Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
File: V25aWVM8ptDwtIgH0Md-FWhgTl4.mft (raw, json)
Hash identifier: pu/R27Ocy1R0NIbQW4xwGlccXACo47YMV/ZufLQ1/9I=
Subject key identifier: 55:C3:AB:49:A8:D0:A7:5D:DD:1D:DF:5D:C5:1C:F9:DE:46:23:42:10
Authority key identifier: 57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
Certificate issuer: /CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Certificate serial: 019A7226465BD77D5870F8FED9FB24AD3CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
Manifest number: 0760
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: V25aWVM8ptDwtIgH0Md-FWhgTl4.crl (hash: ceZzUfgz+8sPfeh0T+/gLbKreerToGBpFbgLOU5Phu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:46:5b:d7:7d:58:70:f8:fe:d9:fb:24:ad:3c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=55c3ab49a8d0a75ddd1ddf5dc51cf9de46234210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1a:78:ff:95:5b:1a:e2:f3:8d:61:5a:b2:f1:
f7:f6:6b:76:17:03:aa:81:5b:fb:ad:c5:a1:05:75:
57:45:71:f3:6b:eb:1c:20:81:70:c5:4a:3d:51:2c:
cc:01:4b:f0:62:fb:11:e0:d2:37:07:71:bb:b8:42:
62:1e:2a:03:c1:ff:1a:27:22:6a:3a:03:84:38:c5:
92:2a:fa:a6:87:f1:c5:a1:34:39:1e:37:96:a3:a2:
96:6e:b4:d4:55:0c:64:8a:e3:60:1f:7e:fc:d7:32:
0b:c1:8d:4b:bc:e8:b6:8f:93:16:b0:1a:a0:05:d1:
90:ad:0d:02:8d:26:12:56:84:f2:83:b0:b3:bb:c7:
a9:11:bd:7c:12:00:e1:3f:9c:b0:ae:15:22:3e:7a:
3e:05:92:0c:8c:83:db:e4:a0:26:64:53:9d:ce:13:
08:cc:b0:24:94:2e:45:ab:9d:27:17:14:b6:e5:70:
cd:ae:fb:09:86:97:c6:b1:9e:55:74:f7:c6:59:d2:
a6:2e:b3:0a:ea:ec:24:98:ff:79:2c:e4:99:84:dd:
8d:ad:7d:54:75:60:90:a3:45:f7:e6:a1:07:e9:54:
90:49:c1:b3:8f:6a:2b:97:e4:87:9a:37:3c:6c:65:
79:3d:f6:bb:91:4f:95:06:26:e4:b8:d6:d9:a8:4d:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C3:AB:49:A8:D0:A7:5D:DD:1D:DF:5D:C5:1C:F9:DE:46:23:42:10
X509v3 Authority Key Identifier:
keyid:57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a7:c0:7e:4d:62:6b:51:b6:c1:70:34:57:5d:bd:9d:3f:01:
e7:bc:23:c7:e1:30:c5:ca:af:53:b9:3f:12:19:37:4d:0e:34:
e2:6e:aa:2b:30:16:7b:56:f3:50:95:eb:d2:62:b5:9a:d1:fd:
fe:03:90:d4:1f:1d:4e:8d:3c:71:ed:ed:87:b0:c4:b9:e3:05:
4a:67:75:83:86:2e:e4:b3:49:7b:66:b0:2d:b9:89:ee:f8:76:
5a:21:06:45:f4:23:6b:ae:37:11:37:d7:3d:e6:0a:c1:f3:0e:
89:da:a4:e3:da:9f:2e:a9:3d:80:3a:9c:64:28:0d:90:33:65:
21:80:37:c0:ee:56:ab:40:0f:3a:eb:22:65:49:44:d0:bd:20:
ea:14:98:d2:36:92:74:7c:50:0b:9c:2e:08:75:57:54:7f:55:
03:f9:0b:35:b1:e7:7a:78:98:1d:e1:b2:20:7e:8f:a5:c9:30:
1c:70:9a:cc:30:52:e8:79:26:44:45:76:db:ad:9a:f6:ec:b4:
61:19:cd:32:37:7e:da:17:06:50:8d:3b:ad:24:58:ae:7c:ff:
4e:85:94:ea:6c:00:45:f7:d0:40:df:10:ab:be:d3:cb:83:76:
ca:b3:72:ee:02:7f:57:c1:d3:36:8b:ef:4d:a3:20:9f:d6:96:
30:75:ac:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJkZb131YcPj+2fskrTzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NmU1YTU5NTMzY2E2ZDBmMGI0ODgwN2QwYzc3ZTE1Njg2
MDRlNWUwHhcNMjUxMTExMDkwMTQyWhcNMjUxMTEyMDkwMTQyWjAzMTEwLwYDVQQD
Eyg1NWMzYWI0OWE4ZDBhNzVkZGQxZGRmNWRjNTFjZjlkZTQ2MjM0MjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Bp4/5VbGuLzjWFasvH39mt2FwOq
gVv7rcWhBXVXRXHza+scIIFwxUo9USzMAUvwYvsR4NI3B3G7uEJiHioDwf8aJyJq
OgOEOMWSKvqmh/HFoTQ5HjeWo6KWbrTUVQxkiuNgH3781zILwY1LvOi2j5MWsBqg
BdGQrQ0CjSYSVoTyg7Czu8epEb18EgDhP5ywrhUiPno+BZIMjIPb5KAmZFOdzhMI
zLAklC5Fq50nFxS25XDNrvsJhpfGsZ5VdPfGWdKmLrMK6uwkmP95LOSZhN2NrX1U
dWCQo0X35qEH6VSQScGzj2orl+SHmjc8bGV5Pfa7kU+VBibkuNbZqE2jqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXDq0mo0Kdd3R3fXcUc+d5GI0IQMB8GA1UdIwQY
MBaAFFduWllTPKbQ8LSIB9DHfhVoYE5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjI1YVdWTThwdER3dElnSDBNZC1GV2hnVGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZDIxMTMtM2VjMC00NDQ1LThkZmUt
N2FkYjQwZGNhN2JkLzEvVjI1YVdWTThwdER3dElnSDBNZC1GV2hnVGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84ZDIxMTMtM2VjMC00NDQ1LThkZmUtN2FkYjQwZGNhN2Jk
LzEvVjI1YVdWTThwdER3dElnSDBNZC1GV2hnVGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnafAfk1i
a1G2wXA0V129nT8B57wjx+EwxcqvU7k/Ehk3TQ404m6qKzAWe1bzUJXr0mK1mtH9
/gOQ1B8dTo08ce3th7DEueMFSmd1g4Yu5LNJe2awLbmJ7vh2WiEGRfQja643ETfX
PeYKwfMOidqk49qfLqk9gDqcZCgNkDNlIYA3wO5Wq0APOusiZUlE0L0g6hSY0jaS
dHxQC5wuCHVXVH9VA/kLNbHneniYHeGyIH6PpckwHHCazDBS6HkmREV2262a9uy0
YRnNMjd+2hcGUI07rSRYrnz/ToWU6mwARffQQN8Qq77Ty4N2yrNy7gJ/V8HTNovv
TaMgn9aWMHWsVQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:43 2025 by rpki-client