Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
File: _hEX6Xaz4zlTuTYbtLseui9Ane0.mft (raw, json)
Hash identifier: AnyEQrj1Xk6QTT4JlvsxKJe/ONEU0vqw/FEa4Jz5ryA=
Subject key identifier: FE:B1:D7:B7:C1:55:CD:AF:C0:FB:B3:35:83:DE:9D:6C:39:4E:78:5B
Authority key identifier: FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
Certificate issuer: /CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Certificate serial: 019A729396AF7117B34D52A02A83D9444FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
Manifest number: 083C
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: _hEX6Xaz4zlTuTYbtLseui9Ane0.crl (hash: vsNhZFpDSDOE/FzVqQeng+4sEDI65QyU+UVX2YoMQp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:96:af:71:17:b3:4d:52:a0:2a:83:d9:44:4f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=feb1d7b7c155cdafc0fbb33583de9d6c394e785b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:4c:dd:cb:22:67:33:88:99:42:0a:6f:4c:
38:24:4a:4c:1f:11:cc:b9:bd:a4:ac:c0:a2:39:01:
e8:26:93:93:b9:5b:78:eb:f5:64:cc:de:72:74:cf:
af:d5:5d:c1:75:b5:9e:7a:55:02:0f:00:e0:7e:a8:
c6:87:a5:0e:28:ca:03:5a:2a:c2:4b:17:ef:5a:14:
d2:8e:99:73:93:39:12:15:e6:03:b0:60:4d:cc:a1:
e3:8d:fa:44:04:40:2c:23:1e:83:3e:cd:9c:e5:f4:
0f:1a:25:56:c7:3e:4e:72:2e:23:9a:2e:6f:80:db:
86:43:d2:30:f4:29:b8:66:4c:89:2a:2a:24:61:65:
23:0b:50:25:4b:2d:34:8e:f4:09:6a:4e:80:9d:a1:
ac:62:ca:24:c2:6a:1b:1b:25:19:bd:60:61:72:8c:
bd:4e:76:21:e3:36:50:46:bf:97:7c:77:8e:51:da:
07:87:f4:c6:aa:98:48:84:98:90:79:70:e2:b6:db:
18:05:00:d0:eb:0b:1b:cf:7a:a6:60:7f:93:b6:12:
1f:1a:23:3d:32:a1:64:ba:9b:67:eb:12:0f:20:e6:
0d:31:8a:5b:56:a3:5c:90:b9:63:a3:5f:97:6a:0a:
68:42:54:6a:d8:ac:ad:1d:0c:c9:f5:cb:cf:2d:79:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B1:D7:B7:C1:55:CD:AF:C0:FB:B3:35:83:DE:9D:6C:39:4E:78:5B
X509v3 Authority Key Identifier:
keyid:FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c6:91:37:79:7a:dd:6d:ed:ba:a6:bd:77:f0:8a:11:63:e2:
7c:85:df:57:b8:22:18:bd:29:3f:98:bc:9d:1d:c3:81:91:32:
de:7f:7f:0c:1a:80:a9:f7:c1:c0:f3:d9:b9:c0:e5:da:93:06:
dc:bc:68:24:c0:8b:23:8c:fe:d9:9f:de:9f:f9:15:75:34:dc:
2c:6c:f2:a2:6e:34:3d:05:37:d1:aa:a8:ea:35:f9:63:6e:c1:
ec:ef:31:77:df:20:d8:a2:4f:fb:07:08:7f:42:82:0b:3d:84:
da:a4:6c:ae:d8:21:99:92:01:29:4c:de:03:8d:92:0a:67:88:
25:d4:82:72:50:73:07:9e:6f:d9:54:2f:10:09:45:31:7d:45:
50:80:b1:06:20:79:76:9b:6f:d5:d7:2f:c2:4a:e5:50:4a:2f:
d9:25:a3:54:98:d7:c9:c4:fe:03:03:9c:e3:14:6e:f2:38:cd:
bb:6b:9a:17:85:15:5d:1c:80:5b:06:81:30:29:7a:fd:39:d0:
de:81:3c:82:03:e6:ca:37:7d:3d:f3:58:a3:75:ff:6a:e1:5b:
16:86:c5:66:f5:32:d6:46:3c:64:89:5c:74:f7:f2:31:e2:2d:
a3:28:0d:40:2c:91:60:f6:4d:52:cb:b3:13:e4:69:89:44:d7:
21:a1:89:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk5avcRezTVKgKoPZRE/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMTExN2U5NzZiM2UzMzk1M2I5MzYxYmI0YmIxZWJhMmY0
MDlkZWQwHhcNMjUxMTExMTEwMTA2WhcNMjUxMTEyMTEwMTA2WjAzMTEwLwYDVQQD
EyhmZWIxZDdiN2MxNTVjZGFmYzBmYmIzMzU4M2RlOWQ2YzM5NGU3ODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBBM3csiZzOImUIKb0w4JEpMHxHM
ub2krMCiOQHoJpOTuVt46/VkzN5ydM+v1V3BdbWeelUCDwDgfqjGh6UOKMoDWirC
SxfvWhTSjplzkzkSFeYDsGBNzKHjjfpEBEAsIx6DPs2c5fQPGiVWxz5Oci4jmi5v
gNuGQ9Iw9Cm4ZkyJKiokYWUjC1AlSy00jvQJak6AnaGsYsokwmobGyUZvWBhcoy9
TnYh4zZQRr+XfHeOUdoHh/TGqphIhJiQeXDittsYBQDQ6wsbz3qmYH+TthIfGiM9
MqFkuptn6xIPIOYNMYpbVqNckLljo1+XagpoQlRq2KytHQzJ9cvPLXmIhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6x17fBVc2vwPuzNYPenWw5TnhbMB8GA1UdIwQY
MBaAFP4RF+l2s+M5U7k2G7S7HrovQJ3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2hFWDZYYXo0emxUdVRZYnRMc2V1aTlBbmUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jY2ZiNjQtMmVjOS00ZDg2LWFhY2Ut
ODQ2ZTFmNDFmYzYyLzEvX2hFWDZYYXo0emxUdVRZYnRMc2V1aTlBbmUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jY2ZiNjQtMmVjOS00ZDg2LWFhY2UtODQ2ZTFmNDFmYzYy
LzEvX2hFWDZYYXo0emxUdVRZYnRMc2V1aTlBbmUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcaRN3l6
3W3tuqa9d/CKEWPifIXfV7giGL0pP5i8nR3DgZEy3n9/DBqAqffBwPPZucDl2pMG
3LxoJMCLI4z+2Z/en/kVdTTcLGzyom40PQU30aqo6jX5Y27B7O8xd98g2KJP+wcI
f0KCCz2E2qRsrtghmZIBKUzeA42SCmeIJdSCclBzB55v2VQvEAlFMX1FUICxBiB5
dptv1dcvwkrlUEov2SWjVJjXycT+AwOc4xRu8jjNu2uaF4UVXRyAWwaBMCl6/TnQ
3oE8ggPmyjd9PfNYo3X/auFbFobFZvUy1kY8ZIlcdPfyMeItoygNQCyRYPZNUsuz
E+RpiUTXIaGJZw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:49 2025 by rpki-client