Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
File: MtYmm4lSBJZffsl_Gdi12ckwt40.mft (raw, json)
Hash identifier: CMNTxJfgkO/75LU0ztLrbt3wST4EV9ogkkwg+oYcD54=
Subject key identifier: 77:B9:DE:30:9D:F4:E1:BC:B4:E1:2E:B3:12:5F:5F:92:13:04:D5:21
Authority key identifier: 32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
Certificate issuer: /CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Certificate serial: 019A71B84DAF13EF735698DC50AA7D0D7C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: MtYmm4lSBJZffsl_Gdi12ckwt40.crl (hash: PZpj1cyrV2xOHUEySdiaMh3VWd2lpbBEadPxl8KDNLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4d:af:13:ef:73:56:98:dc:50:aa:7d:0d:7c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=77b9de309df4e1bcb4e12eb3125f5f921304d521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:ce:01:99:55:79:be:19:70:3d:9c:e5:c0:
8e:7f:08:2f:e7:24:8c:5c:6d:9b:e1:28:19:f6:c3:
e1:25:49:82:c8:20:f5:f7:e8:58:e6:a3:85:5d:4d:
82:b9:74:c9:52:0f:6d:92:fd:a0:bd:c1:59:2b:de:
a8:d6:76:fb:98:4f:c8:45:6c:b9:3b:c8:ae:31:e1:
a1:15:f8:9e:70:8d:f9:13:0b:a5:5a:0a:74:84:b5:
50:e0:31:e1:07:08:ec:52:68:6a:61:4e:2b:cb:70:
54:10:97:92:10:af:ba:43:bd:ba:8c:bc:d8:55:04:
58:f5:3a:4e:aa:a7:72:8d:dd:71:71:dd:54:f9:c0:
2e:6b:19:7d:10:79:7f:40:13:a5:5f:f6:bd:0d:7c:
87:ef:eb:2a:4a:9c:82:e1:05:b1:a2:42:32:06:76:
32:5f:9c:e0:92:8f:d6:1a:ff:08:68:81:3a:90:a5:
bf:f3:1b:6d:d6:ca:7e:2a:07:0b:09:08:1c:e8:59:
1d:24:51:cb:1d:c3:68:e3:09:3f:0f:b9:6d:51:a3:
24:09:cb:37:11:f1:9c:82:5d:3c:bb:3e:15:d6:32:
20:39:7a:44:e7:9b:70:1c:68:f9:6f:68:84:db:c4:
89:f0:fc:5b:65:d1:b8:2f:1f:ec:c7:d2:b1:1c:c1:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:DE:30:9D:F4:E1:BC:B4:E1:2E:B3:12:5F:5F:92:13:04:D5:21
X509v3 Authority Key Identifier:
keyid:32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3d:17:e5:98:ab:84:6e:97:7c:39:7d:f8:e6:1d:17:2f:75:
3f:ea:c6:b4:32:4d:3c:87:2f:2f:0b:18:80:3f:1a:3a:14:9b:
fb:06:43:8e:23:ef:0b:02:67:ea:4f:bd:12:d2:29:ea:54:6a:
46:d7:c2:f1:6c:96:b6:ea:55:f5:28:f0:97:22:50:4b:c3:c3:
ef:f9:ef:e8:d2:47:2b:59:8d:4e:24:30:50:53:46:fc:2b:44:
da:6b:4c:4e:46:11:5b:c7:52:12:fb:2e:0f:ba:4b:6e:ec:87:
da:29:98:d2:00:32:fd:04:86:8a:9b:2c:a3:d0:a7:f8:cd:44:
2d:eb:33:0e:d6:41:37:4a:9b:be:1b:3a:96:cb:3e:ec:b4:cc:
80:be:2b:50:12:bb:0a:4f:3d:a0:d7:f6:61:40:d5:29:b6:3d:
7a:fb:bf:5f:cf:8f:1b:07:8f:e0:0c:15:bd:18:8d:8b:13:e3:
3d:1e:83:c0:9f:26:50:16:d7:9e:16:24:b4:41:01:39:db:69:
ba:ff:ee:74:9c:44:a6:73:3d:43:83:cd:71:a2:05:96:73:47:
dc:9b:01:6c:58:75:e8:b6:6b:4f:ba:fc:87:3b:65:af:ff:e8:
3c:b9:36:dc:2d:76:be:eb:2e:e0:35:14:90:f2:19:d2:ec:1a:
79:38:96:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuE2vE+9zVpjcUKp9DXyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDYyNjliODk1MjA0OTY1ZjdlYzk3ZjE5ZDhiNWQ5Yzkz
MGI3OGQwHhcNMjUxMTExMDcwMTM1WhcNMjUxMTEyMDcwMTM1WjAzMTEwLwYDVQQD
Eyg3N2I5ZGUzMDlkZjRlMWJjYjRlMTJlYjMxMjVmNWY5MjEzMDRkNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2XOAZlVeb4ZcD2c5cCOfwgv5ySM
XG2b4SgZ9sPhJUmCyCD19+hY5qOFXU2CuXTJUg9tkv2gvcFZK96o1nb7mE/IRWy5
O8iuMeGhFfiecI35EwulWgp0hLVQ4DHhBwjsUmhqYU4ry3BUEJeSEK+6Q726jLzY
VQRY9TpOqqdyjd1xcd1U+cAuaxl9EHl/QBOlX/a9DXyH7+sqSpyC4QWxokIyBnYy
X5zgko/WGv8IaIE6kKW/8xtt1sp+KgcLCQgc6FkdJFHLHcNo4wk/D7ltUaMkCcs3
EfGcgl08uz4V1jIgOXpE55twHGj5b2iE28SJ8PxbZdG4Lx/sx9KxHMHXfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHe53jCd9OG8tOEusxJfX5ITBNUhMB8GA1UdIwQY
MBaAFDLWJpuJUgSWX37JfxnYtdnJMLeNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRZbW00bFNCSlpmZnNsX0dkaTEyY2t3dDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lNzI3N2UtZjhkYi00ZTMyLWJkZGQt
OTgxNTI0OWFhZGVmLzEvTXRZbW00bFNCSlpmZnNsX0dkaTEyY2t3dDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lNzI3N2UtZjhkYi00ZTMyLWJkZGQtOTgxNTI0OWFhZGVm
LzEvTXRZbW00bFNCSlpmZnNsX0dkaTEyY2t3dDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGT0X5Zir
hG6XfDl9+OYdFy91P+rGtDJNPIcvLwsYgD8aOhSb+wZDjiPvCwJn6k+9EtIp6lRq
RtfC8WyWtupV9SjwlyJQS8PD7/nv6NJHK1mNTiQwUFNG/CtE2mtMTkYRW8dSEvsu
D7pLbuyH2imY0gAy/QSGipsso9Cn+M1ELeszDtZBN0qbvhs6lss+7LTMgL4rUBK7
Ck89oNf2YUDVKbY9evu/X8+PGweP4AwVvRiNixPjPR6DwJ8mUBbXnhYktEEBOdtp
uv/udJxEpnM9Q4PNcaIFlnNH3JsBbFh16LZrT7r8hztlr//oPLk23C12vusu4DUU
kPIZ0uwaeTiWJw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:51 2025 by rpki-client