Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
File: cIKkpfKWFe2f7k9nURSF40z3EuA.mft (raw, json)
Hash identifier: 50eXZB+bm3O/8yafahnpCjw9+u1Z+6VD7+5KADEb+1U=
Subject key identifier: D9:46:9E:D8:B0:14:9D:7F:5F:BD:7D:AE:BC:71:C7:46:C4:4E:5F:A0
Authority key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
Certificate issuer: /CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Certificate serial: 019A7149DB3CFFF6D27E42D7EF1FB44A81C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
Manifest number: 01BA
Signing time: Tue 11 Nov 2025 05:00:56 +0000
Manifest this update: Tue 11 Nov 2025 05:00:56 +0000
Manifest next update: Wed 12 Nov 2025 05:00:56 +0000
Files and hashes: 1: cIKkpfKWFe2f7k9nURSF40z3EuA.crl (hash: /aCrLLungUh5Lx60TSV/u08xj1YtR38a0gZ0xMn2KsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:db:3c:ff:f6:d2:7e:42:d7:ef:1f:b4:4a:81:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Validity
Not Before: Nov 11 05:00:56 2025 GMT
Not After : Nov 12 05:00:56 2025 GMT
Subject: CN=d9469ed8b0149d7f5fbd7daebc71c746c44e5fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:61:26:3c:13:ff:35:94:64:57:75:64:d9:
c0:e1:84:02:7a:1f:a0:20:cc:dd:fc:3d:d7:5a:07:
65:a0:8a:ed:8b:35:58:3a:08:42:bb:ad:c6:b7:57:
6c:87:f9:f0:b8:a3:24:b2:9b:6d:13:f0:5c:41:3e:
3d:76:73:05:dd:f1:f5:7d:26:7f:2c:7b:b5:bc:d8:
c4:9f:90:2a:64:d2:43:96:de:c1:0a:95:a9:b1:4f:
28:d6:f7:ef:8b:d7:d6:80:1f:60:89:43:73:0d:3b:
9b:c7:f0:89:de:1b:f2:7d:d9:09:34:2b:09:bc:9d:
19:36:67:b0:80:2e:fc:86:0d:33:e1:e7:4a:df:bf:
38:80:e1:70:38:d2:ff:ed:3f:a8:3c:a8:f1:d3:e2:
91:cb:dd:e2:aa:f2:cd:2c:c4:b4:c5:c1:9e:98:72:
8e:b8:70:66:dc:d9:f1:21:93:1a:df:b4:5c:b8:6b:
26:7f:22:e1:be:7d:a9:22:c4:49:8e:a0:df:4e:d9:
3f:ca:fd:ba:3e:22:a0:87:e0:d5:68:5e:ef:6f:97:
9f:32:79:4d:58:f8:dd:9e:5d:00:21:9f:37:2a:f6:
23:57:13:82:8d:42:64:35:18:08:3a:fc:e4:3e:22:
5d:cd:84:79:88:58:15:04:0a:f1:61:a6:11:16:f8:
b8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:46:9E:D8:B0:14:9D:7F:5F:BD:7D:AE:BC:71:C7:46:C4:4E:5F:A0
X509v3 Authority Key Identifier:
keyid:70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:ef:bf:ad:7a:4f:78:b7:84:0b:79:e4:9a:ec:a3:96:ea:cb:
2e:27:cd:34:b2:6a:f9:a9:fc:22:44:e9:53:17:25:db:a8:7a:
fd:2b:ee:fa:8e:b8:a5:bc:a0:47:88:ad:3d:12:e7:76:24:88:
49:df:3d:92:b3:e2:ca:8a:33:40:28:27:46:bf:90:ca:32:ce:
27:17:cb:22:9b:7c:a8:fa:5b:46:a1:fb:bc:d6:47:2a:1a:cf:
89:56:8e:7d:8f:8d:69:d1:24:31:2b:33:3d:a9:7e:99:f2:ae:
d3:22:e5:4c:c8:69:ea:db:0e:ca:08:ce:3b:ac:51:a4:0a:45:
03:6b:e0:8e:18:33:52:34:9d:be:48:b9:77:2d:f0:c2:b4:f6:
87:c2:9b:fe:13:b0:36:58:93:d0:5d:00:e2:f6:0f:e7:0a:25:
bb:38:8e:5b:4d:0b:a9:c6:5d:d7:ba:01:8f:bb:df:48:6e:5e:
d3:b2:e3:b8:ed:d3:9d:f8:26:6d:5a:c6:bc:a7:4b:8a:0d:2d:
70:2d:fa:49:fe:15:c9:09:6c:cf:16:fd:37:2f:c3:bc:de:bb:
6c:1f:9c:17:a9:08:b8:f8:2e:4c:ee:05:09:d8:e1:33:5a:fd:
22:3f:79:f2:84:9a:64:63:e4:bb:b1:6b:9b:d6:51:a1:61:27:
d2:7f:09:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSds8//bSfkLX7x+0SoHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODJhNGE1ZjI5NjE1ZWQ5ZmVlNGY2NzUxMTQ4NWUzNGNm
NzEyZTAwHhcNMjUxMTExMDUwMDU2WhcNMjUxMTEyMDUwMDU2WjAzMTEwLwYDVQQD
EyhkOTQ2OWVkOGIwMTQ5ZDdmNWZiZDdkYWViYzcxYzc0NmM0NGU1ZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoBhJjwT/zWUZFd1ZNnA4YQCeh+g
IMzd/D3XWgdloIrtizVYOghCu63Gt1dsh/nwuKMkspttE/BcQT49dnMF3fH1fSZ/
LHu1vNjEn5AqZNJDlt7BCpWpsU8o1vfvi9fWgB9giUNzDTubx/CJ3hvyfdkJNCsJ
vJ0ZNmewgC78hg0z4edK3784gOFwONL/7T+oPKjx0+KRy93iqvLNLMS0xcGemHKO
uHBm3NnxIZMa37RcuGsmfyLhvn2pIsRJjqDfTtk/yv26PiKgh+DVaF7vb5efMnlN
WPjdnl0AIZ83KvYjVxOCjUJkNRgIOvzkPiJdzYR5iFgVBArxYaYRFvi4cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlGntiwFJ1/X719rrxxx0bETl+gMB8GA1UdIwQY
MBaAFHCCpKXylhXtn+5PZ1EUheNM9xLgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lLa3BmS1dGZTJmN2s5blVSU0Y0MHozRXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83YjI4ODUtM2NmMy00MzY3LWI2NGEt
OTllMzVjNzA5NDg2LzEvY0lLa3BmS1dGZTJmN2s5blVSU0Y0MHozRXVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83YjI4ODUtM2NmMy00MzY3LWI2NGEtOTllMzVjNzA5NDg2
LzEvY0lLa3BmS1dGZTJmN2s5blVSU0Y0MHozRXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5O+/rXpP
eLeEC3nkmuyjlurLLifNNLJq+an8IkTpUxcl26h6/Svu+o64pbygR4itPRLndiSI
Sd89krPiyoozQCgnRr+QyjLOJxfLIpt8qPpbRqH7vNZHKhrPiVaOfY+NadEkMSsz
Pal+mfKu0yLlTMhp6tsOygjOO6xRpApFA2vgjhgzUjSdvki5dy3wwrT2h8Kb/hOw
NliT0F0A4vYP5woluziOW00LqcZd17oBj7vfSG5e07LjuO3TnfgmbVrGvKdLig0t
cC36Sf4VyQlszxb9Ny/DvN67bB+cF6kIuPguTO4FCdjhM1r9Ij958oSaZGPku7Fr
m9ZRoWEn0n8Jlw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:36 2025 by rpki-client