Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier: knH3WSLm1UEyvGnGiW+tyhopadZk3bCHWuklXoRkyuU=
Subject key identifier: F0:48:9A:B5:0C:B7:82:60:BF:3C:66:B9:4F:00:3B:7A:57:1A:10:F2
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial: 019A70A50F7BFDA3F6DC43D8875A0C4726AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number: 0AE2
Signing time: Tue 11 Nov 2025 02:00:56 +0000
Manifest this update: Tue 11 Nov 2025 02:00:56 +0000
Manifest next update: Wed 12 Nov 2025 02:00:56 +0000
Files and hashes: 1: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: a2U4PRW4mAcO3omUf/r5OXgzlm/qsSZjEBO3N9BLDXg=)
2: pMbs7XGdo_xSX6txJyvIyBbRMlo.roa (hash: 98SgzoxY6svU/NSUJNYIa8/zWjIUUc01QOY2lQs4JFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:0f:7b:fd:a3:f6:dc:43:d8:87:5a:0c:47:26:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Validity
Not Before: Nov 11 02:00:56 2025 GMT
Not After : Nov 12 02:00:56 2025 GMT
Subject: CN=f0489ab50cb78260bf3c66b94f003b7a571a10f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:cb:d6:51:f6:c6:39:fc:17:92:38:50:b4:
ec:fb:d8:91:74:44:21:0d:9d:07:6d:94:47:8e:25:
a1:8a:8c:20:10:0d:79:55:e4:6b:07:54:0b:a1:6e:
5e:aa:a8:4d:7a:44:10:57:01:91:cd:bc:08:5d:f9:
74:dd:6c:d6:fb:f0:da:b9:d8:e6:9d:18:b0:64:e1:
69:9e:34:0c:0c:84:52:5d:2b:22:3f:7b:ac:95:88:
c5:90:ca:90:49:04:48:ef:31:0e:09:44:3f:bf:32:
8a:46:4a:40:89:a2:27:0a:b8:e0:fd:7c:27:49:e7:
36:d0:63:cc:39:56:0d:55:ba:d6:cf:3d:8e:90:ba:
0e:3b:1f:a3:ce:f1:9b:70:0f:31:80:e2:79:13:03:
14:57:be:66:5a:a0:1b:f2:13:5e:c5:b8:20:15:82:
f8:37:df:4f:d0:32:44:16:34:dc:ad:88:1d:e3:04:
81:c1:7e:de:f2:03:d9:98:44:bb:4b:90:07:23:0e:
c7:6b:6b:e0:cd:be:23:b2:2e:fe:d6:3e:fe:22:50:
8c:fd:5c:91:43:c0:30:44:68:00:84:70:b3:f9:41:
40:12:ea:12:85:4d:56:ea:90:59:02:23:1c:e1:ec:
c2:22:9b:76:c3:fc:88:4f:29:5c:5f:1a:68:eb:97:
ff:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:48:9A:B5:0C:B7:82:60:BF:3C:66:B9:4F:00:3B:7A:57:1A:10:F2
X509v3 Authority Key Identifier:
keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b8:2c:55:46:85:5a:18:2d:4d:b7:02:ea:ad:f9:14:23:29:
d9:0c:ac:61:0c:b8:4e:79:d9:18:ab:ab:e4:01:9c:6f:09:98:
9b:c8:8d:8d:e7:e2:ed:b5:ca:86:4b:a1:32:b5:33:9b:73:57:
e9:fc:bf:0e:ad:66:5a:91:e0:47:67:dc:a6:cd:7e:2a:ec:77:
a7:29:4d:d8:46:0a:fe:c0:7d:ba:88:4d:dd:90:40:21:3a:64:
7b:8c:c5:00:5f:0a:9a:0e:f9:a5:a9:f7:e4:d9:95:2c:65:8f:
96:8d:28:17:43:26:d3:6c:f0:4e:05:b7:68:1a:bf:f6:f2:1a:
a4:3b:04:d9:a4:91:c8:e3:77:71:18:42:e8:ef:3f:03:56:48:
87:ed:98:a7:81:8d:76:bb:57:87:ff:a5:84:28:f2:44:bb:90:
d7:38:c4:2d:30:40:27:93:32:db:32:a0:9b:df:14:06:21:2f:
df:9b:c1:1f:e2:2f:0f:4f:fd:7c:22:50:26:9e:84:66:78:bc:
d4:f5:bb:7e:be:cf:2d:71:65:d9:11:20:6e:b8:97:e7:16:ff:
e3:4e:a0:b4:aa:83:20:f0:5c:12:ea:21:2d:a1:fd:99:ee:23:
33:4f:44:f6:52:c1:42:be:d0:72:55:f6:9c:9c:67:45:45:77:
34:de:16:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpQ97/aP23EPYh1oMRyasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmY2VkY2JkYTAzYzNiMzZjZDdkNzAzN2VhZDMzOWJjYjg4
YzlhMjQwHhcNMjUxMTExMDIwMDU2WhcNMjUxMTEyMDIwMDU2WjAzMTEwLwYDVQQD
EyhmMDQ4OWFiNTBjYjc4MjYwYmYzYzY2Yjk0ZjAwM2I3YTU3MWExMGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcXL1lH2xjn8F5I4ULTs+9iRdEQh
DZ0HbZRHjiWhiowgEA15VeRrB1QLoW5eqqhNekQQVwGRzbwIXfl03WzW+/Daudjm
nRiwZOFpnjQMDIRSXSsiP3uslYjFkMqQSQRI7zEOCUQ/vzKKRkpAiaInCrjg/Xwn
Sec20GPMOVYNVbrWzz2OkLoOOx+jzvGbcA8xgOJ5EwMUV75mWqAb8hNexbggFYL4
N99P0DJEFjTcrYgd4wSBwX7e8gPZmES7S5AHIw7Ha2vgzb4jsi7+1j7+IlCM/VyR
Q8AwRGgAhHCz+UFAEuoShU1W6pBZAiMc4ezCIpt2w/yITylcXxpo65f/LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBImrUMt4JgvzxmuU8AO3pXGhDyMB8GA1UdIwQY
MBaAFG/O3L2gPDs2zX1wN+rTOby4jJokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQt
NzQyNGZkZWUyMTBlLzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQtNzQyNGZkZWUyMTBl
LzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbgsVUaF
WhgtTbcC6q35FCMp2QysYQy4TnnZGKur5AGcbwmYm8iNjefi7bXKhkuhMrUzm3NX
6fy/Dq1mWpHgR2fcps1+Kux3pylN2EYK/sB9uohN3ZBAITpke4zFAF8Kmg75pan3
5NmVLGWPlo0oF0Mm02zwTgW3aBq/9vIapDsE2aSRyON3cRhC6O8/A1ZIh+2Yp4GN
drtXh/+lhCjyRLuQ1zjELTBAJ5My2zKgm98UBiEv35vBH+IvD0/9fCJQJp6EZni8
1PW7fr7PLXFl2REgbriX5xb/406gtKqDIPBcEuohLaH9me4jM09E9lLBQr7QclX2
nJxnRUV3NN4WLA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:01 2025 by rpki-client