Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
File: cn4hijGD9RKCflrG2eVCXivw7gM.mft (raw, json)
Hash identifier: wXQT36ZbqutVXBBcTO3eEx86xmWNL/fSNaGmO6tGAmE=
Subject key identifier: 0D:AC:77:EA:FC:78:73:3D:2F:81:88:7B:F1:88:61:C5:49:57:65:1A
Authority key identifier: 72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
Certificate issuer: /CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Certificate serial: 019A71B84FAEB875EF21AD13C60E2C573323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
Manifest number: 01DD
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: cn4hijGD9RKCflrG2eVCXivw7gM.crl (hash: ko80lA9RGRbx36von7D4ruPCK8s9x49wygC3sDcCpNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4f:ae:b8:75:ef:21:ad:13:c6:0e:2c:57:33:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=0dac77eafc78733d2f81887bf18861c54957651a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:ca:38:93:80:e4:ec:a8:79:fa:b5:5c:d5:
aa:a0:f4:3a:17:6d:02:38:c5:9d:57:86:db:f7:d5:
df:0d:f4:e9:b0:aa:13:44:43:2d:a0:14:5f:87:47:
56:a3:4e:6a:27:22:6b:a9:5c:a4:27:2f:12:9e:2d:
3a:47:ce:ab:4f:c0:21:7f:49:be:82:8e:f1:04:be:
f8:3a:3f:40:31:ac:51:c4:d9:04:19:40:d5:e6:2e:
06:a9:8b:94:38:8d:26:df:35:f5:ae:81:42:36:e2:
13:ac:6f:13:e2:50:97:a8:3f:c6:26:92:2b:9b:ec:
bd:db:bc:46:ca:fd:10:fc:51:d9:fc:76:38:6a:68:
a7:33:6c:b0:14:b4:10:1d:db:4f:29:3b:89:5e:06:
33:fc:31:31:19:90:80:6d:63:bd:9e:55:0e:db:e3:
05:d4:57:13:f4:08:f9:ff:d0:4b:11:f9:f6:ff:0b:
5d:b8:34:70:50:f7:2b:42:09:42:f0:00:4d:a0:7f:
64:37:38:d5:55:48:2f:46:c6:c1:90:6e:94:90:a4:
f3:a9:fe:68:86:b1:8f:d3:ed:dc:02:1c:d5:8a:cd:
e8:cd:5d:ba:e7:32:c7:d6:be:14:68:22:e6:10:1f:
92:3c:61:6f:61:bb:25:f8:72:cf:9f:81:f8:9c:e8:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:77:EA:FC:78:73:3D:2F:81:88:7B:F1:88:61:C5:49:57:65:1A
X509v3 Authority Key Identifier:
keyid:72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:55:60:c8:e4:80:f9:49:8b:37:6f:ec:81:b8:64:93:cf:06:
6c:16:62:e2:31:6c:d6:01:1d:38:0f:3f:e3:74:05:c9:86:8d:
81:d9:ee:03:1a:f8:9d:94:56:c2:e1:a5:a4:be:3b:4d:71:35:
30:1d:2b:db:86:f6:5d:95:51:ff:96:0b:0b:e9:2d:1e:e3:e2:
46:46:3f:a5:a8:25:fa:28:06:80:18:ed:3a:61:09:d0:b1:5c:
d2:e1:43:08:22:b7:1d:d8:41:95:d8:8e:7d:4c:74:a9:ca:72:
26:c5:60:99:5d:8b:75:83:b2:18:0c:95:dd:a2:75:d9:8f:8c:
ce:ac:50:d8:8f:79:b7:47:41:e7:f9:26:d9:7a:d6:ed:a2:4d:
61:86:64:9c:44:ed:cd:11:97:8d:0f:2c:db:79:5f:0f:4b:9d:
6c:a0:df:05:d3:4b:91:61:15:96:e3:2a:1e:12:fa:95:51:15:
87:12:e1:1a:b7:f9:bb:5a:8b:5f:d7:93:a2:5e:21:69:c2:5e:
0a:6c:56:42:76:55:7e:63:08:08:7b:80:d5:15:33:1f:20:cc:
f9:09:78:23:c4:b7:21:fb:09:b3:88:a3:d9:43:5f:ef:0e:5f:
ad:76:26:76:07:88:71:a6:b6:95:51:40:32:86:23:f5:c5:09:
03:59:38:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuE+uuHXvIa0Txg4sVzMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyN2UyMThhMzE4M2Y1MTI4MjdlNWFjNmQ5ZTU0MjVlMmJm
MGVlMDMwHhcNMjUxMTExMDcwMTM1WhcNMjUxMTEyMDcwMTM1WjAzMTEwLwYDVQQD
EygwZGFjNzdlYWZjNzg3MzNkMmY4MTg4N2JmMTg4NjFjNTQ5NTc2NTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr/KOJOA5Oyoefq1XNWqoPQ6F20C
OMWdV4bb99XfDfTpsKoTREMtoBRfh0dWo05qJyJrqVykJy8Sni06R86rT8Ahf0m+
go7xBL74Oj9AMaxRxNkEGUDV5i4GqYuUOI0m3zX1roFCNuITrG8T4lCXqD/GJpIr
m+y927xGyv0Q/FHZ/HY4aminM2ywFLQQHdtPKTuJXgYz/DExGZCAbWO9nlUO2+MF
1FcT9Aj5/9BLEfn2/wtduDRwUPcrQglC8ABNoH9kNzjVVUgvRsbBkG6UkKTzqf5o
hrGP0+3cAhzVis3ozV265zLH1r4UaCLmEB+SPGFvYbsl+HLPn4H4nOhC2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2sd+r8eHM9L4GIe/GIYcVJV2UaMB8GA1UdIwQY
MBaAFHJ+IYoxg/USgn5axtnlQl4r8O4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY240aGlqR0Q5UktDZmxyRzJlVkNYaXZ3N2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zZTUxM2YtYjlhYS00NzQ0LWE1NzAt
ZWZjYjU4MjAwZThhLzEvY240aGlqR0Q5UktDZmxyRzJlVkNYaXZ3N2dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8zZTUxM2YtYjlhYS00NzQ0LWE1NzAtZWZjYjU4MjAwZThh
LzEvY240aGlqR0Q5UktDZmxyRzJlVkNYaXZ3N2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlVgyOSA
+UmLN2/sgbhkk88GbBZi4jFs1gEdOA8/43QFyYaNgdnuAxr4nZRWwuGlpL47TXE1
MB0r24b2XZVR/5YLC+ktHuPiRkY/pagl+igGgBjtOmEJ0LFc0uFDCCK3HdhBldiO
fUx0qcpyJsVgmV2LdYOyGAyV3aJ12Y+MzqxQ2I95t0dB5/km2XrW7aJNYYZknETt
zRGXjQ8s23lfD0udbKDfBdNLkWEVluMqHhL6lVEVhxLhGrf5u1qLX9eTol4hacJe
CmxWQnZVfmMICHuA1RUzHyDM+Ql4I8S3IfsJs4ij2UNf7w5frXYmdgeIcaa2lVFA
MoYj9cUJA1k4Bw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:40 2025 by rpki-client