Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: +CqLlRCZs1kAhEz7naIm7LQUm+NxMUHuGGOO0BGVWyQ=
Subject key identifier: AF:BA:A5:A3:27:11:53:3C:CA:C6:74:94:D8:87:CB:16:79:A3:2C:85
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 019A71B8D241516000FD7A666C18720A32BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0A7B
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: NGxsrfuSvEuYm7dAw9GVXNbdAUulRnYnHwUrFgcWHec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d2:41:51:60:00:fd:7a:66:6c:18:72:0a:32:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=afbaa5a32711533ccac67494d887cb1679a32c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:e9:ee:1f:84:4b:b7:72:15:16:e7:a6:ec:
68:9d:f0:5c:94:22:9b:6d:3c:7b:3a:4b:0e:1a:c9:
09:fe:3b:ff:93:9c:ca:d2:58:cb:89:31:d6:16:b2:
8c:b5:4e:15:a1:e2:f1:5e:af:bd:44:8a:58:1e:71:
ab:0b:92:b1:ce:64:ef:6b:16:fd:b8:77:53:0d:37:
3e:fa:09:e5:d5:0b:27:00:07:da:1c:65:9e:77:cd:
35:66:c8:0f:9d:36:4a:8d:cf:59:89:eb:09:38:94:
a3:45:97:80:a5:dd:b9:54:6a:58:71:b0:33:eb:7e:
25:05:b1:51:20:6c:f5:57:25:cc:b1:dc:9a:ec:6e:
e6:23:35:85:83:8b:d8:3a:6d:cc:df:d0:2c:e1:79:
7d:01:09:ad:08:da:29:06:03:dc:6d:2e:71:a2:43:
b2:e0:42:0b:bb:88:0d:e6:e3:2b:61:0d:fb:fb:8c:
bc:90:80:ad:f9:38:e8:b2:90:c3:f1:fb:18:9a:2d:
0a:85:bf:d3:55:7d:b2:21:c4:53:21:13:67:03:7d:
d4:3e:22:c1:b9:fb:c3:de:48:18:01:39:55:12:d6:
40:60:1c:d0:79:fe:ad:e2:7b:95:ac:5e:5e:4c:46:
47:d3:b0:fd:37:02:05:2d:47:03:e3:ed:a7:82:61:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BA:A5:A3:27:11:53:3C:CA:C6:74:94:D8:87:CB:16:79:A3:2C:85
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:05:d6:63:8d:65:02:01:3b:f9:91:fd:22:84:3d:66:22:0a:
4f:50:a9:ed:86:0d:5e:c7:e9:2c:7f:36:3e:4d:f4:a5:33:90:
40:bc:cf:d4:c4:76:1b:3d:80:84:de:e1:96:ff:9b:1a:3e:a5:
25:17:aa:bb:71:91:f6:b9:93:40:cb:81:ee:fb:87:de:26:ef:
14:ec:cc:dc:b0:c5:e7:05:b6:78:61:91:a0:7a:27:2d:fc:6c:
bd:e6:34:5c:8f:8d:e0:04:15:81:de:42:54:8d:1f:77:af:50:
50:b7:52:de:1b:eb:b6:17:8f:28:84:98:1e:90:bd:b7:b2:24:
63:31:cf:d6:b8:57:40:12:5d:d1:ad:a6:a2:71:06:c4:f0:fc:
5a:58:79:cc:77:6f:29:0f:52:ae:cb:f3:3b:1f:e9:95:dd:dc:
76:25:34:ce:ca:a7:9c:77:9f:9a:17:44:9c:96:a8:39:60:eb:
b5:40:2b:c8:94:2f:38:c2:2c:a3:1c:62:81:e9:8b:02:cb:b3:
bb:4d:29:6b:6b:94:a6:c1:19:cd:4b:94:d3:61:a7:93:a6:4b:
73:a0:d4:f7:90:f7:dc:74:e6:a7:2f:31:6f:56:f3:aa:6d:c0:
de:7f:0f:1b:d9:ef:8e:08:29:57:33:b6:81:22:a1:0b:fb:e0:
10:84:ed:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuNJBUWAA/XpmbBhyCjK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWYxODc3NDNhN2EwNzdmNmExZTA2NjVmZGRhYWVmNGQx
MjQ5ZmIwHhcNMjUxMTExMDcwMjA4WhcNMjUxMTEyMDcwMjA4WjAzMTEwLwYDVQQD
EyhhZmJhYTVhMzI3MTE1MzNjY2FjNjc0OTRkODg3Y2IxNjc5YTMyYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G/p7h+ES7dyFRbnpuxonfBclCKb
bTx7OksOGskJ/jv/k5zK0ljLiTHWFrKMtU4VoeLxXq+9RIpYHnGrC5KxzmTvaxb9
uHdTDTc++gnl1QsnAAfaHGWed801ZsgPnTZKjc9ZiesJOJSjRZeApd25VGpYcbAz
634lBbFRIGz1VyXMsdya7G7mIzWFg4vYOm3M39As4Xl9AQmtCNopBgPcbS5xokOy
4EILu4gN5uMrYQ37+4y8kICt+TjospDD8fsYmi0Khb/TVX2yIcRTIRNnA33UPiLB
ufvD3kgYATlVEtZAYBzQef6t4nuVrF5eTEZH07D9NwIFLUcD4+2ngmFVpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+6paMnEVM8ysZ0lNiHyxZ5oyyFMB8GA1UdIwQY
MBaAFOOvGHdDp6B39qHgZl/dqu9NEkn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgt
NDFlYmU2OWUzMDMxLzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgtNDFlYmU2OWUzMDMx
LzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwXWY41l
AgE7+ZH9IoQ9ZiIKT1Cp7YYNXsfpLH82Pk30pTOQQLzP1MR2Gz2AhN7hlv+bGj6l
JRequ3GR9rmTQMuB7vuH3ibvFOzM3LDF5wW2eGGRoHonLfxsveY0XI+N4AQVgd5C
VI0fd69QULdS3hvrthePKISYHpC9t7IkYzHP1rhXQBJd0a2monEGxPD8Wlh5zHdv
KQ9SrsvzOx/pld3cdiU0zsqnnHefmhdEnJaoOWDrtUAryJQvOMIsoxxigemLAsuz
u00pa2uUpsEZzUuU02Gnk6ZLc6DU95D33HTmpy8xb1bzqm3A3n8PG9nvjggpVzO2
gSKhC/vgEITthQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:39 2025 by rpki-client