Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: gNRYAnfYEgWr3VSsrTa7G8iBRNOirlWi9yen/2Q5Yuk=
Subject key identifier: A5:A8:CE:F8:CC:81:D9:EC:F5:0A:A9:2C:71:ED:19:00:D8:23:9F:01
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 019A0D4BB4102251ABD652C26988AD6B7550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 13C3
Signing time: Wed 22 Oct 2025 19:00:56 +0000
Manifest this update: Wed 22 Oct 2025 19:00:56 +0000
Manifest next update: Thu 23 Oct 2025 19:00:56 +0000
Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: j8/0iqaznKItwTtH96rHyuI0p7zGoH/nTR2x7Q+1hs4=)
2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=)
3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 16:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4b:b4:10:22:51:ab:d6:52:c2:69:88:ad:6b:75:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Oct 22 19:00:56 2025 GMT
Not After : Oct 23 19:00:56 2025 GMT
Subject: CN=a5a8cef8cc81d9ecf50aa92c71ed1900d8239f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6c:67:85:62:83:75:1c:10:88:b2:ce:b9:5d:
96:3f:06:a5:7d:3a:6a:3d:38:32:7c:eb:7f:68:f9:
77:47:89:f9:77:21:65:53:2c:7d:5e:33:74:5d:a7:
c3:06:8d:ab:a2:26:87:b1:37:67:0d:1f:77:ad:51:
8c:cf:62:64:08:0d:81:04:ba:2e:b0:30:d7:cc:9b:
61:58:f4:49:50:16:27:b0:2b:07:62:7c:66:ab:ed:
bb:b4:92:3f:d8:e9:66:2d:fd:d0:cc:6f:bc:29:f1:
4d:75:bf:e5:e4:dc:55:3b:6c:68:a6:0d:f6:21:a6:
22:b8:96:50:e0:04:28:69:3e:01:ad:15:04:ed:ad:
34:a0:91:37:f0:2e:d5:f9:ea:59:ab:15:1f:57:e4:
9a:01:4c:41:4f:e8:05:70:e9:3d:6a:90:c0:ed:6a:
9b:32:33:e5:31:94:05:71:aa:57:1b:6c:f5:4d:bf:
5c:93:0d:3c:bd:9f:d0:4b:17:2d:45:f1:f6:7d:db:
0e:ff:06:0f:ff:9e:fc:08:65:da:ac:01:33:c4:97:
21:57:ac:5a:82:59:32:3e:02:de:43:9b:0d:a8:8d:
aa:00:a0:78:e1:a4:86:f6:a2:42:64:94:b1:aa:6c:
1d:5e:62:96:68:2e:28:b2:17:3e:0a:a7:b5:66:0b:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A8:CE:F8:CC:81:D9:EC:F5:0A:A9:2C:71:ED:19:00:D8:23:9F:01
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b9:6d:77:45:59:eb:28:9d:bb:03:90:8b:dc:fb:15:05:5b:
1c:0e:fd:35:64:29:ca:02:f9:b4:39:3a:41:93:da:72:61:16:
9c:7f:84:e5:3b:96:fb:0b:6e:1c:ad:26:e6:59:d1:b1:f8:c2:
f6:2c:de:96:a1:d9:6d:95:10:a7:21:56:fd:c8:04:a1:49:f1:
34:47:64:37:09:d3:93:db:32:78:54:60:3f:fa:d5:74:db:cc:
0e:3e:7e:0b:84:8e:a7:5f:6f:32:95:68:64:e2:c6:1a:92:df:
bc:11:09:d8:a3:3e:6b:f0:f3:47:b9:3b:7b:e7:49:a0:87:0f:
96:de:d4:e2:8f:a4:7f:c6:20:92:6d:99:36:6f:25:7e:fc:ed:
7e:ab:79:73:d9:3f:82:c3:86:5f:21:b7:92:c2:c4:2d:49:f6:
8d:80:84:d9:55:b0:e2:48:d3:0c:bc:e0:ae:75:0d:4c:64:96:
ea:50:ab:57:45:f5:9a:1d:88:5a:6a:78:61:8c:7f:6e:f9:d4:
4c:f0:0c:fb:23:ad:bf:9d:06:48:44:d6:21:14:74:ec:27:b7:
0e:fc:8d:0e:6e:6a:14:45:17:7d:53:0c:be:c4:1e:e8:c9:59:
6f:d1:c7:44:ce:e3:ea:5f:4f:7e:f5:94:74:03:f9:a5:91:40:
26:86:97:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoNS7QQIlGr1lLCaYita3VQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOGQwOGVkYzQzOTNhODY3MTI5NmY4ZWFjYmJlY2Y5NGQ3
NjU2MmEwHhcNMjUxMDIyMTkwMDU2WhcNMjUxMDIzMTkwMDU2WjAzMTEwLwYDVQQD
EyhhNWE4Y2VmOGNjODFkOWVjZjUwYWE5MmM3MWVkMTkwMGQ4MjM5ZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WxnhWKDdRwQiLLOuV2WPwalfTpq
PTgyfOt/aPl3R4n5dyFlUyx9XjN0XafDBo2roiaHsTdnDR93rVGMz2JkCA2BBLou
sDDXzJthWPRJUBYnsCsHYnxmq+27tJI/2OlmLf3QzG+8KfFNdb/l5NxVO2xopg32
IaYiuJZQ4AQoaT4BrRUE7a00oJE38C7V+epZqxUfV+SaAUxBT+gFcOk9apDA7Wqb
MjPlMZQFcapXG2z1Tb9ckw08vZ/QSxctRfH2fdsO/wYP/578CGXarAEzxJchV6xa
glkyPgLeQ5sNqI2qAKB44aSG9qJCZJSxqmwdXmKWaC4oshc+Cqe1ZgtYwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWozvjMgdns9QqpLHHtGQDYI58BMB8GA1UdIwQY
MBaAFNuNCO3EOTqGcSlvjqy77PlNdlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEt
YzYzNDlkYjk0OTliLzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEtYzYzNDlkYjk0OTli
LzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLltd0VZ
6yiduwOQi9z7FQVbHA79NWQpygL5tDk6QZPacmEWnH+E5TuW+wtuHK0m5lnRsfjC
9izelqHZbZUQpyFW/cgEoUnxNEdkNwnTk9syeFRgP/rVdNvMDj5+C4SOp19vMpVo
ZOLGGpLfvBEJ2KM+a/DzR7k7e+dJoIcPlt7U4o+kf8Ygkm2ZNm8lfvztfqt5c9k/
gsOGXyG3ksLELUn2jYCE2VWw4kjTDLzgrnUNTGSW6lCrV0X1mh2IWmp4YYx/bvnU
TPAM+yOtv50GSETWIRR07Ce3DvyNDm5qFEUXfVMMvsQe6MlZb9HHRM7j6l9PfvWU
dAP5pZFAJoaXtA==
-----END CERTIFICATE-----
Generated at Thu Oct 23 00:25:25 2025 by rpki-client