Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
File: i5epFTYKSH1c9dXGZeW_4f_1Np8.mft (raw, json)
Hash identifier: SSFFi9LRQJl61DKCMaarntr+fmvfNaR9xGFkZ6suRyM=
Subject key identifier: C8:B6:33:52:26:10:F5:D4:E6:22:1C:AD:A6:E3:89:4F:E2:D4:E8:2F
Authority key identifier: 8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
Certificate issuer: /CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Certificate serial: 019A71B8B2EC5796178D27685BB6421BECFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
Manifest number: 05BC
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: i5epFTYKSH1c9dXGZeW_4f_1Np8.crl (hash: KP+DoTiTa7lswgevwM6zON3fWInLcUUKY1rtVrnD/QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b2:ec:57:96:17:8d:27:68:5b:b6:42:1b:ec:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=c8b633522610f5d4e6221cada6e3894fe2d4e82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:5b:5b:aa:30:87:94:fc:e2:e2:83:4d:f8:
43:8d:57:8c:7c:57:db:6b:c6:fc:69:fd:6d:b5:18:
4b:29:51:c8:be:7b:1a:4c:37:ab:00:c0:e7:5e:83:
97:09:f6:20:e7:32:bd:8f:7b:02:ec:11:cd:df:0b:
bb:6d:c3:18:8a:82:6d:fe:bc:2d:ca:d3:35:4b:c2:
60:db:02:78:df:97:d8:8e:a8:2f:9a:5e:36:2f:91:
0a:b0:fd:75:e5:ff:50:77:41:ba:1c:5f:dc:1f:3b:
0f:84:b4:20:59:26:c6:48:19:d2:54:f2:51:a8:aa:
65:01:1e:19:75:87:aa:8d:e3:84:b7:74:75:2f:12:
b2:ee:88:e2:e8:ec:48:43:4f:15:a3:2c:12:a6:7b:
97:f2:0c:30:c3:e2:0a:93:b0:ec:fe:df:54:bd:92:
21:bc:b0:b2:b0:7e:36:71:88:08:39:44:7f:58:97:
30:90:52:2b:41:5a:12:62:5c:ac:22:4d:32:62:6e:
67:10:4e:31:cd:f3:ad:a9:09:4d:62:5c:ba:77:4c:
f5:bd:86:3f:6a:6d:2b:e5:ac:d2:79:67:e0:97:da:
cb:71:19:06:66:76:fb:db:46:43:f6:40:a7:f8:98:
ba:f9:f4:f5:09:e4:a6:df:ea:69:13:e9:db:cb:68:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B6:33:52:26:10:F5:D4:E6:22:1C:AD:A6:E3:89:4F:E2:D4:E8:2F
X509v3 Authority Key Identifier:
keyid:8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:60:70:d1:f8:32:dd:a7:75:85:94:38:af:48:98:97:47:60:
1f:87:11:c0:ef:87:50:51:03:de:8c:3f:91:32:33:9a:79:50:
48:cf:59:32:26:28:94:8a:97:18:09:01:51:84:77:b4:d8:cf:
b2:f0:77:03:6d:61:c0:3b:5f:cb:c9:f9:d7:87:85:01:8f:5e:
80:51:c0:cb:16:bb:19:fa:e5:44:38:9b:96:a5:f7:df:82:a6:
ba:35:44:bd:22:22:fb:44:64:8b:e4:d7:04:f3:1e:3d:dc:c6:
20:af:5c:11:85:33:58:63:b7:03:dd:41:d0:d9:88:32:2d:ae:
9d:94:21:77:52:3a:9d:43:b0:01:ce:c9:3a:c8:ba:79:b1:51:
62:83:b9:ba:e7:84:35:bd:f0:fe:d0:46:c2:83:4b:f8:40:93:
82:ce:f8:20:ec:71:0c:ff:5b:07:60:2c:bb:f4:bc:08:80:88:
6f:e6:a7:66:b9:fe:df:62:1c:2b:66:13:d0:9c:ac:b6:bb:30:
c6:e0:14:4f:cf:1a:f5:7e:da:b8:42:65:3e:b3:f5:0c:72:9d:
f8:cb:2f:5c:69:d8:e5:7f:3a:a7:17:33:73:7f:86:5c:87:fc:
ab:ab:83:81:1a:d6:cb:37:fc:6b:0b:59:3d:40:5e:f9:11:61:
d4:18:81:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuLLsV5YXjSdoW7ZCG+z/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTdhOTE1MzYwYTQ4N2Q1Y2Y1ZDVjNjY1ZTViZmUxZmZm
NTM2OWYwHhcNMjUxMTExMDcwMjAwWhcNMjUxMTEyMDcwMjAwWjAzMTEwLwYDVQQD
EyhjOGI2MzM1MjI2MTBmNWQ0ZTYyMjFjYWRhNmUzODk0ZmUyZDRlODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs25bW6owh5T84uKDTfhDjVeMfFfb
a8b8af1ttRhLKVHIvnsaTDerAMDnXoOXCfYg5zK9j3sC7BHN3wu7bcMYioJt/rwt
ytM1S8Jg2wJ435fYjqgvml42L5EKsP115f9Qd0G6HF/cHzsPhLQgWSbGSBnSVPJR
qKplAR4ZdYeqjeOEt3R1LxKy7oji6OxIQ08VoywSpnuX8gwww+IKk7Ds/t9UvZIh
vLCysH42cYgIOUR/WJcwkFIrQVoSYlysIk0yYm5nEE4xzfOtqQlNYly6d0z1vYY/
am0r5azSeWfgl9rLcRkGZnb720ZD9kCn+Ji6+fT1CeSm3+ppE+nby2guPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi2M1ImEPXU5iIcrabjiU/i1OgvMB8GA1UdIwQY
MBaAFIuXqRU2Ckh9XPXVxmXlv+H/9TafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVlcEZUWUtTSDFjOWRYR1plV180Zl8xTnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83ZDRhMjktMDIzZi00MmQ3LWFhYjct
ZDg3YjM2MWFjZDg5LzEvaTVlcEZUWUtTSDFjOWRYR1plV180Zl8xTnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83ZDRhMjktMDIzZi00MmQ3LWFhYjctZDg3YjM2MWFjZDg5
LzEvaTVlcEZUWUtTSDFjOWRYR1plV180Zl8xTnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2Bw0fgy
3ad1hZQ4r0iYl0dgH4cRwO+HUFED3ow/kTIzmnlQSM9ZMiYolIqXGAkBUYR3tNjP
svB3A21hwDtfy8n514eFAY9egFHAyxa7GfrlRDiblqX334KmujVEvSIi+0Rki+TX
BPMePdzGIK9cEYUzWGO3A91B0NmIMi2unZQhd1I6nUOwAc7JOsi6ebFRYoO5uueE
Nb3w/tBGwoNL+ECTgs74IOxxDP9bB2Asu/S8CICIb+anZrn+32IcK2YT0Jystrsw
xuAUT88a9X7auEJlPrP1DHKd+MsvXGnY5X86pxczc3+GXIf8q6uDgRrWyzf8awtZ
PUBe+RFh1BiBug==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:16 2025 by rpki-client