Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
File: cfxj7vZnTya1A6gwpd-pU9L_qr4.mft (raw, json)
Hash identifier: 4GB5wZMg6lpDX95RRwwzogydBkFtbZB5gMTM1MLj1XU=
Subject key identifier: 4C:6B:35:27:1C:0E:31:BD:46:50:86:18:05:1B:DC:95:8F:35:A0:22
Authority key identifier: 71:FC:63:EE:F6:67:4F:26:B5:03:A8:30:A5:DF:A9:53:D2:FF:AA:BE
Certificate issuer: /CN=71fc63eef6674f26b503a830a5dfa953d2ffaabe
Certificate serial: 019A4D3D2D60726E8EAB73A21BBA70FC9ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
Manifest number: 1574
Signing time: Tue 04 Nov 2025 05:00:46 +0000
Manifest this update: Tue 04 Nov 2025 05:00:46 +0000
Manifest next update: Wed 05 Nov 2025 05:00:46 +0000
Files and hashes: 1: cfxj7vZnTya1A6gwpd-pU9L_qr4.crl (hash: 2gX0A9mCpcVXZN8/XizuGpAL4NUG0zadzsmdZjf6NcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2d:60:72:6e:8e:ab:73:a2:1b:ba:70:fc:9e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71fc63eef6674f26b503a830a5dfa953d2ffaabe
Validity
Not Before: Nov 4 05:00:46 2025 GMT
Not After : Nov 5 05:00:46 2025 GMT
Subject: CN=4c6b35271c0e31bd46508618051bdc958f35a022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:e4:0c:cd:1e:a9:fa:2d:a5:ca:8d:80:42:
fa:4a:99:1e:78:f4:08:18:5c:d0:46:35:11:49:60:
6e:ea:83:1c:78:f0:53:76:6b:7b:ea:0b:20:49:d9:
d4:78:08:ce:fc:ef:68:53:4b:79:19:67:77:66:1f:
e0:f6:81:43:55:24:91:34:61:5e:76:89:bc:cc:db:
c1:cc:1f:81:c4:33:a3:8d:ce:0c:96:12:3b:d2:b7:
6a:c4:35:bc:66:5e:14:3c:d8:ef:1c:3b:d7:b9:1f:
fe:68:d4:9c:b8:f3:1a:3d:dd:4e:0d:d7:02:3a:aa:
a8:85:5e:97:75:76:fe:8f:bd:6e:b6:da:14:f5:68:
ff:c3:a4:17:53:7a:84:3a:bc:a4:e3:50:6e:37:ad:
55:8a:d3:13:63:67:3b:e4:33:f8:8a:1b:9e:1c:eb:
75:e7:66:7f:e1:21:44:b8:33:88:95:9a:e5:30:c6:
7a:f4:58:92:ec:6d:fe:95:3e:ca:c5:90:4d:71:63:
9d:e0:70:a9:4c:7f:7b:f3:47:2b:24:0e:04:df:e2:
c7:d1:5c:3f:45:26:be:e9:09:4c:01:e5:d6:09:98:
24:00:ff:27:4b:e0:77:49:9c:6f:68:fc:b1:e4:ec:
87:fa:22:94:20:58:89:23:e4:ba:f5:8e:5f:ce:d4:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6B:35:27:1C:0E:31:BD:46:50:86:18:05:1B:DC:95:8F:35:A0:22
X509v3 Authority Key Identifier:
keyid:71:FC:63:EE:F6:67:4F:26:B5:03:A8:30:A5:DF:A9:53:D2:FF:AA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:05:ea:6e:39:dd:90:12:82:bd:65:64:b1:83:66:68:90:
f7:99:6c:b2:1e:68:4c:3a:17:da:fb:dc:c5:b4:e8:84:d6:f2:
0d:0c:7a:d8:45:3a:3d:0f:d7:9c:57:d7:7e:e7:72:db:49:ad:
0c:de:be:00:35:3d:7b:2d:77:f8:e8:19:42:e9:88:35:ab:33:
06:f7:c0:9a:b4:d4:e2:89:8f:38:a7:36:c2:c8:95:46:17:a8:
77:8b:66:17:ef:dc:72:e2:81:f2:a8:84:a6:f9:9a:19:42:95:
4a:b7:8e:62:e2:3a:14:f3:07:22:39:9b:05:f9:f8:54:63:0a:
83:6e:25:04:cf:1f:6e:23:53:ab:db:88:77:a7:7e:30:f5:3d:
7b:6b:2c:fd:43:9d:3d:8d:a7:eb:37:1a:9d:d0:ae:c7:71:80:
d7:12:78:81:01:13:27:2d:9b:cd:8c:a8:5d:79:23:05:b0:30:
4e:20:da:8b:70:7b:99:98:70:26:d3:49:e9:af:5e:04:76:32:
d3:f7:46:08:0f:5d:98:dd:0f:c7:42:a6:09:11:05:d3:bb:87:
63:04:f5:d2:dc:65:2f:b4:21:ec:cf:d8:e1:c3:2d:31:f1:e5:
2c:bb:ed:8d:9c:0a:0b:52:78:64:c7:44:5f:56:2b:99:83:6a:
fa:80:42:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPS1gcm6Oq3OiG7pw/J7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZmM2M2VlZjY2NzRmMjZiNTAzYTgzMGE1ZGZhOTUzZDJm
ZmFhYmUwHhcNMjUxMTA0MDUwMDQ2WhcNMjUxMTA1MDUwMDQ2WjAzMTEwLwYDVQQD
Eyg0YzZiMzUyNzFjMGUzMWJkNDY1MDg2MTgwNTFiZGM5NThmMzVhMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8DkDM0eqfotpcqNgEL6SpkeePQI
GFzQRjURSWBu6oMcePBTdmt76gsgSdnUeAjO/O9oU0t5GWd3Zh/g9oFDVSSRNGFe
dom8zNvBzB+BxDOjjc4MlhI70rdqxDW8Zl4UPNjvHDvXuR/+aNScuPMaPd1ODdcC
OqqohV6XdXb+j71uttoU9Wj/w6QXU3qEOryk41BuN61VitMTY2c75DP4ihueHOt1
52Z/4SFEuDOIlZrlMMZ69FiS7G3+lT7KxZBNcWOd4HCpTH9780crJA4E3+LH0Vw/
RSa+6QlMAeXWCZgkAP8nS+B3SZxvaPyx5OyH+iKUIFiJI+S69Y5fztSt8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExrNSccDjG9RlCGGAUb3JWPNaAiMB8GA1UdIwQY
MBaAFHH8Y+72Z08mtQOoMKXfqVPS/6q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2Z4ajd2Wm5UeWExQTZnd3BkLXBVOUxfcXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mODAxMGUtNmEzZi00ZmYwLTk1ZTct
ZDQxODI0OGU1NzI4LzEvY2Z4ajd2Wm5UeWExQTZnd3BkLXBVOUxfcXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mODAxMGUtNmEzZi00ZmYwLTk1ZTctZDQxODI0OGU1NzI4
LzEvY2Z4ajd2Wm5UeWExQTZnd3BkLXBVOUxfcXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpwF6m45
3ZASgr1lZLGDZmiQ95lssh5oTDoX2vvcxbTohNbyDQx62EU6PQ/XnFfXfudy20mt
DN6+ADU9ey13+OgZQumINaszBvfAmrTU4omPOKc2wsiVRheod4tmF+/ccuKB8qiE
pvmaGUKVSreOYuI6FPMHIjmbBfn4VGMKg24lBM8fbiNTq9uId6d+MPU9e2ss/UOd
PY2n6zcandCux3GA1xJ4gQETJy2bzYyoXXkjBbAwTiDai3B7mZhwJtNJ6a9eBHYy
0/dGCA9dmN0Px0KmCREF07uHYwT10txlL7Qh7M/Y4cMtMfHlLLvtjZwKC1J4ZMdE
X1YrmYNq+oBCEQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:11 2025 by rpki-client