Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json)
Hash identifier: +NP/E26pNswe5iyNPNz5S5PLQC3f7skoHlqurvxaViM=
Subject key identifier: B3:6B:7E:56:03:46:4E:E0:34:77:AC:CC:C4:8B:83:97:CC:F3:B5:FC
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial: 019A4F2B7DEEB81665AFF789D71787B44EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 14:00:41 +0000
Manifest this update: Tue 04 Nov 2025 14:00:41 +0000
Manifest next update: Wed 05 Nov 2025 14:00:41 +0000
Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: /DYxDqah5QDputfiBigK/idfCKPfsTQTaF1mMj1cfAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:7d:ee:b8:16:65:af:f7:89:d7:17:87:b4:4e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Validity
Not Before: Nov 4 14:00:41 2025 GMT
Not After : Nov 5 14:00:41 2025 GMT
Subject: CN=b36b7e5603464ee03477acccc48b8397ccf3b5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:e3:c8:6a:f0:7c:20:06:69:f6:1f:00:5a:
60:cb:77:6b:b2:06:83:e9:fc:25:55:e6:43:39:87:
f1:90:11:f4:f9:45:28:3f:15:08:89:7b:90:05:13:
03:48:08:0f:f7:9b:da:1b:69:fa:a7:62:8a:d9:c6:
1e:f0:b4:7b:d6:00:4c:d3:6e:44:25:22:64:ab:d3:
76:28:1e:a0:98:5a:3f:8d:0b:d8:05:ea:57:cd:2a:
14:21:93:7a:67:1c:fc:a1:30:52:1d:58:39:4d:12:
ab:ab:63:ae:1e:67:b8:98:fe:d7:53:7c:e1:bd:37:
bb:34:68:c2:58:bf:1c:d2:4c:07:2b:b9:19:35:f3:
a3:d7:f6:55:ae:be:a3:25:02:ec:0e:11:85:ca:c7:
d6:4a:7e:fb:34:cf:26:f0:8b:de:b5:6f:d8:36:73:
73:e8:03:7f:2d:15:3f:5b:75:e3:6c:58:8e:f7:a4:
07:48:43:ba:c5:d0:cd:45:ab:92:69:8f:7f:92:a8:
39:f7:2c:d7:54:71:6e:b5:36:ff:60:b9:30:8e:f0:
6a:d3:56:e3:36:18:99:a4:7c:c5:9a:fa:d1:ef:f3:
1a:0a:46:ca:f7:77:e9:ef:2b:fb:81:c8:8c:61:50:
20:73:75:2c:46:a0:c1:40:82:7e:34:38:e6:0b:b0:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6B:7E:56:03:46:4E:E0:34:77:AC:CC:C4:8B:83:97:CC:F3:B5:FC
X509v3 Authority Key Identifier:
keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7b:08:fc:a5:3f:0c:85:e8:b8:ae:85:fe:0c:f3:d2:a7:b6:
75:c5:f0:6f:d4:84:9b:33:cb:f9:7e:39:5c:5f:81:07:ce:78:
d7:f9:d5:39:d2:fd:4c:b8:72:e2:2d:86:7a:34:46:9c:01:76:
0c:aa:68:64:32:95:fb:92:13:78:12:0d:8b:c0:5e:ca:d4:1c:
98:90:16:7a:d4:bb:87:77:86:11:87:d7:40:2d:83:07:08:36:
8d:9a:03:df:e6:eb:30:94:92:2a:03:3d:4e:0a:b7:57:6f:e5:
44:d4:d4:9b:aa:a9:82:05:b6:81:e7:4c:c4:1b:80:51:0f:73:
82:a9:cd:09:16:0e:e0:9d:fc:f0:2b:e3:60:98:ff:b1:78:bf:
de:dc:83:2e:9f:ae:c2:f7:7a:04:8c:3b:72:34:7b:41:88:18:
87:49:38:f6:42:5f:d7:5a:5f:3e:ab:4a:af:7c:01:36:e4:e2:
f4:dc:80:b9:f6:dd:7f:66:2f:40:9a:d6:3a:7d:49:ed:ba:48:
16:66:0e:79:ca:5f:07:12:24:4f:16:bb:93:b2:f5:ff:8b:a7:
c3:f8:04:55:cd:39:fc:02:23:9a:fd:63:d6:69:a0:ee:1a:e8:
53:03:e6:f8:8b:27:32:d1:81:c1:39:99:39:51:dc:99:51:25:
f0:8b:62:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK33uuBZlr/eJ1xeHtE7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MjNkNzAyMjRiN2JkM2MyYTdjZTdkYzdhODdjOTJhZDVh
ZmYyNjkwHhcNMjUxMTA0MTQwMDQxWhcNMjUxMTA1MTQwMDQxWjAzMTEwLwYDVQQD
EyhiMzZiN2U1NjAzNDY0ZWUwMzQ3N2FjY2NjNDhiODM5N2NjZjNiNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVjjyGrwfCAGafYfAFpgy3drsgaD
6fwlVeZDOYfxkBH0+UUoPxUIiXuQBRMDSAgP95vaG2n6p2KK2cYe8LR71gBM025E
JSJkq9N2KB6gmFo/jQvYBepXzSoUIZN6Zxz8oTBSHVg5TRKrq2OuHme4mP7XU3zh
vTe7NGjCWL8c0kwHK7kZNfOj1/ZVrr6jJQLsDhGFysfWSn77NM8m8IvetW/YNnNz
6AN/LRU/W3XjbFiO96QHSEO6xdDNRauSaY9/kqg59yzXVHFutTb/YLkwjvBq01bj
NhiZpHzFmvrR7/MaCkbK93fp7yv7gciMYVAgc3UsRqDBQIJ+NDjmC7CL6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNrflYDRk7gNHeszMSLg5fM87X8MB8GA1UdIwQY
MBaAFIkj1wIkt708Knzn3HqHySrVr/JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVNQWEFpUzN2VHdxZk9mY2VvZkpLdFd2OG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lMjEyZDYtYjgxYi00ZThhLThlMDUt
Zjk4NjU1MWE3MDdkLzEvaVNQWEFpUzN2VHdxZk9mY2VvZkpLdFd2OG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lMjEyZDYtYjgxYi00ZThhLThlMDUtZjk4NjU1MWE3MDdk
LzEvaVNQWEFpUzN2VHdxZk9mY2VvZkpLdFd2OG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXsI/KU/
DIXouK6F/gzz0qe2dcXwb9SEmzPL+X45XF+BB8541/nVOdL9TLhy4i2GejRGnAF2
DKpoZDKV+5ITeBINi8BeytQcmJAWetS7h3eGEYfXQC2DBwg2jZoD3+brMJSSKgM9
Tgq3V2/lRNTUm6qpggW2gedMxBuAUQ9zgqnNCRYO4J388CvjYJj/sXi/3tyDLp+u
wvd6BIw7cjR7QYgYh0k49kJf11pfPqtKr3wBNuTi9NyAufbdf2YvQJrWOn1J7bpI
FmYOecpfBxIkTxa7k7L1/4unw/gEVc05/AIjmv1j1mmg7hroUwPm+IsnMtGBwTmZ
OVHcmVEl8Iti1w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:32 2025 by rpki-client