Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
File: 55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json)
Hash identifier: kVWgUKl2OKhohoLUi8hGFVw+f7WrXl6I5pfnj7iPbmM=
Subject key identifier: 81:FA:E5:17:2B:79:1A:23:98:92:C9:68:EE:85:CA:7B:26:C5:75:B1
Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Certificate issuer: /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Certificate serial: 019A71EEA892D4D5F89C2B4E954F2E57D169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
Manifest number: 046E
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: Zw7SROSI3UYVAVlYYrHHRBfgUwnGjBcS7RPgTP1Zmw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a8:92:d4:d5:f8:9c:2b:4e:95:4f:2e:57:d1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=81fae5172b791a239892c968ee85ca7b26c575b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:8b:5b:b9:a3:26:15:ef:7c:04:5d:ef:db:
a6:e4:0d:61:86:7f:64:37:89:40:83:67:58:aa:ff:
ba:77:cc:16:4c:de:f8:5d:42:67:35:46:53:ce:4c:
75:e5:96:77:9c:ba:af:01:7f:83:b1:24:91:95:fd:
7a:c5:e8:8f:e6:b5:ad:fb:30:1e:57:3a:d6:f3:4f:
9e:a6:ab:b1:6e:f8:d1:16:f9:d0:a8:73:83:b7:94:
d5:c0:5e:c3:1c:8d:19:de:a5:73:87:15:8b:4a:04:
0c:c8:8b:e0:29:32:0c:2e:05:c9:f8:b5:3e:06:15:
d0:41:6d:69:2f:ed:56:35:43:3e:49:1f:bb:a7:6f:
31:17:a7:ad:f5:18:ff:d0:69:4e:e9:05:94:01:10:
db:ec:4c:13:f2:41:32:f6:27:fd:a6:83:cc:43:90:
02:b1:95:bb:5c:0c:d9:2f:bb:75:06:e9:d3:c0:af:
c7:25:87:e3:ca:5f:24:20:86:2d:74:81:b8:1f:61:
ac:5c:9f:94:c4:08:c6:3d:24:06:38:75:ef:43:30:
6e:93:63:af:fd:ff:6b:6a:79:4c:05:bf:57:bf:12:
fd:a3:1f:8e:b8:42:74:fd:a5:b3:77:e4:bd:1a:8c:
53:02:b6:88:93:19:73:f1:cd:94:98:21:5c:1a:e2:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FA:E5:17:2B:79:1A:23:98:92:C9:68:EE:85:CA:7B:26:C5:75:B1
X509v3 Authority Key Identifier:
keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:41:ef:4c:c4:3c:ed:45:f6:8b:33:3a:cb:ef:6e:a9:63:a6:
0e:02:b2:50:e2:d9:d0:52:16:47:37:4f:24:fe:08:56:c0:ff:
c6:18:59:8b:e5:1d:c1:48:db:60:3c:7d:37:f1:e9:e1:76:3f:
d6:8c:d4:9f:64:fc:9b:31:99:a0:e6:b0:a0:61:7d:d9:fd:cd:
04:07:a4:43:e5:ef:7c:a9:08:75:bf:44:ab:33:7d:4c:f5:1e:
b3:22:51:af:03:b5:f7:c2:3a:a3:b6:85:2c:3c:0d:b6:f3:f2:
23:93:c5:0b:4f:bb:e1:ae:cf:78:29:5d:d9:bf:84:83:de:cd:
aa:15:19:a7:29:2a:6e:b6:f6:3f:a7:3b:ec:c0:76:ac:d3:8c:
40:2a:9d:2f:84:02:44:8f:37:3a:a9:c3:9f:6f:e3:cd:2d:86:
64:0f:ae:1b:dd:18:15:82:49:40:69:39:bb:a2:69:63:a8:38:
17:b4:3a:3e:a6:79:ee:71:8f:e2:72:dd:b0:ff:50:c9:bb:f7:
44:12:e3:64:59:26:70:ff:bd:0e:a5:25:77:a4:d9:47:47:f7:
42:a1:55:ae:cf:8a:65:5a:f7:ad:cd:5a:77:7c:b0:d8:08:7b:
ce:1a:12:e6:bc:1a:fd:41:6f:e3:12:63:8a:db:f6:1d:c4:fd:
65:93:cc:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7qiS1NX4nCtOlU8uV9FpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OWFkYzJhNjI3MDI3MDhiMWEwZWUwZGYzYjRjZjkyMjg5
NmRjZDYwHhcNMjUxMTExMDgwMDU3WhcNMjUxMTEyMDgwMDU3WjAzMTEwLwYDVQQD
Eyg4MWZhZTUxNzJiNzkxYTIzOTg5MmM5NjhlZTg1Y2E3YjI2YzU3NWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAuLW7mjJhXvfARd79um5A1hhn9k
N4lAg2dYqv+6d8wWTN74XUJnNUZTzkx15ZZ3nLqvAX+DsSSRlf16xeiP5rWt+zAe
VzrW80+epquxbvjRFvnQqHODt5TVwF7DHI0Z3qVzhxWLSgQMyIvgKTIMLgXJ+LU+
BhXQQW1pL+1WNUM+SR+7p28xF6et9Rj/0GlO6QWUARDb7EwT8kEy9if9poPMQ5AC
sZW7XAzZL7t1BunTwK/HJYfjyl8kIIYtdIG4H2GsXJ+UxAjGPSQGOHXvQzBuk2Ov
/f9ranlMBb9XvxL9ox+OuEJ0/aWzd+S9GoxTAraIkxlz8c2UmCFcGuKstwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH65RcreRojmJLJaO6FynsmxXWxMB8GA1UdIwQY
MBaAFOea3CpicCcIsaDuDfO0z5IoltzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVyY0ttSndKd2l4b080Tjg3VFBraWlXM05ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81YjYxN2QtMDhlYS00Njc0LWIzYzQt
MzYzYzFiNDMxOTYzLzEvNTVyY0ttSndKd2l4b080Tjg3VFBraWlXM05ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi81YjYxN2QtMDhlYS00Njc0LWIzYzQtMzYzYzFiNDMxOTYz
LzEvNTVyY0ttSndKd2l4b080Tjg3VFBraWlXM05ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkHvTMQ8
7UX2izM6y+9uqWOmDgKyUOLZ0FIWRzdPJP4IVsD/xhhZi+UdwUjbYDx9N/Hp4XY/
1ozUn2T8mzGZoOawoGF92f3NBAekQ+XvfKkIdb9EqzN9TPUesyJRrwO198I6o7aF
LDwNtvPyI5PFC0+74a7PeCld2b+Eg97NqhUZpykqbrb2P6c77MB2rNOMQCqdL4QC
RI83OqnDn2/jzS2GZA+uG90YFYJJQGk5u6JpY6g4F7Q6PqZ57nGP4nLdsP9Qybv3
RBLjZFkmcP+9DqUld6TZR0f3QqFVrs+KZVr3rc1ad3yw2Ah7zhoS5rwa/UFv4xJj
itv2HcT9ZZPMHw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:50 2025 by rpki-client