Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: NLHCktWnex4SFbe4ZUnuIJitfhSGJ7Pm0/nMDe2LpaE=
Subject key identifier: EA:5A:42:F8:58:E5:2B:BE:6D:40:FA:4A:70:B7:D0:B1:C1:B7:F4:45
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 019A72259D7E613995AC9F3626A26FF9A8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 0AB2
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: /VTaQAtk9NtixHI1qY8nuI6ger8yQPqnvILTc37LdDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9d:7e:61:39:95:ac:9f:36:26:a2:6f:f9:a8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=ea5a42f858e52bbe6d40fa4a70b7d0b1c1b7f445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:52:40:92:4f:37:76:74:78:71:27:b6:cd:d8:
0d:16:eb:f2:35:8d:b6:04:3b:bf:73:b6:dd:ce:d5:
11:67:ba:c5:a0:2d:3d:90:56:63:ea:46:89:f3:56:
97:dd:cd:4e:37:2e:77:22:9e:c5:0c:b4:ab:a3:c9:
13:00:75:5a:41:b3:62:90:64:4f:df:28:c6:ac:ad:
be:69:11:11:d6:84:09:bd:d5:b6:bc:1a:e4:57:5a:
c8:07:7b:87:e5:40:93:92:8f:f2:0e:d9:d3:cd:92:
81:3a:7a:ca:eb:0f:26:12:67:de:0c:9c:09:6e:20:
1a:ff:00:ae:1c:6a:01:30:28:b8:7e:35:a2:9d:3a:
23:f3:87:95:ba:9b:68:8c:55:bf:20:92:b8:0c:90:
6e:0a:e5:92:63:46:d0:b7:1e:23:ff:07:62:f5:20:
5e:9b:10:cb:3c:6e:d0:11:68:5f:5f:99:e1:f8:44:
d2:cc:39:d2:10:ce:cd:24:36:e2:85:6b:80:7a:0a:
68:e4:dc:85:2d:6b:dc:d8:11:00:a6:c8:fe:76:ea:
2e:db:25:e2:6e:c3:88:a2:c5:5b:5d:65:ed:20:fa:
81:c2:f6:9c:28:b5:ba:7f:5e:cb:6d:16:a4:c4:35:
37:b4:2c:e0:f6:90:09:b5:4d:f9:21:26:9a:58:f2:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5A:42:F8:58:E5:2B:BE:6D:40:FA:4A:70:B7:D0:B1:C1:B7:F4:45
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f6:b6:aa:cc:5c:34:b9:cb:aa:2c:05:5b:75:ef:eb:11:ae:
ac:c8:d1:03:36:0d:1d:59:2a:db:cb:24:a7:bc:d2:fc:5a:e7:
e9:a9:f3:83:89:3f:d8:ed:81:de:d2:38:c0:3b:8d:89:34:d8:
db:de:ed:f1:d4:76:12:dd:ff:0c:a5:a7:52:c1:a1:f4:ca:6f:
14:15:de:09:2d:80:6c:fc:50:2c:39:09:a4:88:a9:5a:b4:b9:
99:0e:b3:f6:ec:06:0a:8f:3e:15:de:5d:85:b4:2c:a1:d6:38:
87:d2:40:b0:e2:3b:fc:d2:12:05:e6:6d:c4:7d:38:0a:60:59:
bb:2a:f9:59:83:25:16:38:9c:48:ce:e2:ee:28:f5:09:dd:a6:
b2:5f:0e:30:0f:3a:76:df:a9:76:2a:fd:2c:06:3c:14:73:77:
2b:f2:54:ac:16:e3:88:2f:4a:10:4e:43:87:53:93:7a:4a:9f:
b9:2a:8b:ce:c6:c1:37:b8:ed:80:f8:af:b2:50:88:10:a7:de:
dd:4a:f9:e2:5a:cd:42:a3:fa:54:8d:87:cf:cc:ac:6b:56:8f:
47:18:ae:f3:f4:1e:6a:99:ef:ae:31:b4:47:c8:a5:fd:f3:1e:
db:33:04:c7:30:81:c6:12:26:d3:4f:f0:ef:5c:cd:f7:4d:20:
45:df:7c:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJZ1+YTmVrJ82JqJv+ajxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjY2Q4YjhmNzk3OWQ2Y2ExNzEyYzFkNTBhNDBkNGU1NTVj
OTRlMTMwHhcNMjUxMTExMDkwMDU5WhcNMjUxMTEyMDkwMDU5WjAzMTEwLwYDVQQD
EyhlYTVhNDJmODU4ZTUyYmJlNmQ0MGZhNGE3MGI3ZDBiMWMxYjdmNDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FJAkk83dnR4cSe2zdgNFuvyNY22
BDu/c7bdztURZ7rFoC09kFZj6kaJ81aX3c1ONy53Ip7FDLSro8kTAHVaQbNikGRP
3yjGrK2+aRER1oQJvdW2vBrkV1rIB3uH5UCTko/yDtnTzZKBOnrK6w8mEmfeDJwJ
biAa/wCuHGoBMCi4fjWinToj84eVuptojFW/IJK4DJBuCuWSY0bQtx4j/wdi9SBe
mxDLPG7QEWhfX5nh+ETSzDnSEM7NJDbihWuAegpo5NyFLWvc2BEApsj+duou2yXi
bsOIosVbXWXtIPqBwvacKLW6f17LbRakxDU3tCzg9pAJtU35ISaaWPIFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpaQvhY5Su+bUD6SnC30LHBt/RFMB8GA1UdIwQY
MBaAFHzNi495edbKFxLB1QpA1OVVyU4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMt
Y2FiNzg2MDc3ZTgzLzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMtY2FiNzg2MDc3ZTgz
LzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPa2qsxc
NLnLqiwFW3Xv6xGurMjRAzYNHVkq28skp7zS/Frn6anzg4k/2O2B3tI4wDuNiTTY
297t8dR2Et3/DKWnUsGh9MpvFBXeCS2AbPxQLDkJpIipWrS5mQ6z9uwGCo8+Fd5d
hbQsodY4h9JAsOI7/NISBeZtxH04CmBZuyr5WYMlFjicSM7i7ij1Cd2msl8OMA86
dt+pdir9LAY8FHN3K/JUrBbjiC9KEE5Dh1OTekqfuSqLzsbBN7jtgPivslCIEKfe
3Ur54lrNQqP6VI2Hz8ysa1aPRxiu8/QeapnvrjG0R8il/fMe2zMExzCBxhIm00/w
71zN900gRd980g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:02 2025 by rpki-client