Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File: M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier: mPssfelkSj1+CVtfJe+b8QoeyesUUqjszJ2qekxesEg=
Subject key identifier: 14:99:D3:E7:2B:2F:5C:8D:11:D0:75:CA:6A:7D:D1:21:00:7E:EA:E3
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer: /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial: 019A28F92FBAD505D8369989C40FE89EEA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number: 143E
Signing time: Tue 28 Oct 2025 04:00:10 +0000
Manifest this update: Tue 28 Oct 2025 04:00:10 +0000
Manifest next update: Wed 29 Oct 2025 04:00:10 +0000
Files and hashes: 1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: 8AZvAak81fpb4JGEQ3Ltw0FLPvU5gKPplj5th7jjshI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:2f:ba:d5:05:d8:36:99:89:c4:0f:e8:9e:ea:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Validity
Not Before: Oct 28 04:00:10 2025 GMT
Not After : Oct 29 04:00:10 2025 GMT
Subject: CN=1499d3e72b2f5c8d11d075ca6a7dd121007eeae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:91:7f:70:32:87:69:16:e0:1f:af:8e:07:
2f:3c:49:b4:16:85:91:b9:fc:35:ac:01:cb:d1:bb:
b2:f1:db:bc:b6:26:f7:44:b9:08:86:bc:22:7a:bf:
2c:4e:ca:ee:50:4e:5c:35:53:6a:2f:c3:f0:c1:b0:
02:c7:7f:3c:e3:9b:37:c7:c9:8b:7e:5c:a3:e1:fe:
39:be:3a:2c:3c:0e:5b:bb:bc:51:31:ca:79:c8:b7:
81:de:97:00:29:42:17:b9:39:03:09:1a:dd:aa:4c:
27:b3:6d:d6:98:ce:42:7e:81:6d:4b:d5:30:ed:12:
d7:4e:60:93:97:c5:4e:5f:27:36:28:18:a2:f4:69:
ac:ba:03:7a:de:4b:c9:be:3c:59:90:2d:ba:0d:0d:
5a:68:2a:02:ee:2b:d6:41:5b:c7:2c:1f:5d:a2:20:
22:be:9b:dd:e8:fc:6a:0f:c5:73:68:f3:9b:9d:89:
ab:fc:43:0b:75:70:64:31:66:e8:6b:65:11:65:36:
b3:fb:bb:a9:64:7c:75:c9:b9:61:8a:4d:20:5a:77:
e0:d7:4c:19:ae:a0:c7:2c:e9:5a:0e:90:ad:8e:8a:
35:66:7b:36:9c:20:07:51:03:98:f5:dc:93:12:22:
b5:f4:d7:3d:61:68:b8:ba:4b:e1:c4:af:df:9b:0d:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:99:D3:E7:2B:2F:5C:8D:11:D0:75:CA:6A:7D:D1:21:00:7E:EA:E3
X509v3 Authority Key Identifier:
keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4f:ef:17:7f:e7:82:e3:bc:90:d0:5c:67:5a:87:c5:62:a0:
87:d6:01:65:3f:4b:41:06:5d:73:24:bf:22:d4:95:0a:50:c9:
6a:7e:10:4b:90:8c:3e:60:d1:89:57:cb:03:01:67:88:f8:dc:
af:30:31:79:c8:00:1e:32:e4:be:49:95:9e:35:17:a7:15:ce:
9d:48:da:ff:3b:f5:0d:71:e5:a5:33:4a:c0:48:40:0e:28:31:
6c:40:89:40:00:b2:e9:2b:5d:97:c5:74:a0:fb:46:74:03:20:
43:89:51:f1:d4:2d:86:e5:f5:56:32:45:e4:b1:a2:a4:e8:da:
c9:61:de:1e:bf:af:57:e0:af:37:16:e9:d0:1c:58:91:d3:70:
8b:71:12:31:15:1f:ac:a6:a6:44:97:fb:06:3d:77:cf:99:3e:
f6:e9:5a:56:44:f4:25:6f:ae:a9:e6:30:6a:31:a0:89:5f:d7:
e5:cc:ea:ac:02:30:0d:d7:98:5e:38:9e:af:5b:be:af:a2:61:
6b:71:94:9c:bb:93:b1:b2:5b:26:92:32:63:49:52:3a:fb:c1:
f5:e7:44:bc:7e:9e:ec:4e:e7:83:3f:2f:eb:6b:c2:2a:d9:72:
0d:5b:01:96:53:77:32:67:9d:fb:e9:72:35:0f:90:92:41:47:
c9:69:02:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoo+S+61QXYNpmJxA/onuoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjcyMTJlNmZlNWZjZjBlZTc4ZGNkMDQ0MGRmNjllMDBh
YWQ0ZGMwHhcNMjUxMDI4MDQwMDEwWhcNMjUxMDI5MDQwMDEwWjAzMTEwLwYDVQQD
EygxNDk5ZDNlNzJiMmY1YzhkMTFkMDc1Y2E2YTdkZDEyMTAwN2VlYWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u6Rf3Ayh2kW4B+vjgcvPEm0FoWR
ufw1rAHL0buy8du8tib3RLkIhrwier8sTsruUE5cNVNqL8PwwbACx38845s3x8mL
flyj4f45vjosPA5bu7xRMcp5yLeB3pcAKUIXuTkDCRrdqkwns23WmM5CfoFtS9Uw
7RLXTmCTl8VOXyc2KBii9GmsugN63kvJvjxZkC26DQ1aaCoC7ivWQVvHLB9doiAi
vpvd6PxqD8VzaPObnYmr/EMLdXBkMWboa2URZTaz+7upZHx1yblhik0gWnfg10wZ
rqDHLOlaDpCtjoo1Zns2nCAHUQOY9dyTEiK19Nc9YWi4ukvhxK/fmw15QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSZ0+crL1yNEdB1ymp90SEAfurjMB8GA1UdIwQY
MBaAFDO3IS5v5fzw7njc0EQN9p4AqtTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdjaExtX2xfUER1ZU56UVJBMzJuZ0NxMU53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zZDU5ZTgtZDRmNy00YjA4LTlmNzgt
YmRmZWUzNWFmMmI4LzEvTTdjaExtX2xfUER1ZU56UVJBMzJuZ0NxMU53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zZDU5ZTgtZDRmNy00YjA4LTlmNzgtYmRmZWUzNWFmMmI4
LzEvTTdjaExtX2xfUER1ZU56UVJBMzJuZ0NxMU53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZU/vF3/n
guO8kNBcZ1qHxWKgh9YBZT9LQQZdcyS/ItSVClDJan4QS5CMPmDRiVfLAwFniPjc
rzAxecgAHjLkvkmVnjUXpxXOnUja/zv1DXHlpTNKwEhADigxbECJQACy6Stdl8V0
oPtGdAMgQ4lR8dQthuX1VjJF5LGipOjayWHeHr+vV+CvNxbp0BxYkdNwi3ESMRUf
rKamRJf7Bj13z5k+9ulaVkT0JW+uqeYwajGgiV/X5czqrAIwDdeYXjier1u+r6Jh
a3GUnLuTsbJbJpIyY0lSOvvB9edEvH6e7E7ngz8v62vCKtlyDVsBllN3Mmed++ly
NQ+QkkFHyWkCXg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:14:24 2025 by rpki-client