Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
File: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json)
Hash identifier: 45cmJNqKfTjjwmaKO9eG/TYFL6+62QVrs2ZTQ/3BEeM=
Subject key identifier: F5:63:94:DC:E8:C2:B9:79:8B:F5:21:CF:4A:5E:D3:73:60:15:F6:65
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Certificate issuer: /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial: 019A72934BEE81C71B9C13B6BC7CCE12EB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
Manifest number: 01E8
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: skrDqbBbFz5UzJk96FuriHdLDvRrnZUPHr//czIzJI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4b:ee:81:c7:1b:9c:13:b6:bc:7c:ce:12:eb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=f56394dce8c2b9798bf521cf4a5ed3736015f665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:8c:eb:d9:e2:5a:9c:76:4f:d5:8b:34:ca:
b3:e5:20:c5:8c:61:0f:af:5c:4e:53:38:c8:8e:37:
62:4b:02:0b:4e:0c:5d:30:c8:08:3f:2f:39:9d:8c:
74:f9:75:e9:af:d9:fb:6c:ec:a5:8a:4f:a9:b6:70:
cf:0b:1c:ec:15:3a:ce:b9:09:64:62:1c:60:01:03:
2b:c1:88:2e:ed:d4:ab:7f:9d:91:e7:77:29:20:c9:
bf:55:5f:9b:4f:9c:8c:ed:e9:a0:61:df:d5:0d:e1:
76:46:ad:ba:7d:50:9c:eb:10:50:66:89:11:6d:d5:
b0:68:9a:40:f7:a5:25:07:f2:b1:09:ea:c2:1f:eb:
5d:c7:d6:e6:a1:8a:31:e5:b5:c6:ff:7b:7e:ac:d5:
04:73:63:86:ee:5d:c5:ea:66:7b:06:ed:9e:cf:15:
08:9a:51:07:86:fb:34:b3:c6:6c:6d:79:96:68:53:
0f:7f:f2:c7:37:64:18:4f:b9:2c:56:22:37:4a:c8:
f1:9b:f8:cb:80:1e:88:4b:3b:6b:e4:d7:7e:e6:a4:
83:b6:87:fe:cc:13:5a:e6:e0:f8:15:79:5e:f9:74:
90:77:26:68:64:d1:59:d7:41:7b:41:04:39:b8:ff:
35:71:47:18:6f:3d:5a:81:d1:fb:94:b7:ff:7c:a4:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:94:DC:E8:C2:B9:79:8B:F5:21:CF:4A:5E:D3:73:60:15:F6:65
X509v3 Authority Key Identifier:
keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e3:4e:39:65:f7:01:54:9e:c8:93:e3:8e:53:8b:bd:24:e6:
81:2f:22:f9:f7:d4:3e:0c:d8:b8:22:dc:a4:2d:55:b4:1e:22:
ae:25:e6:0b:3f:d7:b7:de:af:65:85:93:73:12:8b:e3:f1:9f:
77:53:37:b5:c0:e4:06:0b:ae:9e:3f:f0:e6:26:19:e8:b7:d5:
93:63:28:4c:26:7d:f0:df:75:1d:0b:50:cf:5c:1c:26:42:c8:
fe:3e:4f:81:62:c4:04:34:fe:c4:18:f7:ed:e4:f5:bd:53:da:
46:10:43:67:42:53:9c:ee:ef:f4:77:ff:3f:4b:38:5b:7e:e7:
10:ac:a4:0e:e2:30:d0:66:1d:3b:35:c3:19:2b:07:a9:43:ed:
94:e3:4f:9f:e1:2a:08:55:99:35:b6:48:c1:c4:41:f4:3f:92:
02:a8:c8:49:49:a7:50:77:09:22:f3:1b:ef:bb:58:4c:01:10:
26:9f:ff:fa:19:2a:f4:a7:80:7c:7a:f9:bb:f2:2c:9d:9f:da:
ad:95:03:58:fc:78:97:c6:c3:af:e3:cc:5b:fd:e7:7b:03:fc:
85:7b:8e:9d:bb:d8:f5:78:5b:ec:61:7f:17:d3:14:e0:18:ad:
6b:8e:b8:6c:e4:42:d5:3a:c0:fe:72:25:03:99:e9:56:45:1c:
9a:e8:84:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk0vugccbnBO2vHzOEutiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NzYzMzRkYzZmNzBmNTYzZTk5OGY2MDgwYWQzMjhhYWI3
ZjhkMGUwHhcNMjUxMTExMTEwMDQ3WhcNMjUxMTEyMTEwMDQ3WjAzMTEwLwYDVQQD
EyhmNTYzOTRkY2U4YzJiOTc5OGJmNTIxY2Y0YTVlZDM3MzYwMTVmNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNGM69niWpx2T9WLNMqz5SDFjGEP
r1xOUzjIjjdiSwILTgxdMMgIPy85nYx0+XXpr9n7bOylik+ptnDPCxzsFTrOuQlk
YhxgAQMrwYgu7dSrf52R53cpIMm/VV+bT5yM7emgYd/VDeF2Rq26fVCc6xBQZokR
bdWwaJpA96UlB/KxCerCH+tdx9bmoYox5bXG/3t+rNUEc2OG7l3F6mZ7Bu2ezxUI
mlEHhvs0s8ZsbXmWaFMPf/LHN2QYT7ksViI3Ssjxm/jLgB6ISztr5Nd+5qSDtof+
zBNa5uD4FXle+XSQdyZoZNFZ10F7QQQ5uP81cUcYbz1agdH7lLf/fKRgsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVjlNzowrl5i/Uhz0pe03NgFfZlMB8GA1UdIwQY
MBaAFAd2M03G9w9WPpmPYICtMoqrf40OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iYzM0YTAtMzIwMy00M2M3LTkxOWQt
ZTRjOGExOGJhNjQ1LzEvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iYzM0YTAtMzIwMy00M2M3LTkxOWQtZTRjOGExOGJhNjQ1
LzEvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuNOOWX3
AVSeyJPjjlOLvSTmgS8i+ffUPgzYuCLcpC1VtB4iriXmCz/Xt96vZYWTcxKL4/Gf
d1M3tcDkBguunj/w5iYZ6LfVk2MoTCZ98N91HQtQz1wcJkLI/j5PgWLEBDT+xBj3
7eT1vVPaRhBDZ0JTnO7v9Hf/P0s4W37nEKykDuIw0GYdOzXDGSsHqUPtlONPn+Eq
CFWZNbZIwcRB9D+SAqjISUmnUHcJIvMb77tYTAEQJp//+hkq9KeAfHr5u/IsnZ/a
rZUDWPx4l8bDr+PMW/3newP8hXuOnbvY9Xhb7GF/F9MU4Bita464bORC1TrA/nIl
A5npVkUcmuiEuA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:45 2025 by rpki-client