Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File: bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier: at3ztD0RKZcotkesfrpfwzB9orPndXWC23uIzFP3+aA=
Subject key identifier: 9F:82:3F:45:04:DE:37:0E:91:D6:1D:C3:68:4C:92:5B:77:96:A2:E7
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer: /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial: 019A71EE836E21EC7FBB48F2809162097CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: CupjcMYxrrIRVaVINFBQy57CY6WmCTt0mcEq+kDNZKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:83:6e:21:ec:7f:bb:48:f2:80:91:62:09:7c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=9f823f4504de370e91d61dc3684c925b7796a2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:a3:0d:1a:db:14:fa:0f:16:b8:47:c7:19:
3e:2e:13:b6:c7:eb:27:11:47:fb:99:8d:e3:7d:76:
35:ab:69:14:a5:80:0f:59:3a:ca:1d:80:81:dc:fd:
47:98:c1:c1:ef:f1:26:bc:16:a7:6d:49:f6:6a:c9:
20:ba:5c:64:f4:bf:3d:a2:70:f1:19:bc:cf:c4:0d:
d8:a3:a9:e3:db:49:79:37:6b:c4:1b:31:32:c5:76:
5a:ab:ac:ff:3c:f3:c0:d7:23:7d:9e:d5:52:2a:d0:
ec:64:cd:85:b6:e2:c9:d9:84:f9:cb:f5:78:af:ac:
a7:37:3a:94:d0:84:0c:9a:f8:e0:70:a2:04:21:10:
93:59:d7:dd:b4:37:5d:f1:5b:16:41:5a:bb:c7:25:
32:1a:68:a9:f5:54:ed:89:7d:0f:66:0f:e6:e3:0a:
4c:fa:35:8c:04:57:5e:06:5a:60:ed:4f:f3:6d:0d:
71:7d:d9:9b:ca:7b:fa:dc:a7:20:bc:e0:4c:df:de:
49:00:61:32:eb:02:4d:47:b6:73:1d:cf:f2:e6:0e:
de:3a:40:ee:ea:aa:8b:57:ab:37:d3:78:8d:8f:fa:
f9:9f:86:7f:9a:9a:61:36:cf:14:d7:bf:31:20:66:
9d:54:84:d0:bd:5d:ae:47:41:48:08:8b:02:81:b6:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:82:3F:45:04:DE:37:0E:91:D6:1D:C3:68:4C:92:5B:77:96:A2:E7
X509v3 Authority Key Identifier:
keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:84:b3:9a:5b:70:0c:5b:67:ae:c0:67:a4:0b:4e:f7:a1:d6:
e2:04:a1:62:f6:3f:e4:ed:e3:1f:b2:50:e5:00:36:4f:d4:2e:
ab:a9:f9:39:5c:38:f9:07:b1:1a:2c:62:09:4d:41:d9:5a:4f:
2e:9f:55:7a:09:b5:dc:64:8d:68:bb:2c:af:70:13:1e:f2:3b:
b3:77:e7:37:28:a1:7c:0d:8c:31:ed:29:32:4f:d2:ad:e9:ad:
fa:48:eb:57:51:da:a3:86:96:e9:f4:ce:ca:9b:15:f5:44:85:
bb:8f:91:85:82:b8:e9:09:80:a1:d9:72:d6:b2:6b:03:96:79:
1e:45:b2:e6:7d:ba:b2:6e:09:fa:d2:4c:98:b8:52:13:cf:a3:
68:10:6a:15:83:81:7d:96:46:a5:0c:46:e0:b5:77:4a:29:82:
c8:96:77:fd:2e:b3:ce:a4:72:2b:3e:5e:a7:2b:c9:11:fe:f6:
e2:36:87:23:19:60:d9:39:03:35:ce:b9:e5:c6:bc:4b:8a:a4:
6e:1c:38:44:42:06:b4:a8:e7:3a:dc:a9:d4:4c:9b:7f:8e:08:
f6:cb:de:35:c4:ed:5e:dc:ab:a9:d3:07:6d:50:1a:cd:60:5f:
b3:a9:fa:e3:a6:4a:84:02:ee:de:f3:33:10:ba:1a:15:3a:1d:
d7:89:6a:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7oNuIex/u0jygJFiCXzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNGIzNTEwZjAwNGU0NTRkZmJjMWYxYTI4YzQ1OWQ5MThk
MTUxM2MwHhcNMjUxMTExMDgwMDQ3WhcNMjUxMTEyMDgwMDQ3WjAzMTEwLwYDVQQD
Eyg5ZjgyM2Y0NTA0ZGUzNzBlOTFkNjFkYzM2ODRjOTI1Yjc3OTZhMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFijDRrbFPoPFrhHxxk+LhO2x+sn
EUf7mY3jfXY1q2kUpYAPWTrKHYCB3P1HmMHB7/EmvBanbUn2askgulxk9L89onDx
GbzPxA3Yo6nj20l5N2vEGzEyxXZaq6z/PPPA1yN9ntVSKtDsZM2FtuLJ2YT5y/V4
r6ynNzqU0IQMmvjgcKIEIRCTWdfdtDdd8VsWQVq7xyUyGmip9VTtiX0PZg/m4wpM
+jWMBFdeBlpg7U/zbQ1xfdmbynv63KcgvOBM395JAGEy6wJNR7ZzHc/y5g7eOkDu
6qqLV6s303iNj/r5n4Z/mpphNs8U178xIGadVITQvV2uR0FICIsCgbbvkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+CP0UE3jcOkdYdw2hMklt3lqLnMB8GA1UdIwQY
MBaAFG5LNRDwBORU37wfGijEWdkY0VE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmtzMUVQQUU1RlRmdkI4YUtNUloyUmpSVVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mZmNjZTAtMzExNi00Y2ZjLThhOTkt
OGYzMzQ3NmEwOGEzLzEvYmtzMUVQQUU1RlRmdkI4YUtNUloyUmpSVVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mZmNjZTAtMzExNi00Y2ZjLThhOTktOGYzMzQ3NmEwOGEz
LzEvYmtzMUVQQUU1RlRmdkI4YUtNUloyUmpSVVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4Szmltw
DFtnrsBnpAtO96HW4gShYvY/5O3jH7JQ5QA2T9Quq6n5OVw4+QexGixiCU1B2VpP
Lp9Vegm13GSNaLssr3ATHvI7s3fnNyihfA2MMe0pMk/Sremt+kjrV1Hao4aW6fTO
ypsV9USFu4+RhYK46QmAodly1rJrA5Z5HkWy5n26sm4J+tJMmLhSE8+jaBBqFYOB
fZZGpQxG4LV3SimCyJZ3/S6zzqRyKz5epyvJEf724jaHIxlg2TkDNc655ca8S4qk
bhw4REIGtKjnOtyp1Eybf44I9sveNcTtXtyrqdMHbVAazWBfs6n646ZKhALu3vMz
ELoaFTod14lqlw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:55 2025 by rpki-client