Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
File: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft (raw, json)
Hash identifier: z0Vdrjyuu0R+ImoA/uCWfbDYS06H2SPEZmHD7zMHWU8=
Subject key identifier: 50:18:82:C8:B6:73:B3:2D:F3:DE:4D:A7:4E:22:61:D1:E2:E6:93:54
Authority key identifier: F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
Certificate issuer: /CN=f89e882276f80e6750490eef006de943dacb6e0f
Certificate serial: 019A706E41DD0D2BC4F94027A8FA8ADEC33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
Manifest number: 09CF
Signing time: Tue 11 Nov 2025 01:01:05 +0000
Manifest this update: Tue 11 Nov 2025 01:01:05 +0000
Manifest next update: Wed 12 Nov 2025 01:01:05 +0000
Files and hashes: 1: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl (hash: ZyGOC0GUqHNeF0y7Eds5nqwuYIroShrU+MO5O7FZmME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:41:dd:0d:2b:c4:f9:40:27:a8:fa:8a:de:c3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e882276f80e6750490eef006de943dacb6e0f
Validity
Not Before: Nov 11 01:01:05 2025 GMT
Not After : Nov 12 01:01:05 2025 GMT
Subject: CN=501882c8b673b32df3de4da74e2261d1e2e69354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:af:6a:78:dd:c4:f1:c6:f5:27:9b:6f:dc:
8e:30:1a:4e:a1:d9:f6:48:7b:ca:c4:3a:de:d0:22:
3c:e1:13:8e:6e:2d:9c:c2:69:f1:ee:2d:12:e8:2b:
77:82:40:fd:35:da:aa:95:c0:3b:ab:7a:0e:da:fe:
80:ef:b5:2e:d7:bb:09:50:d4:49:1e:d7:ca:35:32:
d9:42:da:dc:47:7b:e7:53:fb:9f:2b:be:d5:1e:e2:
7b:b8:e7:2b:b0:13:0f:78:4a:51:1a:3a:21:de:38:
6e:7c:97:c7:03:3b:0e:9c:b5:8d:63:27:9f:1d:75:
d8:c0:d8:83:12:f2:a9:87:ae:83:84:5f:9e:13:ba:
42:18:d5:c0:35:80:fd:4d:f3:b3:8c:09:99:4b:36:
0f:df:ac:6d:d0:8e:46:10:32:5d:97:17:52:87:28:
c8:4c:3f:ca:6e:29:1d:51:61:6f:f0:c8:01:c4:a0:
74:bf:2c:35:12:49:73:27:c0:bb:7d:d3:61:89:ec:
12:12:b1:56:b2:54:5e:fb:d4:0c:f5:46:33:3b:d3:
d7:28:56:8a:f8:33:86:83:07:aa:3f:8b:89:ad:d9:
e7:78:e8:9e:09:e3:4f:a4:99:93:26:cb:91:59:0f:
f2:c4:3f:ff:98:9c:18:a6:eb:07:4d:31:ab:6e:ae:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:18:82:C8:B6:73:B3:2D:F3:DE:4D:A7:4E:22:61:D1:E2:E6:93:54
X509v3 Authority Key Identifier:
keyid:F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b5:e7:cf:7f:f1:78:ea:09:56:cd:41:4e:58:f2:47:f5:8f:
63:10:2e:6e:4b:d6:da:99:f1:9b:aa:85:bf:93:86:92:fb:cb:
0d:3b:78:5d:74:16:7e:83:9a:cf:cb:7a:7e:39:b0:16:ee:41:
0c:67:7a:4b:cf:8b:06:3e:b1:f8:81:0b:9e:bb:fe:d0:8e:47:
8e:2f:07:9e:06:1e:aa:3d:79:80:24:53:72:a1:51:a9:62:e0:
ca:75:88:24:df:3f:f2:5d:26:30:43:5e:b4:19:8c:ec:b5:45:
fc:7c:5b:56:2c:74:ae:c6:bb:68:ed:2d:e1:8e:93:97:c3:ef:
90:6e:f8:fb:b5:2b:3c:ad:e5:5b:91:52:e5:2f:c4:51:75:5f:
3c:aa:7e:20:63:4e:a0:7d:5a:65:cd:7a:65:2a:c4:34:df:d5:
48:a1:51:f1:47:3f:9e:a0:37:f1:c6:ad:81:0c:3a:ea:e0:37:
ea:5f:24:72:58:c8:6d:39:a1:ef:fb:fb:68:f2:cf:e3:a8:59:
23:2b:ba:97:db:b0:f1:ca:a5:03:5b:e2:51:5e:d7:cd:03:a5:
c2:71:98:23:96:f2:38:a7:b5:f9:bf:e7:8a:39:68:f0:0c:c0:
50:d4:4a:69:2c:81:3e:b0:6a:2b:48:36:a3:c3:4b:79:d3:89:
f8:11:ee:b7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpwbkHdDSvE+UAnqPqK3sM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OWU4ODIyNzZmODBlNjc1MDQ5MGVlZjAwNmRlOTQzZGFj
YjZlMGYwHhcNMjUxMTExMDEwMTA1WhcNMjUxMTEyMDEwMTA1WjAzMTEwLwYDVQQD
Eyg1MDE4ODJjOGI2NzNiMzJkZjNkZTRkYTc0ZTIyNjFkMWUyZTY5MzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHOvanjdxPHG9Sebb9yOMBpOodn2
SHvKxDre0CI84ROObi2cwmnx7i0S6Ct3gkD9NdqqlcA7q3oO2v6A77Uu17sJUNRJ
HtfKNTLZQtrcR3vnU/ufK77VHuJ7uOcrsBMPeEpRGjoh3jhufJfHAzsOnLWNYyef
HXXYwNiDEvKph66DhF+eE7pCGNXANYD9TfOzjAmZSzYP36xt0I5GEDJdlxdShyjI
TD/KbikdUWFv8MgBxKB0vyw1EklzJ8C7fdNhiewSErFWslRe+9QM9UYzO9PXKFaK
+DOGgweqP4uJrdnneOieCeNPpJmTJsuRWQ/yxD//mJwYpusHTTGrbq67AwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFAYgsi2c7Mt895Np04iYdHi5pNUMB8GA1UdIwQY
MBaAFPieiCJ2+A5nUEkO7wBt6UPay24PMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KNklJbmI0RG1kUVNRN3ZBRzNwUTlyTGJnOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNjVlOTczLWI0MWItNDEwMy1hYTU2
LWZjY2NlYTY4MWI3YS8xLzEtSjZJSW5iNERtZFFTUTd2QUczcFE5ckxiZzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk5LzY1ZTk3My1iNDFiLTQxMDMtYWE1Ni1mY2NjZWE2ODFi
N2EvMS8xLUo2SUluYjREbWRRU1E3dkFHM3BROXJMYmc4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbXn
z3/xeOoJVs1BTljyR/WPYxAubkvW2pnxm6qFv5OGkvvLDTt4XXQWfoOaz8t6fjmw
Fu5BDGd6S8+LBj6x+IELnrv+0I5Hji8HngYeqj15gCRTcqFRqWLgynWIJN8/8l0m
MENetBmM7LVF/HxbVix0rsa7aO0t4Y6Tl8PvkG74+7UrPK3lW5FS5S/EUXVfPKp+
IGNOoH1aZc16ZSrENN/VSKFR8Uc/nqA38catgQw66uA36l8kcljIbTmh7/v7aPLP
46hZIyu6l9uw8cqlA1viUV7XzQOlwnGYI5byOKe1+b/nijlo8AzAUNRKaSyBPrBq
K0g2o8NLedOJ+BHutw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:45 2025 by rpki-client