Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
File: Mb9CyzMks4trh4t81W9pk263w9M.mft (raw, json)
Hash identifier: 1QzzMHg0ZzAR/9+6hnCLPaLZxoxH7P6LS0qI46bsQrc=
Subject key identifier: 3B:69:EE:A5:17:6E:19:7C:0F:81:EA:A2:44:A4:B4:21:EF:55:E4:2A
Authority key identifier: 31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
Certificate issuer: /CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Certificate serial: 019A4E18B3C5CE1174A6858E7F9E9A74D9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
Manifest number: 0551
Signing time: Tue 04 Nov 2025 09:00:33 +0000
Manifest this update: Tue 04 Nov 2025 09:00:33 +0000
Manifest next update: Wed 05 Nov 2025 09:00:33 +0000
Files and hashes: 1: Mb9CyzMks4trh4t81W9pk263w9M.crl (hash: VnyGspUjtXTLq3rk/EukTVTJfgNpd5Sqc+y0C9gNocU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b3:c5:ce:11:74:a6:85:8e:7f:9e:9a:74:d9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Validity
Not Before: Nov 4 09:00:33 2025 GMT
Not After : Nov 5 09:00:33 2025 GMT
Subject: CN=3b69eea5176e197c0f81eaa244a4b421ef55e42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:b2:be:ba:5d:ec:53:80:a6:5a:31:84:1c:
be:41:95:91:a7:57:c4:c5:ee:ce:8b:b6:23:64:d4:
39:75:ff:53:85:0c:f8:a2:41:ad:ab:ff:42:00:34:
fa:7b:85:db:46:56:d4:2d:6b:11:7a:03:37:92:87:
f2:e3:af:d3:18:0a:93:cf:cc:93:ff:a5:43:d3:88:
42:e3:33:90:bb:f2:21:1a:36:6f:d8:ba:f4:69:d7:
80:fc:bd:56:ba:d4:37:de:0f:02:97:e5:8f:7d:1b:
20:45:c0:b8:7b:c3:32:65:10:05:23:8a:93:d9:ad:
d7:85:35:a1:a2:e2:b7:41:2c:26:cf:ca:80:5c:07:
25:28:ae:cd:7f:ba:2a:8c:2e:8a:31:3e:94:d8:9c:
a7:ee:c9:6c:9b:6b:a6:0b:ef:94:87:b6:bb:89:8c:
ee:40:3f:79:4a:da:55:3f:e1:22:f5:0d:a0:5b:2d:
96:fc:45:86:9e:dd:12:a3:64:f7:0d:93:56:1b:f3:
30:76:1c:29:59:4c:dc:26:39:82:cc:e3:27:82:3d:
23:94:57:19:0a:02:05:b7:61:01:06:bb:b9:1d:ea:
1c:09:96:f5:c9:49:62:17:25:fe:0e:66:34:3d:a2:
f2:6a:9b:dc:75:9c:28:15:6d:f6:96:2f:f7:75:f2:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:EE:A5:17:6E:19:7C:0F:81:EA:A2:44:A4:B4:21:EF:55:E4:2A
X509v3 Authority Key Identifier:
keyid:31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e1:f8:1d:b9:20:8f:c4:98:c3:02:10:c0:e2:8c:ba:67:60:
e2:68:ee:7a:c6:a3:70:69:e8:b1:d0:8c:fb:83:ea:e5:ba:1f:
ef:9d:c1:be:e5:9e:ca:e8:08:00:fa:0d:7b:18:e2:2a:2e:10:
1e:64:c4:83:8c:db:68:96:d2:4d:07:7f:de:36:5e:1f:13:1c:
ce:62:4c:ce:32:98:9c:2b:66:2c:cd:00:5f:2f:0f:a9:77:51:
9a:df:03:0a:94:e2:5f:18:a2:b8:c3:e7:ec:17:1c:fb:a9:be:
a7:28:6a:71:7a:d0:77:60:1e:4f:6f:4e:b8:5a:7e:f4:be:48:
8f:85:4d:f6:9f:52:fd:ee:e1:6d:03:a2:57:8a:d3:cd:34:f3:
a6:62:08:fb:b8:28:17:f2:4b:fe:41:6d:7c:cf:e9:76:c6:11:
16:5b:f5:52:1d:1a:d7:4a:09:f6:c1:eb:5e:8e:6b:b8:d6:06:
0d:75:94:36:b7:f1:31:55:00:48:13:80:6a:ca:fa:cd:57:73:
d3:48:6a:a8:4e:67:6d:5e:c5:18:06:ac:bf:2f:65:e6:ff:1b:
94:c6:1c:6a:cd:cf:d1:c9:b2:49:9a:d4:b2:5e:83:27:fc:5f:
e9:79:63:69:98:59:8f:fe:53:e0:ba:0b:55:ed:f4:f3:9c:a6:
ef:bf:b3:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGLPFzhF0poWOf56adNnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYmY0MmNiMzMyNGIzOGI2Yjg3OGI3Y2Q1NmY2OTkzNmVi
N2MzZDMwHhcNMjUxMTA0MDkwMDMzWhcNMjUxMTA1MDkwMDMzWjAzMTEwLwYDVQQD
EygzYjY5ZWVhNTE3NmUxOTdjMGY4MWVhYTI0NGE0YjQyMWVmNTVlNDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu6yvrpd7FOAploxhBy+QZWRp1fE
xe7Oi7YjZNQ5df9ThQz4okGtq/9CADT6e4XbRlbULWsRegM3kofy46/TGAqTz8yT
/6VD04hC4zOQu/IhGjZv2Lr0adeA/L1WutQ33g8Cl+WPfRsgRcC4e8MyZRAFI4qT
2a3XhTWhouK3QSwmz8qAXAclKK7Nf7oqjC6KMT6U2Jyn7slsm2umC++Uh7a7iYzu
QD95StpVP+Ei9Q2gWy2W/EWGnt0So2T3DZNWG/MwdhwpWUzcJjmCzOMngj0jlFcZ
CgIFt2EBBru5HeocCZb1yUliFyX+DmY0PaLyapvcdZwoFW32li/3dfJGwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtp7qUXbhl8D4HqokSktCHvVeQqMB8GA1UdIwQY
MBaAFDG/QsszJLOLa4eLfNVvaZNut8PTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWI5Q3l6TWtzNHRyaDR0ODFXOXBrMjYzdzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iYTY4YmQtOTNhOC00N2QzLTljNDgt
NDkxY2I0ODU0MzJkLzEvTWI5Q3l6TWtzNHRyaDR0ODFXOXBrMjYzdzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iYTY4YmQtOTNhOC00N2QzLTljNDgtNDkxY2I0ODU0MzJk
LzEvTWI5Q3l6TWtzNHRyaDR0ODFXOXBrMjYzdzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+H4Hbkg
j8SYwwIQwOKMumdg4mjuesajcGnosdCM+4Pq5bof753BvuWeyugIAPoNexjiKi4Q
HmTEg4zbaJbSTQd/3jZeHxMczmJMzjKYnCtmLM0AXy8PqXdRmt8DCpTiXxiiuMPn
7Bcc+6m+pyhqcXrQd2AeT29OuFp+9L5Ij4VN9p9S/e7hbQOiV4rTzTTzpmII+7go
F/JL/kFtfM/pdsYRFlv1Uh0a10oJ9sHrXo5ruNYGDXWUNrfxMVUASBOAasr6zVdz
00hqqE5nbV7FGAasvy9l5v8blMYcas3P0cmySZrUsl6DJ/xf6XljaZhZj/5T4LoL
Ve3085ym77+zZg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:00 2025 by rpki-client