BtB3ZfjEG0dHmT5D
12SOQjtbTddqYy2dARqGLun5XcDtsGZwq7X0YDf6TQPxRqoFwmmS7yDM6sxOZj0t
htaaLXneIAf47RzA70pBEw9p1mTFRl0nk+gam2hDcwpPZjwF8Yu3vKX3fkRRq188
bTJNDNoGoBMJLvqtXbmUiVk1XY157eplbNKnTcP0ZYzta1HsurxNd/HGoKaXXGuw
i/T7koGwvQZewg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:05:25 2025 by rpki-client