Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: O55F71aG4W2MG6nIRrB/NP5WIdKNBWKRMP9M5LW2m+c=
Subject key identifier: 0E:1F:68:4F:F1:FD:81:66:5A:2F:75:9B:F4:B9:62:79:21:4D:C8:1E
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 019A72936CCEF479A376CCE48980B62407F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0DF1
Signing time: Tue 11 Nov 2025 11:00:55 +0000
Manifest this update: Tue 11 Nov 2025 11:00:55 +0000
Manifest next update: Wed 12 Nov 2025 11:00:55 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: Yv7PtXNYcWDTOwZUtXyTwiqFsKf8YxhInLlSuLovbgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:6c:ce:f4:79:a3:76:cc:e4:89:80:b6:24:07:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: Nov 11 11:00:55 2025 GMT
Not After : Nov 12 11:00:55 2025 GMT
Subject: CN=0e1f684ff1fd81665a2f759bf4b96279214dc81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:50:96:ad:ef:b1:70:65:50:6a:60:21:50:
db:78:b0:1c:54:6a:9e:e8:84:38:f0:ec:c1:49:2f:
90:7c:37:e6:1c:99:91:c1:76:7b:2f:ff:42:c7:41:
d4:c5:94:78:d1:ec:f8:3b:63:ff:0e:69:c8:63:b0:
a8:4f:c1:10:e2:cc:c2:1d:aa:22:8d:7a:9e:c6:a3:
ee:f3:a3:c5:65:5f:bf:b4:30:22:7d:d3:ed:e2:c3:
5a:53:a2:62:43:82:60:dd:b3:b9:5b:dd:ac:00:15:
0d:ae:83:21:45:28:c0:2e:41:8f:4c:15:a3:04:42:
cc:76:8a:2c:6a:cd:ed:eb:be:34:29:b2:ee:6d:ed:
7b:d3:63:fe:a6:ec:d5:95:b3:fd:67:e5:46:3a:dc:
3e:8a:fb:95:7d:b0:c9:4b:36:75:9c:7d:13:f0:43:
e8:e3:86:92:d4:e5:c1:84:56:86:21:d2:5f:26:54:
02:15:c2:74:b2:ca:ce:7b:a5:fe:f8:50:fe:df:db:
b8:19:8d:6b:d1:29:ca:c4:4e:d2:02:c0:59:e5:22:
69:f6:ff:b9:7e:ea:44:ba:22:d2:aa:dd:06:9e:1f:
64:e7:93:38:67:4b:7d:da:e8:a6:2a:0e:38:5e:53:
6c:4e:ab:35:5f:1e:96:7b:41:4f:76:6a:22:73:16:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1F:68:4F:F1:FD:81:66:5A:2F:75:9B:F4:B9:62:79:21:4D:C8:1E
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0f:46:1b:54:b4:d5:5b:e4:0d:6c:f7:28:bc:1e:0f:f5:df:
f7:1c:5c:bd:c6:3a:78:6b:d7:d4:9b:25:86:6c:14:82:68:5f:
e7:9f:2b:ac:09:c3:67:38:f6:35:73:50:19:a4:49:3c:82:b2:
02:69:30:75:d8:84:56:0f:43:72:ad:4a:6c:a9:7c:9f:9b:0d:
cd:74:fe:40:b8:f5:f1:45:dc:8f:34:a7:1b:dd:f7:c2:44:d2:
a8:f6:cc:2f:51:84:5f:bc:50:5c:41:35:92:d6:4e:75:6d:a4:
74:9c:57:f5:63:3b:5e:89:62:3d:6a:9e:00:9e:59:04:43:3e:
d6:e3:e6:3a:66:0f:5e:00:c6:a2:b2:05:eb:b2:da:e4:2c:f1:
66:ee:b5:f2:b8:9f:4d:2e:20:d4:dd:a4:cf:bd:a3:5c:4b:4f:
b8:2f:88:5b:f4:23:b5:75:ba:85:f6:ce:1a:a9:cf:30:75:fe:
8f:ae:11:fa:8e:09:bb:9f:ca:49:01:d9:74:30:48:60:42:c2:
ae:2c:ab:44:c4:76:16:10:5a:93:86:f5:40:e0:4b:a8:32:0c:
45:44:2c:ac:4a:38:f1:a3:33:c7:66:12:36:b2:c6:b0:d9:ca:
63:9e:56:2f:13:ba:15:15:c6:f0:43:6c:df:96:e3:ef:25:7e:
cc:c6:4b:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk2zO9HmjdszkiYC2JAf5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzODU3MzMyMTNiMzQyMzYwMTlhMTQwZmYxOWM1Mzk4ZWQ3
MTczMGUwHhcNMjUxMTExMTEwMDU1WhcNMjUxMTEyMTEwMDU1WjAzMTEwLwYDVQQD
EygwZTFmNjg0ZmYxZmQ4MTY2NWEyZjc1OWJmNGI5NjI3OTIxNGRjODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05lQlq3vsXBlUGpgIVDbeLAcVGqe
6IQ48OzBSS+QfDfmHJmRwXZ7L/9Cx0HUxZR40ez4O2P/DmnIY7CoT8EQ4szCHaoi
jXqexqPu86PFZV+/tDAifdPt4sNaU6JiQ4Jg3bO5W92sABUNroMhRSjALkGPTBWj
BELMdoosas3t6740KbLube1702P+puzVlbP9Z+VGOtw+ivuVfbDJSzZ1nH0T8EPo
44aS1OXBhFaGIdJfJlQCFcJ0ssrOe6X++FD+39u4GY1r0SnKxE7SAsBZ5SJp9v+5
fupEuiLSqt0Gnh9k55M4Z0t92uimKg44XlNsTqs1Xx6We0FPdmoicxaX1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4faE/x/YFmWi91m/S5YnkhTcgeMB8GA1UdIwQY
MBaAFOOFczITs0I2AZoUD/GcU5jtcXMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYt
ODc3ZDNmYWMyNjY3LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYtODc3ZDNmYWMyNjY3
LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHg9GG1S0
1VvkDWz3KLweD/Xf9xxcvcY6eGvX1JslhmwUgmhf558rrAnDZzj2NXNQGaRJPIKy
AmkwddiEVg9Dcq1KbKl8n5sNzXT+QLj18UXcjzSnG933wkTSqPbML1GEX7xQXEE1
ktZOdW2kdJxX9WM7XoliPWqeAJ5ZBEM+1uPmOmYPXgDGorIF67La5CzxZu618rif
TS4g1N2kz72jXEtPuC+IW/QjtXW6hfbOGqnPMHX+j64R+o4Ju5/KSQHZdDBIYELC
riyrRMR2FhBak4b1QOBLqDIMRUQsrEo48aMzx2YSNrLGsNnKY55WLxO6FRXG8ENs
35bj7yV+zMZLkA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:32 2025 by rpki-client