
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
File: c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json)
Hash identifier: Yz/A5r5s2KoWTBjED7pyEDNdvWFRh16nF7BbTzJnEJ4=
Subject key identifier: 15:CC:2F:46:E3:3B:AA:16:2C:C1:16:03:B7:7F:CD:7C:26:FF:BC:50
Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
Certificate issuer: /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Certificate serial: 019A50E38407210C4C623F7162B9F17994D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
Manifest number: 07BF
Signing time: Tue 04 Nov 2025 22:01:19 +0000
Manifest this update: Tue 04 Nov 2025 22:01:19 +0000
Manifest next update: Wed 05 Nov 2025 22:01:19 +0000
Files and hashes: 1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: k2nbDhSy91rAu5pm5WWT8g221IcHesMJS7lMYcee8Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:84:07:21:0c:4c:62:3f:71:62:b9:f1:79:94:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Validity
Not Before: Nov 4 22:01:19 2025 GMT
Not After : Nov 5 22:01:19 2025 GMT
Subject: CN=15cc2f46e33baa162cc11603b77fcd7c26ffbc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:97:66:44:34:cb:59:2d:be:8d:37:05:d5:
92:23:7f:99:9f:9d:ea:9d:c2:04:3c:bf:03:f3:ea:
e1:16:83:be:8d:fd:a7:91:92:99:2e:04:28:22:e3:
df:28:0d:f1:34:7a:e7:af:70:a6:53:ba:fa:38:6f:
14:b5:0e:db:34:5a:b3:13:54:9f:f9:ec:51:01:b2:
2e:90:97:14:1b:49:46:23:71:10:35:53:89:1b:29:
8a:d1:4e:33:98:47:1b:05:d2:cb:a1:33:4c:e5:08:
bd:fd:e4:7b:73:10:2a:44:48:15:a9:ff:a1:08:73:
65:0d:90:98:69:8c:7b:c5:f8:e9:4f:7e:9d:31:07:
6f:d5:85:bc:9c:33:2a:15:b0:2e:73:50:4e:65:f0:
b3:13:83:92:9c:77:e5:b9:7d:68:12:aa:65:20:ba:
14:05:ed:58:ff:b3:0a:c7:85:74:81:5c:b3:87:54:
39:9b:80:84:b4:a4:05:8a:03:25:ec:dc:90:16:9e:
3c:cf:bd:07:c6:0c:ae:e1:79:cf:d8:6c:9c:9b:ee:
50:21:c1:70:62:35:82:02:97:70:ed:20:8d:fd:4d:
11:8b:95:ed:6b:b0:0c:29:51:d5:3e:bf:60:90:94:
65:de:37:55:59:76:79:83:4f:2a:fe:0f:f2:9f:37:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CC:2F:46:E3:3B:AA:16:2C:C1:16:03:B7:7F:CD:7C:26:FF:BC:50
X509v3 Authority Key Identifier:
keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a8:ca:17:d4:8d:54:96:9f:b2:a9:02:bc:8b:2f:26:3a:99:
b8:90:81:b6:42:cd:b9:bb:66:c2:46:3e:9c:7b:9b:4f:65:5f:
c7:09:1b:44:4e:8e:3c:5c:8d:a9:2b:19:c6:46:26:0c:cc:2d:
b0:82:9a:94:18:5a:5f:32:7d:e6:77:0f:7c:f0:03:7d:ec:fc:
27:b4:46:77:ae:c7:5e:26:8b:04:b2:d1:5e:19:75:f8:1e:76:
16:96:ff:0c:31:b9:99:db:3c:3e:42:1a:08:2c:ac:a1:07:4e:
4c:c0:01:75:f1:8c:33:11:d0:ca:21:41:62:7d:b7:a9:19:58:
aa:57:75:e2:93:b5:03:ce:3e:0f:66:a1:23:f6:d5:02:6e:f5:
cb:39:5e:58:a4:35:41:9b:68:db:7d:05:3b:d7:dc:37:d6:36:
95:6e:e6:38:c0:e5:0c:f3:71:52:df:46:d9:6b:af:bf:d5:13:
c2:17:59:1a:5a:69:a9:25:03:fe:94:44:f3:47:ec:06:a6:fa:
db:9f:01:3b:2c:d7:69:e3:14:9c:ee:f5:3b:7b:72:84:ad:ee:
e5:92:88:a6:1e:28:7a:3a:62:1a:3a:5f:0b:a3:97:1f:38:af:
83:24:ce:40:eb:42:2a:9e:31:41:f8:71:ee:1b:3f:76:93:7f:
13:26:cf:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ44QHIQxMYj9xYrnxeZTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYjk2NDlmNmE2ZmI2MmM2ZGNkMGNlOGMwZGYxNjU1YzEy
MzY0MzQwHhcNMjUxMTA0MjIwMTE5WhcNMjUxMTA1MjIwMTE5WjAzMTEwLwYDVQQD
EygxNWNjMmY0NmUzM2JhYTE2MmNjMTE2MDNiNzdmY2Q3YzI2ZmZiYzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8+XZkQ0y1ktvo03BdWSI3+Zn53q
ncIEPL8D8+rhFoO+jf2nkZKZLgQoIuPfKA3xNHrnr3CmU7r6OG8UtQ7bNFqzE1Sf
+exRAbIukJcUG0lGI3EQNVOJGymK0U4zmEcbBdLLoTNM5Qi9/eR7cxAqREgVqf+h
CHNlDZCYaYx7xfjpT36dMQdv1YW8nDMqFbAuc1BOZfCzE4OSnHfluX1oEqplILoU
Be1Y/7MKx4V0gVyzh1Q5m4CEtKQFigMl7NyQFp48z70Hxgyu4XnP2Gycm+5QIcFw
YjWCApdw7SCN/U0Ri5Xta7AMKVHVPr9gkJRl3jdVWXZ5g08q/g/ynzdHtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXML0bjO6oWLMEWA7d/zXwm/7xQMB8GA1UdIwQY
MBaAFHO5ZJ9qb7Ysbc0M6MDfFlXBI2Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWIt
N2UxMzhkZjYxMDU3LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWItN2UxMzhkZjYxMDU3
LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALajKF9SN
VJafsqkCvIsvJjqZuJCBtkLNubtmwkY+nHubT2VfxwkbRE6OPFyNqSsZxkYmDMwt
sIKalBhaXzJ95ncPfPADfez8J7RGd67HXiaLBLLRXhl1+B52Fpb/DDG5mds8PkIa
CCysoQdOTMABdfGMMxHQyiFBYn23qRlYqld14pO1A84+D2ahI/bVAm71yzleWKQ1
QZto230FO9fcN9Y2lW7mOMDlDPNxUt9G2Wuvv9UTwhdZGlppqSUD/pRE80fsBqb6
258BOyzXaeMUnO71O3tyhK3u5ZKIph4oejpiGjpfC6OXHzivgyTOQOtCKp4xQfhx
7hs/dpN/EybPcg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:32 2025 by rpki-client