Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
File: ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json)
Hash identifier: GC0VN//RRDwLaNpr29XGFo2HjwZBSxuhNtms77gxeZw=
Subject key identifier: E8:2D:AB:21:FA:BE:B7:18:C9:B5:AC:2E:0F:02:11:7C:19:7C:43:C7
Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
Certificate issuer: /CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Certificate serial: 019A73A5F0347FCA1686F230F09D3533E266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
Manifest number: 0870
Signing time: Tue 11 Nov 2025 16:00:46 +0000
Manifest this update: Tue 11 Nov 2025 16:00:46 +0000
Manifest next update: Wed 12 Nov 2025 16:00:46 +0000
Files and hashes: 1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: BlV/sQ/vfSw3VIQmif6aMP1EmpZ7ueubjCGAAxVkV0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a5:f0:34:7f:ca:16:86:f2:30:f0:9d:35:33:e2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Validity
Not Before: Nov 11 16:00:46 2025 GMT
Not After : Nov 12 16:00:46 2025 GMT
Subject: CN=e82dab21fabeb718c9b5ac2e0f02117c197c43c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:23:0a:00:96:fa:18:33:d8:78:3b:6c:72:
29:a6:1f:53:35:b6:ce:45:e1:33:e5:34:1f:46:31:
87:01:dd:31:4b:6b:bd:9e:e8:0b:ed:3c:0d:a5:a7:
26:f6:17:d3:e1:39:5a:60:53:e8:75:0c:73:cf:f1:
0a:8d:34:ac:a1:d8:57:91:47:f9:74:f0:54:83:60:
c2:b6:65:28:dd:c7:62:75:1a:67:c9:2f:cc:1c:09:
88:da:73:4f:ef:b1:53:0d:47:75:93:fe:a4:ca:44:
68:4e:31:ea:57:9c:a9:88:05:49:e3:cc:2f:ea:d1:
42:f8:73:7b:76:5f:ff:66:40:54:68:41:64:9c:ce:
1c:f3:e8:44:6f:86:e8:f3:20:b4:17:23:51:d2:aa:
a8:75:8b:46:cc:a6:13:3b:6e:70:56:b0:b4:6e:7d:
28:5f:b0:97:4c:ee:eb:0d:0c:46:f4:6c:ea:da:ff:
3f:09:29:c0:67:af:f1:99:c1:cd:24:d2:09:4c:58:
fe:80:61:9d:ac:bb:7a:91:c2:8e:6c:58:49:dd:52:
b2:89:44:4a:fd:58:ee:41:64:60:b4:7a:b7:82:27:
47:d9:b0:86:7d:23:fc:72:8b:e0:a6:0a:3c:87:f7:
7d:f1:7c:b9:4d:55:3e:96:1f:19:68:04:f1:c9:34:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2D:AB:21:FA:BE:B7:18:C9:B5:AC:2E:0F:02:11:7C:19:7C:43:C7
X509v3 Authority Key Identifier:
keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a6:6a:7f:c4:ca:48:75:7c:96:fe:73:c6:67:5c:87:1a:42:
ba:ae:2c:b2:1d:23:ca:3e:4d:ae:cd:73:99:3c:cb:2f:7c:33:
af:4f:1f:21:de:74:69:ab:71:d3:f0:94:63:89:6a:bf:ed:5b:
04:49:ab:fd:fc:ec:d3:0f:e5:35:d2:a2:47:3f:2b:62:e2:25:
30:77:e7:4a:f5:24:dc:d0:cb:5d:b5:79:b4:c4:b9:f0:b0:9b:
4f:89:63:5b:cb:dc:16:09:fe:bb:1a:f0:d8:95:ec:4b:83:25:
91:14:c6:5c:c7:8b:48:1f:5d:4e:59:29:13:b4:b9:13:a9:a2:
4c:8b:95:35:02:5d:fc:10:fa:d3:bc:ea:a4:dd:a6:74:bb:ab:
57:a1:7b:b6:fc:cb:6e:39:bf:e9:1b:70:0a:1b:ac:7f:27:6e:
f4:04:79:d8:ff:56:66:cd:92:b6:da:41:e3:f6:81:58:76:97:
3e:2a:fd:dc:b0:12:e3:0b:11:c9:ae:5d:49:a1:02:f8:50:a7:
42:7e:2e:3b:2f:00:f5:da:ba:30:9f:19:09:e3:c2:33:13:40:
25:67:49:cf:56:ba:a1:10:2f:37:74:63:ac:8d:f3:d5:3d:a8:
52:cd:8d:bd:76:54:db:5d:ae:aa:49:46:4d:f9:21:14:b1:b3:
93:55:11:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzpfA0f8oWhvIw8J01M+JmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYzU5ZWRhYjk4ZWZiMGNkMzc2NzYwZjQwNjllNGM2OGI4
YmRhMjAwHhcNMjUxMTExMTYwMDQ2WhcNMjUxMTEyMTYwMDQ2WjAzMTEwLwYDVQQD
EyhlODJkYWIyMWZhYmViNzE4YzliNWFjMmUwZjAyMTE3YzE5N2M0M2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyYjCgCW+hgz2Hg7bHIpph9TNbbO
ReEz5TQfRjGHAd0xS2u9nugL7TwNpacm9hfT4TlaYFPodQxzz/EKjTSsodhXkUf5
dPBUg2DCtmUo3cdidRpnyS/MHAmI2nNP77FTDUd1k/6kykRoTjHqV5ypiAVJ48wv
6tFC+HN7dl//ZkBUaEFknM4c8+hEb4bo8yC0FyNR0qqodYtGzKYTO25wVrC0bn0o
X7CXTO7rDQxG9Gzq2v8/CSnAZ6/xmcHNJNIJTFj+gGGdrLt6kcKObFhJ3VKyiURK
/VjuQWRgtHq3gidH2bCGfSP8covgpgo8h/d98Xy5TVU+lh8ZaATxyTQexQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgtqyH6vrcYybWsLg8CEXwZfEPHMB8GA1UdIwQY
MBaAFHHFntq5jvsM03Z2D0Bp5MaLi9ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZjU4ZGMtNDk3MS00MTMyLWJhMTct
NzdlY2JiYjRmN2Q4LzEvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mZjU4ZGMtNDk3MS00MTMyLWJhMTctNzdlY2JiYjRmN2Q4
LzEvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKZqf8TK
SHV8lv5zxmdchxpCuq4ssh0jyj5Nrs1zmTzLL3wzr08fId50aatx0/CUY4lqv+1b
BEmr/fzs0w/lNdKiRz8rYuIlMHfnSvUk3NDLXbV5tMS58LCbT4ljW8vcFgn+uxrw
2JXsS4MlkRTGXMeLSB9dTlkpE7S5E6miTIuVNQJd/BD607zqpN2mdLurV6F7tvzL
bjm/6RtwChusfydu9AR52P9WZs2SttpB4/aBWHaXPir93LAS4wsRya5dSaEC+FCn
Qn4uOy8A9dq6MJ8ZCePCMxNAJWdJz1a6oRAvN3RjrI3z1T2oUs2NvXZU212uqklG
TfkhFLGzk1URxA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:14:21 2025 by rpki-client