Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
File: AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft (raw, json)
Hash identifier: YQWw98Vq1VOYvgzs98xTBbC095sszBgBzUmqSj8aWFU=
Subject key identifier: 14:F5:24:BF:41:94:3B:EA:4A:1B:11:36:9D:5C:6A:F6:B1:6D:7A:FA
Authority key identifier: 00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
Certificate issuer: /CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Certificate serial: 019A4DE202FAC8521678A17B76E9B08F1FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
Manifest number: 0C8D
Signing time: Tue 04 Nov 2025 08:00:48 +0000
Manifest this update: Tue 04 Nov 2025 08:00:48 +0000
Manifest next update: Wed 05 Nov 2025 08:00:48 +0000
Files and hashes: 1: AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl (hash: 1iCwOPGJmq6xd8ZQLd0fbPpORynqQ02H/EBqFC1aEWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:02:fa:c8:52:16:78:a1:7b:76:e9:b0:8f:1f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Validity
Not Before: Nov 4 08:00:48 2025 GMT
Not After : Nov 5 08:00:48 2025 GMT
Subject: CN=14f524bf41943bea4a1b11369d5c6af6b16d7afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:e8:db:b0:76:ed:f9:3e:99:da:93:ce:e1:
75:0b:2d:f2:35:29:17:97:91:c0:a7:09:9c:20:68:
dc:ab:10:f1:6c:60:d8:7a:cf:c1:73:7e:d6:8a:9c:
be:e5:70:b6:4d:0d:0d:b4:57:62:15:43:5e:ef:bf:
d0:d7:5a:c4:c4:91:26:39:d0:9e:1b:0d:36:d2:9f:
ee:91:ce:55:5d:fc:6e:9e:89:47:13:b0:20:4f:21:
6a:70:27:1b:00:65:0a:98:4d:dc:9a:c4:05:39:28:
30:28:c5:81:99:c3:95:30:d5:a8:8a:f3:9e:64:64:
d2:be:07:5f:a6:7a:cb:06:77:42:ea:ad:63:8d:59:
70:fb:6c:99:ff:17:ba:d9:0b:28:92:4e:0f:f3:65:
ae:6f:54:50:38:bf:01:be:80:49:cb:08:37:be:e4:
91:da:83:24:01:8c:49:58:de:91:56:58:e3:65:81:
00:6a:8e:05:81:6d:ca:b2:36:82:2f:22:a9:2c:f7:
e0:f5:9b:33:0c:2c:2b:71:0e:bb:c9:9d:27:c0:1f:
64:27:7c:9c:3b:d5:52:53:f1:90:c6:e5:d2:36:d3:
83:b7:53:23:07:8b:37:95:57:94:75:00:eb:84:71:
5f:2d:fc:a2:56:d7:80:2a:7b:4d:28:0e:d4:7c:a6:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F5:24:BF:41:94:3B:EA:4A:1B:11:36:9D:5C:6A:F6:B1:6D:7A:FA
X509v3 Authority Key Identifier:
keyid:00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:30:85:60:5d:50:16:c0:3b:f1:03:7a:ad:7a:ca:c8:34:49:
dc:8f:58:5d:eb:00:32:16:75:a3:4d:71:ac:8f:28:e0:ec:5f:
5c:05:68:37:10:b0:e4:58:ef:47:99:5e:2d:a9:a3:8d:fd:fd:
dd:e4:c2:02:80:3d:e4:8f:a5:5c:3d:92:c1:07:af:13:c4:f7:
d3:5c:4f:65:ed:8c:1d:d5:e7:ef:b1:2e:d8:f4:7b:11:c8:5d:
18:95:e2:9c:f2:e0:04:a9:53:dd:ef:3e:05:12:86:5e:4e:b2:
fe:3a:34:87:00:d4:9b:06:4d:be:33:ae:f9:d0:43:e4:8c:e6:
fc:29:40:5d:9b:cc:c3:cf:13:aa:cf:86:94:a5:6a:b5:2b:da:
65:e5:82:6e:f5:a5:5c:0c:df:f8:9d:09:cc:ed:d6:ad:53:00:
ba:f2:b5:b0:e1:a4:94:7a:19:0e:d9:e7:df:75:d3:1a:d3:2f:
ce:d3:93:ec:85:6e:aa:27:e8:6f:bf:9e:ca:7b:6e:ce:dc:a2:
c9:ef:d6:87:63:54:59:89:20:53:23:2c:18:c3:cf:80:d7:38:
11:d9:d4:06:63:70:fb:c5:d6:f9:fa:7e:65:9c:d8:90:11:3c:
f3:99:fb:d2:d4:16:a5:4e:28:d8:0a:e6:7e:0e:64:90:0f:ae:
3e:06:6b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4gL6yFIWeKF7dumwjx/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYmU5NzE4ZDRhYmI4NjdkZDA1NDRlYThmYjQ2MmRjMzMy
YjljZDIwHhcNMjUxMTA0MDgwMDQ4WhcNMjUxMTA1MDgwMDQ4WjAzMTEwLwYDVQQD
EygxNGY1MjRiZjQxOTQzYmVhNGExYjExMzY5ZDVjNmFmNmIxNmQ3YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhPo27B27fk+mdqTzuF1Cy3yNSkX
l5HApwmcIGjcqxDxbGDYes/Bc37Wipy+5XC2TQ0NtFdiFUNe77/Q11rExJEmOdCe
Gw020p/ukc5VXfxunolHE7AgTyFqcCcbAGUKmE3cmsQFOSgwKMWBmcOVMNWoivOe
ZGTSvgdfpnrLBndC6q1jjVlw+2yZ/xe62Qsokk4P82Wub1RQOL8BvoBJywg3vuSR
2oMkAYxJWN6RVljjZYEAao4FgW3KsjaCLyKpLPfg9ZszDCwrcQ67yZ0nwB9kJ3yc
O9VSU/GQxuXSNtODt1MjB4s3lVeUdQDrhHFfLfyiVteAKntNKA7UfKZ9gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT1JL9BlDvqShsRNp1cavaxbXr6MB8GA1UdIwQY
MBaAFAC+lxjUq7hn3QVE6o+0YtwzK5zSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUw2WEdOU3J1R2ZkQlVUcWo3UmkzRE1ybk5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lNzI4OTEtNGJjNi00Y2FkLWI4NjAt
MDJhMjEzNTg0MjRhLzEvQUw2WEdOU3J1R2ZkQlVUcWo3UmkzRE1ybk5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lNzI4OTEtNGJjNi00Y2FkLWI4NjAtMDJhMjEzNTg0MjRh
LzEvQUw2WEdOU3J1R2ZkQlVUcWo3UmkzRE1ybk5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzCFYF1Q
FsA78QN6rXrKyDRJ3I9YXesAMhZ1o01xrI8o4OxfXAVoNxCw5FjvR5leLamjjf39
3eTCAoA95I+lXD2SwQevE8T301xPZe2MHdXn77Eu2PR7EchdGJXinPLgBKlT3e8+
BRKGXk6y/jo0hwDUmwZNvjOu+dBD5Izm/ClAXZvMw88Tqs+GlKVqtSvaZeWCbvWl
XAzf+J0JzO3WrVMAuvK1sOGklHoZDtnn33XTGtMvztOT7IVuqifob7+eyntuztyi
ye/Wh2NUWYkgUyMsGMPPgNc4EdnUBmNw+8XW+fp+ZZzYkBE885n70tQWpU4o2Arm
fg5kkA+uPgZruw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:32 2025 by rpki-client