Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
File: fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json)
Hash identifier: vXHhxCJhUePyEvflDXCtWGZCVdQdNKj8Wxu6LRpgikU=
Subject key identifier: 30:73:C7:AD:3F:8F:D2:D6:D0:A2:BD:7B:F9:47:F4:93:AE:44:3D:BB
Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
Certificate issuer: /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Certificate serial: 019A7225A995106D85D931E10C96EB8904D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
Manifest number: 109B
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: wtxJC2/HP9fYaKPL0rQr3vXIzcklcTElsLD/b/bFnf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a9:95:10:6d:85:d9:31:e1:0c:96:eb:89:04:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=3073c7ad3f8fd2d6d0a2bd7bf947f493ae443dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:06:12:b5:c2:24:06:ab:fe:26:d9:b2:2f:
13:90:a7:20:bb:05:9b:e0:99:74:35:b9:4c:e5:ce:
10:65:1b:b6:90:8a:4d:b6:a3:17:cf:8a:26:39:00:
cb:ad:37:fe:5e:2d:d4:c4:3b:f1:f8:aa:dd:6c:9c:
cc:8f:1a:69:b2:75:4f:c6:84:9d:e5:52:5a:fa:a2:
2e:35:d6:d9:5b:77:8b:a6:12:d5:d9:71:20:50:91:
49:6d:80:4c:0f:a0:12:51:a7:5a:92:df:c5:85:34:
20:15:44:b9:09:a2:1d:61:01:4a:85:cf:54:c9:98:
92:a5:a3:10:47:c9:5a:33:11:14:2f:a1:04:6d:57:
86:78:a3:e9:b7:02:74:5d:18:ce:8d:07:06:2b:4f:
42:fc:b7:9e:de:8d:24:ce:db:e5:cb:39:59:22:c8:
30:6b:8e:76:e3:4b:5f:70:a0:f3:3f:60:8f:11:fc:
f4:e3:94:d2:c1:09:01:7b:a6:b9:52:7f:62:38:71:
8a:99:b8:a0:8a:a4:a6:af:2c:20:8a:a8:49:cf:cb:
6e:7c:f6:2f:09:10:65:d9:a3:7a:d9:e6:0e:6c:fa:
29:6b:e6:dd:7a:88:ac:c9:ba:29:6d:f7:58:51:d2:
9d:96:fa:7c:f2:6d:03:c2:1a:b5:9b:42:af:cd:a9:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:73:C7:AD:3F:8F:D2:D6:D0:A2:BD:7B:F9:47:F4:93:AE:44:3D:BB
X509v3 Authority Key Identifier:
keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:10:6e:42:d8:50:bb:ba:3c:ec:f1:65:2d:49:b8:a1:12:20:
93:35:da:83:95:ce:fc:d5:c8:16:73:dd:ac:a2:64:be:04:c9:
cb:b8:98:07:d0:b5:88:2c:c5:e3:21:2f:16:69:c3:91:14:46:
17:04:00:a6:72:0a:07:cc:66:0b:ff:d1:44:6b:e8:8f:6d:ca:
26:52:d1:fa:cf:32:96:27:a8:e8:77:8d:9e:a4:1b:4e:4c:af:
4e:32:93:81:4f:76:16:7b:3a:a4:74:f6:2e:32:de:f0:80:3d:
e8:b0:40:9f:a8:4a:fd:a1:a5:9e:32:1e:73:ef:86:5e:ff:cd:
72:d2:1b:3d:43:85:10:46:3c:4a:56:0a:02:f7:df:86:96:e4:
bd:a2:b3:7f:24:21:51:fd:73:99:2d:51:4e:e6:9e:28:86:9f:
73:a8:90:a3:1f:13:85:e7:23:fe:d7:3a:2a:a5:5c:e2:bf:3f:
e5:20:a7:b3:06:03:64:3a:a5:b3:99:bf:24:02:38:c7:6e:03:
e9:6a:3c:af:32:b5:f5:50:3a:57:63:c9:f5:f6:19:0c:a8:eb:
8b:74:20:3c:eb:be:66:44:a6:c1:30:2e:c1:e8:d7:2d:58:4b:
3c:8b:8d:76:2d:2a:e9:e3:02:b2:cf:fa:55:95:d8:07:93:de:
bf:ca:d6:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJamVEG2F2THhDJbriQTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGVhYWM2NzM2NDdjNDg5Y2ExNWIzZjE4NGM3YWUyNjdj
MWVhNmIwHhcNMjUxMTExMDkwMTAyWhcNMjUxMTEyMDkwMTAyWjAzMTEwLwYDVQQD
EygzMDczYzdhZDNmOGZkMmQ2ZDBhMmJkN2JmOTQ3ZjQ5M2FlNDQzZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobIGErXCJAar/ibZsi8TkKcguwWb
4Jl0NblM5c4QZRu2kIpNtqMXz4omOQDLrTf+Xi3UxDvx+KrdbJzMjxppsnVPxoSd
5VJa+qIuNdbZW3eLphLV2XEgUJFJbYBMD6ASUadakt/FhTQgFUS5CaIdYQFKhc9U
yZiSpaMQR8laMxEUL6EEbVeGeKPptwJ0XRjOjQcGK09C/Lee3o0kztvlyzlZIsgw
a45240tfcKDzP2CPEfz045TSwQkBe6a5Un9iOHGKmbigiqSmrywgiqhJz8tufPYv
CRBl2aN62eYObPopa+bdeoisybopbfdYUdKdlvp88m0Dwhq1m0KvzakvmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBzx60/j9LW0KK9e/lH9JOuRD27MB8GA1UdIwQY
MBaAFHxOqsZzZHxInKFbPxhMeuJnweprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZGM2OTUtYWU3Ni00ZDMzLWIwNzQt
ZTgxMTQyNTQzZDg2LzEvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ZGM2OTUtYWU3Ni00ZDMzLWIwNzQtZTgxMTQyNTQzZDg2
LzEvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxBuQthQ
u7o87PFlLUm4oRIgkzXag5XO/NXIFnPdrKJkvgTJy7iYB9C1iCzF4yEvFmnDkRRG
FwQApnIKB8xmC//RRGvoj23KJlLR+s8ylieo6HeNnqQbTkyvTjKTgU92Fns6pHT2
LjLe8IA96LBAn6hK/aGlnjIec++GXv/NctIbPUOFEEY8SlYKAvffhpbkvaKzfyQh
Uf1zmS1RTuaeKIafc6iQox8Thecj/tc6KqVc4r8/5SCnswYDZDqls5m/JAI4x24D
6Wo8rzK19VA6V2PJ9fYZDKjri3QgPOu+ZkSmwTAuwejXLVhLPIuNdi0q6eMCss/6
VZXYB5Pev8rW9g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:59 2025 by rpki-client