Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File: mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier: SDbUWkBoeCGADaRJFwCQuKHZhK78FnM15FdEU2GZEeM=
Subject key identifier: 70:BA:DF:0A:C5:D8:44:B7:EA:DA:9E:FD:60:9F:C9:63:2A:4B:5C:FA
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer: /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial: 019A4D73A14583030CAB60F4033CE073AE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number: 1304
Signing time: Tue 04 Nov 2025 06:00:14 +0000
Manifest this update: Tue 04 Nov 2025 06:00:14 +0000
Manifest next update: Wed 05 Nov 2025 06:00:14 +0000
Files and hashes: 1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: 4MIv20uybi3hlsb9hm/CkpuScHsQmWE2qNrrAGn6FIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a1:45:83:03:0c:ab:60:f4:03:3c:e0:73:ae:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
Validity
Not Before: Nov 4 06:00:14 2025 GMT
Not After : Nov 5 06:00:14 2025 GMT
Subject: CN=70badf0ac5d844b7eada9efd609fc9632a4b5cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:2b:4c:f2:20:f8:fb:b3:95:39:92:f9:2a:
b1:49:4c:1b:a6:b4:63:76:7e:eb:99:73:b4:60:87:
82:57:e9:1a:13:71:8e:6e:1b:a2:32:40:09:9d:a9:
36:73:3d:ca:2c:28:b2:b1:01:89:44:f7:60:00:86:
01:93:6f:93:15:fe:86:9a:2f:74:ff:c6:ed:dd:a9:
01:60:3e:7b:47:a2:5a:71:1c:d1:44:e8:ee:5a:39:
47:09:b6:0a:99:a9:19:90:76:6d:5f:58:00:f6:72:
22:24:c4:bf:de:5c:c0:39:a0:8a:0b:34:6b:11:4d:
4b:2b:e1:c9:67:a3:4b:1f:92:da:97:29:29:75:db:
86:b6:4f:45:c8:04:b0:37:69:46:d3:43:0a:9a:7c:
d0:20:1b:65:c7:08:4c:74:7a:c6:6b:22:c1:32:8d:
6c:52:1a:c5:1e:f1:3f:2e:e8:f7:f0:e9:ae:7e:54:
c1:c4:d9:a9:8c:9a:5f:8e:a6:07:04:e6:b0:9e:a6:
c8:cc:9c:8a:86:3e:86:48:2f:68:51:af:63:f7:94:
f6:5a:c9:7b:1e:d7:12:82:70:24:11:3b:0a:7b:e7:
c5:42:73:a4:3a:0a:48:00:71:d6:96:1a:f5:18:f5:
ee:ce:f7:0d:e8:9c:6d:bc:48:d5:65:2d:a2:73:2a:
56:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BA:DF:0A:C5:D8:44:B7:EA:DA:9E:FD:60:9F:C9:63:2A:4B:5C:FA
X509v3 Authority Key Identifier:
keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ac:2d:62:98:d1:f2:c1:3c:36:9d:6d:14:a6:2e:3f:6e:18:
45:7e:7c:d6:1e:d7:c5:fe:31:77:8b:00:86:7d:60:67:24:28:
5a:79:96:4c:1c:be:fa:ea:85:e3:ef:bd:20:c6:fc:f3:b9:0c:
a3:e3:c9:36:2c:83:27:b0:bd:e3:e3:24:2c:70:4d:e7:a1:2a:
07:a1:3d:b4:8a:bd:d5:39:36:96:d7:42:e9:01:94:d6:6c:ca:
56:51:f6:02:62:d6:4c:f7:e1:f0:ae:36:72:ab:1f:49:be:cb:
32:89:e6:e5:0f:97:9b:7a:15:89:bf:88:d4:3e:f8:94:78:e7:
ce:54:f4:83:ff:8d:99:26:e8:70:de:d0:fe:b8:2e:c2:20:1f:
af:75:e9:b6:53:89:a8:a7:07:5c:75:67:e9:90:24:ea:94:7b:
07:76:a8:72:76:42:70:3b:c9:d2:a4:16:40:3e:a0:f1:68:ab:
ee:4c:78:22:08:60:c5:7d:ac:3f:55:ca:03:12:89:98:c6:7c:
97:32:77:7c:5e:41:81:f4:1a:56:c8:a8:f7:70:e7:01:16:cd:
1d:09:d4:5e:70:71:29:9d:e8:bc:99:01:6b:b9:25:42:d1:20:
de:48:56:22:27:01:09:72:52:2d:7f:6e:22:f3:89:1c:ab:34:
de:95:9a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc6FFgwMMq2D0Azzgc65FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzI3YWE2ZTY4N2I0OTJkMjEyZjQ1MWRlYjg2MWVhMDFm
MTc1MjkwHhcNMjUxMTA0MDYwMDE0WhcNMjUxMTA1MDYwMDE0WjAzMTEwLwYDVQQD
Eyg3MGJhZGYwYWM1ZDg0NGI3ZWFkYTllZmQ2MDlmYzk2MzJhNGI1Y2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0grTPIg+PuzlTmS+SqxSUwbprRj
dn7rmXO0YIeCV+kaE3GObhuiMkAJnak2cz3KLCiysQGJRPdgAIYBk2+TFf6Gmi90
/8bt3akBYD57R6JacRzRROjuWjlHCbYKmakZkHZtX1gA9nIiJMS/3lzAOaCKCzRr
EU1LK+HJZ6NLH5LalykpdduGtk9FyASwN2lG00MKmnzQIBtlxwhMdHrGayLBMo1s
UhrFHvE/Luj38OmuflTBxNmpjJpfjqYHBOawnqbIzJyKhj6GSC9oUa9j95T2Wsl7
HtcSgnAkETsKe+fFQnOkOgpIAHHWlhr1GPXuzvcN6JxtvEjVZS2icypWtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHC63wrF2ES36tqe/WCfyWMqS1z6MB8GA1UdIwQY
MBaAFJpyeqbmh7SS0hL0Ud64YeoB8XUpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5KNnB1YUh0SkxTRXZSUjNyaGg2Z0h4ZFNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMzY2YmYtOGY1NS00ZTdmLWFlMjct
NzA4MjE4YTY2YjhmLzEvbW5KNnB1YUh0SkxTRXZSUjNyaGg2Z0h4ZFNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMzY2YmYtOGY1NS00ZTdmLWFlMjctNzA4MjE4YTY2Yjhm
LzEvbW5KNnB1YUh0SkxTRXZSUjNyaGg2Z0h4ZFNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6wtYpjR
8sE8Np1tFKYuP24YRX581h7Xxf4xd4sAhn1gZyQoWnmWTBy++uqF4++9IMb887kM
o+PJNiyDJ7C94+MkLHBN56EqB6E9tIq91Tk2ltdC6QGU1mzKVlH2AmLWTPfh8K42
cqsfSb7LMonm5Q+Xm3oVib+I1D74lHjnzlT0g/+NmSbocN7Q/rguwiAfr3XptlOJ
qKcHXHVn6ZAk6pR7B3aocnZCcDvJ0qQWQD6g8Wir7kx4IghgxX2sP1XKAxKJmMZ8
lzJ3fF5BgfQaVsio93DnARbNHQnUXnBxKZ3ovJkBa7klQtEg3khWIicBCXJSLX9u
IvOJHKs03pWaAw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:29:57 2025 by rpki-client