Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json)
Hash identifier: 1r0Q0XWsu1O6TgAg4GefGMjq/vQYNttBUPjM+vC5WYE=
Subject key identifier: EE:D7:73:42:82:EE:CB:58:A8:9A:D7:FB:6B:5E:9C:41:B8:B1:C3:11
Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301
Certificate serial: 019A4F62D90A4327D41F92193628E6311E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
Manifest number: 06A9
Signing time: Tue 04 Nov 2025 15:01:09 +0000
Manifest this update: Tue 04 Nov 2025 15:01:09 +0000
Manifest next update: Wed 05 Nov 2025 15:01:09 +0000
Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: s+yPyuVxDLAEdBnr+vsdg36HHwFj+z4RYV5NEznMPH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d9:0a:43:27:d4:1f:92:19:36:28:e6:31:1e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301
Validity
Not Before: Nov 4 15:01:09 2025 GMT
Not After : Nov 5 15:01:09 2025 GMT
Subject: CN=eed7734282eecb58a89ad7fb6b5e9c41b8b1c311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:ca:6f:62:49:8d:c8:f2:4c:d2:f3:42:33:
71:2c:6f:eb:18:3d:3b:32:1d:98:40:25:68:95:5e:
f2:d3:56:65:72:2e:9c:3e:4e:8e:b9:71:23:0d:e9:
65:04:12:ac:3d:74:46:38:84:28:62:a8:b4:ec:2a:
35:29:ff:2f:ab:c7:64:ff:a5:6e:77:ce:3e:93:95:
6e:1b:2d:4e:e0:cc:bb:b7:3f:2a:3d:e7:94:00:fe:
f9:33:23:65:d4:84:ef:2f:1b:ca:8d:02:05:87:1b:
81:23:eb:0d:9a:29:c7:fe:88:94:6e:b9:24:89:9f:
74:45:4c:c7:6d:26:7e:5e:ac:6e:cf:65:c7:aa:9d:
8a:d8:7e:15:f2:84:88:38:bb:0e:7e:4a:d6:1f:ef:
5a:63:f5:b2:70:57:b7:a3:4b:89:4d:7f:ef:c6:d9:
a6:17:1d:1d:49:3c:8a:88:cf:98:6c:15:4d:55:ec:
0d:14:10:a8:90:44:80:11:b3:e7:3a:68:7e:c5:ae:
06:1b:2e:a6:9e:8b:88:9a:c9:32:c9:b3:4f:ab:77:
94:f7:27:8c:69:64:3a:0b:1c:8c:65:c1:03:84:35:
75:b5:b3:44:ce:33:25:f8:96:52:94:40:55:9e:09:
28:be:c6:d1:00:29:0f:df:b3:9f:18:38:c8:c6:80:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D7:73:42:82:EE:CB:58:A8:9A:D7:FB:6B:5E:9C:41:B8:B1:C3:11
X509v3 Authority Key Identifier:
keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c1:ff:6b:dd:bd:14:79:c2:5a:7e:e5:10:6a:3d:af:d2:18:
fb:ac:a9:49:1c:30:6b:d5:78:be:05:a6:ab:8c:d0:4b:7c:14:
e5:7f:c2:57:3e:cb:8b:d3:26:4d:f5:44:81:a6:8d:c1:9f:27:
73:6a:8e:61:7c:6d:63:1b:ed:8a:e0:29:fd:1b:b8:e0:56:56:
8c:ab:cc:e7:c8:bc:13:a8:0b:2d:60:9a:d9:9f:84:83:31:fc:
b5:fb:b0:b6:9b:dd:27:bb:56:e8:4a:6a:f5:b4:21:db:6e:a0:
08:e8:eb:ff:db:ea:ef:df:80:52:1c:10:96:fc:19:ec:f6:c2:
38:f1:99:af:15:b0:af:7a:61:5f:64:66:48:82:16:6d:05:2a:
99:bc:51:2f:dd:1e:69:dc:9c:fe:c5:30:95:37:55:cf:66:75:
8b:d6:01:2c:20:3c:f5:31:69:8e:6f:6e:c0:1f:5b:6f:48:0c:
bb:50:c7:0e:34:c6:8e:3a:31:58:20:37:a8:31:11:b3:f1:04:
9c:39:a3:07:99:0a:b3:dd:b2:1a:10:26:55:d4:aa:6e:38:5c:
c5:59:fb:13:86:78:ae:18:15:14:32:b3:a1:f3:49:5a:d6:b8:
8d:e9:25:07:6d:2a:3a:97:82:3a:0e:24:e0:72:de:85:24:d7:
73:c9:4c:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYtkKQyfUH5IZNijmMR6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYWMzOGZlODEwNWZiNTlhMmNkMjU3ZjUxOWY4NTg1OTU4
NDAzMDEwHhcNMjUxMTA0MTUwMTA5WhcNMjUxMTA1MTUwMTA5WjAzMTEwLwYDVQQD
EyhlZWQ3NzM0MjgyZWVjYjU4YTg5YWQ3ZmI2YjVlOWM0MWI4YjFjMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMLKb2JJjcjyTNLzQjNxLG/rGD07
Mh2YQCVolV7y01Zlci6cPk6OuXEjDellBBKsPXRGOIQoYqi07Co1Kf8vq8dk/6Vu
d84+k5VuGy1O4My7tz8qPeeUAP75MyNl1ITvLxvKjQIFhxuBI+sNminH/oiUbrkk
iZ90RUzHbSZ+Xqxuz2XHqp2K2H4V8oSIOLsOfkrWH+9aY/WycFe3o0uJTX/vxtmm
Fx0dSTyKiM+YbBVNVewNFBCokESAEbPnOmh+xa4GGy6mnouImskyybNPq3eU9yeM
aWQ6CxyMZcEDhDV1tbNEzjMl+JZSlEBVngkovsbRACkP37OfGDjIxoCUYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7Xc0KC7stYqJrX+2tenEG4scMRMB8GA1UdIwQY
MBaAFCGsOP6BBftZos0lf1GfhYWVhAMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNDVjNjItMmUwYS00Y2UxLWJlZmIt
MGNmNTRjZmE4ZGExLzEvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zNDVjNjItMmUwYS00Y2UxLWJlZmItMGNmNTRjZmE4ZGEx
LzEvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsH/a929
FHnCWn7lEGo9r9IY+6ypSRwwa9V4vgWmq4zQS3wU5X/CVz7Li9MmTfVEgaaNwZ8n
c2qOYXxtYxvtiuAp/Ru44FZWjKvM58i8E6gLLWCa2Z+EgzH8tfuwtpvdJ7tW6Epq
9bQh226gCOjr/9vq79+AUhwQlvwZ7PbCOPGZrxWwr3phX2RmSIIWbQUqmbxRL90e
adyc/sUwlTdVz2Z1i9YBLCA89TFpjm9uwB9bb0gMu1DHDjTGjjoxWCA3qDERs/EE
nDmjB5kKs92yGhAmVdSqbjhcxVn7E4Z4rhgVFDKzofNJWta4jeklB20qOpeCOg4k
4HLehSTXc8lMUQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:01:28 2025 by rpki-client