Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier: RHCuITxuKwdo1KNZOlsVen8+1uYZ3kB3NL7Z/Qf53Gw=
Subject key identifier: 75:6B:66:FC:0F:19:43:87:B9:6B:77:56:55:2F:E8:F7:57:2D:CA:FE
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer: /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial: 019A0290AF823E11616A9C860C988C1659AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number: 03E2
Signing time: Mon 20 Oct 2025 17:00:27 +0000
Manifest this update: Mon 20 Oct 2025 17:00:27 +0000
Manifest next update: Tue 21 Oct 2025 17:00:27 +0000
Files and hashes: 1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: 96ly6nOiTZ1KirczsoQXvu1yMNc5dZUYhBKy/Bi6yec=)
2: 3_lvOlC8Q73awEsCGt68pft-scE.roa (hash: kkfK8/3sSi/mI91PBNQyjxR7j14LRCGJu3KC5n63R3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:af:82:3e:11:61:6a:9c:86:0c:98:8c:16:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Validity
Not Before: Oct 20 17:00:27 2025 GMT
Not After : Oct 21 17:00:27 2025 GMT
Subject: CN=756b66fc0f194387b96b7756552fe8f7572dcafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4c:bb:bd:b1:ae:58:d8:89:cc:d9:d9:97:e5:
b1:47:3c:9d:d9:a6:ff:5c:27:06:c5:f6:4e:08:ad:
e4:f9:60:a2:98:50:25:24:82:9d:47:03:70:f8:82:
21:d9:82:76:e5:07:f6:af:3b:a0:f4:d8:66:12:18:
c0:eb:40:da:3b:f4:c5:87:27:99:c8:47:29:1e:5d:
0a:fe:04:25:5f:c8:fb:fe:0d:9d:4f:99:a1:fc:1d:
e3:37:18:e9:93:39:98:0c:cc:f4:d4:42:9d:ce:aa:
a0:68:1e:f5:98:e0:c1:d6:13:a9:a9:0c:47:14:29:
e5:1d:8b:07:0a:60:b9:46:8e:9c:a6:f1:86:49:ed:
9b:19:89:92:de:bf:98:34:73:10:1a:1b:80:1b:7d:
03:79:2a:5b:20:a6:be:1d:52:f3:33:3f:17:a0:52:
79:eb:7f:f9:b6:9e:60:63:a2:98:4d:e8:04:b5:e7:
ab:df:79:9f:35:f4:44:3f:8b:c0:c0:f0:dc:c3:5d:
9d:1d:25:54:28:b6:ac:5e:6d:6b:17:01:4d:01:4b:
bd:0e:a6:78:bb:82:3d:8a:22:05:16:5e:ab:fb:37:
58:1d:45:18:a1:d9:f6:e7:f1:b9:02:b3:39:9a:54:
be:05:cd:e8:07:d6:cf:02:10:ea:4c:71:8c:19:77:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6B:66:FC:0F:19:43:87:B9:6B:77:56:55:2F:E8:F7:57:2D:CA:FE
X509v3 Authority Key Identifier:
keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:36:62:71:8c:19:41:cd:21:73:ff:8d:b5:5c:fe:1f:3c:f5:
bc:2a:f4:29:51:4a:eb:0e:3c:d8:be:99:7e:5e:b9:04:d0:f6:
2e:4f:bd:36:fa:b5:08:aa:bc:e3:be:6a:4e:8e:c6:0a:7f:1d:
fc:83:c6:cc:fe:ea:b1:0c:f8:ee:93:dd:6d:8e:87:63:78:29:
ab:19:bd:ef:fe:05:de:b3:a2:27:0f:51:f1:87:79:46:3c:d0:
33:fb:55:be:48:4f:2e:d7:ca:c1:cf:50:5d:20:2b:61:bc:76:
91:cd:e5:f4:79:a3:b9:57:92:3b:06:9d:88:5d:df:98:e6:26:
26:0d:47:cc:5e:76:10:cd:74:87:27:cb:f5:47:2c:49:00:f0:
cf:20:ea:db:96:a3:d8:36:9e:8d:88:18:a8:c2:12:e1:bf:69:
1d:80:a9:2a:29:17:2e:65:85:0b:55:68:21:82:40:04:e3:46:
e0:13:dd:a0:93:d8:ee:f9:9b:68:75:2f:42:80:5b:92:f2:fa:
d2:cc:cb:85:2e:d0:0a:a7:c3:d5:d6:29:60:61:cf:7b:03:0a:
2b:d6:f2:1d:87:d7:31:84:14:9f:0a:f2:a4:cc:4b:b6:8f:ac:
ab:1d:5b:68:bd:51:60:e8:71:96:f1:d3:83:22:8b:6d:ee:72:
5d:41:4e:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCkK+CPhFhapyGDJiMFlmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjIyYmU4OGE1Y2VhZWY4YzMzMGQ3ZTk2ZmZmNDM1ZTgy
MDUzYjQwHhcNMjUxMDIwMTcwMDI3WhcNMjUxMDIxMTcwMDI3WjAzMTEwLwYDVQQD
Eyg3NTZiNjZmYzBmMTk0Mzg3Yjk2Yjc3NTY1NTJmZThmNzU3MmRjYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Uy7vbGuWNiJzNnZl+WxRzyd2ab/
XCcGxfZOCK3k+WCimFAlJIKdRwNw+IIh2YJ25Qf2rzug9NhmEhjA60DaO/TFhyeZ
yEcpHl0K/gQlX8j7/g2dT5mh/B3jNxjpkzmYDMz01EKdzqqgaB71mODB1hOpqQxH
FCnlHYsHCmC5Ro6cpvGGSe2bGYmS3r+YNHMQGhuAG30DeSpbIKa+HVLzMz8XoFJ5
63/5tp5gY6KYTegEteer33mfNfREP4vAwPDcw12dHSVUKLasXm1rFwFNAUu9DqZ4
u4I9iiIFFl6r+zdYHUUYodn25/G5ArM5mlS+Bc3oB9bPAhDqTHGMGXekbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVrZvwPGUOHuWt3VlUv6PdXLcr+MB8GA1UdIwQY
MBaAFNdiK+iKXOrvjDMNfpb/9DXoIFO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMt
MzA2MjUzMTc0MzBkLzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMtMzA2MjUzMTc0MzBk
LzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjZicYwZ
Qc0hc/+NtVz+Hzz1vCr0KVFK6w482L6Zfl65BND2Lk+9Nvq1CKq8475qTo7GCn8d
/IPGzP7qsQz47pPdbY6HY3gpqxm97/4F3rOiJw9R8Yd5RjzQM/tVvkhPLtfKwc9Q
XSArYbx2kc3l9HmjuVeSOwadiF3fmOYmJg1HzF52EM10hyfL9UcsSQDwzyDq25aj
2DaejYgYqMIS4b9pHYCpKikXLmWFC1VoIYJABONG4BPdoJPY7vmbaHUvQoBbkvL6
0szLhS7QCqfD1dYpYGHPewMKK9byHYfXMYQUnwrypMxLto+sqx1baL1RYOhxlvHT
gyKLbe5yXUFOkA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:59:05 2025 by rpki-client