Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File: B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier: yMvyOe21x/IaAgXdO7F4/HXUQHkGmpO9fdMvDVofujs=
Subject key identifier: CF:D1:8E:07:8A:9D:E6:D9:C3:FF:72:00:67:AB:BE:87:0A:1E:85:FF
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer: /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial: 019A50E33A20398C2B14C2D0D67FB6BBA073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:01:00 +0000
Manifest this update: Tue 04 Nov 2025 22:01:00 +0000
Manifest next update: Wed 05 Nov 2025 22:01:00 +0000
Files and hashes: 1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: gpT7/I5YrP+N3Wb5cTbfz+sslL+tq1ZS/gCzyefMDgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:3a:20:39:8c:2b:14:c2:d0:d6:7f:b6:bb:a0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c610b2a06db1831854b6726c33090336287415
Validity
Not Before: Nov 4 22:01:00 2025 GMT
Not After : Nov 5 22:01:00 2025 GMT
Subject: CN=cfd18e078a9de6d9c3ff720067abbe870a1e85ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:5d:48:cd:20:e2:c0:d3:d5:56:de:2e:8f:
0c:8a:b2:00:e5:92:12:d5:38:16:e5:36:fa:82:2e:
c5:75:07:75:89:0a:20:e9:64:4e:fb:16:72:2c:d4:
3e:08:20:10:ea:60:3a:b4:e2:7d:97:bf:78:cf:52:
5f:48:3e:dd:65:fc:83:6c:ee:2c:68:ef:df:e6:c4:
c5:ab:95:cc:ba:19:ae:3b:68:3c:2c:28:5f:fd:4e:
cf:85:52:42:46:ff:78:a9:df:c7:a3:8e:c0:02:78:
c6:4b:18:81:60:cd:08:b4:4c:74:de:c8:3a:c5:68:
18:84:f5:14:9e:e1:c0:55:b6:df:cf:f3:02:2a:0f:
c5:b0:5e:8d:ac:63:21:f5:d6:c8:83:3a:91:b2:d3:
14:30:ae:e0:3f:b6:a2:f7:05:99:07:0d:32:f7:1b:
f6:0e:ba:3f:d0:a0:30:5e:7d:9c:6f:13:7b:32:87:
0f:be:5f:a3:e3:a1:b0:4e:f6:38:a8:21:b7:73:f0:
71:4d:97:43:88:fb:a1:45:ae:ef:2d:d6:03:7d:4c:
70:70:cb:1f:ac:40:89:97:8c:6a:51:01:68:39:3e:
dd:65:54:74:e4:a8:e3:59:92:ad:cc:e8:58:d4:31:
c0:31:e7:c0:59:60:76:d7:a4:8a:71:9f:1d:99:c7:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D1:8E:07:8A:9D:E6:D9:C3:FF:72:00:67:AB:BE:87:0A:1E:85:FF
X509v3 Authority Key Identifier:
keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ce:59:ec:d0:b5:11:a2:1d:7c:71:92:a6:19:9c:70:87:3d:
10:86:4b:62:11:69:fd:e2:70:5b:76:31:53:74:72:39:4c:56:
3b:94:a4:af:f4:f7:e1:93:f9:2f:81:4e:e3:11:6f:6f:ab:42:
fb:c7:c7:85:bd:46:64:4c:ae:0a:a4:56:2f:4d:ca:6c:a5:44:
8a:3a:09:12:03:5e:81:40:b1:e8:bf:1a:1d:0b:3b:fc:bd:e4:
01:1e:b4:df:af:c6:29:6f:1e:84:a7:d7:39:95:d6:dd:a5:23:
5a:26:4e:a6:bf:6b:f2:cf:2d:78:f1:5f:d2:f6:3c:e4:ad:f9:
3d:49:af:27:ab:67:0a:6c:75:6d:c3:c2:dc:2e:29:c6:f4:a5:
b4:58:c0:6a:00:a9:3d:06:3a:92:ec:3f:3a:34:c5:5e:60:3e:
ae:c5:6a:ce:a0:d8:6e:09:91:f2:b5:fd:a1:95:4a:99:df:69:
e0:73:75:39:2b:85:30:54:bb:f3:ee:e5:0b:4b:5c:30:aa:82:
d5:0c:31:4a:33:b8:05:23:56:92:ad:64:6e:f4:f1:e6:90:bf:
2c:b0:59:62:d9:71:8e:ec:aa:99:7f:f0:cd:70:4c:4b:60:a5:
a5:f6:94:97:56:4e:fb:f1:ce:91:fa:66:3d:23:f3:a2:3f:69:
6a:77:a5:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4zogOYwrFMLQ1n+2u6BzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzYxMGIyYTA2ZGIxODMxODU0YjY3MjZjMzMwOTAzMzYy
ODc0MTUwHhcNMjUxMTA0MjIwMTAwWhcNMjUxMTA1MjIwMTAwWjAzMTEwLwYDVQQD
EyhjZmQxOGUwNzhhOWRlNmQ5YzNmZjcyMDA2N2FiYmU4NzBhMWU4NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppJdSM0g4sDT1VbeLo8MirIA5ZIS
1TgW5Tb6gi7FdQd1iQog6WRO+xZyLNQ+CCAQ6mA6tOJ9l794z1JfSD7dZfyDbO4s
aO/f5sTFq5XMuhmuO2g8LChf/U7PhVJCRv94qd/Ho47AAnjGSxiBYM0ItEx03sg6
xWgYhPUUnuHAVbbfz/MCKg/FsF6NrGMh9dbIgzqRstMUMK7gP7ai9wWZBw0y9xv2
Dro/0KAwXn2cbxN7MocPvl+j46GwTvY4qCG3c/BxTZdDiPuhRa7vLdYDfUxwcMsf
rECJl4xqUQFoOT7dZVR05KjjWZKtzOhY1DHAMefAWWB216SKcZ8dmcdCQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/RjgeKnebZw/9yAGervocKHoX/MB8GA1UdIwQY
MBaAFAfGELKgbbGDGFS2cmwzCQM2KHQVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhZUXNxQnRzWU1ZVkxaeWJETUpBellvZEJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83YzExYjctN2MyYy00ZjA1LTkwMTct
ODZjMDE2ZDdhNzNjLzEvQjhZUXNxQnRzWU1ZVkxaeWJETUpBellvZEJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi83YzExYjctN2MyYy00ZjA1LTkwMTctODZjMDE2ZDdhNzNj
LzEvQjhZUXNxQnRzWU1ZVkxaeWJETUpBellvZEJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAns5Z7NC1
EaIdfHGSphmccIc9EIZLYhFp/eJwW3YxU3RyOUxWO5Skr/T34ZP5L4FO4xFvb6tC
+8fHhb1GZEyuCqRWL03KbKVEijoJEgNegUCx6L8aHQs7/L3kAR6036/GKW8ehKfX
OZXW3aUjWiZOpr9r8s8tePFf0vY85K35PUmvJ6tnCmx1bcPC3C4pxvSltFjAagCp
PQY6kuw/OjTFXmA+rsVqzqDYbgmR8rX9oZVKmd9p4HN1OSuFMFS78+7lC0tcMKqC
1QwxSjO4BSNWkq1kbvTx5pC/LLBZYtlxjuyqmX/wzXBMS2ClpfaUl1ZO+/HOkfpm
PSPzoj9paneldw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:58:15 2025 by rpki-client