Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File: f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier: PKMndoBG++KM/AvI6m4sCPapGsJHaICWv9DX/a307GU=
Subject key identifier: 81:A0:3C:68:A9:C7:98:6B:71:DF:24:49:11:CE:75:80:CB:9D:E7:BF
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer: /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial: 019A4D0756991188EC1BF41F72E09D121739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number: 044A
Signing time: Tue 04 Nov 2025 04:01:57 +0000
Manifest this update: Tue 04 Nov 2025 04:01:57 +0000
Manifest next update: Wed 05 Nov 2025 04:01:57 +0000
Files and hashes: 1: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: Cw1VwOZ6RUNxhmPL8nq7+AXxain6nbufMYa/qAvSKTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:56:99:11:88:ec:1b:f4:1f:72:e0:9d:12:17:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Validity
Not Before: Nov 4 04:01:57 2025 GMT
Not After : Nov 5 04:01:57 2025 GMT
Subject: CN=81a03c68a9c7986b71df244911ce7580cb9de7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:68:b8:18:54:6d:8e:d9:e6:c1:54:ca:bb:
80:6c:63:c8:bc:49:0f:dd:9c:8c:af:f3:ef:ed:08:
8f:b3:f5:42:63:b7:b3:47:96:ed:5f:89:f8:6e:21:
32:e8:0e:6c:28:8c:40:e2:bb:6b:86:f4:8d:50:31:
04:b3:a1:75:e7:21:9b:13:76:75:d7:ff:6e:a0:cd:
c3:d3:c7:cd:80:a8:9a:82:3f:ca:3b:6b:02:44:71:
85:c0:f4:52:ed:8a:e9:40:a5:57:b6:ae:70:ff:4e:
ae:ab:c6:66:e3:d6:cc:9a:c0:6f:46:5f:4e:dd:a8:
9d:76:db:6b:a5:f2:8a:56:9a:d8:53:89:0e:a2:cb:
6f:8a:81:a3:11:de:d6:42:24:76:e6:af:5f:25:01:
a9:ed:3a:08:a5:7a:45:33:99:d5:37:68:d8:cb:39:
8c:19:a7:f0:79:76:b8:bc:a1:69:7a:20:4d:e7:19:
1f:70:78:48:2e:c6:cb:6e:5f:ba:2f:8e:c7:9c:ee:
9f:8d:34:da:b4:e2:a2:de:32:2b:1c:3d:3a:c2:a5:
ab:70:c6:3f:d2:ae:c0:ef:3a:42:96:02:11:d0:c2:
4d:d2:cd:0b:f1:ea:ea:82:a8:fa:ab:aa:6e:ff:cd:
2c:fe:cf:22:7b:dc:e4:ca:f0:e1:cb:3a:9e:cc:79:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A0:3C:68:A9:C7:98:6B:71:DF:24:49:11:CE:75:80:CB:9D:E7:BF
X509v3 Authority Key Identifier:
keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e5:cc:f4:54:e1:8e:99:f1:23:b4:87:95:16:93:5f:d1:09:
9f:66:8a:4d:62:bc:84:6b:bb:3e:8a:e9:e6:1f:96:88:0a:57:
22:1e:48:20:dc:e2:5b:2a:08:ee:57:39:26:3d:98:bd:af:44:
e4:ea:7d:46:2c:39:15:34:9b:d8:e8:eb:7f:92:02:63:50:6c:
d3:e3:bc:d4:e1:0b:3f:f4:97:37:40:da:2e:61:90:11:ac:6e:
ef:17:0b:84:af:68:f8:3d:7a:b6:dc:1d:bf:10:7e:22:27:f9:
bc:ef:dc:b0:3c:04:b9:50:d8:3e:5f:c6:22:a3:16:77:d3:c1:
cf:c1:37:a2:05:e2:bf:05:d9:09:81:88:d4:86:4b:df:88:00:
8e:24:9c:b3:16:63:c2:db:a8:d1:69:5d:63:60:f0:d9:6d:f3:
46:63:b2:21:c1:2e:17:c6:ed:c1:b0:7d:e6:85:9e:9e:e0:ae:
48:0b:02:84:61:23:67:30:b2:ee:0b:2b:7c:e0:37:69:d8:24:
a1:c7:e9:9f:ca:30:2a:4d:09:f8:80:8a:fd:62:62:cb:89:4a:
0f:72:0c:1a:e1:8f:ee:c3:a6:ca:4e:40:e0:97:c5:07:13:b0:
28:34:27:06:dc:0d:29:ce:f3:98:da:df:04:6c:bd:23:29:7c:
21:0a:42:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNB1aZEYjsG/QfcuCdEhc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZjE3YWU1NDdiOWYyNjQxZTYwNTc3ZmU1NTNkZGI2Zjc0
OWEwODcwHhcNMjUxMTA0MDQwMTU3WhcNMjUxMTA1MDQwMTU3WjAzMTEwLwYDVQQD
Eyg4MWEwM2M2OGE5Yzc5ODZiNzFkZjI0NDkxMWNlNzU4MGNiOWRlN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GtouBhUbY7Z5sFUyruAbGPIvEkP
3ZyMr/Pv7QiPs/VCY7ezR5btX4n4biEy6A5sKIxA4rtrhvSNUDEEs6F15yGbE3Z1
1/9uoM3D08fNgKiagj/KO2sCRHGFwPRS7YrpQKVXtq5w/06uq8Zm49bMmsBvRl9O
3aiddttrpfKKVprYU4kOostvioGjEd7WQiR25q9fJQGp7ToIpXpFM5nVN2jYyzmM
GafweXa4vKFpeiBN5xkfcHhILsbLbl+6L47HnO6fjTTatOKi3jIrHD06wqWrcMY/
0q7A7zpClgIR0MJN0s0L8erqgqj6q6pu/80s/s8ie9zkyvDhyzqezHnA9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGgPGipx5hrcd8kSRHOdYDLnee/MB8GA1UdIwQY
MBaAFH/xeuVHufJkHmBXf+VT3bb3SaCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xYmMwZjktYmQ3Yy00ZjdhLWE0MDQt
YTQzZmYyNWQ0NDdkLzEvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xYmMwZjktYmQ3Yy00ZjdhLWE0MDQtYTQzZmYyNWQ0NDdk
LzEvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+XM9FTh
jpnxI7SHlRaTX9EJn2aKTWK8hGu7Porp5h+WiApXIh5IINziWyoI7lc5Jj2Yva9E
5Op9Riw5FTSb2Ojrf5ICY1Bs0+O81OELP/SXN0DaLmGQEaxu7xcLhK9o+D16ttwd
vxB+Iif5vO/csDwEuVDYPl/GIqMWd9PBz8E3ogXivwXZCYGI1IZL34gAjiScsxZj
wtuo0WldY2Dw2W3zRmOyIcEuF8btwbB95oWenuCuSAsChGEjZzCy7gsrfOA3adgk
ocfpn8owKk0J+ICK/WJiy4lKD3IMGuGP7sOmyk5A4JfFBxOwKDQnBtwNKc7zmNrf
BGy9Iyl8IQpCJg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:40 2025 by rpki-client