Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
File: b_eJEzFFDchig6CJvZRw5pw37RI.mft (raw, json)
Hash identifier: gygQk9sW5WVfP5YE9R7UI7IAGt/fG1WyN8zrMv9sgv4=
Subject key identifier: 9B:19:7E:C9:19:5E:37:F8:9D:52:25:97:AE:A1:AA:A1:4D:C1:BB:98
Authority key identifier: 6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12
Certificate issuer: /CN=6ff7891331450dc86283a089bd9470e69c37ed12
Certificate serial: 019A71B92087A06AC09DEEEC3DC0942AFB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
Manifest number: 02EE
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: b_eJEzFFDchig6CJvZRw5pw37RI.crl (hash: UtSfM4IribCprG8ugebZ8uj2Eh3nKibY2jZkhLVvkBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:20:87:a0:6a:c0:9d:ee:ec:3d:c0:94:2a:fb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff7891331450dc86283a089bd9470e69c37ed12
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=9b197ec9195e37f89d522597aea1aaa14dc1bb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:b8:20:bb:f1:da:45:21:2b:55:7a:ca:0d:
11:1c:6d:fb:ba:29:8d:9c:d4:88:8c:57:12:9d:99:
51:28:ae:11:8f:26:62:63:15:be:a9:2d:30:8a:d8:
2e:d1:67:19:bc:db:98:f8:6a:ea:17:af:f1:9b:14:
5e:72:8d:6f:aa:c5:66:cd:2c:2a:6a:ba:96:93:61:
42:f9:44:3c:ea:45:e2:fb:9a:fa:17:3a:b3:be:7c:
69:74:d3:35:af:51:59:9d:1d:3f:64:40:2a:76:e5:
9f:d1:7b:e3:7c:9e:58:33:a1:19:63:e1:61:2b:8a:
98:11:2e:21:92:3b:f2:22:dc:3c:63:63:5e:47:fd:
30:72:93:76:99:38:e4:5f:51:af:09:b0:7b:b7:57:
4a:b8:d8:9a:1f:bc:d1:f3:31:cc:09:bd:9e:d0:e5:
cd:70:29:d3:7d:ed:16:50:cd:74:5d:9f:de:5f:b2:
25:b7:c8:ac:93:93:25:d5:66:3f:4b:72:27:73:bf:
ed:e2:ef:35:b7:24:e1:0c:28:ba:49:ac:47:70:c6:
0d:3d:81:f0:7a:fc:d2:45:07:ac:d4:b1:a2:65:8b:
57:be:7f:ad:ae:35:d1:06:10:d0:6c:9a:53:6f:a6:
93:2d:a8:5e:44:c0:9f:e8:27:0d:6f:45:ee:27:a5:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:19:7E:C9:19:5E:37:F8:9D:52:25:97:AE:A1:AA:A1:4D:C1:BB:98
X509v3 Authority Key Identifier:
keyid:6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c7:8a:73:42:c0:2c:cd:f3:a8:ac:99:d4:7e:59:a8:8b:f6:
df:df:b1:59:05:40:21:cf:14:72:30:09:85:b6:16:b1:14:4c:
25:b4:b1:1a:c2:1e:a9:f3:c4:10:1e:6d:5e:43:c7:e2:fb:d9:
c8:fa:f9:c9:ab:0c:b4:4d:78:1c:39:6f:07:5d:ab:b1:95:f5:
cd:51:62:0e:f9:1e:56:45:4e:1a:23:5d:5a:c1:0f:e9:58:b0:
66:bd:d8:d8:1a:db:61:e7:c0:5a:c4:bd:37:f7:d9:3f:d3:b7:
11:f3:ab:df:8d:da:09:5c:85:71:3b:ae:b6:3f:05:bd:1e:60:
f4:09:83:97:34:59:0e:be:6f:e6:2f:29:f9:ef:be:6c:12:3e:
8c:9b:5a:9c:34:e0:4f:24:99:f1:50:3f:7e:78:ab:93:c6:bf:
56:b4:86:4b:fd:16:ca:34:2f:db:21:c9:5e:0a:4c:d0:5c:00:
12:53:90:d5:db:9d:11:24:d7:a6:8b:75:ba:6d:0e:97:86:a7:
27:ed:c3:49:93:2e:ca:c2:fa:a5:c3:14:b1:ea:00:92:fb:0c:
de:d7:1e:ce:ad:a1:b9:c7:64:30:3a:57:cf:34:b7:61:54:97:
66:f7:60:5e:cb:de:eb:a3:e9:59:fe:69:b1:b9:c9:cc:0f:e4:
79:74:e3:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuSCHoGrAne7sPcCUKvtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZjc4OTEzMzE0NTBkYzg2MjgzYTA4OWJkOTQ3MGU2OWMz
N2VkMTIwHhcNMjUxMTExMDcwMjI5WhcNMjUxMTEyMDcwMjI5WjAzMTEwLwYDVQQD
Eyg5YjE5N2VjOTE5NWUzN2Y4OWQ1MjI1OTdhZWExYWFhMTRkYzFiYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswS4ILvx2kUhK1V6yg0RHG37uimN
nNSIjFcSnZlRKK4RjyZiYxW+qS0witgu0WcZvNuY+GrqF6/xmxReco1vqsVmzSwq
arqWk2FC+UQ86kXi+5r6FzqzvnxpdNM1r1FZnR0/ZEAqduWf0XvjfJ5YM6EZY+Fh
K4qYES4hkjvyItw8Y2NeR/0wcpN2mTjkX1GvCbB7t1dKuNiaH7zR8zHMCb2e0OXN
cCnTfe0WUM10XZ/eX7Ilt8isk5Ml1WY/S3Inc7/t4u81tyThDCi6SaxHcMYNPYHw
evzSRQes1LGiZYtXvn+trjXRBhDQbJpTb6aTLaheRMCf6CcNb0XuJ6WO0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsZfskZXjf4nVIll66hqqFNwbuYMB8GA1UdIwQY
MBaAFG/3iRMxRQ3IYoOgib2UcOacN+0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDkyNmUtZjBlNS00M2Q2LThlM2Mt
ZDU3NWI5NjI0ZGU3LzEvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MDkyNmUtZjBlNS00M2Q2LThlM2MtZDU3NWI5NjI0ZGU3
LzEvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEceKc0LA
LM3zqKyZ1H5ZqIv239+xWQVAIc8UcjAJhbYWsRRMJbSxGsIeqfPEEB5tXkPH4vvZ
yPr5yasMtE14HDlvB12rsZX1zVFiDvkeVkVOGiNdWsEP6ViwZr3Y2BrbYefAWsS9
N/fZP9O3EfOr343aCVyFcTuutj8FvR5g9AmDlzRZDr5v5i8p+e++bBI+jJtanDTg
TySZ8VA/fnirk8a/VrSGS/0WyjQv2yHJXgpM0FwAElOQ1dudESTXpot1um0Ol4an
J+3DSZMuysL6pcMUseoAkvsM3tcezq2hucdkMDpXzzS3YVSXZvdgXsve66PpWf5p
sbnJzA/keXTjzA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:57 2025 by rpki-client