Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: BeNB9OebLKG1dTRhOporcjovjglI04GLgdS8eqXKi0Q=
Subject key identifier: 3C:21:87:65:CE:5A:4B:6C:1D:81:C0:DD:9D:57:68:FA:DF:97:64:4F
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 019A50E411FFEB6ABAF4E43006504F95B26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 0A3D
Signing time: Tue 04 Nov 2025 22:01:55 +0000
Manifest this update: Tue 04 Nov 2025 22:01:55 +0000
Manifest next update: Wed 05 Nov 2025 22:01:55 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: KRvDHdotUe5CSsuFp9b1gAYIAXqwv329Cc/OQ6PyiV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:11:ff:eb:6a:ba:f4:e4:30:06:50:4f:95:b2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Nov 4 22:01:55 2025 GMT
Not After : Nov 5 22:01:55 2025 GMT
Subject: CN=3c218765ce5a4b6c1d81c0dd9d5768fadf97644f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:e9:a0:52:0a:6c:30:4e:b4:17:2b:2e:ae:
a7:86:be:45:38:06:25:d2:78:65:6f:57:5e:f5:ee:
fb:3d:47:66:10:86:87:74:4b:b1:3a:b7:15:49:7a:
3d:17:d0:c0:5c:e3:8e:55:eb:f4:3d:39:c7:54:95:
cc:a5:33:f4:9b:5b:19:87:7d:e2:ec:29:a3:ed:66:
84:ad:2f:72:9a:fd:ae:8a:66:c0:f8:45:83:56:3b:
0f:da:40:aa:65:2c:5c:60:fc:5a:d0:c9:ba:a5:58:
7d:61:62:fb:22:8f:c4:3a:09:62:77:93:c7:40:88:
6b:23:8d:68:5e:68:c7:29:ca:88:0c:82:49:25:69:
d0:53:a9:e4:5f:86:6a:82:25:51:3a:f2:c3:d4:2c:
0c:ab:02:16:13:d3:5a:98:e5:1c:2f:81:d0:67:49:
89:9a:d8:b5:5d:97:c0:43:49:9f:15:2a:46:28:41:
b7:46:72:1c:37:96:53:3f:86:d0:df:13:b2:3e:85:
35:c8:b7:b1:12:34:30:ca:ab:de:8f:a9:8b:5b:4c:
18:fe:40:81:b4:ac:c8:76:52:fb:30:af:1e:4c:70:
a8:54:94:70:22:f1:5e:c0:a6:33:2b:72:34:e4:62:
dc:87:97:ba:a2:30:1b:29:f9:34:5c:fe:63:d0:3b:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:21:87:65:CE:5A:4B:6C:1D:81:C0:DD:9D:57:68:FA:DF:97:64:4F
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ee:dc:44:9d:7a:a8:4c:ed:cb:96:fe:6f:1c:14:f5:8c:b3:
a1:5a:a5:cb:ef:51:99:c5:f1:cf:60:e2:41:cb:e3:7a:63:dd:
59:05:31:6a:ba:cc:dd:f9:02:a4:1b:8e:b3:3a:94:27:aa:5b:
0e:a0:fa:8a:9d:cf:f0:a7:19:c7:61:05:7c:f5:3f:00:06:ae:
d8:13:78:00:83:97:0f:01:0b:fb:01:5a:b8:22:08:9b:d6:fa:
6d:57:3f:49:b6:95:a4:4e:9b:9a:bd:06:0e:b7:05:af:8d:4e:
dd:0c:3e:ae:13:f9:16:28:d2:08:92:e1:2b:19:71:79:9c:3b:
22:ab:8b:c4:70:32:06:1e:96:49:1a:f9:ae:e2:47:50:8e:43:
06:ce:71:59:06:79:72:6e:a9:40:64:0b:bd:c6:bf:12:30:30:
9a:f6:70:fc:19:b6:fe:18:4d:1f:87:63:a0:40:a8:a6:3d:6f:
4d:f1:f0:70:9e:48:81:68:20:88:6e:52:95:8b:cd:6c:38:7f:
20:5c:f1:8e:e6:bd:61:5d:f5:65:28:a2:61:2c:b6:e0:2e:b4:
32:11:18:d6:e4:d1:28:da:5f:c0:bd:78:5f:6e:eb:08:0c:0f:
00:81:70:b3:54:b1:5a:98:72:61:0f:b3:f4:66:1b:8f:dd:4a:
f1:75:ec:21
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpQ5BH/62q69OQwBlBPlbJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMjgwYzA1Yjc2OTEyYTA5Y2IxMjkzNGRiMzNjOGU1MjBh
Y2RkOTYwHhcNMjUxMTA0MjIwMTU1WhcNMjUxMTA1MjIwMTU1WjAzMTEwLwYDVQQD
EygzYzIxODc2NWNlNWE0YjZjMWQ4MWMwZGQ5ZDU3NjhmYWRmOTc2NDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNHpoFIKbDBOtBcrLq6nhr5FOAYl
0nhlb1de9e77PUdmEIaHdEuxOrcVSXo9F9DAXOOOVev0PTnHVJXMpTP0m1sZh33i
7Cmj7WaErS9ymv2uimbA+EWDVjsP2kCqZSxcYPxa0Mm6pVh9YWL7Io/EOglid5PH
QIhrI41oXmjHKcqIDIJJJWnQU6nkX4ZqgiVROvLD1CwMqwIWE9NamOUcL4HQZ0mJ
mti1XZfAQ0mfFSpGKEG3RnIcN5ZTP4bQ3xOyPoU1yLexEjQwyqvej6mLW0wY/kCB
tKzIdlL7MK8eTHCoVJRwIvFewKYzK3I05GLch5e6ojAbKfk0XP5j0Dv0fQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDwhh2XOWktsHYHA3Z1XaPrfl2RPMB8GA1UdIwQY
MBaAFPsoDAW3aRKgnLEpNNszyOUgrN2WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15Z01CYmRwRXFDY3NTazAyelBJNVNDczNaWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjQ4Nzg0LWY1ODktNGFiNi1iZTI2
LTI1ZDJmZGJlYTdkMi8xLzEteWdNQmJkcEVxQ2NzU2swMnpQSTVTQ3MzWlkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JiL2Y0ODc4NC1mNTg5LTRhYjYtYmUyNi0yNWQyZmRiZWE3
ZDIvMS8xLXlnTUJiZHBFcUNjc1NrMDJ6UEk1U0NzM1pZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArO7c
RJ16qEzty5b+bxwU9YyzoVqly+9RmcXxz2DiQcvjemPdWQUxarrM3fkCpBuOszqU
J6pbDqD6ip3P8KcZx2EFfPU/AAau2BN4AIOXDwEL+wFauCIIm9b6bVc/SbaVpE6b
mr0GDrcFr41O3Qw+rhP5FijSCJLhKxlxeZw7IquLxHAyBh6WSRr5ruJHUI5DBs5x
WQZ5cm6pQGQLvca/EjAwmvZw/Bm2/hhNH4djoECopj1vTfHwcJ5IgWggiG5SlYvN
bDh/IFzxjua9YV31ZSiiYSy24C60MhEY1uTRKNpfwL14X27rCAwPAIFws1SxWphy
YQ+z9GYbj91K8XXsIQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:21 2025 by rpki-client