Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier: F73DFuCJMM0XT2Ee/cLCORChXtih415G55desFfZfCQ=
Subject key identifier: 8B:B4:8A:E2:2C:54:C9:60:37:64:97:E0:39:6A:69:C2:4C:6B:A4:D5
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer: /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial: 019A71135953BBDB4C0220DAC4534295BB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number: 0B15
Signing time: Tue 11 Nov 2025 04:01:24 +0000
Manifest this update: Tue 11 Nov 2025 04:01:24 +0000
Manifest next update: Wed 12 Nov 2025 04:01:24 +0000
Files and hashes: 1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: d/z7y3AHksftsP2LmsJvdyXq0mtF6Fg+pcf7oRnrrT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:59:53:bb:db:4c:02:20:da:c4:53:42:95:bb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Validity
Not Before: Nov 11 04:01:24 2025 GMT
Not After : Nov 12 04:01:24 2025 GMT
Subject: CN=8bb48ae22c54c960376497e0396a69c24c6ba4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7f:a4:98:9a:eb:ad:46:26:c4:45:e6:cd:a6:
f2:64:c7:c8:6f:8b:83:fb:e6:83:b8:53:0a:6a:8c:
66:ba:81:c9:39:cc:3a:83:7c:8e:32:28:1d:a5:84:
2f:69:e7:b9:08:d8:03:78:4f:94:51:c9:96:dd:3e:
20:04:cd:6c:03:3d:0e:52:a4:aa:81:d1:be:12:76:
a0:2d:88:c4:b5:bf:2a:6f:2f:69:2a:ec:0b:b6:63:
c2:6f:45:bc:43:f9:e3:43:31:e7:26:4a:d2:09:53:
3d:98:dd:1b:e6:e7:92:99:c0:c1:52:fc:81:28:72:
7c:b5:77:99:d9:d7:f7:00:a6:c0:21:cb:80:24:14:
00:e7:bc:f3:88:f0:2b:f6:ef:98:ca:2b:f5:70:56:
64:93:f9:ef:52:83:58:14:b1:50:c2:c7:48:e9:cd:
d3:9d:e6:d4:ba:12:7b:e2:b1:78:4f:52:9e:35:67:
cb:92:fa:5b:ba:d9:74:6f:24:70:b4:fa:83:9b:81:
40:fd:40:19:69:f8:05:ac:c1:36:b0:99:1d:90:f3:
f6:97:20:3e:74:e1:01:34:d7:15:88:02:91:4e:c4:
c3:2c:34:2f:5f:6c:31:56:4d:ee:f2:ef:17:d9:1a:
d7:cd:e4:f5:fc:9c:52:b6:6c:a8:80:ea:3d:a7:2e:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B4:8A:E2:2C:54:C9:60:37:64:97:E0:39:6A:69:C2:4C:6B:A4:D5
X509v3 Authority Key Identifier:
keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d8:f7:02:af:df:01:10:6c:28:7f:b3:0e:de:f8:f8:12:df:
1d:4a:d5:24:68:8a:ea:7c:52:36:3f:5b:5b:f5:df:c0:39:67:
3e:c9:25:d8:07:3b:21:61:9b:75:6e:30:12:78:4b:d5:7d:77:
89:5a:c9:7e:aa:29:3c:d8:db:32:45:3b:bc:12:c1:73:f1:1a:
2e:13:1c:61:13:24:7f:93:cd:5f:e7:7e:47:ec:16:a7:30:80:
ef:64:c6:ef:3b:a7:6a:b6:62:98:9e:65:c1:e2:94:25:90:7d:
4d:7c:ff:89:f3:eb:0e:fc:f0:7d:67:1d:4e:46:09:04:a6:a6:
a2:d6:96:81:fd:e4:83:ce:ca:b4:16:f6:06:83:74:ff:ea:78:
34:c7:1a:b0:9e:e0:72:49:b7:33:21:3f:a0:d8:13:cf:8d:f1:
8a:ca:1d:16:36:e2:ac:e3:91:1d:7d:5e:ab:bc:23:2e:80:79:
ba:9d:7a:bf:53:ac:54:dc:91:a9:cc:ce:dc:ea:a7:aa:74:c3:
ff:69:f0:25:fa:98:e8:f3:af:84:6e:b9:76:26:cb:7b:ba:4d:
f3:94:bc:7f:92:aa:0d:a0:d3:94:7b:af:c4:90:5f:fe:92:aa:
29:c9:68:0e:b4:d1:49:f9:ad:df:52:de:a9:2e:46:e3:8c:62:
33:cb:6c:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE1lTu9tMAiDaxFNClbtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMWUzZmNhNmYxMzYyOGU2ZWI4M2NmZmU1ZWQ4YTAxZWRk
NTllOGIwHhcNMjUxMTExMDQwMTI0WhcNMjUxMTEyMDQwMTI0WjAzMTEwLwYDVQQD
Eyg4YmI0OGFlMjJjNTRjOTYwMzc2NDk3ZTAzOTZhNjljMjRjNmJhNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX+kmJrrrUYmxEXmzabyZMfIb4uD
++aDuFMKaoxmuoHJOcw6g3yOMigdpYQvaee5CNgDeE+UUcmW3T4gBM1sAz0OUqSq
gdG+EnagLYjEtb8qby9pKuwLtmPCb0W8Q/njQzHnJkrSCVM9mN0b5ueSmcDBUvyB
KHJ8tXeZ2df3AKbAIcuAJBQA57zziPAr9u+Yyiv1cFZkk/nvUoNYFLFQwsdI6c3T
nebUuhJ74rF4T1KeNWfLkvpbutl0byRwtPqDm4FA/UAZafgFrME2sJkdkPP2lyA+
dOEBNNcViAKRTsTDLDQvX2wxVk3u8u8X2RrXzeT1/JxStmyogOo9py6ZlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIu0iuIsVMlgN2SX4DlqacJMa6TVMB8GA1UdIwQY
MBaAFDAeP8pvE2KObrg8/+XtigHt1Z6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85MmNlNGMtZjFjNS00YzhmLTk5ZGYt
ZDBkN2YyYjJhNWUwLzEvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85MmNlNGMtZjFjNS00YzhmLTk5ZGYtZDBkN2YyYjJhNWUw
LzEvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdj3Aq/f
ARBsKH+zDt74+BLfHUrVJGiK6nxSNj9bW/XfwDlnPskl2Ac7IWGbdW4wEnhL1X13
iVrJfqopPNjbMkU7vBLBc/EaLhMcYRMkf5PNX+d+R+wWpzCA72TG7zunarZimJ5l
weKUJZB9TXz/ifPrDvzwfWcdTkYJBKamotaWgf3kg87KtBb2BoN0/+p4NMcasJ7g
ckm3MyE/oNgTz43xisodFjbirOORHX1eq7wjLoB5up16v1OsVNyRqczO3OqnqnTD
/2nwJfqY6POvhG65dibLe7pN85S8f5KqDaDTlHuvxJBf/pKqKcloDrTRSfmt31Le
qS5G44xiM8ts9w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:50 2025 by rpki-client