Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
File: RGFYx1seMgOyK1g8wYTD9UiLJdY.mft (raw, json)
Hash identifier: NfMOkDIwV6SzmA9mObwXnJgfG3x+z5+v2rrkp9KID68=
Subject key identifier: 6B:3A:4E:1D:FF:2D:F6:EA:D9:9A:85:18:67:D9:97:97:50:63:D5:E0
Authority key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
Certificate issuer: /CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Certificate serial: 019A5978DBFC0AEE0F921ECCE2039F2D1DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
Manifest number: 14DF
Signing time: Thu 06 Nov 2025 14:01:24 +0000
Manifest this update: Thu 06 Nov 2025 14:01:24 +0000
Manifest next update: Fri 07 Nov 2025 14:01:24 +0000
Files and hashes: 1: RGFYx1seMgOyK1g8wYTD9UiLJdY.crl (hash: 6vV7F8dn1K1XZsoLzTQMfyCnLsxFifArV2uqnqEdVmU=)
2: VIvZu8tQokm1xiej3HARVMmJcks.roa (hash: ZzmGdbDE4kWOnJhlJzMP8vBrXKF4L54dsaKlIHnEfEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:78:db:fc:0a:ee:0f:92:1e:cc:e2:03:9f:2d:1d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Validity
Not Before: Nov 6 14:01:24 2025 GMT
Not After : Nov 7 14:01:24 2025 GMT
Subject: CN=6b3a4e1dff2df6ead99a851867d997975063d5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:18:2d:e5:1e:02:e1:22:a5:8c:e4:77:c1:
df:69:61:97:73:4c:00:b3:52:38:18:cf:da:93:b1:
80:87:a9:d9:8c:c6:4d:0a:1c:db:3b:95:37:fa:a9:
e4:8a:2a:2b:27:de:a3:11:88:3c:ed:fb:82:e6:d0:
17:96:19:32:bc:d6:78:1d:a8:51:4c:2b:46:9c:85:
99:28:d2:55:4d:0c:de:99:7f:28:69:4c:93:34:1f:
3b:b0:7e:67:a1:6b:13:62:2d:cb:dc:84:9c:ad:3e:
2b:e5:21:f8:4f:6a:93:d4:6d:47:55:ca:fe:17:84:
3f:bd:c6:f8:40:5c:95:b8:5a:ab:e8:f2:ca:d9:f4:
e9:31:18:c2:5b:86:df:a0:64:3a:c4:55:54:40:8e:
85:1e:a1:b3:91:2d:0f:3c:66:0c:44:c2:31:19:60:
82:94:04:6d:00:45:be:fb:f9:e0:74:5a:99:14:1b:
b1:9b:8f:a8:2a:72:94:01:76:fb:3d:b1:9a:38:fc:
77:85:c5:8f:26:b3:e1:9d:a3:d7:96:d5:c7:8f:4c:
6e:34:9a:39:65:d2:2f:63:e0:da:e7:bd:39:45:bf:
13:0e:fd:d8:a5:b5:32:b0:d9:2b:f0:f5:69:5a:d3:
22:b1:7c:af:31:f0:68:5a:36:7e:8e:0a:51:42:3a:
20:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3A:4E:1D:FF:2D:F6:EA:D9:9A:85:18:67:D9:97:97:50:63:D5:E0
X509v3 Authority Key Identifier:
keyid:44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:47:64:22:48:62:c4:6c:85:d3:3a:af:4a:8e:0e:c8:6a:6f:
3d:7a:43:f4:3f:ce:66:24:02:56:55:36:56:f5:d8:13:fb:4d:
9e:9d:60:89:e4:3e:a3:8e:85:f5:d9:30:53:db:03:07:f8:00:
c8:63:86:5f:8f:74:67:8c:4e:b7:5b:c7:6a:43:7b:e1:81:f1:
59:0c:15:9f:36:06:2f:59:eb:a7:00:7e:65:72:4a:34:3c:2c:
7c:de:56:12:f4:90:ee:6f:64:0e:8c:d3:b2:3d:a5:64:b9:0a:
d5:68:1f:ef:91:c9:ea:29:3f:e2:a6:34:5c:fb:b9:c3:4e:f1:
8c:d0:92:ae:80:64:6f:cf:86:c4:d8:e1:4b:ae:d2:ea:0c:4c:
91:00:7c:bc:76:12:45:e6:53:7c:c7:4e:16:04:ab:7e:13:55:
49:fc:22:b2:7d:76:59:90:ca:b5:78:8d:68:e4:05:e6:6c:d2:
57:73:b8:39:a3:fd:7e:5e:a3:50:6e:b6:df:5b:c2:a8:e5:d7:
b8:b5:6d:34:d4:30:08:4d:02:48:1a:fe:f1:00:9d:4c:03:51:
a9:07:66:b2:f7:7d:e2:b3:cc:31:a1:6b:09:06:4a:f0:41:fc:
32:d4:78:55:eb:1f:d8:b5:17:7d:1b:f4:2e:25:2b:2f:2b:99:
8b:1c:2b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpZeNv8Cu4Pkh7M4gOfLR3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NjE1OGM3NWIxZTMyMDNiMjJiNTgzY2MxODRjM2Y1NDg4
YjI1ZDYwHhcNMjUxMTA2MTQwMTI0WhcNMjUxMTA3MTQwMTI0WjAzMTEwLwYDVQQD
Eyg2YjNhNGUxZGZmMmRmNmVhZDk5YTg1MTg2N2Q5OTc5NzUwNjNkNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAkYLeUeAuEipYzkd8HfaWGXc0wA
s1I4GM/ak7GAh6nZjMZNChzbO5U3+qnkiiorJ96jEYg87fuC5tAXlhkyvNZ4HahR
TCtGnIWZKNJVTQzemX8oaUyTNB87sH5noWsTYi3L3IScrT4r5SH4T2qT1G1HVcr+
F4Q/vcb4QFyVuFqr6PLK2fTpMRjCW4bfoGQ6xFVUQI6FHqGzkS0PPGYMRMIxGWCC
lARtAEW++/ngdFqZFBuxm4+oKnKUAXb7PbGaOPx3hcWPJrPhnaPXltXHj0xuNJo5
ZdIvY+Da5705Rb8TDv3YpbUysNkr8PVpWtMisXyvMfBoWjZ+jgpRQjog6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGs6Th3/Lfbq2ZqFGGfZl5dQY9XgMB8GA1UdIwQY
MBaAFERhWMdbHjIDsitYPMGEw/VIiyXWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkdGWXgxc2VNZ095SzFnOHdZVEQ5VWlMSmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jZDcwM2EtMDZmOS00MTA2LThjOGQt
YjcyODliMzcwYjZkLzEvUkdGWXgxc2VNZ095SzFnOHdZVEQ5VWlMSmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jZDcwM2EtMDZmOS00MTA2LThjOGQtYjcyODliMzcwYjZk
LzEvUkdGWXgxc2VNZ095SzFnOHdZVEQ5VWlMSmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakdkIkhi
xGyF0zqvSo4OyGpvPXpD9D/OZiQCVlU2VvXYE/tNnp1gieQ+o46F9dkwU9sDB/gA
yGOGX490Z4xOt1vHakN74YHxWQwVnzYGL1nrpwB+ZXJKNDwsfN5WEvSQ7m9kDozT
sj2lZLkK1Wgf75HJ6ik/4qY0XPu5w07xjNCSroBkb8+GxNjhS67S6gxMkQB8vHYS
ReZTfMdOFgSrfhNVSfwisn12WZDKtXiNaOQF5mzSV3O4OaP9fl6jUG6231vCqOXX
uLVtNNQwCE0CSBr+8QCdTANRqQdmsvd94rPMMaFrCQZK8EH8MtR4Vesf2LUXfRv0
LiUrLyuZixwrmg==
-----END CERTIFICATE-----
Generated at Thu Nov 6 19:27:41 2025 by rpki-client