Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File: r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier: bgA0V+SkTa5FqOk50PB0Rm0VbxA1gp5yPQvdIadc0xI=
Subject key identifier: 09:F4:09:AA:22:C4:21:E1:90:E9:71:BC:3A:29:17:6D:9F:EF:98:FC
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial: 019A725CE1255ED173D71CBDFF65FB52630A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number: 0E04
Signing time: Tue 11 Nov 2025 10:01:20 +0000
Manifest this update: Tue 11 Nov 2025 10:01:20 +0000
Manifest next update: Wed 12 Nov 2025 10:01:20 +0000
Files and hashes: 1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: oNq/KqVdZ0V1T/RyMYIEa2+pzNDjXAknzswFFRTD6QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e1:25:5e:d1:73:d7:1c:bd:ff:65:fb:52:63:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
Validity
Not Before: Nov 11 10:01:20 2025 GMT
Not After : Nov 12 10:01:20 2025 GMT
Subject: CN=09f409aa22c421e190e971bc3a29176d9fef98fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:0d:71:88:2c:c6:29:5b:b9:bf:56:19:d7:
c7:e1:ea:71:61:91:8a:66:ba:e0:da:de:65:75:71:
a6:75:5c:11:71:ab:91:4d:30:0a:bd:1f:52:78:d6:
74:6d:31:be:24:3d:bb:2c:53:6e:48:ee:87:ed:c7:
d3:8b:ad:7f:22:3d:8f:69:fc:32:d4:bb:25:77:37:
9b:56:ef:12:b6:50:fe:96:73:d0:18:b7:a4:c1:ab:
df:6c:df:1e:70:21:57:07:2f:5d:00:1a:4f:65:a0:
d8:65:f7:ee:ca:a8:56:6c:46:57:2f:b6:fa:06:eb:
ff:9f:e0:c3:d9:1f:9a:49:79:d4:84:d8:d4:60:4d:
08:16:89:e0:24:80:7b:82:29:bf:7e:0b:62:9d:fb:
ed:26:51:f2:eb:4b:8f:12:d6:44:6c:12:b3:43:ca:
a9:88:fd:89:5f:18:8d:cc:9a:7f:f2:1a:c9:1f:80:
3e:4f:6c:d9:37:98:25:74:f6:5c:ed:df:08:b0:4c:
64:66:b3:0b:d4:b9:37:b5:2f:1a:4f:de:34:84:2d:
a2:2c:0a:fd:91:46:87:fd:37:0c:b5:cd:f6:56:0c:
02:e2:3b:12:d5:23:61:e6:83:ad:7f:af:df:82:82:
56:73:e5:66:ce:2b:28:27:2e:6a:ae:93:26:68:4b:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F4:09:AA:22:C4:21:E1:90:E9:71:BC:3A:29:17:6D:9F:EF:98:FC
X509v3 Authority Key Identifier:
keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:96:d7:86:fc:41:ba:3d:16:cb:79:cd:fd:73:88:3a:36:55:
ce:a9:38:45:a0:e8:23:1a:8f:88:1f:d0:f2:95:27:ba:83:15:
dd:18:a7:64:80:c3:59:5d:a3:c1:e7:d8:94:6d:9f:94:51:ec:
9b:f4:72:44:1e:8d:19:31:3f:d6:09:80:02:41:d1:44:fd:83:
07:ee:16:45:90:2b:c9:30:ae:52:a9:47:fa:ce:76:f7:ce:b4:
60:1f:2c:6a:67:60:f1:8a:32:02:8d:cb:99:23:e0:19:ac:d7:
55:cc:b1:f9:df:c5:3e:8c:c7:bb:17:00:20:4e:04:21:88:76:
b3:1e:bc:e2:27:21:7b:d1:53:99:d1:9e:fb:25:20:38:ba:88:
90:f5:37:1b:28:70:3d:69:7f:f2:f5:de:62:ac:1b:f8:5f:bd:
3a:d3:cb:ab:0f:a2:e4:1e:ca:a2:03:ab:1c:e6:40:06:cd:a6:
df:9f:9c:52:2e:31:a6:90:87:32:99:d7:77:09:43:12:89:07:
3b:01:38:87:44:52:f3:5e:9f:d5:e4:60:f9:00:89:c6:a1:ce:
f4:5b:dd:db:82:3e:79:62:7f:43:ae:6a:88:98:0e:fd:45:a4:
45:b4:c5:97:82:1a:3e:11:60:32:d7:1a:9b:73:74:d8:fd:7b:
ee:b3:c5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXOElXtFz1xy9/2X7UmMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYWIxZTQ4ZGVmMTRiMjlkMjFkMzQyMzRjNDQ4ZWE4MDhl
NjE4YmYwHhcNMjUxMTExMTAwMTIwWhcNMjUxMTEyMTAwMTIwWjAzMTEwLwYDVQQD
EygwOWY0MDlhYTIyYzQyMWUxOTBlOTcxYmMzYTI5MTc2ZDlmZWY5OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKoNcYgsxilbub9WGdfH4epxYZGK
Zrrg2t5ldXGmdVwRcauRTTAKvR9SeNZ0bTG+JD27LFNuSO6H7cfTi61/Ij2Pafwy
1LsldzebVu8StlD+lnPQGLekwavfbN8ecCFXBy9dABpPZaDYZffuyqhWbEZXL7b6
Buv/n+DD2R+aSXnUhNjUYE0IFongJIB7gim/fgtinfvtJlHy60uPEtZEbBKzQ8qp
iP2JXxiNzJp/8hrJH4A+T2zZN5gldPZc7d8IsExkZrML1Lk3tS8aT940hC2iLAr9
kUaH/TcMtc32VgwC4jsS1SNh5oOtf6/fgoJWc+VmzisoJy5qrpMmaEv5kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn0CaoixCHhkOlxvDopF22f75j8MB8GA1UdIwQY
MBaAFK+rHkje8Usp0h00I0xEjqgI5hi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYt
OTMxNDg2MGMyYzdmLzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYtOTMxNDg2MGMyYzdm
LzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJbXhvxB
uj0Wy3nN/XOIOjZVzqk4RaDoIxqPiB/Q8pUnuoMV3RinZIDDWV2jwefYlG2flFHs
m/RyRB6NGTE/1gmAAkHRRP2DB+4WRZAryTCuUqlH+s529860YB8samdg8YoyAo3L
mSPgGazXVcyx+d/FPozHuxcAIE4EIYh2sx684iche9FTmdGe+yUgOLqIkPU3Gyhw
PWl/8vXeYqwb+F+9OtPLqw+i5B7KogOrHOZABs2m35+cUi4xppCHMpnXdwlDEokH
OwE4h0RS816f1eRg+QCJxqHO9Fvd24I+eWJ/Q65qiJgO/UWkRbTFl4IaPhFgMtca
m3N02P177rPFmg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:49 2025 by rpki-client