Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File: v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier: fXnFcihqoRwfjsOsQ6fd2+P8oIP/Ye64gwgWrMjTRBA=
Subject key identifier: 79:6A:11:E3:01:9A:9F:37:E1:F0:DA:7C:40:C8:BE:1D:A0:85:C0:F0
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer: /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial: 019A70DC800088C5ED4E649302D6F7B192A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number: 04DB
Signing time: Tue 11 Nov 2025 03:01:30 +0000
Manifest this update: Tue 11 Nov 2025 03:01:30 +0000
Manifest next update: Wed 12 Nov 2025 03:01:30 +0000
Files and hashes: 1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: He3j06WXQLkEEb8Za6XGsrOmsQiAr16qUKVfAMRzNHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:80:00:88:c5:ed:4e:64:93:02:d6:f7:b1:92:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Validity
Not Before: Nov 11 03:01:30 2025 GMT
Not After : Nov 12 03:01:30 2025 GMT
Subject: CN=796a11e3019a9f37e1f0da7c40c8be1da085c0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:bb:e3:3e:fa:d0:8a:49:13:94:d3:31:88:
89:97:fe:41:0e:57:7f:58:a1:28:96:6b:cb:5b:3c:
c7:39:95:12:ff:bc:e0:67:61:5b:c9:84:7b:67:4b:
43:68:63:aa:1c:fe:2d:25:f3:a3:c4:94:0a:5d:b1:
5f:91:24:29:21:20:52:3f:ee:4f:c0:6c:7e:56:49:
fb:85:b0:fe:1c:0b:73:43:24:a8:9d:44:81:98:1b:
db:03:af:99:1b:a1:7f:3d:df:be:48:96:78:07:e8:
b1:6c:e2:21:67:bb:d0:33:09:44:40:f9:03:05:01:
91:9e:6b:37:7e:3a:50:94:d3:da:d8:06:ef:81:32:
4d:0b:79:3d:35:5b:48:fc:21:58:a5:c6:c2:cb:c4:
de:a1:77:e4:88:56:74:b2:d2:c2:eb:38:3f:10:ef:
c1:c2:e0:b4:6f:3a:5d:f7:e1:80:c8:7f:a5:d7:78:
dd:9d:2d:82:c2:fe:97:5c:3f:00:68:4b:1e:c5:57:
92:e6:a4:16:6b:ed:20:ab:ae:b9:79:4b:ef:75:f1:
66:4f:5b:2b:c6:cf:a1:9e:e1:79:51:ba:e5:a0:5a:
f4:ea:e5:81:d1:a5:b4:cd:7c:ea:73:3a:d1:82:a9:
e9:71:f2:85:19:27:99:8a:c8:3b:97:2b:a5:56:4d:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6A:11:E3:01:9A:9F:37:E1:F0:DA:7C:40:C8:BE:1D:A0:85:C0:F0
X509v3 Authority Key Identifier:
keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:af:01:04:ce:8e:94:c4:4a:f1:a3:94:6c:08:03:a2:47:38:
ef:8b:5a:d1:2a:9b:f3:9e:c1:c1:66:8a:0a:17:8f:d9:6f:92:
15:53:f0:84:5a:cc:b9:d9:c0:35:56:70:5e:7a:7f:00:55:4b:
58:e1:9a:bd:31:e6:d8:6f:cb:06:5a:a3:cf:40:ca:a7:50:46:
71:05:d9:05:a8:fe:b9:ed:05:02:7a:26:7e:f9:7c:ab:05:39:
d8:06:f7:34:03:9c:1d:f9:5d:f7:d8:94:d5:78:df:66:f8:8c:
44:e8:5e:0f:1c:f6:91:d8:0e:1a:25:d6:a3:6e:38:76:08:a1:
8f:68:57:83:3b:5d:a3:6b:32:f5:1d:ce:4e:64:36:e6:b0:3f:
e8:22:aa:31:37:37:47:30:cf:d3:81:55:98:52:de:b6:81:7f:
e0:22:d3:bd:e1:de:da:9c:eb:26:8d:a1:0c:80:8b:c9:01:d7:
58:84:b7:0e:7f:16:b2:91:29:17:5f:d4:b1:30:17:46:76:2b:
f6:4d:1a:0c:49:aa:e6:15:ee:d8:db:8e:cc:bf:e1:91:96:cb:
0f:44:4c:75:41:e0:db:1c:17:dd:a5:b9:ac:42:5f:4f:15:7a:
90:f8:2a:05:66:e9:a7:a5:63:d0:e4:a4:54:18:38:de:09:7f:
c8:f7:ac:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3IAAiMXtTmSTAtb3sZKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOWFmYjgyM2YxZjhhZjg3MmU3OTNmMjdiNjRhZGVmOGNk
NGRjMWIwHhcNMjUxMTExMDMwMTMwWhcNMjUxMTEyMDMwMTMwWjAzMTEwLwYDVQQD
Eyg3OTZhMTFlMzAxOWE5ZjM3ZTFmMGRhN2M0MGM4YmUxZGEwODVjMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb274z760IpJE5TTMYiJl/5BDld/
WKEolmvLWzzHOZUS/7zgZ2FbyYR7Z0tDaGOqHP4tJfOjxJQKXbFfkSQpISBSP+5P
wGx+Vkn7hbD+HAtzQySonUSBmBvbA6+ZG6F/Pd++SJZ4B+ixbOIhZ7vQMwlEQPkD
BQGRnms3fjpQlNPa2AbvgTJNC3k9NVtI/CFYpcbCy8TeoXfkiFZ0stLC6zg/EO/B
wuC0bzpd9+GAyH+l13jdnS2Cwv6XXD8AaEsexVeS5qQWa+0gq665eUvvdfFmT1sr
xs+hnuF5UbrloFr06uWB0aW0zXzqczrRgqnpcfKFGSeZisg7lyulVk0I5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlqEeMBmp834fDafEDIvh2ghcDwMB8GA1UdIwQY
MBaAFL+a+4I/H4r4cueT8ntkre+M1NwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjVyN2dqOGZpdmh5NTVQeWUyU3Q3NHpVM0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kYzMyOTQtYmQ0Zi00ZmVmLWI5Zjct
MzY2Mjc4NWJhYWFkLzEvdjVyN2dqOGZpdmh5NTVQeWUyU3Q3NHpVM0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kYzMyOTQtYmQ0Zi00ZmVmLWI5ZjctMzY2Mjc4NWJhYWFk
LzEvdjVyN2dqOGZpdmh5NTVQeWUyU3Q3NHpVM0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaq8BBM6O
lMRK8aOUbAgDokc474ta0Sqb857BwWaKCheP2W+SFVPwhFrMudnANVZwXnp/AFVL
WOGavTHm2G/LBlqjz0DKp1BGcQXZBaj+ue0FAnomfvl8qwU52Ab3NAOcHfld99iU
1XjfZviMROheDxz2kdgOGiXWo244dgihj2hXgztdo2sy9R3OTmQ25rA/6CKqMTc3
RzDP04FVmFLetoF/4CLTveHe2pzrJo2hDICLyQHXWIS3Dn8WspEpF1/UsTAXRnYr
9k0aDEmq5hXu2NuOzL/hkZbLD0RMdUHg2xwX3aW5rEJfTxV6kPgqBWbpp6Vj0OSk
VBg43gl/yPescg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:25 2025 by rpki-client