Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: e+aHak9KxSPYyiPKT2pg/b6WXBvJ2u7zSK5wb6vFPFs=
Subject key identifier: 5F:72:6E:75:C9:2B:B0:1D:06:68:A9:52:A1:3A:76:CA:5F:CD:91:D5
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 019A71B9332EB8BE9E6A7C7E2488EBFC4673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 16AD
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: YBewtBerTmwZVbbqZnwEaiZAdo4jsJcw9z6GimK7oj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:33:2e:b8:be:9e:6a:7c:7e:24:88:eb:fc:46:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=5f726e75c92bb01d0668a952a13a76ca5fcd91d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:ee:0a:7f:ac:ea:5b:40:53:15:99:1c:f4:
b7:57:67:86:77:5d:58:71:ba:13:71:8d:14:8a:45:
a8:6b:f1:16:65:52:e7:b8:e6:06:47:4a:ba:c8:e6:
6d:0a:42:12:76:81:0a:5a:1a:62:29:2e:6c:3b:86:
02:e9:73:82:8e:e6:4e:cc:43:45:e3:11:f4:38:6e:
39:fe:bc:68:54:cc:79:46:4d:c1:7c:4a:51:2b:eb:
e9:19:d1:29:6e:5f:ed:38:8c:1f:c8:32:bc:96:ad:
ec:3f:ec:35:95:37:ee:61:86:cf:56:14:a4:b4:78:
c6:d0:41:93:e4:23:ce:27:52:d3:3a:bd:7f:1d:f9:
fc:50:4c:e6:8f:80:0f:d6:be:20:43:8e:8c:e6:eb:
95:2e:a5:01:ff:63:91:c9:66:93:2f:46:f2:e4:62:
a7:be:28:d8:84:2d:4d:98:9a:c4:45:68:34:d8:fe:
82:b0:3f:e0:f8:62:39:32:69:1b:1c:c1:01:28:a2:
53:89:8f:56:59:6f:cd:f1:6b:9e:81:b1:6b:3c:21:
7a:65:5b:82:81:74:bb:c7:72:7e:7f:7b:6e:b0:ae:
f6:7c:b3:3b:0f:7e:fc:11:9d:44:c4:48:ee:3a:79:
99:af:78:d4:02:0b:97:12:7c:1f:71:1a:55:d5:fc:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:72:6E:75:C9:2B:B0:1D:06:68:A9:52:A1:3A:76:CA:5F:CD:91:D5
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f9:22:29:79:19:1e:1c:62:9c:e1:c8:4a:a7:20:4f:72:76:
cf:bd:58:d3:18:45:1f:ab:a9:e9:94:da:b3:3a:fb:32:56:75:
02:e5:04:b9:66:8c:67:8c:fe:b3:db:34:8e:90:06:a9:d5:4b:
54:92:b1:67:1f:b0:91:68:a9:e1:54:d2:72:81:ab:5f:b9:ec:
71:bc:23:46:54:07:7e:4f:10:2d:01:83:bb:c1:27:20:52:12:
88:76:63:15:62:e0:37:5d:5c:8e:55:ec:4b:1f:1a:8b:a5:23:
1b:c2:0d:79:a7:ff:9a:38:49:a1:76:69:5b:8d:fc:96:c7:7a:
03:2a:9c:61:9b:92:cc:57:8e:5b:9e:41:43:b7:77:77:b0:bc:
b2:16:93:af:00:4a:48:6f:7a:c4:30:54:de:a5:00:d1:e4:e9:
c3:ef:10:6e:1c:be:f9:31:c9:25:7f:23:fa:7f:9b:89:2f:a6:
fe:47:97:b4:f7:60:5e:43:92:7f:19:c8:94:b9:9d:3f:9b:51:
03:3c:da:55:bd:f2:44:ff:45:5d:dc:4d:bf:d5:96:0e:6d:cd:
1b:37:71:8d:35:3d:ba:e6:41:75:71:76:82:e6:e4:64:fa:e2:
e8:ab:11:58:09:80:ca:2f:cb:47:f6:65:c2:af:82:94:c8:ff:
d3:82:ef:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuTMuuL6eanx+JIjr/EZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTlhNmFlZmQzY2E4ZjUwZmM4ZjM0YWIzZDE0NzkyNTZk
YjlkNzgwHhcNMjUxMTExMDcwMjMzWhcNMjUxMTEyMDcwMjMzWjAzMTEwLwYDVQQD
Eyg1ZjcyNmU3NWM5MmJiMDFkMDY2OGE5NTJhMTNhNzZjYTVmY2Q5MWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvILuCn+s6ltAUxWZHPS3V2eGd11Y
cboTcY0UikWoa/EWZVLnuOYGR0q6yOZtCkISdoEKWhpiKS5sO4YC6XOCjuZOzENF
4xH0OG45/rxoVMx5Rk3BfEpRK+vpGdEpbl/tOIwfyDK8lq3sP+w1lTfuYYbPVhSk
tHjG0EGT5CPOJ1LTOr1/Hfn8UEzmj4AP1r4gQ46M5uuVLqUB/2ORyWaTL0by5GKn
vijYhC1NmJrERWg02P6CsD/g+GI5MmkbHMEBKKJTiY9WWW/N8WuegbFrPCF6ZVuC
gXS7x3J+f3tusK72fLM7D378EZ1ExEjuOnmZr3jUAguXEnwfcRpV1fycSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9ybnXJK7AdBmipUqE6dspfzZHVMB8GA1UdIwQY
MBaAFHkZpq79PKj1D8jzSrPRR5JW2514MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAt
OTExZTgzOTA0Y2ExLzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAtOTExZTgzOTA0Y2Ex
LzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfkiKXkZ
HhxinOHISqcgT3J2z71Y0xhFH6up6ZTaszr7MlZ1AuUEuWaMZ4z+s9s0jpAGqdVL
VJKxZx+wkWip4VTScoGrX7nscbwjRlQHfk8QLQGDu8EnIFISiHZjFWLgN11cjlXs
Sx8ai6UjG8INeaf/mjhJoXZpW438lsd6AyqcYZuSzFeOW55BQ7d3d7C8shaTrwBK
SG96xDBU3qUA0eTpw+8Qbhy++THJJX8j+n+biS+m/keXtPdgXkOSfxnIlLmdP5tR
AzzaVb3yRP9FXdxNv9WWDm3NGzdxjTU9uuZBdXF2gubkZPri6KsRWAmAyi/LR/Zl
wq+ClMj/04LvXQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:12:30 2025 by rpki-client