Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json)
Hash identifier: YJxfZ7cq+8+FjCG73ELZjyf5KpyKjtozzL+ghTzsezo=
Subject key identifier: 37:5C:51:D5:45:D2:86:C3:B7:48:22:58:79:47:44:CE:86:64:4A:D7
Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Certificate serial: 019A7293CFD479BE42D21A34C8247F1B9D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
Manifest number: 0851
Signing time: Tue 11 Nov 2025 11:01:20 +0000
Manifest this update: Tue 11 Nov 2025 11:01:20 +0000
Manifest next update: Wed 12 Nov 2025 11:01:20 +0000
Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: c/fnHzAuKs5rwnLesWJ7Z0ISgyyOtUl7aojNgPuolNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:cf:d4:79:be:42:d2:1a:34:c8:24:7f:1b:9d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Validity
Not Before: Nov 11 11:01:20 2025 GMT
Not After : Nov 12 11:01:20 2025 GMT
Subject: CN=375c51d545d286c3b7482258794744ce86644ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:8c:df:93:9c:b0:45:90:7d:49:5b:be:84:
a6:26:bd:b4:ae:16:35:e8:be:0b:dd:15:c7:49:e4:
ea:3a:8d:21:2f:46:4c:53:97:bf:13:60:46:5a:00:
b8:76:f2:a6:14:d9:51:31:02:82:8b:8f:b8:73:48:
ce:0d:79:15:98:f1:f8:12:b9:df:e9:ea:7e:1c:c5:
80:f1:1a:f4:82:53:8b:e1:94:5e:51:6e:cc:4d:a6:
1a:60:e4:13:7e:0d:a8:22:a6:6d:b1:ff:84:91:7b:
91:56:ba:82:c0:d4:4b:43:f4:ba:8e:aa:8b:fb:21:
ba:4c:38:26:4a:0c:47:d4:80:33:fe:03:b7:48:8d:
3e:75:ee:d9:58:73:bc:d4:2a:74:fe:68:0f:e8:d8:
62:40:67:a2:0c:9b:a4:ca:8b:17:50:1a:8d:31:d2:
05:eb:1b:49:65:eb:45:de:e0:82:94:99:f0:8f:7a:
f3:c7:9a:77:00:3a:f2:fa:57:33:5c:67:98:f7:f0:
68:ee:ae:10:b5:b1:1c:35:75:94:99:f7:5e:bd:28:
b6:81:b5:b8:84:e5:cb:57:e4:92:b8:01:bb:cc:e7:
10:b1:aa:3d:2e:b1:47:5c:a5:92:ee:ec:0e:93:f7:
09:5d:1a:42:d9:e2:65:93:12:44:65:a5:7e:7b:bf:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:51:D5:45:D2:86:C3:B7:48:22:58:79:47:44:CE:86:64:4A:D7
X509v3 Authority Key Identifier:
keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bb:b8:0c:87:53:bc:ee:e1:1e:c1:8d:09:55:23:69:9c:fb:
de:74:90:89:a2:e6:05:e2:74:e1:3e:83:45:58:84:89:a2:20:
1f:2c:c8:23:e6:69:25:6a:5a:35:d6:1c:4b:82:e5:ae:7a:1a:
d7:a8:1c:95:6b:4c:69:4b:57:ab:c8:df:a7:6e:74:96:43:99:
b4:ad:98:1f:88:f0:50:8e:08:61:56:e5:46:b3:df:ec:1e:04:
67:5a:9b:08:03:e3:1c:6a:be:8f:e6:2c:7b:0e:48:c7:32:97:
88:ba:8a:76:63:6d:1e:5b:25:b2:a9:97:a4:db:02:d4:40:e4:
bc:de:bd:79:3e:8b:13:68:e6:6d:28:1b:65:c8:0e:02:63:4d:
c5:d8:b0:6c:21:97:3e:8f:87:f3:08:a2:9b:21:fa:9c:64:50:
4e:8a:e2:4b:1a:1c:46:42:7e:65:18:ad:b4:33:4a:e4:4d:8d:
26:36:a3:cd:1d:50:77:d1:c3:4f:6b:c5:52:c3:00:fb:fc:d0:
96:7a:ac:0e:6b:69:63:0e:ce:07:35:1d:24:33:b7:47:63:7b:
40:56:1f:e0:33:eb:c6:53:d0:a9:bd:55:3f:82:b3:c6:59:bd:
8e:ce:06:b5:f9:3e:1d:04:7e:78:ee:0b:b2:59:fa:49:8d:a8:
ab:2e:a6:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk8/Ueb5C0ho0yCR/G518MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNDIyMzRiYWM2MTcxMjcwM2UzOThhNmQ1YmYwNDhjNWM5
ZjQwMzIwHhcNMjUxMTExMTEwMTIwWhcNMjUxMTEyMTEwMTIwWjAzMTEwLwYDVQQD
EygzNzVjNTFkNTQ1ZDI4NmMzYjc0ODIyNTg3OTQ3NDRjZTg2NjQ0YWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfWM35OcsEWQfUlbvoSmJr20rhY1
6L4L3RXHSeTqOo0hL0ZMU5e/E2BGWgC4dvKmFNlRMQKCi4+4c0jODXkVmPH4Ernf
6ep+HMWA8Rr0glOL4ZReUW7MTaYaYOQTfg2oIqZtsf+EkXuRVrqCwNRLQ/S6jqqL
+yG6TDgmSgxH1IAz/gO3SI0+de7ZWHO81Cp0/mgP6NhiQGeiDJukyosXUBqNMdIF
6xtJZetF3uCClJnwj3rzx5p3ADry+lczXGeY9/Bo7q4QtbEcNXWUmfdevSi2gbW4
hOXLV+SSuAG7zOcQsao9LrFHXKWS7uwOk/cJXRpC2eJlkxJEZaV+e78pEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdcUdVF0obDt0giWHlHRM6GZErXMB8GA1UdIwQY
MBaAFK5CI0usYXEnA+OYptW/BIxcn0AyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wODkzZDAtZDFhMS00Mjc2LWE1Yjct
ZWUyYmNmMTg2ZjI0LzEvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8wODkzZDAtZDFhMS00Mjc2LWE1YjctZWUyYmNmMTg2ZjI0
LzEvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7u4DIdT
vO7hHsGNCVUjaZz73nSQiaLmBeJ04T6DRViEiaIgHyzII+ZpJWpaNdYcS4Llrnoa
16gclWtMaUtXq8jfp250lkOZtK2YH4jwUI4IYVblRrPf7B4EZ1qbCAPjHGq+j+Ys
ew5IxzKXiLqKdmNtHlslsqmXpNsC1EDkvN69eT6LE2jmbSgbZcgOAmNNxdiwbCGX
Po+H8wiimyH6nGRQToriSxocRkJ+ZRittDNK5E2NJjajzR1Qd9HDT2vFUsMA+/zQ
lnqsDmtpYw7OBzUdJDO3R2N7QFYf4DPrxlPQqb1VP4Kzxlm9js4Gtfk+HQR+eO4L
sln6SY2oqy6m9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:46 2025 by rpki-client