Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
File: J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft (raw, json)
Hash identifier: dKoOe+aunMBb1Ykq3ZHuP/g/85U53cyBIl91Z0Gui84=
Subject key identifier: FE:53:4E:A8:BC:EC:3C:99:B4:66:9C:1E:BB:FD:1C:40:87:13:C4:36
Authority key identifier: 27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
Certificate issuer: /CN=27a110452384649d05c1e98fb97b49ae11600973
Certificate serial: 019A73012D498217FF4023735B081E717E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
Manifest number: 0F3A
Signing time: Tue 11 Nov 2025 13:00:48 +0000
Manifest this update: Tue 11 Nov 2025 13:00:48 +0000
Manifest next update: Wed 12 Nov 2025 13:00:48 +0000
Files and hashes: 1: J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl (hash: ZrNQzEnPQC6erNAIFEkohAwh7sA/mebsTJ28oC63eQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:2d:49:82:17:ff:40:23:73:5b:08:1e:71:7e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a110452384649d05c1e98fb97b49ae11600973
Validity
Not Before: Nov 11 13:00:48 2025 GMT
Not After : Nov 12 13:00:48 2025 GMT
Subject: CN=fe534ea8bcec3c99b4669c1ebbfd1c408713c436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:39:54:9d:eb:01:c5:2b:3b:0a:1b:ef:49:
a9:5c:b9:9d:54:9f:c2:48:bb:38:df:2c:a5:5e:ba:
0a:ac:2b:9d:a8:30:21:d0:e2:63:f3:00:66:24:7f:
4d:18:17:87:dd:b0:cb:bf:16:79:fe:3d:a7:c1:90:
f7:04:a7:52:ae:4a:c7:c1:f8:f4:9c:50:7f:1e:72:
b1:a2:de:ce:e7:e6:53:2f:42:9c:5b:17:be:9e:54:
6d:36:bc:13:45:41:89:b7:53:db:41:51:e6:da:32:
95:01:82:ed:b5:1a:fd:e3:a8:00:e2:29:5d:cb:08:
21:9d:2f:20:da:00:61:a8:4c:c2:84:84:d4:a3:14:
b1:d4:48:a8:3e:82:a9:28:6e:bb:67:5b:85:ae:da:
46:1e:b6:cd:8a:9e:68:1b:19:b4:b5:36:1d:68:46:
db:5a:d6:ff:e2:f8:72:31:86:43:52:b3:89:82:2c:
d4:05:e2:38:d1:bb:e3:c1:b8:76:45:66:b6:dd:5e:
99:b1:61:4d:fb:2d:cc:87:8b:af:63:94:a7:4b:ec:
df:69:6e:cc:5a:f5:29:1e:80:87:fa:83:5b:b5:2e:
93:9d:9f:d2:0b:02:0d:ca:8b:42:5a:34:cd:a0:f0:
6e:01:a0:d7:e8:f6:be:10:07:10:9f:23:b6:63:79:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:53:4E:A8:BC:EC:3C:99:B4:66:9C:1E:BB:FD:1C:40:87:13:C4:36
X509v3 Authority Key Identifier:
keyid:27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f3:18:ca:b7:7f:91:fc:ca:bd:22:be:cd:a0:8a:a5:6d:ee:
50:7d:91:59:98:38:10:29:22:3c:c0:dd:8f:b8:34:f5:c4:1a:
5c:86:b5:b7:44:16:8e:d3:a9:fe:f1:b2:07:da:ba:f7:a0:3f:
a7:91:17:b9:61:49:de:ad:d7:25:d0:b7:79:44:92:8e:b7:75:
f0:d7:92:03:0e:67:bb:0c:6a:a2:3f:db:61:72:dd:4e:f0:8d:
43:45:ec:08:e6:db:d2:a4:d2:2a:71:7d:7c:47:f5:0e:7f:d4:
cb:77:fd:cc:ae:b6:18:6f:08:57:dd:02:f9:ee:a5:11:64:50:
a4:83:be:7a:05:62:ea:e0:96:b6:c2:21:ac:dc:e8:3c:63:79:
53:14:3b:f6:a3:39:5f:2c:bc:3b:1b:18:02:d5:d2:c0:9d:27:
f4:35:52:9a:03:f1:58:a9:e3:4f:fd:84:2c:1a:28:43:c1:fc:
af:e3:2d:1b:d8:e5:87:eb:f5:e0:41:0f:70:95:a4:f0:9f:17:
9e:35:57:53:da:fb:34:fd:4a:88:11:bd:92:39:31:1f:32:00:
9c:4c:91:3a:2f:83:9e:8b:a3:81:92:20:94:4a:e0:e6:2a:24:
8b:92:6a:b3:e0:3a:d0:5b:2f:dd:59:36:26:e6:7e:55:c7:ae:
96:28:84:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAS1Jghf/QCNzWwgecX5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTExMDQ1MjM4NDY0OWQwNWMxZTk4ZmI5N2I0OWFlMTE2
MDA5NzMwHhcNMjUxMTExMTMwMDQ4WhcNMjUxMTEyMTMwMDQ4WjAzMTEwLwYDVQQD
EyhmZTUzNGVhOGJjZWMzYzk5YjQ2NjljMWViYmZkMWM0MDg3MTNjNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxU5VJ3rAcUrOwob70mpXLmdVJ/C
SLs43yylXroKrCudqDAh0OJj8wBmJH9NGBeH3bDLvxZ5/j2nwZD3BKdSrkrHwfj0
nFB/HnKxot7O5+ZTL0KcWxe+nlRtNrwTRUGJt1PbQVHm2jKVAYLttRr946gA4ild
ywghnS8g2gBhqEzChITUoxSx1EioPoKpKG67Z1uFrtpGHrbNip5oGxm0tTYdaEbb
Wtb/4vhyMYZDUrOJgizUBeI40bvjwbh2RWa23V6ZsWFN+y3Mh4uvY5SnS+zfaW7M
WvUpHoCH+oNbtS6TnZ/SCwINyotCWjTNoPBuAaDX6Pa+EAcQnyO2Y3nP5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5TTqi87DyZtGacHrv9HECHE8Q2MB8GA1UdIwQY
MBaAFCehEEUjhGSdBcHpj7l7Sa4RYAlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZFUVJTT0VaSjBGd2VtUHVYdEpyaEZnQ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NzBiZGQtYjNlNC00MDFhLTk0NzAt
MGVhOGNkYmM0YjA4LzEvSjZFUVJTT0VaSjBGd2VtUHVYdEpyaEZnQ1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83NzBiZGQtYjNlNC00MDFhLTk0NzAtMGVhOGNkYmM0YjA4
LzEvSjZFUVJTT0VaSjBGd2VtUHVYdEpyaEZnQ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfMYyrd/
kfzKvSK+zaCKpW3uUH2RWZg4ECkiPMDdj7g09cQaXIa1t0QWjtOp/vGyB9q696A/
p5EXuWFJ3q3XJdC3eUSSjrd18NeSAw5nuwxqoj/bYXLdTvCNQ0XsCObb0qTSKnF9
fEf1Dn/Uy3f9zK62GG8IV90C+e6lEWRQpIO+egVi6uCWtsIhrNzoPGN5UxQ79qM5
Xyy8OxsYAtXSwJ0n9DVSmgPxWKnjT/2ELBooQ8H8r+MtG9jlh+v14EEPcJWk8J8X
njVXU9r7NP1KiBG9kjkxHzIAnEyROi+DnoujgZIglErg5ioki5Jqs+A60Fsv3Vk2
JuZ+VceuliiE9A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:20 2025 by rpki-client