Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
File: t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft (raw, json)
Hash identifier: ojPo8ktDFr/y7Hv19anjOD6Fbyfymu0nNHnapzifSr4=
Subject key identifier: 89:7A:F8:8B:EE:7A:14:73:D8:B1:72:E5:3F:2F:67:CE:09:F4:A5:F2
Authority key identifier: B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
Certificate issuer: /CN=b76cbf5927c476905feda34e1140148bf805d9b0
Certificate serial: 019A52D2450F28CC8C4DF5EA023B605D5BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
Manifest number: 170A
Signing time: Wed 05 Nov 2025 07:01:43 +0000
Manifest this update: Wed 05 Nov 2025 07:01:43 +0000
Manifest next update: Thu 06 Nov 2025 07:01:43 +0000
Files and hashes: 1: t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl (hash: WiH29ROh6+7rXUGfsKwRdgISgsb3JDbEZueEk1kYEIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:45:0f:28:cc:8c:4d:f5:ea:02:3b:60:5d:5b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76cbf5927c476905feda34e1140148bf805d9b0
Validity
Not Before: Nov 5 07:01:43 2025 GMT
Not After : Nov 6 07:01:43 2025 GMT
Subject: CN=897af88bee7a1473d8b172e53f2f67ce09f4a5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:79:d4:7a:eb:0d:8c:20:a6:c3:49:f2:e0:
ba:af:32:8a:3e:39:3a:63:ef:0a:36:2d:65:9e:5f:
7b:15:6f:b0:3f:2e:ce:65:b1:a7:75:80:34:22:1f:
c6:4f:d6:ba:1f:2d:86:20:9c:48:5a:08:15:20:15:
cc:41:7e:69:69:ff:db:56:43:2a:d5:1d:eb:ea:bb:
35:57:7f:78:0e:b9:63:7c:34:68:2b:15:56:50:bd:
d8:7a:96:22:4e:ef:d8:25:7b:da:41:16:ab:b3:c2:
77:bf:f5:92:76:f7:1f:44:50:0d:33:b9:a5:f1:7d:
4e:7e:b9:c8:7b:f1:28:d8:d0:b4:ac:76:0e:89:e7:
1e:32:dc:db:72:a7:f3:3f:d0:b5:17:b3:ea:2c:48:
5f:da:72:5b:2d:72:7b:71:78:52:47:ca:29:eb:98:
05:57:09:7b:35:8d:fb:21:77:fc:01:78:c8:d9:11:
b3:25:c6:6a:cb:77:74:5e:86:e9:af:72:5a:76:49:
24:7a:0f:29:8e:0c:56:65:14:9e:53:a2:b8:48:7b:
39:96:12:28:35:c6:05:0e:e2:87:22:d1:8a:66:64:
11:bc:3c:f0:a6:e4:13:c9:98:86:87:b0:d4:18:96:
8a:9e:04:56:ea:44:c5:3c:59:9f:6e:c4:dd:21:65:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7A:F8:8B:EE:7A:14:73:D8:B1:72:E5:3F:2F:67:CE:09:F4:A5:F2
X509v3 Authority Key Identifier:
keyid:B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:79:82:e6:8d:67:b8:41:ff:f9:42:24:cd:90:76:17:79:6a:
ad:f1:b7:51:0d:c4:46:ae:36:eb:7a:60:e6:30:59:3d:3a:b6:
5c:b2:c0:4e:4b:41:cf:92:0a:e6:27:88:ee:78:e5:7c:5a:46:
99:cc:de:85:0c:23:aa:89:1e:22:77:0a:11:72:fa:16:40:8e:
ee:a5:65:75:54:32:42:b3:6d:83:20:07:6d:c3:a1:d6:5f:29:
38:24:22:ba:f4:40:6e:fb:d3:51:e3:a9:92:71:8a:8a:a5:f0:
2c:dd:4d:68:84:5f:ca:9b:12:61:1d:5d:ae:ba:f1:b4:a0:37:
d1:0d:57:b4:08:d8:ca:f4:5c:dc:ee:ca:5a:22:47:65:a2:74:
8a:1b:15:05:42:6b:99:08:f4:18:50:c3:e0:b7:7e:da:20:60:
74:76:b8:6c:d1:f8:0c:f8:31:43:52:0a:de:93:5f:db:66:78:
b1:1a:24:ac:7e:3b:36:2b:b1:02:80:22:7b:35:ce:74:eb:1d:
fe:24:c3:ea:ed:c8:32:ed:90:f4:b2:31:80:ae:32:48:90:c0:
60:c8:3a:d4:f3:19:d2:29:d2:96:3b:5e:68:97:cf:bf:52:65:
ca:21:53:11:4a:74:7e:b0:67:e9:32:2d:c7:ab:e6:cb:f1:7f:
51:1f:7a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0kUPKMyMTfXqAjtgXVv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NmNiZjU5MjdjNDc2OTA1ZmVkYTM0ZTExNDAxNDhiZjgw
NWQ5YjAwHhcNMjUxMTA1MDcwMTQzWhcNMjUxMTA2MDcwMTQzWjAzMTEwLwYDVQQD
Eyg4OTdhZjg4YmVlN2ExNDczZDhiMTcyZTUzZjJmNjdjZTA5ZjRhNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi951HrrDYwgpsNJ8uC6rzKKPjk6
Y+8KNi1lnl97FW+wPy7OZbGndYA0Ih/GT9a6Hy2GIJxIWggVIBXMQX5paf/bVkMq
1R3r6rs1V394DrljfDRoKxVWUL3YepYiTu/YJXvaQRars8J3v/WSdvcfRFANM7ml
8X1OfrnIe/Eo2NC0rHYOieceMtzbcqfzP9C1F7PqLEhf2nJbLXJ7cXhSR8op65gF
Vwl7NY37IXf8AXjI2RGzJcZqy3d0Xobpr3Jadkkkeg8pjgxWZRSeU6K4SHs5lhIo
NcYFDuKHItGKZmQRvDzwpuQTyZiGh7DUGJaKngRW6kTFPFmfbsTdIWWoWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIl6+IvuehRz2LFy5T8vZ84J9KXyMB8GA1UdIwQY
MBaAFLdsv1knxHaQX+2jThFAFIv4BdmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81NDdlOGUtNDFiYS00MjcyLWEyOTQt
MGFlMmI5ZDlkNDQ3LzEvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81NDdlOGUtNDFiYS00MjcyLWEyOTQtMGFlMmI5ZDlkNDQ3
LzEvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXmC5o1n
uEH/+UIkzZB2F3lqrfG3UQ3ERq4263pg5jBZPTq2XLLATktBz5IK5ieI7njlfFpG
mczehQwjqokeIncKEXL6FkCO7qVldVQyQrNtgyAHbcOh1l8pOCQiuvRAbvvTUeOp
knGKiqXwLN1NaIRfypsSYR1drrrxtKA30Q1XtAjYyvRc3O7KWiJHZaJ0ihsVBUJr
mQj0GFDD4Ld+2iBgdHa4bNH4DPgxQ1IK3pNf22Z4sRokrH47NiuxAoAiezXOdOsd
/iTD6u3IMu2Q9LIxgK4ySJDAYMg61PMZ0inSljteaJfPv1JlyiFTEUp0frBn6TIt
x6vmy/F/UR962g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:02 2025 by rpki-client