Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
File: F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json)
Hash identifier: YH3+QQL5cLoMueePOxrYAEpBjHDOZHgXA/Mwj6S5zkA=
Subject key identifier: D4:9C:B5:79:95:7A:6A:1A:13:4B:A7:C7:5B:CA:AF:5D:41:42:F6:F0
Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Certificate issuer: /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Certificate serial: 019A725C4DB09E3AEE84C97DFDEC6682BC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
Manifest number: 05EA
Signing time: Tue 11 Nov 2025 10:00:43 +0000
Manifest this update: Tue 11 Nov 2025 10:00:43 +0000
Manifest next update: Wed 12 Nov 2025 10:00:43 +0000
Files and hashes: 1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: k40HPRu7CLaxNPkrdJ3JQAWmcfkv43QiHNvx39y4Afg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4d:b0:9e:3a:ee:84:c9:7d:fd:ec:66:82:bc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Validity
Not Before: Nov 11 10:00:43 2025 GMT
Not After : Nov 12 10:00:43 2025 GMT
Subject: CN=d49cb579957a6a1a134ba7c75bcaaf5d4142f6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:9a:15:95:72:a9:af:86:bf:ef:bf:09:a3:
92:cf:58:e2:f6:ad:41:0c:2c:17:70:10:ea:c4:9c:
84:07:23:1a:7d:06:bc:df:76:82:b4:d5:77:59:51:
92:7c:f3:af:c6:3e:c1:85:06:b6:9e:b5:fa:dc:62:
ba:e5:b7:cc:26:65:0e:8b:d1:65:8d:9e:77:ae:fe:
1e:7f:52:ab:50:ec:df:14:64:11:49:9a:cc:75:74:
2e:81:fb:4f:3e:80:62:4d:84:f4:8c:a6:ca:ba:dc:
62:ce:4b:bc:f2:68:e3:84:a7:ed:72:e1:b3:86:02:
63:1a:1f:3c:a5:e2:17:8a:0b:34:43:cb:a6:8b:f3:
2f:c9:59:49:4b:ea:08:57:66:19:44:0d:24:20:4a:
9c:af:60:82:e7:f4:95:ba:f3:1b:c1:e7:70:ca:d6:
f1:d7:73:a9:88:e3:e4:2d:26:84:11:ba:e0:c1:42:
63:89:71:3b:9b:7f:99:d0:38:20:b2:89:98:80:6c:
1c:ba:78:2b:7b:8a:27:2b:6d:bb:15:31:86:58:92:
26:a8:b0:9c:49:a4:d4:a3:95:f8:91:72:b5:df:e0:
dd:34:42:00:3e:ae:40:a9:0f:23:66:ba:ce:e3:17:
90:10:0b:bf:19:c8:1b:ea:1d:34:46:2c:f7:6c:04:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:B5:79:95:7A:6A:1A:13:4B:A7:C7:5B:CA:AF:5D:41:42:F6:F0
X509v3 Authority Key Identifier:
keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:60:ff:82:1e:31:3b:32:bb:2f:f7:0f:9f:e4:bc:35:e5:17:
14:46:85:43:c9:d0:38:99:81:e1:3c:48:86:82:a1:27:3d:d5:
4f:d4:a0:bc:db:7d:6c:65:85:18:69:11:49:e9:2f:ef:3e:63:
7f:93:48:05:ce:23:c9:1e:f8:68:e9:f7:87:74:93:73:ae:54:
95:5d:5a:07:3f:9f:4a:27:70:03:0a:e5:e4:a3:95:13:ba:69:
93:c5:ff:cd:d2:db:53:b4:6e:96:4d:d2:03:48:fc:d9:2e:eb:
f1:f2:9c:47:8f:24:f7:94:18:f4:1e:15:dd:98:ef:0d:61:10:
1c:53:2b:c7:19:53:8e:10:a7:5a:cc:5f:50:ee:c6:19:d6:a7:
49:18:18:c7:47:55:3a:e8:76:94:0e:53:0f:b1:cd:8b:2e:cd:
7e:0b:8a:19:d3:3e:fe:56:f6:db:27:2f:f0:5e:fe:b8:e6:be:
32:eb:90:e2:b4:eb:cd:7d:77:97:0f:7f:ac:db:80:26:74:a9:
82:55:92:61:b2:06:db:93:22:1c:59:f4:8d:a0:72:3e:a5:fb:
f3:df:a4:6f:ff:d1:1e:a9:04:5e:62:27:53:9f:5f:fd:59:b5:
e4:e2:d3:34:03:61:77:fc:6e:24:90:34:e0:0a:d1:56:1c:48:
17:af:ae:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXE2wnjruhMl9/exmgrwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWExZTMyYmJlNjc5YTk3NmZjNjFhNjAzZWRjZDZhNTQw
NzJiOGYwHhcNMjUxMTExMTAwMDQzWhcNMjUxMTEyMTAwMDQzWjAzMTEwLwYDVQQD
EyhkNDljYjU3OTk1N2E2YTFhMTM0YmE3Yzc1YmNhYWY1ZDQxNDJmNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9WaFZVyqa+Gv++/CaOSz1ji9q1B
DCwXcBDqxJyEByMafQa833aCtNV3WVGSfPOvxj7BhQa2nrX63GK65bfMJmUOi9Fl
jZ53rv4ef1KrUOzfFGQRSZrMdXQugftPPoBiTYT0jKbKutxizku88mjjhKftcuGz
hgJjGh88peIXigs0Q8umi/MvyVlJS+oIV2YZRA0kIEqcr2CC5/SVuvMbwedwytbx
13OpiOPkLSaEEbrgwUJjiXE7m3+Z0DggsomYgGwcungre4onK227FTGGWJImqLCc
SaTUo5X4kXK13+DdNEIAPq5AqQ8jZrrO4xeQEAu/Gcgb6h00Riz3bAT2JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSctXmVemoaE0unx1vKr11BQvbwMB8GA1UdIwQY
MBaAFBdaHjK75nmpdvxhpgPtzWpUByuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFvZU1ydm1lYWwyX0dHbUEtM05hbFFISzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kYmQwMWEtNzU0Yi00ZjZlLThmOTEt
NGY5MGFiNmMyNjJjLzEvRjFvZU1ydm1lYWwyX0dHbUEtM05hbFFISzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kYmQwMWEtNzU0Yi00ZjZlLThmOTEtNGY5MGFiNmMyNjJj
LzEvRjFvZU1ydm1lYWwyX0dHbUEtM05hbFFISzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGD/gh4x
OzK7L/cPn+S8NeUXFEaFQ8nQOJmB4TxIhoKhJz3VT9SgvNt9bGWFGGkRSekv7z5j
f5NIBc4jyR74aOn3h3STc65UlV1aBz+fSidwAwrl5KOVE7ppk8X/zdLbU7Rulk3S
A0j82S7r8fKcR48k95QY9B4V3ZjvDWEQHFMrxxlTjhCnWsxfUO7GGdanSRgYx0dV
Ouh2lA5TD7HNiy7NfguKGdM+/lb22ycv8F7+uOa+MuuQ4rTrzX13lw9/rNuAJnSp
glWSYbIG25MiHFn0jaByPqX789+kb//RHqkEXmInU59f/Vm15OLTNANhd/xuJJA0
4ArRVhxIF6+ujA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:27 2025 by rpki-client