Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier: 2rkQvsEFIGojhzz5P6rEpnVcguytOQHb7cbHrEsDays=
Subject key identifier: 51:60:22:E5:76:3B:56:FE:B9:8F:69:91:F8:31:AC:66:63:DE:E5:93
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial: 019A7225CDE80BD77AF127E8DC4450325871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number: 1399
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: B9hNG4KhiwuKEjGlIItUu2EOcrhjv3GuJZeFjzPTO3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:cd:e8:0b:d7:7a:f1:27:e8:dc:44:50:32:58:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=516022e5763b56feb98f6991f831ac6663dee593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:75:a5:20:01:61:f4:75:84:4f:a7:72:24:
0b:69:84:7f:47:7d:9c:29:61:ca:05:0b:7a:4a:81:
87:89:6d:17:bf:36:df:2c:b1:a3:3d:ab:ea:e9:b1:
79:b4:25:15:73:c1:01:74:32:64:20:f8:48:58:87:
bd:2c:09:a4:c5:12:ed:51:19:49:ec:2a:53:e4:9f:
4a:c1:90:d7:ea:eb:c9:19:8e:42:2d:04:21:a7:31:
34:28:3c:4e:c9:a6:84:65:41:0b:b7:00:5e:fc:35:
90:ac:47:5b:1b:2a:cf:23:41:6b:07:3d:da:78:af:
9c:72:d0:13:fa:3b:3a:45:32:61:c8:4e:cc:9f:26:
c2:fd:17:ba:e7:e2:80:a1:5f:cb:dc:20:c0:43:3b:
ab:b1:8f:b1:61:0a:32:e4:92:43:41:a1:6a:39:19:
03:2c:9d:5d:f2:d6:f6:27:b6:0d:ad:09:57:2c:31:
ec:06:9b:6d:fa:fd:a8:f0:9d:03:e8:18:80:ab:31:
ea:d0:5a:e8:5e:8f:35:7b:1d:cb:61:61:1e:38:52:
d3:a3:be:03:b4:c3:6d:70:7b:cd:b2:7e:d7:e3:af:
f8:77:6b:49:5e:8e:16:48:ce:c6:c7:c4:74:aa:32:
e2:75:39:19:ce:47:f3:07:7c:70:f0:f5:11:eb:d3:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:60:22:E5:76:3B:56:FE:B9:8F:69:91:F8:31:AC:66:63:DE:E5:93
X509v3 Authority Key Identifier:
keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:91:9f:d4:72:33:57:c2:c3:22:29:1f:f8:8d:5e:54:59:dd:
2f:d4:ff:5e:bd:e7:88:f3:ef:74:66:86:18:b7:d1:9c:e3:d8:
f7:2a:1b:2b:23:99:e1:d7:0a:bd:2d:82:df:80:1d:98:aa:bf:
a5:ae:50:e3:79:c9:dd:ca:f7:10:4b:92:db:03:ea:2e:cc:35:
78:13:5d:72:3f:1d:e1:88:fe:22:c5:48:91:46:a6:ea:5e:54:
63:c6:69:b2:ba:3a:29:85:04:70:87:83:75:fb:62:b1:85:eb:
ac:49:66:9d:a0:dc:a6:2c:56:27:88:63:70:91:70:73:c3:c7:
8b:de:84:c6:78:7e:f7:0d:d2:38:9c:ba:17:7e:09:ba:29:59:
2b:7f:19:86:ec:ed:0a:9b:e6:72:c2:9e:2c:ec:cf:5a:38:86:
a1:88:dc:81:d8:70:00:dd:af:73:15:5f:ab:f4:cb:7e:ca:73:
79:ef:2c:24:8c:76:13:b8:6a:14:92:bb:d3:c6:18:33:21:fd:
8f:4d:0c:cb:cf:d8:f0:91:d2:92:7b:b7:b2:8e:ad:c1:96:8b:
3f:cf:50:04:80:2e:d8:2b:af:60:1a:d1:62:70:00:5e:bc:95:
f2:06:ac:26:ec:dd:78:95:9b:83:02:c6:d7:f2:1c:89:b9:1c:
85:fc:6e:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJc3oC9d68Sfo3ERQMlhxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmN2QxNzM0NjZlZmJiMjZkMmExMTkyOThiYjk3OTlhMDkz
YzMyMzAwHhcNMjUxMTExMDkwMTExWhcNMjUxMTEyMDkwMTExWjAzMTEwLwYDVQQD
Eyg1MTYwMjJlNTc2M2I1NmZlYjk4ZjY5OTFmODMxYWM2NjYzZGVlNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03h1pSABYfR1hE+nciQLaYR/R32c
KWHKBQt6SoGHiW0XvzbfLLGjPavq6bF5tCUVc8EBdDJkIPhIWIe9LAmkxRLtURlJ
7CpT5J9KwZDX6uvJGY5CLQQhpzE0KDxOyaaEZUELtwBe/DWQrEdbGyrPI0FrBz3a
eK+cctAT+js6RTJhyE7MnybC/Re65+KAoV/L3CDAQzursY+xYQoy5JJDQaFqORkD
LJ1d8tb2J7YNrQlXLDHsBptt+v2o8J0D6BiAqzHq0FroXo81ex3LYWEeOFLTo74D
tMNtcHvNsn7X46/4d2tJXo4WSM7Gx8R0qjLidTkZzkfzB3xw8PUR69PulwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFgIuV2O1b+uY9pkfgxrGZj3uWTMB8GA1UdIwQY
MBaAFP99FzRm77sm0qEZKYu5eZoJPDIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzMwWE5HYnZ1eWJTb1JrcGk3bDVtZ2s4TWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iMTNmMDAtYWI3MS00NDM2LWI2Yjkt
YmJhZGZmOGMwNTlhLzEvXzMwWE5HYnZ1eWJTb1JrcGk3bDVtZ2s4TWpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9iMTNmMDAtYWI3MS00NDM2LWI2YjktYmJhZGZmOGMwNTlh
LzEvXzMwWE5HYnZ1eWJTb1JrcGk3bDVtZ2s4TWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZGf1HIz
V8LDIikf+I1eVFndL9T/Xr3niPPvdGaGGLfRnOPY9yobKyOZ4dcKvS2C34AdmKq/
pa5Q43nJ3cr3EEuS2wPqLsw1eBNdcj8d4Yj+IsVIkUam6l5UY8Zpsro6KYUEcIeD
dftisYXrrElmnaDcpixWJ4hjcJFwc8PHi96Exnh+9w3SOJy6F34JuilZK38Zhuzt
CpvmcsKeLOzPWjiGoYjcgdhwAN2vcxVfq/TLfspzee8sJIx2E7hqFJK708YYMyH9
j00My8/Y8JHSknu3so6twZaLP89QBIAu2CuvYBrRYnAAXryV8gasJuzdeJWbgwLG
1/Icibkchfxumg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:15 2025 by rpki-client