Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier: BRGnFIwlpJnCCT2RZl+EjbnWxCjwpzepFRu+xvllj6o=
Subject key identifier: EB:6E:D6:32:4A:12:11:E3:5D:5B:10:52:C1:C5:0A:0C:8B:DD:5E:61
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 019A71B7BC08F3C2BB0B5680C22EC1F242D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number: 07CB
Signing time: Tue 11 Nov 2025 07:00:57 +0000
Manifest this update: Tue 11 Nov 2025 07:00:57 +0000
Manifest next update: Wed 12 Nov 2025 07:00:57 +0000
Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: t2Ngpji/DENIXVYVuwT+jUt61RIuCOF8UnscgfmYjnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bc:08:f3:c2:bb:0b:56:80:c2:2e:c1:f2:42:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Nov 11 07:00:57 2025 GMT
Not After : Nov 12 07:00:57 2025 GMT
Subject: CN=eb6ed6324a1211e35d5b1052c1c50a0c8bdd5e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:b6:7e:50:f5:98:c7:93:26:24:2d:c5:9c:
a2:3b:f7:f2:3d:51:39:00:0c:f6:52:ed:f9:a1:40:
ba:01:81:e1:1c:9b:1f:14:22:73:59:42:88:78:cd:
db:eb:81:4f:55:65:6a:0e:5f:45:0a:7f:99:92:1b:
55:67:7b:4a:5f:64:cf:f6:75:67:2e:25:32:68:bf:
21:05:bf:53:5b:f6:ae:90:11:83:62:a6:65:80:86:
e7:ca:30:b3:a6:69:16:82:c5:31:28:f5:cf:4e:0d:
0e:6a:70:73:4b:c8:cb:63:be:b6:2a:02:0a:c0:cd:
86:28:4d:5a:5e:fe:02:97:8c:cb:f2:47:ae:d8:f8:
0a:45:c4:fb:99:13:80:26:fd:15:6a:21:55:b4:83:
3a:78:0f:62:7d:e6:0b:9e:35:92:a9:d6:36:ab:5f:
64:3f:78:00:24:59:1d:3e:a5:3e:d5:56:d1:eb:99:
c5:f0:14:e8:4d:81:c6:85:bd:67:b7:8d:5f:0d:91:
43:f1:e0:aa:7d:3a:4d:4a:e6:08:40:07:3f:93:46:
c2:3c:eb:05:0c:43:95:42:79:fc:85:bf:93:c2:e6:
cf:f3:c0:2c:de:d1:1f:94:75:51:4b:ee:76:85:da:
0a:d1:e7:3d:5f:cb:e2:e0:11:08:7a:b8:bf:65:42:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6E:D6:32:4A:12:11:E3:5D:5B:10:52:C1:C5:0A:0C:8B:DD:5E:61
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:14:15:9b:88:59:25:55:12:8d:09:46:fe:f0:e4:c8:18:21:
8e:b2:e3:00:1d:09:5b:c8:28:42:27:81:2e:06:e8:59:f9:dc:
85:48:b4:2a:d1:25:01:0f:c9:c8:1d:c5:a3:d8:1e:11:b2:e0:
e2:9e:64:34:d9:da:f2:57:26:e5:d6:12:c5:36:0d:94:cd:16:
fe:57:4b:5b:9d:ad:2e:3a:c3:19:39:f2:a4:73:2f:73:6b:54:
4f:94:a3:1d:8e:71:5e:1d:23:61:ff:10:07:af:77:eb:f2:8d:
47:ae:66:3f:80:5f:b4:93:0c:8e:5a:5b:6d:bc:53:79:69:98:
99:75:43:1b:bb:95:fe:32:fa:d9:3e:95:31:da:9e:95:4d:62:
50:a5:a3:7d:89:51:ad:f5:95:81:51:67:81:39:01:a9:4b:8a:
9d:da:70:77:81:38:a8:07:d8:72:1d:09:a3:d9:d1:a1:2c:b8:
a6:68:02:dd:d8:6a:e9:6b:1a:39:ef:b2:f5:5a:93:79:92:7e:
79:d8:51:79:ff:96:e3:bf:6c:0f:db:50:95:08:ce:6e:bb:ae:
6c:2d:40:97:6b:6f:a6:4f:90:af:3f:31:96:11:28:d5:44:3f:
dd:e5:9c:2c:a2:77:74:08:bd:7d:e7:d2:a0:18:a2:df:db:80:
90:b7:6f:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt7wI88K7C1aAwi7B8kLSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzQyZmM5OTczMGYyYTM0ZDA5ZWU0YjVlZTkyMTc4NzU2
Y2Q0ZDEwHhcNMjUxMTExMDcwMDU3WhcNMjUxMTEyMDcwMDU3WjAzMTEwLwYDVQQD
EyhlYjZlZDYzMjRhMTIxMWUzNWQ1YjEwNTJjMWM1MGEwYzhiZGQ1ZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaG2flD1mMeTJiQtxZyiO/fyPVE5
AAz2Uu35oUC6AYHhHJsfFCJzWUKIeM3b64FPVWVqDl9FCn+ZkhtVZ3tKX2TP9nVn
LiUyaL8hBb9TW/aukBGDYqZlgIbnyjCzpmkWgsUxKPXPTg0OanBzS8jLY762KgIK
wM2GKE1aXv4Cl4zL8keu2PgKRcT7mROAJv0VaiFVtIM6eA9ifeYLnjWSqdY2q19k
P3gAJFkdPqU+1VbR65nF8BToTYHGhb1nt41fDZFD8eCqfTpNSuYIQAc/k0bCPOsF
DEOVQnn8hb+TwubP88As3tEflHVRS+52hdoK0ec9X8vi4BEIeri/ZUIJfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtu1jJKEhHjXVsQUsHFCgyL3V5hMB8GA1UdIwQY
MBaAFLI0L8mXMPKjTQnuS17pIXh1bNTRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ODRjMGQtODg1Yy00NGEwLTliZWYt
N2E4ZTM4OTIwMjUwLzEvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81ODRjMGQtODg1Yy00NGEwLTliZWYtN2E4ZTM4OTIwMjUw
LzEvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghQVm4hZ
JVUSjQlG/vDkyBghjrLjAB0JW8goQieBLgboWfnchUi0KtElAQ/JyB3Fo9geEbLg
4p5kNNna8lcm5dYSxTYNlM0W/ldLW52tLjrDGTnypHMvc2tUT5SjHY5xXh0jYf8Q
B6936/KNR65mP4BftJMMjlpbbbxTeWmYmXVDG7uV/jL62T6VMdqelU1iUKWjfYlR
rfWVgVFngTkBqUuKndpwd4E4qAfYch0Jo9nRoSy4pmgC3dhq6WsaOe+y9VqTeZJ+
edhRef+W479sD9tQlQjObruubC1Al2tvpk+Qrz8xlhEo1UQ/3eWcLKJ3dAi9fefS
oBii39uAkLdv/w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:09 2025 by rpki-client