Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json)
Hash identifier: ms5uqwXRTaoXTtPsSYXdrOltb/Hj9aWDiKi8krokcrE=
Subject key identifier: E1:85:65:1C:FB:75:E0:FE:BA:25:64:94:25:68:1E:B0:44:F7:E2:A9
Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351
Certificate serial: 019A7301BEF3490695CA2998BD63AA7EC1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
Manifest number: 0321
Signing time: Tue 11 Nov 2025 13:01:25 +0000
Manifest this update: Tue 11 Nov 2025 13:01:25 +0000
Manifest next update: Wed 12 Nov 2025 13:01:25 +0000
Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: WkLud01aky36Y7UexViVTS1Qhpvr618z9MYBSwraF9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:be:f3:49:06:95:ca:29:98:bd:63:aa:7e:c1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351
Validity
Not Before: Nov 11 13:01:25 2025 GMT
Not After : Nov 12 13:01:25 2025 GMT
Subject: CN=e185651cfb75e0feba25649425681eb044f7e2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:6d:85:dc:76:c7:ec:3a:c8:d4:e7:b0:f7:
c4:8f:6f:9d:16:1f:f5:47:32:f7:03:10:44:1a:2d:
52:ad:d6:9e:5d:53:b4:de:5b:2a:2e:78:ae:ad:4f:
34:86:4b:6c:cd:52:55:53:1e:8c:4b:8a:f9:25:e0:
3c:e8:a7:36:6b:ce:af:b5:96:50:58:5f:b6:73:cd:
1d:4a:ab:c8:64:24:e1:71:85:5d:08:5d:c9:96:dc:
58:de:90:30:38:aa:6c:2d:8d:5b:69:d8:76:e4:24:
dc:25:2b:8f:1f:61:09:55:92:2f:1e:a1:d8:f0:59:
64:ae:29:4d:33:5d:22:b0:c2:d7:05:17:ee:06:03:
a1:ab:77:2c:1d:55:9b:49:73:b1:70:5c:04:7e:98:
85:c2:75:14:ef:24:70:9c:86:4f:b6:79:d4:5b:f6:
25:0b:18:17:bb:7d:2d:d5:87:91:32:72:5a:56:d3:
93:e5:52:e4:5a:f9:53:7b:f0:5f:9d:cb:f8:bf:fe:
71:37:3c:43:9f:40:b1:22:3e:b7:d8:eb:13:0d:d8:
72:91:a5:5a:27:97:8c:1a:ff:42:84:b9:fb:3d:f2:
8c:9b:c4:f8:00:62:0b:50:f3:da:53:7a:03:ae:7d:
e2:43:aa:27:04:cd:2b:51:6b:b3:12:ad:a4:e1:44:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:85:65:1C:FB:75:E0:FE:BA:25:64:94:25:68:1E:B0:44:F7:E2:A9
X509v3 Authority Key Identifier:
keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bc:ea:67:c0:c2:8d:0b:90:4c:00:ec:0b:10:54:aa:ab:53:
7e:1b:40:57:21:e3:8f:b1:ea:16:5f:65:d1:dc:fc:20:47:7f:
bb:b7:06:b1:25:d0:ea:e8:03:b2:4e:75:17:9b:cc:58:6d:80:
eb:53:6c:77:6d:79:7c:93:a6:e0:4c:2b:94:51:ad:83:f5:2f:
c5:da:94:7a:1b:49:82:69:1a:50:20:60:bb:9a:e4:4d:53:e6:
cd:15:9c:bd:ae:9b:83:6e:05:a6:25:1f:3e:11:0a:1a:f6:1e:
8a:ec:4c:93:9c:17:b5:b6:3a:6c:e8:01:72:21:4f:10:56:69:
83:b6:ff:9b:6d:4c:24:1f:64:e5:75:72:ff:62:c3:2b:e8:87:
80:08:80:b4:7d:d0:b3:da:22:59:39:eb:2c:9c:dd:96:db:62:
e8:7c:52:eb:1f:90:14:70:99:59:42:aa:76:53:52:2e:ea:4c:
01:54:6b:d4:62:c4:79:1a:ed:98:14:ad:ed:88:80:11:a0:e7:
7c:b8:0b:59:be:ca:2b:27:af:12:98:f9:a5:1f:9a:9d:bf:a8:
84:5d:39:4c:fa:40:fc:e6:54:03:a2:5c:bb:8a:05:4c:b9:94:
5c:07:3d:29:ea:77:56:42:18:71:fd:f6:5b:e5:e0:3d:25:31:
d7:04:8c:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAb7zSQaVyimYvWOqfsHtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4M2YxYjEzOWRmMjRhMDVjMmU1MjU2MDUyYjAyMTI1MTdl
NDczNTEwHhcNMjUxMTExMTMwMTI1WhcNMjUxMTEyMTMwMTI1WjAzMTEwLwYDVQQD
EyhlMTg1NjUxY2ZiNzVlMGZlYmEyNTY0OTQyNTY4MWViMDQ0ZjdlMmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFlthdx2x+w6yNTnsPfEj2+dFh/1
RzL3AxBEGi1SrdaeXVO03lsqLniurU80hktszVJVUx6MS4r5JeA86Kc2a86vtZZQ
WF+2c80dSqvIZCThcYVdCF3JltxY3pAwOKpsLY1badh25CTcJSuPH2EJVZIvHqHY
8FlkrilNM10isMLXBRfuBgOhq3csHVWbSXOxcFwEfpiFwnUU7yRwnIZPtnnUW/Yl
CxgXu30t1YeRMnJaVtOT5VLkWvlTe/Bfncv4v/5xNzxDn0CxIj632OsTDdhykaVa
J5eMGv9ChLn7PfKMm8T4AGILUPPaU3oDrn3iQ6onBM0rUWuzEq2k4URdWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGFZRz7deD+uiVklCVoHrBE9+KpMB8GA1UdIwQY
MBaAFJg/GxOd8koFwuUlYFKwISUX5HNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jMmNjNWYtMjVhNi00MmJiLWE5NzAt
ZWY5NjQ0MzEyZGRiLzEvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jMmNjNWYtMjVhNi00MmJiLWE5NzAtZWY5NjQ0MzEyZGRi
LzEvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELzqZ8DC
jQuQTADsCxBUqqtTfhtAVyHjj7HqFl9l0dz8IEd/u7cGsSXQ6ugDsk51F5vMWG2A
61Nsd215fJOm4EwrlFGtg/UvxdqUehtJgmkaUCBgu5rkTVPmzRWcva6bg24FpiUf
PhEKGvYeiuxMk5wXtbY6bOgBciFPEFZpg7b/m21MJB9k5XVy/2LDK+iHgAiAtH3Q
s9oiWTnrLJzdltti6HxS6x+QFHCZWUKqdlNSLupMAVRr1GLEeRrtmBSt7YiAEaDn
fLgLWb7KKyevEpj5pR+anb+ohF05TPpA/OZUA6Jcu4oFTLmUXAc9Kep3VkIYcf32
W+XgPSUx1wSMPA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:52 2025 by rpki-client