Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
File: r4poziKkwZ8XcA9izPi7bC2vUeE.mft (raw, json)
Hash identifier: S42b1+sN6M0WjcogVhs1mH245Nb+gjgHpDoQdeIknUw=
Subject key identifier: B2:18:AC:14:E1:3E:72:CB:86:11:4D:CF:0A:A4:02:80:5E:06:F8:CA
Authority key identifier: AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
Certificate issuer: /CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Certificate serial: 019A70A51895B18B7C295BD19B5030703E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
Manifest number: 109A
Signing time: Tue 11 Nov 2025 02:00:59 +0000
Manifest this update: Tue 11 Nov 2025 02:00:59 +0000
Manifest next update: Wed 12 Nov 2025 02:00:59 +0000
Files and hashes: 1: r4poziKkwZ8XcA9izPi7bC2vUeE.crl (hash: xxOHxWWzOSC+GmgDDo1awM+XkYn42JGyKrzhwKg/hHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:18:95:b1:8b:7c:29:5b:d1:9b:50:30:70:3e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Validity
Not Before: Nov 11 02:00:59 2025 GMT
Not After : Nov 12 02:00:59 2025 GMT
Subject: CN=b218ac14e13e72cb86114dcf0aa402805e06f8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:0d:c1:a0:71:e3:4a:df:73:14:80:e7:5f:
34:9c:55:12:3b:d4:8e:85:de:ee:8e:4b:0f:49:5a:
b2:83:68:32:d2:9c:19:ac:78:b0:4c:b2:b3:dd:44:
e3:ac:9e:fc:85:5a:74:3f:9d:f6:7c:0e:4e:14:74:
4f:95:a4:98:81:ad:dd:cd:a5:93:ed:56:ab:63:8a:
a2:30:28:27:be:1c:3c:12:5d:e7:d7:a7:62:af:6f:
77:b8:10:d8:cb:4c:d9:69:8f:50:3f:60:e4:9e:dc:
ff:3b:44:46:4f:55:e5:fc:de:74:31:d8:c8:6b:bf:
4f:bf:45:43:0e:18:d8:7d:32:30:6c:4e:2b:db:c0:
a1:b8:a3:59:94:c1:e5:3a:34:cd:09:c5:74:28:b4:
c4:d9:0e:d3:53:65:42:ca:94:c0:2b:8c:ed:85:b2:
af:f2:63:41:33:3f:89:d1:93:92:77:f6:6b:de:1d:
fb:49:e0:31:bf:a8:26:0d:c7:93:90:6d:99:ff:81:
fe:68:85:10:38:34:92:9c:e5:05:c2:9f:5c:2d:d3:
8e:fc:e6:74:ca:dc:5c:39:e6:c5:98:0e:d6:4a:0b:
80:0e:c8:8f:de:56:c4:3d:1f:7e:69:ec:01:02:db:
db:32:5e:43:0b:b3:7e:67:ed:16:ba:6a:d9:3c:e5:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:18:AC:14:E1:3E:72:CB:86:11:4D:CF:0A:A4:02:80:5E:06:F8:CA
X509v3 Authority Key Identifier:
keyid:AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a3:d1:e4:e4:68:de:16:eb:64:ae:d9:66:85:60:bb:94:0a:
67:a4:0c:2c:e4:42:50:ed:6d:09:be:c3:84:e7:1f:0b:0e:e2:
49:21:cc:71:4f:81:d7:78:bb:f7:79:46:61:93:10:dc:9f:0a:
1b:d7:69:10:df:6c:e2:9d:08:fb:9d:9c:63:35:5d:ec:2c:d1:
21:9d:59:66:e0:99:61:69:26:e3:b6:10:d0:7c:59:d8:04:b5:
90:2f:d8:dc:46:99:89:ce:de:d9:5d:51:00:4c:c3:a5:ac:e6:
5e:ed:c7:c1:b9:41:6f:64:82:6c:ef:5a:bc:65:19:30:d0:11:
54:4d:f5:48:17:6e:51:e7:97:3e:75:23:56:17:a6:a3:d5:d9:
17:55:6f:1b:ce:92:85:45:7e:86:db:1a:9c:9e:5d:53:bd:f3:
86:fe:33:14:90:24:0a:d5:24:d0:a7:29:b1:c6:ce:9d:c1:a6:
30:88:26:6d:9a:8b:2d:6e:32:90:e7:1c:26:fd:a5:fb:90:2f:
07:49:d0:af:c1:75:30:82:a0:94:66:62:55:93:51:e3:b2:d1:
89:20:b9:56:7e:e8:28:fd:0f:0e:ab:fc:10:f4:d5:3b:d4:00:
54:d9:8a:ae:87:cd:62:f9:11:6d:93:df:7c:2c:c0:3e:36:86:
2e:39:dd:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpRiVsYt8KVvRm1AwcD51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOGE2OGNlMjJhNGMxOWYxNzcwMGY2MmNjZjhiYjZjMmRh
ZjUxZTEwHhcNMjUxMTExMDIwMDU5WhcNMjUxMTEyMDIwMDU5WjAzMTEwLwYDVQQD
EyhiMjE4YWMxNGUxM2U3MmNiODYxMTRkY2YwYWE0MDI4MDVlMDZmOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/MNwaBx40rfcxSA5180nFUSO9SO
hd7ujksPSVqyg2gy0pwZrHiwTLKz3UTjrJ78hVp0P532fA5OFHRPlaSYga3dzaWT
7VarY4qiMCgnvhw8El3n16dir293uBDYy0zZaY9QP2Dkntz/O0RGT1Xl/N50MdjI
a79Pv0VDDhjYfTIwbE4r28ChuKNZlMHlOjTNCcV0KLTE2Q7TU2VCypTAK4zthbKv
8mNBMz+J0ZOSd/Zr3h37SeAxv6gmDceTkG2Z/4H+aIUQODSSnOUFwp9cLdOO/OZ0
ytxcOebFmA7WSguADsiP3lbEPR9+aewBAtvbMl5DC7N+Z+0WumrZPOUZHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIYrBThPnLLhhFNzwqkAoBeBvjKMB8GA1UdIwQY
MBaAFK+KaM4ipMGfF3APYsz4u2wtr1HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRwb3ppS2t3WjhYY0E5aXpQaTdiQzJ2VWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82YjhlYTYtZjkwNy00MGQxLTllN2Qt
ZDk0ZTYwMTg0M2QxLzEvcjRwb3ppS2t3WjhYY0E5aXpQaTdiQzJ2VWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82YjhlYTYtZjkwNy00MGQxLTllN2QtZDk0ZTYwMTg0M2Qx
LzEvcjRwb3ppS2t3WjhYY0E5aXpQaTdiQzJ2VWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKPR5ORo
3hbrZK7ZZoVgu5QKZ6QMLORCUO1tCb7DhOcfCw7iSSHMcU+B13i793lGYZMQ3J8K
G9dpEN9s4p0I+52cYzVd7CzRIZ1ZZuCZYWkm47YQ0HxZ2AS1kC/Y3EaZic7e2V1R
AEzDpazmXu3HwblBb2SCbO9avGUZMNARVE31SBduUeeXPnUjVhemo9XZF1VvG86S
hUV+htsanJ5dU73zhv4zFJAkCtUk0KcpscbOncGmMIgmbZqLLW4ykOccJv2l+5Av
B0nQr8F1MIKglGZiVZNR47LRiSC5Vn7oKP0PDqv8EPTVO9QAVNmKrofNYvkRbZPf
fCzAPjaGLjnd3g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:57 2025 by rpki-client