Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
File: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft (raw, json)
Hash identifier: uyevl1JD2J5HX+JxMz1jKFBYveAlZpJZUgEUaXMVIzE=
Subject key identifier: B2:29:FF:27:77:5F:80:89:86:AF:9B:8D:36:CC:BC:F2:A2:7E:F2:71
Authority key identifier: 46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4
Certificate issuer: /CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
Certificate serial: 019A71B92E206BB390FE28FC9301E9EB6E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
Manifest number: 0679
Signing time: Tue 11 Nov 2025 07:02:32 +0000
Manifest this update: Tue 11 Nov 2025 07:02:32 +0000
Manifest next update: Wed 12 Nov 2025 07:02:32 +0000
Files and hashes: 1: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl (hash: X3S1v1GAHSSnKpZeMI/6CSEP+PEoegSei1UfW2f5mBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2e:20:6b:b3:90:fe:28:fc:93:01:e9:eb:6e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
Validity
Not Before: Nov 11 07:02:32 2025 GMT
Not After : Nov 12 07:02:32 2025 GMT
Subject: CN=b229ff27775f808986af9b8d36ccbcf2a27ef271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:bb:2b:e1:81:03:43:5c:54:83:f3:8d:c4:
c3:d4:f9:55:7a:00:cd:b9:29:e4:3b:76:4d:e5:8c:
9f:6e:5a:25:4e:85:98:af:65:6c:bb:14:3b:63:51:
76:91:04:ee:01:8d:4e:26:fd:4d:36:69:b0:e7:9c:
f8:24:6d:ce:88:b5:13:a7:8b:e5:a3:3e:44:82:c7:
40:55:c4:07:19:01:7d:c6:d5:1a:dd:ea:d2:9c:58:
65:6f:19:96:b9:9d:c5:a6:c1:0c:8b:06:e7:31:9f:
bc:25:84:95:33:ba:e3:d6:e3:9a:b0:38:e0:06:7f:
36:07:cb:2e:87:48:e7:90:d0:41:f7:ee:f2:fb:1e:
30:b7:ae:43:19:35:11:e8:ef:6c:90:c8:27:3f:bb:
a6:55:13:7a:89:8f:f7:70:bb:7d:c4:5f:49:57:46:
c5:1d:ec:7f:a8:ca:d4:93:8e:41:24:4c:92:96:67:
93:68:a8:db:f3:fe:53:e1:5d:9b:04:19:31:a6:75:
2c:fc:01:fb:09:11:11:5a:7d:cd:2f:03:fa:0c:bf:
39:9d:18:de:b9:79:25:5f:f2:ea:b1:89:5a:8d:df:
76:12:21:82:78:bb:d0:9b:61:b9:d0:34:a7:c7:93:
d5:e3:8e:59:22:ec:42:b5:99:80:5d:a6:42:f5:da:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:29:FF:27:77:5F:80:89:86:AF:9B:8D:36:CC:BC:F2:A2:7E:F2:71
X509v3 Authority Key Identifier:
keyid:46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:eb:33:f0:e8:da:7d:ac:df:62:75:cf:e5:61:c1:dc:c4:ba:
a4:5a:27:c2:e2:ca:c8:de:ea:f2:d7:03:ba:79:65:ca:be:f7:
5b:4e:41:f0:4b:f7:6b:be:56:0a:5f:23:5b:8e:6b:5b:ad:09:
d7:f6:79:d5:92:9f:5f:64:44:5b:0b:93:3a:2a:60:2b:b0:ec:
11:d9:af:2f:c0:1a:ec:db:fe:e1:bf:d3:65:67:b5:a5:26:a8:
e2:7e:95:ec:c9:cc:5f:4a:ac:5b:6f:f5:b3:b2:2f:98:c6:a0:
34:ca:00:9d:96:ea:19:93:50:af:63:fd:45:f0:a9:0e:9d:60:
8c:78:1a:ca:c5:57:c6:c5:6e:0d:d2:95:31:87:a9:b2:83:b2:
dd:80:7c:10:f9:12:21:45:e3:ec:2f:d5:a8:53:d3:01:80:d5:
62:88:f9:f7:aa:1d:1b:cd:bf:a3:57:2a:a5:f4:23:38:b2:69:
55:cb:a5:2d:6e:cd:f1:99:99:bb:06:23:15:6d:06:81:d1:58:
d1:37:5f:ce:d0:81:8c:54:53:1d:51:ad:f6:69:9b:70:00:3a:
d7:4f:f6:5f:1a:0f:e6:aa:ad:cd:38:59:09:4c:ff:21:45:d3:
39:27:5e:99:f4:d9:6c:5f:11:16:a6:2d:0e:2f:7f:c7:8a:82:
2e:db:9a:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuS4ga7OQ/ij8kwHp6247MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2N2YwZDY3NjJmZTk2ZjA0OWU2ZWMzMzJkMDQyZThiOWQ1
Y2RlZTQwHhcNMjUxMTExMDcwMjMyWhcNMjUxMTEyMDcwMjMyWjAzMTEwLwYDVQQD
EyhiMjI5ZmYyNzc3NWY4MDg5ODZhZjliOGQzNmNjYmNmMmEyN2VmMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh67K+GBA0NcVIPzjcTD1PlVegDN
uSnkO3ZN5YyfblolToWYr2VsuxQ7Y1F2kQTuAY1OJv1NNmmw55z4JG3OiLUTp4vl
oz5EgsdAVcQHGQF9xtUa3erSnFhlbxmWuZ3FpsEMiwbnMZ+8JYSVM7rj1uOasDjg
Bn82B8suh0jnkNBB9+7y+x4wt65DGTUR6O9skMgnP7umVRN6iY/3cLt9xF9JV0bF
Hex/qMrUk45BJEySlmeTaKjb8/5T4V2bBBkxpnUs/AH7CRERWn3NLwP6DL85nRje
uXklX/LqsYlajd92EiGCeLvQm2G50DSnx5PV445ZIuxCtZmAXaZC9dpZRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIp/yd3X4CJhq+bjTbMvPKifvJxMB8GA1UdIwQY
MBaAFEZ/DWdi/pbwSebsMy0ELoudXN7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm44TloyTC1sdkJKNXV3ekxRUXVpNTFjM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yZDE3NDctMzAxZC00ZjcyLTg0Yzgt
NjViOTlhZmI1MGQ0LzEvUm44TloyTC1sdkJKNXV3ekxRUXVpNTFjM3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yZDE3NDctMzAxZC00ZjcyLTg0YzgtNjViOTlhZmI1MGQ0
LzEvUm44TloyTC1sdkJKNXV3ekxRUXVpNTFjM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqusz8Oja
fazfYnXP5WHB3MS6pFonwuLKyN7q8tcDunllyr73W05B8Ev3a75WCl8jW45rW60J
1/Z51ZKfX2REWwuTOipgK7DsEdmvL8Aa7Nv+4b/TZWe1pSao4n6V7MnMX0qsW2/1
s7IvmMagNMoAnZbqGZNQr2P9RfCpDp1gjHgaysVXxsVuDdKVMYepsoOy3YB8EPkS
IUXj7C/VqFPTAYDVYoj596odG82/o1cqpfQjOLJpVculLW7N8ZmZuwYjFW0GgdFY
0TdfztCBjFRTHVGt9mmbcAA610/2XxoP5qqtzThZCUz/IUXTOSdemfTZbF8RFqYt
Di9/x4qCLtualw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:10 2025 by rpki-client