Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier: 6Kc0q3m/unEN6Vx5B4ab6X0lDsBEDTd+x1KV8CvDb1Q=
Subject key identifier: DC:A9:71:72:34:B9:3C:B0:D0:D7:F0:9C:DB:40:36:C7:D3:5F:78:D9
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer: /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial: 019A4EF4E094E693C5137A2EBCCC2F3377BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number: 0D07
Signing time: Tue 04 Nov 2025 13:01:02 +0000
Manifest this update: Tue 04 Nov 2025 13:01:02 +0000
Manifest next update: Wed 05 Nov 2025 13:01:02 +0000
Files and hashes: 1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: l+k5ytw9d1jI0bUUUKAu6oMwmzvCshhtEdjC/UZYEOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e0:94:e6:93:c5:13:7a:2e:bc:cc:2f:33:77:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Validity
Not Before: Nov 4 13:01:02 2025 GMT
Not After : Nov 5 13:01:02 2025 GMT
Subject: CN=dca9717234b93cb0d0d7f09cdb4036c7d35f78d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:71:34:7c:83:12:52:2b:20:22:88:48:d8:
6a:8f:d5:9b:c6:a7:69:f9:b1:2e:d6:bd:eb:cc:24:
7c:9f:46:f2:31:88:89:31:57:90:ed:f2:98:7a:9a:
ef:b3:72:67:4c:a7:36:12:1a:64:ff:c2:60:5c:a8:
61:37:a9:84:c8:3c:2d:48:71:78:99:dc:61:6d:d8:
e3:5b:0c:c1:e4:70:64:80:33:7b:87:e1:16:bc:71:
40:09:70:fc:be:c4:e5:2f:b2:a3:42:c5:86:e5:ea:
56:0b:f5:dc:0f:b7:e0:85:ab:e4:2c:70:05:10:24:
56:8f:87:50:ff:18:04:5d:ea:22:3b:c7:85:c6:02:
79:ea:1b:fb:46:87:51:e0:11:e1:e4:4d:45:f1:da:
cb:50:9f:e8:a4:1a:88:f3:9d:79:c8:bd:d1:a4:4b:
b3:6c:4c:86:51:c3:c2:d1:f3:00:6e:ef:23:ef:2d:
2d:ad:cd:61:30:95:e0:e9:b3:60:97:2f:47:5c:8f:
96:ce:d5:fa:b4:fc:a2:89:b3:1a:2f:b3:be:e9:61:
be:d1:64:31:9b:8e:67:73:02:ac:08:0e:55:9d:d3:
5c:bd:30:43:dd:ad:c9:8d:cd:35:12:09:ca:f7:cc:
fc:8b:cd:fb:af:43:59:43:f6:04:e4:50:c6:1e:1b:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A9:71:72:34:B9:3C:B0:D0:D7:F0:9C:DB:40:36:C7:D3:5F:78:D9
X509v3 Authority Key Identifier:
keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f7:4f:e7:08:af:d0:35:54:c5:46:02:ec:ac:6e:0b:2d:14:
59:42:09:c0:22:56:93:8d:96:51:55:6a:c1:70:5b:4d:d7:a5:
a1:26:cc:a2:f0:2b:09:29:2a:c7:0c:63:e4:6e:0b:2c:e8:7e:
ee:56:38:3e:d8:9b:d6:ad:29:b7:e0:5f:af:fd:78:bb:5b:a1:
2a:1c:da:9b:58:65:c6:c6:4e:00:87:10:d6:c1:b5:53:f8:8d:
39:72:89:22:da:89:76:64:d7:c4:d1:45:a0:11:70:00:9e:89:
8b:b4:72:49:f3:c8:0a:1e:f2:b9:f0:d0:97:c3:ca:0f:6c:7d:
98:2c:13:2a:b7:eb:e4:c1:cf:8a:48:8d:56:e3:b0:b0:e0:cf:
1f:a1:0a:b3:f5:83:2e:72:53:72:3e:18:34:0d:19:5e:37:d8:
3a:2e:fd:51:d2:96:0d:8a:85:62:62:1c:f7:de:44:72:68:d2:
49:e6:a8:31:36:5c:61:25:0d:dd:cf:5b:76:aa:4e:02:b1:41:
9c:ad:45:c7:95:8a:52:15:b0:79:fd:00:83:80:16:a2:09:ad:
03:77:0f:16:f6:08:2a:a7:f5:32:49:2a:e1:13:d7:52:9a:e2:
54:91:7c:6b:5d:3d:ab:49:09:59:1f:39:89:1e:34:48:56:2a:
43:59:de:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9OCU5pPFE3ouvMwvM3e8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTBiNDM5ZDQ4OGUxYjFhNjllMzU4NjA5ODYyMTk1NmMw
ZWRjN2IwHhcNMjUxMTA0MTMwMTAyWhcNMjUxMTA1MTMwMTAyWjAzMTEwLwYDVQQD
EyhkY2E5NzE3MjM0YjkzY2IwZDBkN2YwOWNkYjQwMzZjN2QzNWY3OGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29FxNHyDElIrICKISNhqj9Wbxqdp
+bEu1r3rzCR8n0byMYiJMVeQ7fKYeprvs3JnTKc2Ehpk/8JgXKhhN6mEyDwtSHF4
mdxhbdjjWwzB5HBkgDN7h+EWvHFACXD8vsTlL7KjQsWG5epWC/XcD7fghavkLHAF
ECRWj4dQ/xgEXeoiO8eFxgJ56hv7RodR4BHh5E1F8drLUJ/opBqI8515yL3RpEuz
bEyGUcPC0fMAbu8j7y0trc1hMJXg6bNgly9HXI+WztX6tPyiibMaL7O+6WG+0WQx
m45ncwKsCA5VndNcvTBD3a3Jjc01EgnK98z8i837r0NZQ/YE5FDGHhtPHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNypcXI0uTyw0NfwnNtANsfTX3jZMB8GA1UdIwQY
MBaAFOtQtDnUiOGxpp41hgmGIZVsDtx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jODNlOGYtMjQ1Ny00ZThhLWE2YmMt
M2E3OTgwMzE0ZWEyLzEvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jODNlOGYtMjQ1Ny00ZThhLWE2YmMtM2E3OTgwMzE0ZWEy
LzEvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/dP5wiv
0DVUxUYC7KxuCy0UWUIJwCJWk42WUVVqwXBbTdeloSbMovArCSkqxwxj5G4LLOh+
7lY4Ptib1q0pt+Bfr/14u1uhKhzam1hlxsZOAIcQ1sG1U/iNOXKJItqJdmTXxNFF
oBFwAJ6Ji7RySfPICh7yufDQl8PKD2x9mCwTKrfr5MHPikiNVuOwsODPH6EKs/WD
LnJTcj4YNA0ZXjfYOi79UdKWDYqFYmIc995EcmjSSeaoMTZcYSUN3c9bdqpOArFB
nK1Fx5WKUhWwef0Ag4AWogmtA3cPFvYIKqf1Mkkq4RPXUpriVJF8a109q0kJWR85
iR40SFYqQ1neSA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:22 2025 by rpki-client