Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft
File: kBH7CJG4_pLLZ6vSni3MhczHhkk.mft (raw, json)
Hash identifier: +IuL5fUwLVmVxjgKlv7GBwr9dPI9vxB3sWCEU/Q2gZ8=
Subject key identifier: 75:C2:5E:D1:3C:52:00:89:4A:5D:59:E4:F8:5F:E4:89:01:A6:1F:DD
Authority key identifier: 90:11:FB:08:91:B8:FE:92:CB:67:AB:D2:9E:2D:CC:85:CC:C7:86:49
Certificate issuer: /CN=9011fb0891b8fe92cb67abd29e2dcc85ccc78649
Certificate serial: 019A71EEC3615314A4D9E6DB3DAA3DB35D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBH7CJG4_pLLZ6vSni3MhczHhkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft
Manifest number: 83
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: kBH7CJG4_pLLZ6vSni3MhczHhkk.crl (hash: KYxsa55ZupuKDy5IIivLmQOQLn63+8anEJm2doJ/1q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBH7CJG4_pLLZ6vSni3MhczHhkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c3:61:53:14:a4:d9:e6:db:3d:aa:3d:b3:5d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9011fb0891b8fe92cb67abd29e2dcc85ccc78649
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=75c25ed13c5200894a5d59e4f85fe48901a61fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:68:f4:df:a7:b0:48:e0:73:77:7b:39:8a:
9c:cb:4a:58:98:6b:fa:e0:61:76:06:38:f7:d2:bf:
16:0d:6f:e0:bb:41:ab:a9:87:d4:cd:d5:ea:25:c5:
56:73:64:7c:b2:2f:61:83:98:df:83:95:01:39:80:
51:1c:77:54:37:3e:21:55:83:10:e9:52:1e:af:66:
2b:15:e0:63:e8:15:26:0c:b1:71:ab:4e:35:29:00:
27:c6:eb:92:11:19:ef:89:63:2a:5d:e5:59:9d:6d:
95:f0:83:f0:27:ac:5d:07:cb:10:e3:75:b9:3c:7b:
c3:41:64:a8:d5:89:02:e7:cf:58:05:5e:e3:1a:ac:
4f:a2:9a:12:e3:2c:79:0d:ec:d3:c5:fc:ad:90:df:
1e:72:58:93:ac:e3:fd:77:40:62:21:2e:13:bf:3b:
98:98:73:55:b9:2b:17:d8:cc:9a:ca:a0:38:8e:8e:
6c:5c:7f:3e:b9:18:bb:08:47:6c:18:9c:74:32:be:
15:aa:97:33:f2:19:f9:b9:7d:c0:56:21:dd:a4:2d:
24:09:17:a3:17:5d:bf:64:7c:fe:ff:91:e7:d9:fe:
07:c8:b1:71:ae:eb:1d:19:2e:89:53:8c:74:04:b6:
ad:8e:99:e3:13:5c:38:fc:c8:81:88:da:58:db:e6:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C2:5E:D1:3C:52:00:89:4A:5D:59:E4:F8:5F:E4:89:01:A6:1F:DD
X509v3 Authority Key Identifier:
keyid:90:11:FB:08:91:B8:FE:92:CB:67:AB:D2:9E:2D:CC:85:CC:C7:86:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBH7CJG4_pLLZ6vSni3MhczHhkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4b:a2:8e:42:90:3f:e9:7c:c9:d7:ee:90:44:2e:37:52:13:
24:b0:f8:73:10:bf:c6:cd:70:85:90:b7:51:0e:20:8c:f3:6f:
05:a6:b1:5d:5f:d9:5b:27:16:84:78:82:44:01:bf:7c:d4:30:
a1:1f:3c:e0:73:f8:c1:fc:52:1e:cf:0c:55:90:86:02:47:2f:
2d:f1:04:57:14:eb:23:1d:f6:5d:dc:09:71:82:f1:d2:07:5a:
07:2a:1c:f7:91:31:f9:cc:52:c8:c6:02:4a:bb:55:f0:45:fe:
27:5a:48:0c:2a:d7:ff:16:16:a8:b3:96:c4:e7:99:a5:bf:33:
60:cb:06:22:73:5a:6b:4f:92:27:2d:55:2f:78:2b:6b:8d:dc:
dd:ee:e1:9b:c2:31:53:66:a0:c3:5f:91:46:84:9c:3b:ec:1f:
ef:0b:05:6e:7a:b8:6d:34:7f:c1:2b:a8:28:b3:0b:ac:c3:78:
fe:97:6d:53:f3:94:99:ae:6e:ff:35:86:99:cf:cd:7b:3d:2e:
b7:c0:cf:4e:7f:d3:cb:85:91:30:ce:4a:cd:89:a7:04:4a:1c:
de:fc:7f:c6:a2:5f:6f:2e:c8:47:e7:b8:1e:52:93:70:da:a9:
57:ce:e5:3c:a8:d4:57:ba:a8:72:ae:63:c3:0d:bb:1b:49:83:
2a:eb:7c:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7sNhUxSk2ebbPao9s11MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMTFmYjA4OTFiOGZlOTJjYjY3YWJkMjllMmRjYzg1Y2Nj
Nzg2NDkwHhcNMjUxMTExMDgwMTA0WhcNMjUxMTEyMDgwMTA0WjAzMTEwLwYDVQQD
Eyg3NWMyNWVkMTNjNTIwMDg5NGE1ZDU5ZTRmODVmZTQ4OTAxYTYxZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaFo9N+nsEjgc3d7OYqcy0pYmGv6
4GF2Bjj30r8WDW/gu0GrqYfUzdXqJcVWc2R8si9hg5jfg5UBOYBRHHdUNz4hVYMQ
6VIer2YrFeBj6BUmDLFxq041KQAnxuuSERnviWMqXeVZnW2V8IPwJ6xdB8sQ43W5
PHvDQWSo1YkC589YBV7jGqxPopoS4yx5DezTxfytkN8ecliTrOP9d0BiIS4TvzuY
mHNVuSsX2MyayqA4jo5sXH8+uRi7CEdsGJx0Mr4Vqpcz8hn5uX3AViHdpC0kCRej
F12/ZHz+/5Hn2f4HyLFxrusdGS6JU4x0BLatjpnjE1w4/MiBiNpY2+afJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXCXtE8UgCJSl1Z5Phf5IkBph/dMB8GA1UdIwQY
MBaAFJAR+wiRuP6Sy2er0p4tzIXMx4ZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0JIN0NKRzRfcExMWjZ2U25pM01oY3pIaGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iNWYzMzgtN2Q4NC00YWM1LWI3ZGYt
YzU3M2QwMDdhNzgxLzEva0JIN0NKRzRfcExMWjZ2U25pM01oY3pIaGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iNWYzMzgtN2Q4NC00YWM1LWI3ZGYtYzU3M2QwMDdhNzgx
LzEva0JIN0NKRzRfcExMWjZ2U25pM01oY3pIaGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkuijkKQ
P+l8ydfukEQuN1ITJLD4cxC/xs1whZC3UQ4gjPNvBaaxXV/ZWycWhHiCRAG/fNQw
oR884HP4wfxSHs8MVZCGAkcvLfEEVxTrIx32XdwJcYLx0gdaByoc95Ex+cxSyMYC
SrtV8EX+J1pIDCrX/xYWqLOWxOeZpb8zYMsGInNaa0+SJy1VL3gra43c3e7hm8Ix
U2agw1+RRoScO+wf7wsFbnq4bTR/wSuoKLMLrMN4/pdtU/OUma5u/zWGmc/Nez0u
t8DPTn/Ty4WRMM5KzYmnBEoc3vx/xqJfby7IR+e4HlKTcNqpV87lPKjUV7qocq5j
ww27G0mDKut8WQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:19 2025 by rpki-client