Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: zq8WMJ7aAB3TZ4RPQhLlWS+FMQpTX60C/6GHtXDi+L0=
Subject key identifier: 6E:63:B0:8E:79:22:62:D5:F3:C7:5B:BF:8E:DA:C4:3F:F2:F1:1C:BD
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 019A4EF41E95EEDD34A8F705929C255B1724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 04C6
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: TadjLWALBjUNYU8Vk7pRgVnivyUuRUZ/cm99g0kg454=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1e:95:ee:dd:34:a8:f7:05:92:9c:25:5b:17:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=6e63b08e792262d5f3c75bbf8edac43ff2f11cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:a9:d0:56:8e:56:81:f5:9b:c4:c7:5e:4d:
a7:cd:0f:f2:25:83:43:7e:a2:d8:36:48:39:d9:b0:
be:6d:f3:4a:c5:d5:b7:81:b9:aa:5e:22:6e:50:25:
45:17:3c:f9:04:9c:27:dc:74:41:bc:71:99:b3:60:
01:3c:b9:f8:91:2a:95:33:4d:b5:b3:ea:40:39:28:
27:7f:b8:98:81:8b:90:bf:05:db:59:45:76:f3:01:
fb:10:d9:c6:63:8c:16:92:e8:30:37:2d:d6:8e:6b:
d5:5d:34:de:a3:74:31:2c:02:5c:fb:ed:67:a6:64:
31:98:7b:21:fc:d0:85:fb:07:e1:9f:ec:e0:6f:9c:
4a:27:c3:d4:05:e2:d7:b3:fc:0c:b2:1c:7a:2c:67:
ef:18:4a:f5:59:a7:ba:20:4c:ce:5d:73:af:56:43:
9b:50:05:e9:64:17:2e:d7:c0:c6:01:88:88:31:95:
7f:5f:f1:50:3c:68:7b:fa:60:83:04:4d:2a:27:c0:
ca:ff:0d:c8:90:49:56:2c:b4:0b:72:f3:54:6b:3e:
38:f0:e7:08:9d:28:66:bc:29:5b:23:7a:ae:12:3f:
bd:84:9f:93:a2:cc:9a:2a:82:cd:21:b9:8e:f8:c0:
c6:3f:45:1c:2d:2d:f2:88:b4:7a:8e:6b:0a:b7:23:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:63:B0:8E:79:22:62:D5:F3:C7:5B:BF:8E:DA:C4:3F:F2:F1:1C:BD
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:80:88:6c:26:63:d0:1e:8f:a9:0d:f5:77:65:80:8a:83:2f:
35:79:ba:b2:96:1a:89:f5:af:46:0a:82:f0:20:ea:fc:bd:6d:
bf:eb:da:65:25:74:87:dd:a5:da:c2:f8:27:92:24:95:0c:48:
96:87:30:42:e6:d4:61:96:c7:78:24:b6:bf:be:ed:80:0c:cb:
93:9a:c0:50:c2:33:35:da:53:95:9c:8c:b9:2c:96:ad:e7:59:
0f:63:bc:e9:bf:95:6a:9c:02:a6:82:26:3f:97:7d:04:d8:10:
ea:f1:93:87:3b:43:2d:6d:e2:96:e8:2a:3b:d9:55:c4:8b:3a:
88:87:e9:07:db:56:b5:2a:c6:3a:b0:22:a1:15:0a:87:28:9c:
ff:53:86:14:2e:a4:7d:ae:6a:ba:21:40:e8:5f:e2:88:cf:7b:
f1:1f:80:12:29:4a:cf:7a:4b:d3:bd:be:ad:72:eb:1f:63:9f:
41:be:79:d7:17:44:d6:8b:51:c0:62:7d:ac:68:ed:a5:6b:d6:
63:20:9f:c2:a0:78:6b:72:73:b1:bb:e4:68:a8:f6:13:d9:d9:
60:52:63:c8:0e:9a:94:33:2b:49:bd:e8:c6:f2:8f:ec:85:49:
a1:c5:00:5a:90:b7:af:e0:fd:0c:b2:fe:7e:47:ce:67:92:73:
46:66:4c:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9B6V7t00qPcFkpwlWxckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZWQ4Yjg5NjBlODdhYTY2OTM1YWQ2NjgzYmMxNWYxZTQ3
OTkzYjYwHhcNMjUxMTA0MTMwMDEyWhcNMjUxMTA1MTMwMDEyWjAzMTEwLwYDVQQD
Eyg2ZTYzYjA4ZTc5MjI2MmQ1ZjNjNzViYmY4ZWRhYzQzZmYyZjExY2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Wp0FaOVoH1m8THXk2nzQ/yJYND
fqLYNkg52bC+bfNKxdW3gbmqXiJuUCVFFzz5BJwn3HRBvHGZs2ABPLn4kSqVM021
s+pAOSgnf7iYgYuQvwXbWUV28wH7ENnGY4wWkugwNy3WjmvVXTTeo3QxLAJc++1n
pmQxmHsh/NCF+wfhn+zgb5xKJ8PUBeLXs/wMshx6LGfvGEr1Wae6IEzOXXOvVkOb
UAXpZBcu18DGAYiIMZV/X/FQPGh7+mCDBE0qJ8DK/w3IkElWLLQLcvNUaz448OcI
nShmvClbI3quEj+9hJ+TosyaKoLNIbmO+MDGP0UcLS3yiLR6jmsKtyMfewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5jsI55ImLV88dbv47axD/y8Ry9MB8GA1UdIwQY
MBaAFETti4lg6HqmaTWtZoO8FfHkeZO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk8yTGlXRG9lcVpwTmExbWc3d1Y4ZVI1azdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi84ZjlkYjUtZTlhZC00NjRmLWFiYTkt
YmQxYmE0YzE5Zjc2LzEvUk8yTGlXRG9lcVpwTmExbWc3d1Y4ZVI1azdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi84ZjlkYjUtZTlhZC00NjRmLWFiYTktYmQxYmE0YzE5Zjc2
LzEvUk8yTGlXRG9lcVpwTmExbWc3d1Y4ZVI1azdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoCIbCZj
0B6PqQ31d2WAioMvNXm6spYaifWvRgqC8CDq/L1tv+vaZSV0h92l2sL4J5IklQxI
locwQubUYZbHeCS2v77tgAzLk5rAUMIzNdpTlZyMuSyWredZD2O86b+VapwCpoIm
P5d9BNgQ6vGThztDLW3ilugqO9lVxIs6iIfpB9tWtSrGOrAioRUKhyic/1OGFC6k
fa5quiFA6F/iiM978R+AEilKz3pL072+rXLrH2OfQb551xdE1otRwGJ9rGjtpWvW
YyCfwqB4a3JzsbvkaKj2E9nZYFJjyA6alDMrSb3oxvKP7IVJocUAWpC3r+D9DLL+
fkfOZ5JzRmZM6g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:56 2025 by rpki-client